-
Epic
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
None
-
run-sha512
-
Future Sustainability
-
False
-
-
False
-
Green
-
To Do
-
rhel-container-tools
Epic Goal
- Track items towards sha512 digest readiness in Q3 2026.
Acceptance Criteria for Q3
- Q3 Success Criteria:
-
- A final plan for distribution of SHA512 images in manifest lists for existing images in a backwards-compatible manner within Konflux is available
- Initial testing in a staging environment for image push/pull with crypto-agility with Quay is available.
- Quay 3.18 ships with SHA512 support
- Preparing Podman 6.1 for release with the 10.3 (Y stream)
Dependencies (internal and external)
- podman
- buildah
- skopeo
- c/common
- c/image
- c/storage
- podman-py
- oci libraries (go-digest, distribution-spec)
- quay
- docker library
- openshift
Previous Work (Optional):
Open questions::
- …
Actions for this Epic
- A plan for publishing images/design spec for multiple sha levels
- Testing of image push/pull on local registry with sha512 and mixed crypto
- Link all sub tasks and stories related to this effort to this Epic
- is blocked by
-
RUN-3713 Make Image Digest Algorithm Configurable in Podman
-
- To Do
-
-
RUN-3745 buildah: build --iidfile-raw option
-
- Code Review
-
- is cloned by
-
RUN-3889 sha512/configurable digest readiness Tracker for container-tools [Q1-2026]
-
- In Progress
-
- relates to
-
RUN-3629 Validate container registry behavior with unrecognized manifest fields
-
- To Do
-