How to verify images in private registry against remote registry?
Issue
- How to check if there are latest Red Hat container image in private registry?
- ImageStream is configured to update automatically. How to verify if container images in private registry are in the same version than remote registry?
- The images between the local registry and the remote registry show the same version and the same release, but a different digest.
If the images are the same, are not they supposed to have the same digest?
$ oc get is -n openshift ruby
NAME DOCKER REPO TAGS UPDATED
ruby docker-registry.default.svc:5000/openshift/ruby 2.4,latest,2.3 + 2 more... 2 weeks ago
$ oc describe is -n openshift ruby | grep updates\ auto
updates automatically from registry registry.access.redhat.com/rhscl/ruby-24-rhel7:latest
updates automatically from registry registry.access.redhat.com/rhscl/ruby-23-rhel7:latest
updates automatically from registry registry.access.redhat.com/rhscl/ruby-22-rhel7:latest
updates automatically from registry registry.access.redhat.com/openshift3/ruby-20-rhel7:latest
#check local registry for ruby 2.4 tag
$ skopeo inspect docker://docker-registry-default.domain/openshift/ruby:latest | grep -Ei "(Digest|version|release)"
"Digest": "sha256:3f0a0dd6ccf6d6749cf274e8e55d96789818db3cd72f6a1a4ccfc0e86e9fa867",
"DockerVersion": "1.13.1",
"release": "49",
"version": "2.4"
# Check remote registry for ruby 2.4 tag
$ skopeo inspect docker://registry.access.redhat.com/rhscl/ruby-24-rhel7:latest | grep -Ei "(Digest|version|release)"
"Digest": "sha256:816d8b56a5b1f3b6b24c8eff838ac7a02eec9aaab6933fcc4fb0c6d4349a8b6f",
"DockerVersion": "1.13.1",
"release": "49",
"version": "2.4"
Environment
- OpenShift Container Platform 3.9
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.