tag
5 posts
How OCI image indexes connect platform descriptors to immutable manifests, and how runtimes select, verify, publish, and debug multi-platform images.
Why latest is not an identity, how OCI digests anchor releases, and how signatures, attestations, SBOMs, and admission policy work together.
How Artifact Registry manages container images and language packages with explicit locations, repository-level access, vulnerability analysis, and cleanup policies.
The OCI launched in 2015 to standardize container images, runtime bundles, execution, and distribution across competing tools and vendors.
How the OCI runtime and image specs standardized what a 'container' actually is, and how containerd/CRI-O/runc fit together beneath Docker and Kubernetes.