Skip to content

[Backport v2.3] fix(oci/config): ensure unique OCI image config#2331

Merged
adamreese merged 1 commit intov2.3from
backport-2322-to-v2.3
Mar 7, 2024
Merged

[Backport v2.3] fix(oci/config): ensure unique OCI image config#2331
adamreese merged 1 commit intov2.3from
backport-2322-to-v2.3

Conversation

@adamreese
Copy link
Copy Markdown
Contributor

Backporting #2322 to v2.3

This commit ensures that applications pushed to OCI have unique image
config fields for unique Spin application content and metadata by adding
a label in the OCI image config to the content digest (SHA256) of the
Spin locked application file.

This is to address the issue of the Containerd Spin shim serving
outdated content, because all images of Spin apps on a node would have the
same image ID (the content digest of the OCI config object, which was
identical for all Spin apps).

ref spinframework/spin-operator#40

Signed-off-by: Radu Matei <radu@fermyon.com>

Co-authored-by: Rajat Jindal <rajatjindal83@gmail.com>
Co-authored-by: Danielle Lancashire <dani@builds.terrible.systems>
Co-authored-by: Michelle Dhanani <michelle@fermyon.com>
(cherry picked from commit 14cdc42)
@adamreese adamreese merged commit ee9d4a9 into v2.3 Mar 7, 2024
@adamreese adamreese deleted the backport-2322-to-v2.3 branch March 7, 2024 20:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants