storage

Nov 30, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Changes in this version

+ func ApplyLinter(imgStore ImageStore, linter Lint, repo string, manifestDesc ispec.Descriptor) (bool, error)

+ func CheckIfIndexNeedsUpdate(index *ispec.Index, desc *ispec.Descriptor, log zerolog.Logger) (bool, godigest.Digest, error)

+ func Create(dbtype string, parameters interface{}, log zlog.Logger) (cache.Cache, error)

+ func GetAndValidateRequestDigest(body []byte, digestStr string, log zerolog.Logger) (godigest.Digest, error)

+ func GetImageIndex(imgStore ImageStore, repo string, digest godigest.Digest, log zerolog.Logger) (ispec.Index, error)

+ func GetIndex(imgStore ImageStore, repo string, log zerolog.Logger) (ispec.Index, error)

+ func GetManifestDescByReference(index ispec.Index, reference string) (ispec.Descriptor, bool)

+ func GetOrasManifestByDigest(imgStore ImageStore, repo string, digest godigest.Digest, log zerolog.Logger) (oras.Manifest, error)

+ func GetOrasReferrers(imgStore ImageStore, repo string, gdigest godigest.Digest, artifactType string, ...) ([]oras.Descriptor, error)

+ func GetReferrers(imgStore ImageStore, repo string, gdigest godigest.Digest, artifactType string, ...) (ispec.Index, error)

+ func GetTagsByIndex(index ispec.Index) []string

+ func PruneImageManifestsFromIndex(imgStore ImageStore, repo string, digest godigest.Digest, outIndex ispec.Index, ...) ([]ispec.Descriptor, error)

+ func RemoveManifestDescByReference(index *ispec.Index, reference string, detectCollisions bool) (ispec.Descriptor, error)

+ func UpdateIndexWithPrunedImageManifests(imgStore ImageStore, index *ispec.Index, repo string, desc ispec.Descriptor, ...) error

+ func ValidateManifest(imgStore ImageStore, repo, reference, mediaType string, body []byte, ...) (godigest.Digest, error)

type ImageStore

+ GetNextRepository func(repo string) (string, error)

+ GetOrasReferrers func(repo string, digest godigest.Digest, artifactType string) ([]artifactspec.Descriptor, error)

Nov 30, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Nov 23, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Nov 13, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Nov 11, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Nov 8, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Oct 23, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Oct 11, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Oct 6, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Sep 27, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Sep 16, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Changes in this version

+ const DuplicatesBucket

+ const OriginalBucket

type ImageStore

+ GetBlobPartial func(repo, digest, mediaType string, from, to int64) (io.ReadCloser, int64, int64, error)

+ type ImageStoreLocal struct

+ func (is *ImageStoreLocal) BlobPath(repo string, digest godigest.Digest) string

+ func (is *ImageStoreLocal) BlobUploadInfo(repo, uuid string) (int64, error)

+ func (is *ImageStoreLocal) BlobUploadPath(repo, uuid string) string

+ func (is *ImageStoreLocal) CheckBlob(repo, digest string) (bool, int64, error)

+ func (is *ImageStoreLocal) DedupeBlob(src string, dstDigest godigest.Digest, dst string) error

+ func (is *ImageStoreLocal) DeleteBlob(repo, digest string) error

+ func (is *ImageStoreLocal) DeleteBlobUpload(repo, uuid string) error

+ func (is *ImageStoreLocal) DeleteImageManifest(repo, reference string) error

+ func (is *ImageStoreLocal) DirExists(d string) bool

+ func (is *ImageStoreLocal) FinishBlobUpload(repo, uuid string, body io.Reader, digest string) error

+ func (is *ImageStoreLocal) FullBlobUpload(repo string, body io.Reader, digest string) (string, int64, error)

+ func (is *ImageStoreLocal) GetBlob(repo, digest, mediaType string) (io.ReadCloser, int64, error)

+ func (is *ImageStoreLocal) GetBlobContent(repo, digest string) ([]byte, error)

+ func (is *ImageStoreLocal) GetBlobPartial(repo, digest, mediaType string, from, to int64) (io.ReadCloser, int64, int64, error)

+ func (is *ImageStoreLocal) GetBlobUpload(repo, uuid string) (int64, error)

+ func (is *ImageStoreLocal) GetImageManifest(repo, reference string) ([]byte, string, string, error)

+ func (is *ImageStoreLocal) GetImageTags(repo string) ([]string, error)

+ func (is *ImageStoreLocal) GetIndexContent(repo string) ([]byte, error)

