Reference Type Working Group Next Steps

15 views

Skip to first unread message

Steve Lasker

unread,

Aug 19, 2021, 1:05:38 PM8/19/21

to t...@opencontainers.org

Hey folks,

With the Working Group process merged (horray), I wanted to check-in on how the TOB would like to proceed with the Reference Type working group #96To enable the secure chain reference types, we do need to close this soon as we're about to close on the artifacts-spec 1.0 release that we'll start accepting user content. Once registries start accepting content, we'll have a set of oras mediaTypes for the artifact.manifest that will duplicate the challenge we have today where most of the content in a registry uses docker manifest mediaTypes.End-users won't care, as they'll simply use the tooling that works for them, but there will be a perception issue that artifacts spec comes out of ORAS, which is a logical extension of the OCI distribution-spec. Maybe that's not a problem. The larger problem will be if OCI does adopt this in the future, and now tooling needs to account for multiple versions ORAS/OCI like it does today with docker and oci mediaTypesEither way, we likely only have a week or two to close on: Finalize oci or cncf.oras mediaTypes #14