You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@mesos.apache.org by "Qian Zhang (Jira)" <ji...@apache.org> on 2020/05/19 09:27:00 UTC

[jira] [Commented] (MESOS-10130) Docker Manifest list support

    [ https://issues.apache.org/jira/browse/MESOS-10130?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17111010#comment-17111010 ] 

Qian Zhang commented on MESOS-10130:
------------------------------------

[~kaalh] Is the use of manifest list in Nexus 3.22+ optional or required? I guess it should be optional so Mesos can still work with it via manifest, right?

> Docker Manifest list support
> ----------------------------
>
>                 Key: MESOS-10130
>                 URL: https://issues.apache.org/jira/browse/MESOS-10130
>             Project: Mesos
>          Issue Type: Improvement
>          Components: containerization
>            Reporter: Stéphane Cottin
>            Priority: Major
>              Labels: containerization
>
> Sonatype Nexus 3.22+, and probably other docker registry solutions, now serves manifest lists.
> [https://issues.sonatype.org/browse/NEXUS-18546]
> Apache Mesos does not support yet this part of the Image Manifest V2S2 spec.
> https://docs.docker.com/registry/spec/manifest-v2-2/#manifest-list
> This is not a critical issue as Sonatype Nexus is not a dependency of Apache Mesos, but as we cannot use Nexus > 3.21.2, this leads to side security issues.
> [https://support.sonatype.com/hc/en-us/articles/360046233714]
> Apache Mesos should support the whole Image Manifest V2S2 specification.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)