+ func (is *ImageStoreLocal) GetReferrers(repo, digest, artifactType string) ([]artifactspec.Descriptor, error)

+ func (is *ImageStoreLocal) GetRepositories() ([]string, error)

+ func (is *ImageStoreLocal) InitRepo(name string) error

+ func (is *ImageStoreLocal) Lock(lockStart *time.Time)

+ func (is *ImageStoreLocal) NewBlobUpload(repo string) (string, error)

+ func (is *ImageStoreLocal) PutBlobChunk(repo, uuid string, from, to int64, body io.Reader) (int64, error)

+ func (is *ImageStoreLocal) PutBlobChunkStreamed(repo, uuid string, body io.Reader) (int64, error)

+ func (is *ImageStoreLocal) PutImageManifest(repo, reference, mediaType string, body []byte) (string, error)

+ func (is *ImageStoreLocal) RLock(lockStart *time.Time)

+ func (is *ImageStoreLocal) RUnlock(lockStart *time.Time)

+ func (is *ImageStoreLocal) RootDir() string

+ func (is *ImageStoreLocal) RunGCRepo(repo string)

+ func (is *ImageStoreLocal) Unlock(lockStart *time.Time)

+ func (is *ImageStoreLocal) ValidateRepo(name string) (bool, error)

+ type Lint interface

+ Lint func(repo string, manifestDigest godigest.Digest, imageStore ImageStore) (bool, error)

Sep 15, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Aug 24, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Aug 22, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Aug 20, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Jul 4, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Jun 30, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Jun 9, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Changes in this version

+ const DBExtensionName

type ImageStore

+ RunGCRepo func(repo string)

type ImageStoreFS

+ func (is *ImageStoreFS) RunGCRepo(repo string)

type ScrubImageResult

+ func CheckRepo(imageName string, imgStore ImageStore) ([]ScrubImageResult, error)

Jun 9, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Jun 2, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

May 23, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

May 22, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

May 18, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Apr 27, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Apr 19, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Changes in this version

type ImageStore

+ RunGCPeriodically func(gcInterval time.Duration)

type ImageStoreFS

+ func (is *ImageStoreFS) RunGCPeriodically(gcInterval time.Duration)

type ScrubImageResult

+ func CheckImageStoreBlobsIntegrity(imgStore ImageStore) ([]ScrubImageResult, error)

Apr 19, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Apr 5, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Mar 24, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Mar 18, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Mar 2, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Feb 25, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Changes in this version

+ const DefaultGCDelay

+ const RLOCK

+ const RWLOCK

Feb 14, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Feb 11, 2022 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Dec 29, 2021 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Changes in this version

+ const DefaultDirPerms

+ const DefaultFilePerms

Dec 9, 2021 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Changes in this version

+ type ScrubImageResult struct

+ Error string

+ ImageName string

+ Status string

+ Tag string

+ type ScrubResults struct

+ ScrubResults []ScrubImageResult

+ func (results ScrubResults) PrintScrubResults(resultWriter io.Writer)

type StoreController

+ func (sc StoreController) CheckAllBlobsIntegrity() (ScrubResults, error)

Dec 8, 2021 GO-2024-2979

  GO-2024-2979: Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Changes in this version

+ const BlobUploadDir

+ const BlobsCache

+ const S3StorageDriverName

+ const SchemaVersion

+ func DirExists(d string) bool

+ func IsSupportedMediaType(mediaType string) bool

+ func Scrub(dir string, fix bool) error

+ func ValidateHardLink(rootDir string) error

+ type Blob struct

+ Path string

+ type BlobUpload struct

+ ID string

+ StoreName string

+ type Cache struct

+ func NewCache(rootDir string, name string, log zlog.Logger) *Cache

+ func (c *Cache) DeleteBlob(digest string, path string) error

+ func (c *Cache) GetBlob(digest string) (string, error)

+ func (c *Cache) HasBlob(digest string, blob string) bool

+ func (c *Cache) PutBlob(digest string, path string) error

+ type ImageStore interface

+ BlobPath func(repo string, digest digest.Digest) string

+ BlobUploadInfo func(repo string, uuid string) (int64, error)

+ BlobUploadPath func(repo string, uuid string) string

+ CheckBlob func(repo string, digest string) (bool, int64, error)

