Flavian Missi ac6a8d2f8b PROJQUAY-3750: support registries that do not return a digest header (#1310) ...

The distribution spec does not require the docker-content-digest header
to be set in response to a manifest GET/HEAD request.

This changes both the proxy client and the registry proxy model to
correctly check whether a manifest is up-to-date with the upstream
registry or not when no digest header is received.

NOTE: when checking staleness against registries that do not return the
docker-content-digest header, Quay will make a GET request to the
registry and calculate the digest from the manifest itself. GET requests
usually count towards rate-limiting.

This change also sets the accept-encoding header to 'identity'. The python
requests library seems to automatically set the accept-encoding header to
'gzip'. Dockerhub ignores that header when serving blobs, but some
registries don't (namely registry.access.redhat.com). When Quay receives a
gzipped config blob (have not tested non-config blobs) for some reason it
doesn't know how to handle it. I suspect it has to do wit the fact that in
this case the content-length header will differ from the actual size of
the response body, so when Quay tries to upload the blob it cannot
correctly calculate the actual blob size, so it does a partial upload to
its object storage, which then results in a digest mismatch error
(BlobDigestMismatchException).

2022-05-10 17:56:08 +02:00

..

__init__.py

PROJQUAY-3750: support registries that do not return a digest header (#1310)

2022-05-10 17:56:08 +02:00

fixtures.py

proxy: don't store entire blob in memory when caching (#1200)

2022-03-28 18:27:07 +02:00

test_proxy_e2e.py

proxy: don't store entire blob in memory when caching (#1200)

2022-03-28 18:27:07 +02:00

test_proxy.py

PROJQUAY-3750: support registries that do not return a digest header (#1310)

2022-05-10 17:56:08 +02:00