Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Export attestations for tar exporter #3289

Merged
merged 3 commits into from
Nov 28, 2022

Conversation

jedevc
Copy link
Member

@jedevc jedevc commented Nov 18, 2022

⬆️ Follow-up to #3197
🛠️ Fixes #3184 by adding attestations to the tar exporter (local exporter support added in #3197).

This PR refactors the tar exporter to share filesystem generation methods in common with the local exporter, which therefore lets it generate attestations in the same way.

This refactor is similar to the ImageWriter component shared between the containerimage and oci packages, except for this we have a CreateFS function for the local and tar packages.

@jedevc
Copy link
Member Author

jedevc commented Nov 18, 2022

Marking as do-not-merge until #3197 is merged.

@jedevc jedevc force-pushed the attestations-exporter-tar branch 3 times, most recently from 376300e to 0e791d2 Compare November 23, 2022 18:40
This patch extracts the relevant filesystem generation logic that
creates an fsutil.FS from a cache.ImmutableRef and associate
attestations.

Signed-off-by: Justin Chadwell <me@jedevc.com>
This connects the tar exporter and the local exporter to the same
fileystem generation, similar to the approach followed by the shared
ImageWriter used in both the containerimage and oci packages.

This allows the tar exporter to use the same attestations generation
logic, so attestations are now supported for the tar exporter.

Signed-off-by: Justin Chadwell <me@jedevc.com>
Signed-off-by: Justin Chadwell <me@jedevc.com>
@jedevc jedevc added this to the v0.11.0 milestone Nov 24, 2022
@jedevc
Copy link
Member Author

jedevc commented Nov 24, 2022

@tonistiigi have added this to the milestone, since it's just a re-org of the code from #3197, and can also close #3184 (which is already on the milestone).

Copy link
Member

@crazy-max crazy-max left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. As discussed let's look at the single/multi platform behavior in a follow-up.

@jedevc jedevc merged commit 16d8570 into moby:master Nov 28, 2022
@jedevc jedevc mentioned this pull request May 30, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Export attestations for other exporters
2 participants