Struct DigestUtils

pub struct DigestUtils;

Utilities for working with SHA256 digests in Docker context

Implementations

impl DigestUtils

pub fn compute_sha256(data: &[u8]) -> String

Compute SHA256 digest from byte data

注意：Docker 镜像层的 digest 必须基于 gzip 压缩后的 tar 字节流计算。 传入 data 必须是 gzip 字节流，否则会导致 digest 校验失败。

pub fn compute_sha256_str(data: &str) -> String

Compute SHA256 digest from string data

pub fn compute_docker_digest(data: &[u8]) -> String

Compute full Docker digest (with sha256: prefix) from byte data

注意：Docker 镜像层的 digest 必须基于 gzip 压缩后的 tar 字节流计算。 传入 data 必须是 gzip 字节流，否则会导致 digest 校验失败。

pub fn compute_docker_digest_str(data: &str) -> String

Compute full Docker digest (with sha256: prefix) from string data

pub fn is_valid_sha256_hex(digest: &str) -> bool

Validate SHA256 hex string (64 characters, all hex)

pub fn is_valid_docker_digest(digest: &str) -> bool

Validate full Docker digest format (sha256:xxxxx)

pub fn normalize_digest(digest: &str) -> Result<String>

Normalize digest to full Docker format (add sha256: prefix if missing)

pub fn extract_hex_part(digest: &str) -> Result<&str>

Extract SHA256 hex part from full Docker digest

pub fn is_empty_layer_digest(digest: &str) -> bool

Check if a digest represents an empty layer

pub fn empty_layer_digest() -> String

Get the standard empty layer digest with full Docker format

pub fn verify_data_integrity(data: &[u8], expected_digest: &str) -> Result<()>

Verify data matches expected digest

注意：Docker 镜像层的 digest 校验必须基于 gzip 压缩后的 tar 字节流。 传入 data 必须是 gzip 字节流，否则会导致校验失败。

pub async fn verify_stream_integrity<R>( reader: R, expected_digest: &str, ) -> Result<Vec<u8>>

where R: AsyncRead + Unpin,

Verify data integrity by computing digest on the fly from a stream

注意：Docker 镜像层的 digest 校验必须基于 gzip 压缩后的 tar 字节流。 传入 reader 必须输出 gzip 字节流，否则会导致校验失败。

pub fn extract_digest_from_layer_path(layer_path: &str) -> Option<String>

Extract digest from Docker layer path (various formats)

pub fn generate_path_based_digest(layer_path: &str) -> String

Generate a fallback digest from path when real digest cannot be extracted

pub fn format_digest_short(digest: &str) -> String

Format digest for display (truncated for readability)

pub fn validate_digests(digests: &[&str]) -> Result<()>

Batch validate multiple digests