toki
6ca7989169
- Add mattermost-app and push-proxy-service domain rules - Add bin/publish-runtime-images script - Add runtime-image-validation documentation - Update agent-ops domain rules and project rules - Remove outdated 01_image_publish task files - Update docs/README.md
47 lines
3.1 KiB
Markdown
47 lines
3.1 KiB
Markdown
# Nexo Runtime Image Validation
|
|
|
|
This document records the registry, tag, architecture, and verification digests for nexo-owned runtime images.
|
|
|
|
## Published Images Summary
|
|
|
|
| Service | Target Architecture | Immutable Tag | Latest Tag | Digest (Immutable Tag) | Digest (Latest) |
|
|
|---|---|---|---|---|---|
|
|
| **Core (Mattermost)** | `linux/arm64` | `v11.4.2-arm64` | `latest` | `sha256:a811233f0625dd72a43c4b2315010ad67355fccc34be3e29d44e7aaab202b3ee` | `sha256:a811233f0625dd72a43c4b2315010ad67355fccc34be3e29d44e7aaab202b3ee` |
|
|
| **Push-Proxy** | `linux/arm64` | `v11.4.2-arm64` | `latest` | `sha256:73d104148e66bb24e901bd1787624cf9b46e41268955e20bdfe4c6fc70f10b0b` | `sha256:73d104148e66bb24e901bd1787624cf9b46e41268955e20bdfe4c6fc70f10b0b` |
|
|
|
|
## Verification Evidence
|
|
|
|
### Registry API Manifest Headers
|
|
This section displays registry manifest verification logs, ensuring the matching `Docker-Content-Digest` is resolved.
|
|
|
|
```sh
|
|
# Fetch Core (Mattermost) manifests from registry
|
|
$ curl -fsSI -H 'Accept: application/vnd.docker.distribution.manifest.v2+json' https://toki-labs.com:5050/v2/nexo/mattermost/manifests/latest
|
|
HTTP/1.1 200 OK
|
|
Server: nginx/1.29.3
|
|
Content-Type: application/vnd.docker.distribution.manifest.v2+json
|
|
Content-Length: 6766
|
|
Docker-Content-Digest: sha256:a811233f0625dd72a43c4b2315010ad67355fccc34be3e29d44e7aaab202b3ee
|
|
Etag: "sha256:a811233f0625dd72a43c4b2315010ad67355fccc34be3e29d44e7aaab202b3ee"
|
|
|
|
# Fetch Push-Proxy manifests from registry
|
|
$ curl -fsSI -H 'Accept: application/vnd.docker.distribution.manifest.v2+json' https://toki-labs.com:5050/v2/nexo/push-proxy/manifests/latest
|
|
HTTP/1.1 200 OK
|
|
Server: nginx/1.29.3
|
|
Content-Type: application/vnd.docker.distribution.manifest.v2+json
|
|
Content-Length: 1577
|
|
Docker-Content-Digest: sha256:73d104148e66bb24e901bd1787624cf9b46e41268955e20bdfe4c6fc70f10b0b
|
|
Etag: "sha256:73d104148e66bb24e901bd1787624cf9b46e41268955e20bdfe4c6fc70f10b0b"
|
|
```
|
|
|
|
### Remote Host Image Inspect (Architecture Proof)
|
|
This section lists concrete inspection output executed directly on the remote Mac build host (`toki@toki-labs.com`).
|
|
|
|
```sh
|
|
$ ssh toki@toki-labs.com '/usr/local/bin/docker image inspect toki-labs.com:5050/nexo/mattermost:latest --format "{{.Os}}/{{.Architecture}} {{range .RepoDigests}}{{.}} {{end}}" && /usr/local/bin/docker image inspect toki-labs.com:5050/nexo/mattermost:v11.4.2-arm64 --format "{{.Os}}/{{.Architecture}} {{range .RepoDigests}}{{.}} {{end}}" && /usr/local/bin/docker image inspect toki-labs.com:5050/nexo/push-proxy:latest --format "{{.Os}}/{{.Architecture}} {{range .RepoDigests}}{{.}} {{end}}" && /usr/local/bin/docker image inspect toki-labs.com:5050/nexo/push-proxy:v11.4.2-arm64 --format "{{.Os}}/{{.Architecture}} {{range .RepoDigests}}{{.}} {{end}}"'
|
|
|
|
linux/arm64 toki-labs.com:5050/nexo/mattermost@sha256:a811233f0625dd72a43c4b2315010ad67355fccc34be3e29d44e7aaab202b3ee
|
|
linux/arm64 toki-labs.com:5050/nexo/mattermost@sha256:a811233f0625dd72a43c4b2315010ad67355fccc34be3e29d44e7aaab202b3ee
|
|
linux/arm64 toki-labs.com:5050/nexo/push-proxy@sha256:73d104148e66bb24e901bd1787624cf9b46e41268955e20bdfe4c6fc70f10b0b
|
|
linux/arm64 toki-labs.com:5050/nexo/push-proxy@sha256:73d104148e66bb24e901bd1787624cf9b46e41268955e20bdfe4c6fc70f10b0b
|
|
```
|