Technology · Ebook

ORAS: OCI Registry As Storage

by Shriira Press

For years the container registry held only images. ORAS — OCI Registry As Storage — rethinks that, turning the registries you already run into a general-purpose store for any software artifact: Helm charts, WebAssembly modules, ML models, configuration bundles, signatures, and SBOMs. This book starts with the problem ORAS solves and the OCI specifications it stands on, then works through manifests and media types, the push and pull workflow, the referrers API that links signatures and SBOMs to the images they describe, OCI image layouts on disk, copying artifacts between registries, and the oras-go and oras-py SDKs for building registry-native applications of your own.

Contents

1. 1Preface
2. 2Chapter 1 — Registries Beyond Container Images
3. 3Chapter 2 — Manifests, Media Types, and Artifacts
4. 4Chapter 3 — Pushing and Pulling with the CLI
5. 5Chapter 4 — Referrers: Attachments, Signatures, and SBOMs
6. 6Chapter 5 — OCI Layouts and Copying Artifacts
7. 7Chapter 6 — Building with the SDKs
8. 8Chapter 7 — ORAS in Practice