Uploaded image for project: 'Artifactory Binary Repository'
  1. Artifactory Binary Repository
  2. RTFACT-19842

"Docker pull" using Artifactory's sha256 checksum fails on some images

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Done
    • Resolution: Done
    • Affects Version/s: 6.11.3
    • Fix Version/s: None
    • Component/s: Docker
    • Labels:

      Description

      Symptoms: A "Docker pull" only works when the tag is used on some images. The SHA256 checksum on the manifest.json in Artifactory never matches the checksum of the tag.

      Steps to reproduce:

      1. On Artifactory 6.8.7, create a remote Docker repository going to Docker Quay ( https://quay.io )
      2. Perform a Docker Pull on a specific problem image "coreos/etcd":

      docker pull repo.jfrog.team:12069/coreos/etcd
      Using default tag: latest
      latest: Pulling from coreos/etcd

      [...]

      Digest: sha256:5b6691b7225a3f77a5a919a81261bbfb31283804418e187f7116a0a9ef65d21d
      Status: Downloaded newer image for docker-quay.art.local/coreos/etcd:latest

      3. Note that the sha256 checksum tag for the Digest does NOT match the checksum in Artifactory for the "list.manifest.json" file:

      4f174d5dd387fb9317ad30f40f4adde97f0e24a6a4947e1e3dbec42bc5cf8576

       

      This is a problem if automation relies on Artifactory's checksum to get the right file. The Headers used by Artifactory use the incorrect checksum:

      jfrog@jfrog:~/downloads$ curl -vvv http://localhost:8081/artifactory/api/docker/docker-quay/v2/coreos/etcd/manifests/latest -uadmin:password

      < X-Checksum-Sha1: ab8328ec4f48e645bf193261aebced95c370c3ff

      < X-Checksum-Sha256: 4f174d5dd387fb9317ad30f40f4adde97f0e24a6a4947e1e3dbec42bc5cf8576

      < X-Checksum-Md5: 7bd76de6bd048ec2bd74dd7e9cd60827

      < Docker-Content-Digest: sha256:4f174d5dd387fb9317ad30f40f4adde97f0e24a6a4947e1e3dbec42bc5cf8576

        Attachments

          Issue Links

            Activity

                People

                Assignee:
                tomern Tomer Nir [X] (Inactive)
                Reporter:
                patrickr Patrick Russell
                Votes:
                19 Vote for this issue
                Watchers:
                22 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved: