v2.1.2

Fixed

• A first pull of a large layer through a Docker proxy could fail with
  internal error while the layer was stored all the same, and the next pull
  served it: the server logged registry: blob read with NoSuchKey. When the
  answer to an upload's CompleteMultipartUpload (8 MiB and more,
  s3.multipart_threshold) was lost, the S3 client sent it again, and
  versitygw answers a complete that is still under way with success at once,
  before the object is in place; the proxy then read the layer back too early.
  An upload that completes counts as stored only once its object can be read,
  waited for as long as an answer from S3.
  (#682)

Image

ghcr.io/forgepkg/forge on GitHub Packages.

Built from commit b2d961b, which v2.1.2 points to. The cosign verify commands below accept only a signature by this repository's release workflow for that tag and that commit.

One image for linux/amd64, linux/arm64: the digest below is that of the index of the platforms' images (listed under it), from which docker pull and Kubernetes take the node's platform. The index and each platform's image are signed: the cosign verify command passes for each of these digests.

docker pull ghcr.io/forgepkg/forge:2.1.2
# digest: sha256:c2258feaec9aebcb86f8df945ea5ec381c78cb3e09711182e71fded929e572a5
#   linux/amd64: sha256:bac6eeb7802f7b82f371bc7df79527308a6690c4005249eb5091ff2571921794
#   linux/arm64: sha256:42af8127d6dc5541063fda334fe561dfcb4ea8bd7833b1163ddeabf4f1c5b624
cosign verify ghcr.io/forgepkg/forge@sha256:c2258feaec9aebcb86f8df945ea5ec381c78cb3e09711182e71fded929e572a5 \
  --certificate-identity https://github.com/forgepkg/forge/.github/workflows/release.yml@refs/tags/v2.1.2 \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-github-workflow-sha b2d961b849a8ce31da5fc343d5a8fb2595c7b92a \
  --certificate-github-workflow-trigger push

Helm chart

oci://ghcr.io/forgepkg/charts/forge on GitHub Packages.
Deploys exactly the image above (by digest).

helm install forge oci://ghcr.io/forgepkg/charts/forge --version 2.1.2
# digest: sha256:192e2586ebd1a2b5eb76e3a6ce5d1c1529e414c105b9a387cf81d136d670bd7a
cosign verify ghcr.io/forgepkg/charts/forge@sha256:192e2586ebd1a2b5eb76e3a6ce5d1c1529e414c105b9a387cf81d136d670bd7a \
  --certificate-identity https://github.com/forgepkg/forge/.github/workflows/release.yml@refs/tags/v2.1.2 \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-github-workflow-sha b2d961b849a8ce31da5fc343d5a8fb2595c7b92a \
  --certificate-github-workflow-trigger push