+ DedupeBlob func(src string, dstDigest digest.Digest, dst string) error

+ DeleteBlob func(repo string, digest string) error

+ DeleteBlobUpload func(repo string, uuid string) error

+ DeleteImageManifest func(repo string, reference string) error

+ DirExists func(d string) bool

+ FinishBlobUpload func(repo string, uuid string, body io.Reader, digest string) error

+ FullBlobUpload func(repo string, body io.Reader, digest string) (string, int64, error)

+ GetBlob func(repo string, digest string, mediaType string) (io.Reader, int64, error)

+ GetBlobContent func(repo, digest string) ([]byte, error)

+ GetBlobUpload func(repo string, uuid string) (int64, error)

+ GetImageManifest func(repo string, reference string) ([]byte, string, string, error)

+ GetImageTags func(repo string) ([]string, error)

+ GetIndexContent func(repo string) ([]byte, error)

+ GetReferrers func(repo, digest string, mediaType string) ([]notation.Descriptor, error)

+ GetRepositories func() ([]string, error)

+ InitRepo func(name string) error

+ Lock func()

+ NewBlobUpload func(repo string) (string, error)

+ PutBlobChunk func(repo string, uuid string, from int64, to int64, body io.Reader) (int64, error)

+ PutBlobChunkStreamed func(repo string, uuid string, body io.Reader) (int64, error)

+ PutImageManifest func(repo string, reference string, mediaType string, body []byte) (string, error)

+ RLock func()

+ RUnlock func()

+ RootDir func() string

+ Unlock func()

+ ValidateRepo func(name string) (bool, error)

+ func NewImageStore(rootDir string, gc bool, dedupe bool, log zlog.Logger, ...) ImageStore

+ type ImageStoreFS struct

+ func (is *ImageStoreFS) BlobPath(repo string, digest godigest.Digest) string

+ func (is *ImageStoreFS) BlobUploadInfo(repo string, uuid string) (int64, error)

+ func (is *ImageStoreFS) BlobUploadPath(repo string, uuid string) string

+ func (is *ImageStoreFS) CheckBlob(repo string, digest string) (bool, int64, error)

+ func (is *ImageStoreFS) DedupeBlob(src string, dstDigest godigest.Digest, dst string) error

+ func (is *ImageStoreFS) DeleteBlob(repo string, digest string) error

+ func (is *ImageStoreFS) DeleteBlobUpload(repo string, uuid string) error

+ func (is *ImageStoreFS) DeleteImageManifest(repo string, reference string) error

+ func (is *ImageStoreFS) DirExists(d string) bool

+ func (is *ImageStoreFS) FinishBlobUpload(repo string, uuid string, body io.Reader, digest string) error

+ func (is *ImageStoreFS) FullBlobUpload(repo string, body io.Reader, digest string) (string, int64, error)

+ func (is *ImageStoreFS) GetBlob(repo string, digest string, mediaType string) (io.Reader, int64, error)

+ func (is *ImageStoreFS) GetBlobContent(repo string, digest string) ([]byte, error)

+ func (is *ImageStoreFS) GetBlobUpload(repo string, uuid string) (int64, error)

+ func (is *ImageStoreFS) GetImageManifest(repo string, reference string) ([]byte, string, string, error)

+ func (is *ImageStoreFS) GetImageTags(repo string) ([]string, error)

+ func (is *ImageStoreFS) GetIndexContent(repo string) ([]byte, error)

+ func (is *ImageStoreFS) GetReferrers(repo, digest string, mediaType string) ([]notation.Descriptor, error)

+ func (is *ImageStoreFS) GetRepositories() ([]string, error)

+ func (is *ImageStoreFS) InitRepo(name string) error

+ func (is *ImageStoreFS) Lock()

+ func (is *ImageStoreFS) NewBlobUpload(repo string) (string, error)

+ func (is *ImageStoreFS) PutBlobChunk(repo string, uuid string, from int64, to int64, body io.Reader) (int64, error)

+ func (is *ImageStoreFS) PutBlobChunkStreamed(repo string, uuid string, body io.Reader) (int64, error)

+ func (is *ImageStoreFS) PutImageManifest(repo string, reference string, mediaType string, body []byte) (string, error)

+ func (is *ImageStoreFS) RLock()

+ func (is *ImageStoreFS) RUnlock()

+ func (is *ImageStoreFS) RootDir() string

+ func (is *ImageStoreFS) Unlock()

+ func (is *ImageStoreFS) ValidateRepo(name string) (bool, error)

+ type StoreController struct

+ DefaultStore ImageStore

+ SubStore map[string]ImageStore

+ func (sc StoreController) GetImageStore(name string) ImageStore