image-tools icon indicating copy to clipboard operation
image-tools copied to clipboard

Why is this tool deprecated?

Open rlucente-se-jboss opened this issue 2 years ago • 1 comments

I was specifically asked by a US government agency how they can validate that their OCI containers are properly formatted. They want a repeatable way to attest to the validity of what others give them. A properly formatted OCI container is one condition.

rlucente-se-jboss avatar Jul 14 '23 19:07 rlucente-se-jboss

The validation code (oci-image-tool validate) is not hard deprecated, only the image manipulation tools (the other ones) are completely deprecated and should not be used (umoci is the OCI reference implementation of the image-spec that replaces this functionality).

However, the validation code is not being regularly updated (due to a lack of maintainership manpower). We have discussed moving the validation code to umoci but there hasn't been any progress on that topic (umoci uses the oci-tools image validation in all of its tests, so the code can still be used).

cyphar avatar Jul 15 '23 18:07 cyphar