0

We are using Sonatype Nexus as registry to host our docker images. The manifests of all our recently built/pushed images have some layers with missing size attributes (see example). We checked the referred files in the blob-storage, they are all present and have a size > 0. Older manifests (1 year+) in our repository all have each layer with a size attribute.

Why is this an issue? The datacenter we have to host our application runs automatic scans on our images (aqua/trivy) and those fail because the layers without size information can not be verified.

Versions: Sonatype Nexus Repository Manager OSS 3.42.0-01 Docker Engine - Community 23.0.1

{
   "schemaVersion": 2,
   "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
   "config": {
      "mediaType": "application/vnd.docker.container.image.v1+json",
      "digest": "sha256:5740d7dfedcf3d518b78cd0f95c1367932b53c45bf1418718d2646351c927a07"
   },
   "layers": [
      {
         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
         "digest": "sha256:63b65145d645c1250c391b2d16ebe53b3747c295ca8ba2fcb6b0cf064a4dc21c"
      },
      {
         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
         "digest": "sha256:7f55337210c571172bc884a7dfb6dc597adab6b6ef741c06ca3200884ffc4b2b"
      },
      {
         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
         "digest": "sha256:c383e2293b907d32c7858537a6809dd478738e849ca592204cc0e265890510eb"
      },
      {
         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
         "digest": "sha256:7e1c4a54fb1014a2cb1df9c41d593556fbcec834958d0651d951ec8a27ad00da"
      },
      {
         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
         "digest": "sha256:b61d12073cabfcea9b23b159f1b3d13208e6c91540238e89cdac7e4a75d15e4b"
      },
      {
         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
         "size": 86866674,
         "digest": "sha256:4db9aabda48454a834c79558f185c2fdf582c8d53c14f5ecce3f61cb2ef15167"
      },
      {
         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
         "size": 1269,
         "digest": "sha256:12065ffeeca82e730b08502beb0c5b358da3639e3de3f2972c73bc9fec3e26fd"
      }
   ]
}

We can’t find out why this is happening so any help or information where to look at would be appreciated.

Sascha b
  • 1
  • 1

0 Answers0