OCI tag delete API leaves the UI in an inconsistent state

[Brandon Mitchell]

Problem description

Deleting a tag using the OCI delete API leaves the tag listed in the Hub UI and leaves the image pullable by digest, but not by tag.

docker info output

Docker Info:
n/a

Debug Information

Browser name and version:
Firefox

URL:
https://hub.docker.com/repository/docker/.../tags

Timetamp or time range:
2023-12-11 15:55:30

Public IP:
2600:8806:2400:120:d0b2:a4af:a571:237e

Hub Username:
sudobmitch

Error messages (on screen or in browser console)

$ regctl -v debug tag rm sudobmitch/demo:hello-test
...
DEBU[0000] regclient initialized                         VCSRef=c82a30172450e4e036aa7bb47e5f0a471b9cbb85-dirty VCSTag="(devel)"
DEBU[0000] Delete tag                                    host=docker.io repository=sudobmitch/demo tag=hello-test
DEBU[0000] http req                                      method=DELETE url="https://registry-1.docker.io/v2/sudobmitch/demo/manifests/hello-test" withAuth=false
DEBU[0000] Auth request parsed                           challenge="[{bearer map[realm:https://auth.docker.io/token scope:repository:sudobmitch/demo:delete service:registry.docker.io]}]"
DEBU[0000] Auth scope added                              host=registry-1.docker.io scope="repository:sudobmitch/demo:pull,push"
DEBU[0000] http req                                      method=DELETE url="https://registry-1.docker.io/v2/sudobmitch/demo/manifests/hello-test" withAuth=true

$ regctl manifest get sudobmitch/demo:hello-test
failed to get manifest docker.io/sudobmitch/demo:hello-test: request failed: not found [http 404]: {"errors":[{"code":"MANIFEST_UNKNOWN","message":"manifest unknown","detail":"unknown tag=hello-test"}]}

$ regctl manifest get sudobmitch/demo:hello-test@sha256:1434aed52a241f43dd81fa4604eddc17ff39639ed80d81e4799779964ccb5444
Name:         sudobmitch/demo:hello-test@sha256:1434aed52a241f43dd81fa4604eddc17ff39639ed80d81e4799779964ccb5444
MediaType:    application/vnd.oci.image.manifest.v1+json
ArtifactType: application/vnd.unknown.config+json
Digest:       sha256:1434aed52a241f43dd81fa4604eddc17ff39639ed80d81e4799779964ccb5444
Total Size:   11.000B
              
Config:       
  Digest:     sha256:44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
  MediaType:  application/vnd.oci.empty.v1+json
  Size:       2B
              
Layers:       
              
  Digest:     sha256:d1b81a303d340fb689c6b6f4f474d9e04f314ed9ad8925686e4106452b53181b
  MediaType:  application/octet-stream
  Size:       11B

$ regctl tag ls sudobmitch/demo | grep hello

$

Screenshots of the issue (if applicable)

Task List

• This is NOT a security issue
• I do NOT have a Docker subscription
• I have looked through other issues and they do NOT apply to me