The digest from the registry refers to the image itself rather than a
particular build. As a result it would lead to the same digest on all
architectures.
On our end, for cache handling, we need each architecture to have its
own stable digest. Relying on the particular layers should achieve that.
Closes #2682
Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
Currently, incus uses skopeo to copy a docker image to an oci formatted
file tree. The OCI:/ endpoint does not support copying signatures.
Docker Hub mostly does not use signed images, but several projects are
using cosign or gpg to sign their images which the OCI:/ endpoint does
not support. This adds the flag to skopeo to not attempt to copy the
unsupported signatures as a bandaid until a different method that
supports signatures is identified.
Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>
The proxy host address was not passed to skopoe and as a consequence, it is
not possible to connect to proxy to inspect OCI image.
Closes: #1509
Signed-off-by: Winicius Silva <winiciusab12@gmail.com>