Struct Registry 

pub struct Registry { /* private fields */ }

The registry’s content-addressed store.

Implementations

impl Registry

pub fn under(root: impl AsRef<Path>) -> Registry

The registry under a data root.

pub fn put_blob(&self, bytes: &[u8]) -> Result<String>

Store bytes under their own digest.

The digest is computed here and never taken from the caller: a registry that trusts a supplied digest is one where a client chooses what its bytes are called, which is the whole attack content addressing exists to prevent.

pub fn get_blob(&self, digest: &str) -> Result<Option<Vec<u8>>>

Read a blob back, verifying it still hashes to its own name.

The check is not paranoia: a content-addressed store whose reads are not verified is a store where bit rot becomes a supply-chain event, and the cost is one hash of bytes already in memory.

pub fn put_manifest( &self, stores: &ServerStores, name: &str, reference: &str, manifest: &[u8], ) -> Result<Result<Landed, Refusal>>

Land a manifest — if the image it names was built and attested.

This is crate::registry::admit at the one place bytes become pullable. A manifest whose digest no signed, logged build record names is refused, and the refusal says which of the four things is missing.

pub fn resolve(&self, name: &str, reference: &str) -> Result<Option<String>>

What digest a tag points at.

Trait Implementations

impl Clone for Registry

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Registry

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.