112fbec5b6
refactor(cli): added equivalent subcommands for each flag combination under every command ( #1674 )
...
- image command is now deprecated in favor of 'images'
- cve command is now deprecated in favor of 'cves'
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
2023-08-30 20:12:24 +03:00
cacf54e8cb
refactor: move /pkg/meta/signatures under /pkg/extensions/imagetrust ( #1712 )
...
- the size of the binary-minimal becomes 32MB
- "signatures" package is renamed into "imagetrust" and moved under extensions
- if the binary is not built using "imagetrust" tag then the signatures verification will
not be performed
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com >
2023-08-19 08:52:03 +03:00
0731fd3828
test(refactor): refactor tests that use zot-test to use smaller images ( #1690 )
...
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
2023-08-18 11:46:11 +03:00
76277f5ebd
fix: remove inline GC and schedule a background task instead ( #1610 )
...
* fix: remove inline GC and set a default value of gc interval
- remove inline GC
- add a default value of GC interval
- run the GC periodically by default with the default value if no interval provided
- generate GC tasks with a random delay(0-30s) between
- add IsReady() method to scheduler.TaskGenerator interface
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com >
* ci: add test for gc with short interval
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com >
---------
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com >
2023-08-07 12:55:19 -07:00
a5c92bcac3
test(refactor): change upload image function signature ( #1655 )
...
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
2023-07-28 17:53:46 +03:00
abba6aa3cf
feat(test): added image builder for use in tests ( #1583 )
...
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
2023-07-26 13:08:04 +03:00
28de980319
feat(refator): refactoring repodb into meta ( #1626 )
...
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
2023-07-18 10:27:26 -07:00
6cd4455da1
chore: fix dependabot alerts ( #1621 )
...
* chore: fix dependabot alerts
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
* test: fix the validation for digests
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
---------
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-07-15 12:56:09 +03:00
d3f27b4ba6
feat: add additional manifest validations ( #1609 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-07-13 09:31:39 -07:00
e682457401
fix(test): sync inconsistent test ( #1611 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-07-12 10:21:28 -07:00
1d01b644ea
feat(sync): sync can include self url in registry.URLs ( #1562 )
...
sync now ignores self referencing urls, this will help
in clustering mode where we can have the same config
for multiple zots
closes #1335
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-07-10 12:27:21 +03:00
d4f200c2e1
fix: changing default numWorkers, making it customizable and refactoring scheduler ( #1563 )
...
Signed-off-by: Lisca Ana-Roberta <ana.kagome@yahoo.com >
2023-07-04 11:03:29 +03:00
d881f4e916
fix(sync): flaky test on fetching tags ( #1546 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-06-22 10:43:47 -07:00
377aff1853
fix(sync): fixed skipping docker images when they already synced ( #1521 )
...
before syncing an image we first check if it's already present in our storage
to do that we get the manifest from remote and compare it with the local one
but in the case of syncing docker images, because the conversion to OCI format is done while
syncing, we get a docker manifest before conversion, so sync detects that local manifest and
remote one are different, so it starts syncing again.
to overcome this, convert remote docker manifests to OCI manifests and then compare.
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-06-21 11:05:52 -07:00
ea84752214
fix(test): fix flaky test ( #1544 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-06-21 19:53:14 +03:00
fc6d6356fb
feat(sync): sync references(signatures/artifacts) recursively ( #1500 )
...
sync now also pulls chained artifacts recursively
eg:
image->sbom->sbom signature
image->artifact->artifact
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-06-16 10:27:33 -07:00
4d6ca493f2
chore: fix dependabot alerts ( #1501 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-06-09 10:27:42 -07:00
612a12e5a8
refactor(sync): use task scheduler ( #1301 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-05-31 10:26:23 -07:00
a3f355c278
refactor(storage): refactoring storage ( #1459 )
...
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
2023-05-26 11:08:19 -07:00
970997f3a8
feat(graphql & repodb): add info about signature validity ( #1344 )
...
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com >
2023-05-24 09:46:16 -07:00
912854f29b
fix(sync): fix digest set into repodb ( #1446 )
...
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
2023-05-15 10:43:41 -07:00
7bf40e7308
fix(sync): fixed way of updating repodb when syncing a signature ( #1439 )
...
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
2023-05-15 12:02:23 +03:00
7d7bc9d5e4
feat(api): added oci-subject header when pushing an image with subject field ( #1415 )
...
- as requested by the latest version of the oci distribution spec
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
2023-05-12 09:32:01 -07:00
ea79be64da
refactor(artifact): remove oci artifact support ( #1359 )
...
* refactor(artifact): remove oci artifact support
- add header to referrers call to indicated applied artifact type filters
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
* feat(gc): simplify gc logic to increase coverage
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
---------
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
2023-05-10 10:15:33 -07:00
d62dbcdf63
fix(sync): fix syncing signatures when using destination in sync's config ( #1429 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-05-08 10:16:20 -07:00
e299ae199a
fix(sync): skip non distributable layers ( #1421 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-05-04 09:38:33 -07:00
c169698c95
feat: remove usage of zerolog.Logger.Msgf() from zot code ( #1382 )
...
