Registries After Dark
Talkat KubeCon + CloudNativeCon North America 2021 · on Thursday, 2021-10-14· at 15:25· Petree Hall D + Online·
summary
Explains how registries implement the OCI and distribution specs, showing real uploads with crane copy and curl, and demonstrating a proxy registry that mutates manifests to inject payloads (demo works). Argues to always deploy by digest because of bit-squatting and DNS/TCP hazards, cites Docker’s ~300 billion pulls. Shows registries used as content-addressable key-value store and to host self-modifying images, and ships a working chat built by committing logs as blobs and serving dynamic manifests.
AI-written summary · about
chapters (7)
- 0:00Start
- 1:36Content Descriptor
- 2:10HTTP Headers
- 3:48External Content
- 4:26What is my purpose?
- 18:38Can I trust the registry?
- 19:52Typosquatting
related talks
36mContainer Registries, No Longer Just for Containers!
30mDIY Private Container Registry
08mYou Can Store That in a Container Registry?!
45mImage Layout: Stop Putting Everything in Registries
38mFrom `docker push` to Bytes on Disk: Inside Distribution
24mRegistry Design Patterns
39mWhat Information Are Package & Container Registries Hiding from You?
23mOne Registry to Rule them All