Expand description
OCI distribution transport for services bundles.
Only the parts of the distribution spec a bundle needs are implemented:
a manifest GET, the Bearer challenge dance, and a single blob pull whose
mediaType is
BUNDLE_MEDIA_TYPE.
A manifest carrying zero or several
such layers is refused rather than guessed at, because picking one would
make which bytes an instance runs depend on registry ordering.
The registry scheme is https unless the host is loopback or listed in
the trusted-host escape hatch, and every constructed URL goes through the
shared SSRF guard.
Copyright (c) systemprompt.io — Business Source License 1.1. See https://systemprompt.io for licensing details.
Re-exports§
pub use push::push_bundle;
Modules§
- auth
- Bearer-challenge handling for OCI registries.
- pull
- Manifest and blob reads against an OCI registry.
- push
- Publishing a bundle to an OCI registry.