OCI tag delete API leaves the UI in an inconsistent state
sudo-bmitch opened this issue · comments
Problem description
Deleting a tag using the OCI delete API leaves the tag listed in the Hub UI and leaves the image pullable by digest, but not by tag.
docker info
output
Docker Info:
n/a
Debug Information
Browser name and version:
Firefox
URL:
https://hub.docker.com/repository/docker/.../tags
Timetamp or time range:
2023-12-11 15:55:30
Public IP:
2600:8806:2400:120:d0b2:a4af:a571:237e
Hub Username:
sudobmitch
Error messages (on screen or in browser console)
$ regctl -v debug tag rm sudobmitch/demo:hello-test
...
DEBU[0000] regclient initialized VCSRef=c82a30172450e4e036aa7bb47e5f0a471b9cbb85-dirty VCSTag="(devel)"
DEBU[0000] Delete tag host=docker.io repository=sudobmitch/demo tag=hello-test
DEBU[0000] http req method=DELETE url="https://registry-1.docker.io/v2/sudobmitch/demo/manifests/hello-test" withAuth=false
DEBU[0000] Auth request parsed challenge="[{bearer map[realm:https://auth.docker.io/token scope:repository:sudobmitch/demo:delete service:registry.docker.io]}]"
DEBU[0000] Auth scope added host=registry-1.docker.io scope="repository:sudobmitch/demo:pull,push"
DEBU[0000] http req method=DELETE url="https://registry-1.docker.io/v2/sudobmitch/demo/manifests/hello-test" withAuth=true
$ regctl manifest get sudobmitch/demo:hello-test
failed to get manifest docker.io/sudobmitch/demo:hello-test: request failed: not found [http 404]: {"errors":[{"code":"MANIFEST_UNKNOWN","message":"manifest unknown","detail":"unknown tag=hello-test"}]}
$ regctl manifest get sudobmitch/demo:hello-test@sha256:1434aed52a241f43dd81fa4604eddc17ff39639ed80d81e4799779964ccb5444
Name: sudobmitch/demo:hello-test@sha256:1434aed52a241f43dd81fa4604eddc17ff39639ed80d81e4799779964ccb5444
MediaType: application/vnd.oci.image.manifest.v1+json
ArtifactType: application/vnd.unknown.config+json
Digest: sha256:1434aed52a241f43dd81fa4604eddc17ff39639ed80d81e4799779964ccb5444
Total Size: 11.000B
Config:
Digest: sha256:44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MediaType: application/vnd.oci.empty.v1+json
Size: 2B
Layers:
Digest: sha256:d1b81a303d340fb689c6b6f4f474d9e04f314ed9ad8925686e4106452b53181b
MediaType: application/octet-stream
Size: 11B
$ regctl tag ls sudobmitch/demo | grep hello
$
Screenshots of the issue (if applicable)
Task List
- This is NOT a security issue
- I do NOT have a Docker subscription
- I have looked through other issues and they do NOT apply to me