Mirrors/flux2
1
0
Fork 0
mirror of synced 2026-02-06 19:05:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

RFC: avoid overlap between calculation and config

Browse Source 
Signed-off-by: Hidde Beydals <hello@hidde.co>
This commit is contained in:
Hidde Beydals
2022-10-24 09:32:29 +00:00
parent 5faf6ebadc
commit 8801029d95
1 changed files with 10 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
rfcs/XXXX-artifact-revision-format/README.md
View File

@@ -9,7 +9,7 @@ Must be one of `provisional`, `implementable`, `implemented`, `deferred`, `rejec
**Creation date:** 2022-10-20
**Last update:** 2022-10-21
**Last update:** 2022-10-24
## Summary
@@ -302,11 +302,17 @@ The library used for calculating the `Digest` field value is
`github.com/opencontainers/go-digest`. This library is used by various
OCI libraries which we already depend on, stable and extensible.
#### Calculation
The checksum in the `Digest` field value MUST be calculated using the canonical
algorithm [set at runtime](#configuration).
#### Configuration
The checksum MUST be calculated using the algorithm configured in the
`--artifact-digest-algo` flag of the source-controller binary. The default
value is `sha256`, but can be changed to `sha384`, `sha512` or `blake3`.
The algorithm used for calculating the `Digest` field value MAY be configured
using the `--artifact-digest-algo` flag of the source-controller binary. The
default value is `sha256`, but can be changed to `sha384`, `sha512` or
`blake3`.
**Note:** availability of BLAKE3 is at present dependent on an explicit import
of `github.com/opencontainers/go-digest/blake3`.
@@ -317,11 +323,6 @@ fail to start.
When the configured algorithm changes, the `Digest` MAY be recalculated to
update the value.
#### Calculation
The checksum MUST be calculated using the algorithm configured in the
`--artifact-digest-algo` flag of the source-controller binary.
#### Verification
The checksum of a downloaded artifact MUST be verified against the `Digest`