Container Inspector Versions Save

What's Changed

• setup.cfg: fix invalid version spec by @priv-kweihmann in https://github.com/nexB/container-inspector/pull/51
• Update-skeleton by @JonoYang in https://github.com/nexB/container-inspector/pull/54
• Update commoncode by @JonoYang in https://github.com/nexB/container-inspector/pull/55

New Contributors

• @priv-kweihmann made their first contribution in https://github.com/nexB/container-inspector/pull/51

Full Changelog: https://github.com/nexB/container-inspector/compare/v32.0.1...v33.0.0

This is a minor release with bug fixes.

• We now correctly process the opaque whiteouts seen in container image layers tarballs.

Thank you to AJ Arena @sig-aarena

This is a minor release with bug fixes and an output change.

• We no longer support Python 3.6, only 3.7 and up.
• "utils.extract_tar" function now behaves correctly with links and return either a list of error message strings (the previous default) but with updated messages or a list of ExtractEvent to better track extraction errors and warnings. The behavious is driven by the "as_events" argument.
• In all places where extract is callable (Image, Layer) there is a new "skip_symlinks" argument defaulting to True. If True, we skip symlinks and links. The same applies with the "as_events" available in these places as these functions now return a list (rather than nothing before).

This is a minor release with minor updates.

• utils.extract_tar now returns a list of error messages that occured during extraction.
• Add tests for utils.extract_tar

This is a major release with bug fixes and minor API changes.

• Remove dependency on extractcode as images only need basic tar to extract. - "utils.extract_tar" function now accepts a skip_symlink argument
• Adopt the latest skeleton.
• Add new os-release tests

This is a minor release with bug fixes and minor updates.

• Switched back to semver from calver like other AboutCode projects.
• Adopted the latest skeleton. With this the virtualenv is created under venv.
• Add new "layer_path_segments" argument to image.Image.to_dict() to allow to report the Layer extracted locations as trimmed paths keeping only this many trailing path segments.

This is a minor new release with a bug fix for #32

This is a minor release with bug fixes and minor API changes.

API changes

The Distro.from_rootfs() now works as expected. It can handle empty location and works correctly with a base_distro. When a base_distro is provided it will raise an Exception if the found Distro.os does not match the base Distro.os

This is a major release.

API changes

The Image and Layer object structures have changed significantly:

• legacy parent_id and parent_digest attributes are removed from Image

• new attributes have been added to correctly track the tarball of an image or layer and its extracted location:

  • "extracted_location" is the absolute path where an image or layer is extracted
  • "archive_location" is the absolute path to an image or layer archive

  Therefore we have these attribute renames, additions and deletions:

  • Image.base_location -> Image.extracted_location
  • Image.archive_location: added
  • Layer.extracted_to_location -> Layer.extracted_location
  • Layer.layer_location -> Layer.archive_location
  • Layer.layer_sha256 -> Layer.sha256

  Also:

  • Layer.layer_id is now the sha256 of the Layer archive
  • Image.sha256, os_version, variant: added

• the layer_id is now based on the SHA256 of the layer tarball and not based on the UUID-like directory names that contain a "layer.tar" in Docker image.

• Image.config_digest is now prefixed with "sha256:"

• All mappings keys are now lowercased recursively, including for labels.

• Dropped support for Python 2. The minimum Python version is now Python 3.6

• Dropped support for Docker image v1-style format

• Dropped support for Windows as it was never intended to run on Windows. Windows as a container is a target though.

• The way Image and Layers archives are extracted has changed significantly. Images are extracted as before keeping symlinks (which are essential to support certain Docker image layouts). In contrast, Layers are now exracted using extractcode and links are ignored.

New features

• Add new find_root function to find the root of a filesystem

• Add new tests for distro detection and os-release handling using a large collection of os-release files

• Layer/Image.to_dict() now accepts a new "exclude_fields" argument with a list of field names to optionally exclude.

• Add experimental support for container images using the OCI layout and add a new Image attribute "image_format" with the value "docker" or "oci"

• Add experimental support for Windows-based containers.

Misc

• The experimental fetch module has been removed
• The master branch has been renamed to main.