关于镜像oci规范 | 打工笔记

早就知道镜像存在OCI规范，就是在镜像的元数据中加入一些表明镜像信息的标签，不知道如何，一次偶然就会在github的流水线中看到了，记录下来：

{
  "target": {
    "docker-metadata-action": {
      "tags": [
        "ghcr.io/linjinbao666/conda-base:main"
      ],
      "labels": {
        "org.opencontainers.image.title": "conda-base",
        "org.opencontainers.image.description": "conda-base",
        "org.opencontainers.image.url": "https://github.com/linjinbao666/conda-base",
        "org.opencontainers.image.source": "https://github.com/linjinbao666/conda-base",
        "org.opencontainers.image.version": "main",
        "org.opencontainers.image.created": "2021-08-19T05:27:05.157Z",
        "org.opencontainers.image.revision": "cc3b1c3c0527c0e0dd81b379d35bddbe4f992681",
        "org.opencontainers.image.licenses": ""
      },
      "args": {
        "DOCKER_META_IMAGES": "ghcr.io/linjinbao666/conda-base",
        "DOCKER_META_VERSION": "main"
      }
    }
  }
}

这几个标签应该就是OCI规范要求的了，同理在centos官方镜像中也发现了这几个标签：

 org.opencontainers.image.title="CentOS Base Image" 
 org.opencontainers.image.vendor="CentOS" 
 org.opencontainers.image.licenses="GPL-2.0-only" 
 org.opencontainers.image.created="2020-11-13 00:00:00+00:00"

这些标签能否发展成为具有自证明性质的标签，还有待期待。