The artifact sha256 shown in proxy cache project does not match digest sha256 shown in 'docker inspect' about harbor HOT 7 CLOSED

Also found related issues:

1. Seems only after the image is pulled again from another machine, the image repo tag can show up in Harbor UI.
2. What does the unknown arch come from ?

from harbor.

Work as designed.
The busybox is an image index. (content-type: application/vnd.oci.image.index.v1+json)
the cli client display the digest of the image index.
sha256:c4c67b37cc42396b8a6f6829e3379e86364f642ce6a40604ea4f7c695db0e695 is the image index digest.
The image index has a digest that contains the manifest of all architecture. and for each arch, it has its own manifest. (sha256:ab4b...) (content type: application/vnd.oci.image.manifest.v1+json)

Harbor proxy cache is a pull-through cache, when you pull an image under arm64, it will pull the image index first, then the manifest for current platform. Because each manifest pushed to the Harbor needs to be integral manifest, the full content of the image index can't pushed to Harbor because other platforms, such as amd64, x86, ppc are not pulled and cached. its content is only stored in redis cache. only the arm64 image manifest is cached in Harbor UI, it is the (sha256:ab4b...)

Although image index digest isn't displayed in the proxy-cache, it doesn't prevent users from pulling the correct image.

For the image index, you can refer to this picture:
https://github.com/opencontainers/image-spec/blob/v1.1.0-rc3/img/media-types.png

from harbor.

The second question:
The "unknown" arch might be the sbom or other artifact accessory, could you please cat the content of the blob with sha256:3f9c... ?
It can be located in /data/registry/docker/registry/v2/blobs/sha256/3f/3f9c.../data

from harbor.

Thanks @stonezdj

$ cat data/registry/docker/registry/v2/blobs/sha256/3f/3f9cd2f6ba1403532d27d835834dbd0fbabaf25b093264a242854c08501b9b57/data
{
  "schemaVersion": 2,
  "mediaType": "application/vnd.oci.image.manifest.v1+json",
  "config": {
    "mediaType": "application/vnd.oci.image.config.v1+json",
    "digest": "sha256:5ee9e41796b517da1a3ed6b8d193152aff043325ed72013fea39fb8cf53044fc",
    "size": 241
  },
  "layers": [
    {
      "mediaType": "application/vnd.in-toto+json",
      "digest": "sha256:17c159bdd9092a2a53034f3c9d5062c96f1f565242a53a106f37c1438a3458cb",
      "size": 2018,
      "annotations": {
        "in-toto.io/predicate-type": "https://spdx.dev/Document"
      }
    },
    {
      "mediaType": "application/vnd.in-toto+json",
      "digest": "sha256:2e7c86493e090b59ca44486a4a31e2415c6597740e20a9795c09d013ab0df491",
      "size": 5575,
      "annotations": {
        "in-toto.io/predicate-type": "https://slsa.dev/provenance/v0.2"
      }
    }
  ]
}

from harbor.

It is an artifact accessory generated under busybox, and was proxied through proxy cache.

from harbor.

This issue is being marked stale due to a period of inactivity. If this issue is still relevant, please comment or remove the stale label. Otherwise, this issue will close in 30 days.

from harbor.

This issue was closed because it has been stalled for 30 days with no activity. If this issue is still relevant, please re-open a new issue.

from harbor.