Signed-off-by: Nicol Draghici <idraghic@cisco.com >
2023-04-27 19:44:22 -07:00
40bf76add5
chore(go.mod): upgrade trivy and cosign ( #1387 )
...
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com >
2023-04-27 09:35:10 -07:00
d818293cc1
test(sync): make sure sync doesn't write on shutdown ( #1370 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-04-19 11:34:41 -07:00
96232bb11c
test(sync): consolidate all sync tests ( #1332 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-04-07 09:36:27 +03:00
3dd3c46ee3
test: stop task scheduler between test runs ( #1311 )
...
sync: remove sync WaitGroup, it's stopped with context
sync: onDemand will always try to sync newest image when a tag is used
if a digest is used then onDemand will serve local image
test(sync): fix flaky coverage in sync package
closes #1294
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-03-29 11:37:58 -07:00
6f0c37079c
chore(deps): remove usage of deprecated package pkg/errors
...
Signed-off-by: Nicol Draghici <idraghic@cisco.com >
2023-03-14 10:46:29 -07:00
4c156234cb
feat(repodb): sync-repodb WIP ( #1241 )
...
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
2023-03-09 10:41:48 -08:00
79783b4b06
feat(sync): skip already synced images in sync ondemand ( #1234 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-03-07 09:58:42 -08:00
d62c09e2cc
feat(repodb): Multiarch Image support ( #1147 )
...
* feat(repodb): index logic + tests
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
* feat(cli): printing indexes support using the rest api
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
---------
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
2023-02-27 11:23:18 -08:00
7c3bf86a6b
refactor: Centralise extensions config entries ( #1177 )
...
Except for registry sync config
Signed-off-by: Bogdan BIVOLARU <104334+bogdanbiv@users.noreply.github.com >
2023-02-15 22:20:28 -08:00
4aa0106b0a
feat(scheduler): use an worker pool for scheduler ( #1146 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-02-15 11:36:50 -08:00
ee95ab0ffc
fix: call notation-go libs instead of using notation binary ( #1104 )
...
fix: add loading notation path
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com >
Co-authored-by: Roxana Nemulescu <roxana.nemulescu@gmail.com >
2023-02-13 10:43:52 -08:00
d12836e69c
refactor(cve): improve CVE test time by mocking trivy ( #1184 )
...
- refactor(cve): remove the global of type cveinfo.CveInfo from the extensions package
Replace it with an attribute on controller level
- refactor(controller): extract initialization logic from controller.Run()
- test(cve): mock cve scanner in cli tests
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
2023-02-09 21:04:52 -08:00
ba3f6f7492
fix(test): update the zot tests not to use test/data as rootDir (use a temporary folder instead) ( #1162 )
...
Signed-off-by: Nicol Draghici <idraghic@cisco.com >
2023-02-02 11:39:03 -08:00
976ccfcf0d
fix: removed references to old dist-spec ( #1128 )
...
Signed-off-by: Ana-Roberta Lisca <ana.kagome@yahoo.com >
2023-01-31 09:35:33 -08:00
e2c7a3c5ba
fix(referrers): fix some conformance issues ( #1134 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-01-26 10:13:12 -08:00
70a60b4660
refactor: Cleanup/simplify testcases in /pkg/extensions ( #1116 )
...
Signed-off-by: Nicol Draghici <idraghic@cisco.com >
fix: Increase coverage when copying files
Signed-off-by: Nicol Draghici <idraghic@cisco.com >
2023-01-19 08:54:05 -08:00
14238d4a8d
fix: removed resty calls from sync ( #1016 )
...
Signed-off-by: Ana-Roberta Lisca <ana.kagome@yahoo.com >
2022-12-22 10:19:42 -08:00
50bdc2f402
fix(sync): also add docker v2 mediatype as supported in sync ( #1084 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2022-12-22 09:23:49 -08:00
7103953777
fix(sync): fix sync on demand with docker library ( #1065 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2022-12-16 09:33:46 -08:00
024b13efe6
fix(sync): syncing OCI artifacts with distribution package fails ( #1013 )
...
sync OCI artifacts using REST APIs
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2022-12-09 11:38:00 -08:00
31b9481713
feat(cache): dynamodb implementation ( #953 )
...
Signed-off-by: Catalin Hofnar <catalin.hofnar@gmail.com >
2022-11-22 10:29:57 -08:00
49c3d05706
fix(storage): sanitize storage locks ( #1003 )
...
removed all locks from common code
removed locks from GetBlobContent
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2022-11-22 10:13:08 -08:00
168d21da1e
fix(storage): deleting manifests with identical digests ( #951 )
...
Suppose we push two identical manifests (sharing same digest) but with
different tags, then deleting by digest should throw an error otherwise
we end up deleting all image tags (with gc) or dangling references
(without gc)
This behaviour is controlled via Authorization, added a new policy
action named detectManifestsCollision which enables this behaviour
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
Co-authored-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-11-18 09:35:28 -08:00
LaurentiuNiculae