We are using Sonatype Nexus as registry to host our docker images. The manifests of all our recently built/pushed images have some layers with missing size attributes (see example). We checked the referred files in the blob-storage, they are all present and have a size > 0. Older manifests (1 year+) in our repository all have each layer with a size attribute.
Why is this an issue? The datacenter we have to host our application runs automatic scans on our images (aqua/trivy) and those fail because the layers without size information can not be verified.
Versions: Sonatype Nexus Repository Manager OSS 3.42.0-01 Docker Engine - Community 23.0.1
{
"schemaVersion": 2,
"mediaType": "application/vnd.docker.distribution.manifest.v2+json",
"config": {
"mediaType": "application/vnd.docker.container.image.v1+json",
"digest": "sha256:5740d7dfedcf3d518b78cd0f95c1367932b53c45bf1418718d2646351c927a07"
},
"layers": [
{
"mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
"digest": "sha256:63b65145d645c1250c391b2d16ebe53b3747c295ca8ba2fcb6b0cf064a4dc21c"
},
{
"mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
"digest": "sha256:7f55337210c571172bc884a7dfb6dc597adab6b6ef741c06ca3200884ffc4b2b"
},
{
"mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
"digest": "sha256:c383e2293b907d32c7858537a6809dd478738e849ca592204cc0e265890510eb"
},
{
"mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
"digest": "sha256:7e1c4a54fb1014a2cb1df9c41d593556fbcec834958d0651d951ec8a27ad00da"
},
{
"mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
"digest": "sha256:b61d12073cabfcea9b23b159f1b3d13208e6c91540238e89cdac7e4a75d15e4b"
},
{
"mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
"size": 86866674,
"digest": "sha256:4db9aabda48454a834c79558f185c2fdf582c8d53c14f5ecce3f61cb2ef15167"
},
{
"mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
"size": 1269,
"digest": "sha256:12065ffeeca82e730b08502beb0c5b358da3639e3de3f2972c73bc9fec3e26fd"
}
]
}
We can’t find out why this is happening so any help or information where to look at would be appreciated.