Wrong image pulled from docker hub

[a9udn9u]

Hi all,

I'm new to podman so if it's intended behavior please let me know.

I'm trying to create a Rust dev container. Currently the latest Rust version is 1.75.0, in my Dockerfile I tried both docker.io/rust:1-alpine and docker.io/rust:1.75-alpine (they are the same version), in both case, podman pulls an image with rustc version of 1.72.1. On docker hub, the latest image is shown as been created 6 days ago, the one pulled to my machine was created 5 weeks ago. However, podman inspect shows correct repo digest. What could be wrong?

$ podman image inspect 6f0d56f91c53                                                                                                                                                             
[                                                      
     {          
          "Id": "6f0d56f91c538a0ed2c771f2f7cc3572c8b4bc10401d094983da43814b5fde3d",
          "Digest": "sha256:65aa0b28d02612a3811a7fd0c65b56e4ba766c35cef71965f1cacae7555771a0",
          "RepoTags": [                          
               "docker.io/library/rust:1.75-alpine",
               "docker.io/library/rust:1-alpine"
          ],
          "RepoDigests": [
               "docker.io/library/rust@sha256:65aa0b28d02612a3811a7fd0c65b56e4ba766c35cef71965f1cacae7555771a0",
               "docker.io/library/rust@sha256:9af4ed962405e24b37240ce34a2272e40cff99b4f5150cc6a53b03f95d40e6e0"
          ],                              
          "Parent": "",                    
          "Comment": "",
          "Created": "2023-12-28T16:57:32Z",
          "Config": {
               "Env": [
                    "PATH=/usr/local/cargo/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
                    "RUSTUP_HOME=/usr/local/rustup",
                    "CARGO_HOME=/usr/local/cargo",
                    "RUST_VERSION=1.75.0"
               ],
               "Cmd": [
                    "/bin/sh"
               ]
          },
          "Version": "",
          "Author": "",
          "Architecture": "amd64",
          "Os": "linux",
          "Size": 822918968,
          "VirtualSize": 822918968,
          "GraphDriver": {
               "Name": "vfs",
               "Data": null
          },
          "RootFS": {
               "Type": "layers",
               "Layers": [
                    "sha256:d4fc045c9e3a848011de66f34b81f052d4f2c15a17bb196d637e526349601820",
                    "sha256:87b2cb5f40fdcca4c80b2bc765955384f37b9f9477e9660909f122ee75847320",
                    "sha256:63750ea099d9ea4dd49e168ec313a8ebfc19e21569588fe99e9683d570def3fc"
               ]
          },
          "Labels": null,
          "Annotations": {
               "org.opencontainers.image.created": "2023-12-28T16:57:32Z",
               "org.opencontainers.image.revision": "e7f8ab58b3feca354792122f4df6624e291c404b", 
               "org.opencontainers.image.source": "https://github.com/rust-lang/docker-rust.git#e7f8ab58b3feca354792122f4df6624e291c404b:1.75.0/alpine3.19",
               "org.opencontainers.image.url": "https://hub.docker.com/_/rust",
               "org.opencontainers.image.version": "1-alpine3.19"
          },
          "ManifestType": "application/vnd.oci.image.manifest.v1+json",
          "User": "",
          "History": [
               {
                    "created": "2023-12-28T16:57:32Z",
                    "created_by": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / "
               },
               {
                    "created": "2023-12-28T16:57:32Z",
                    "created_by": "/bin/sh -c #(nop)  CMD [\"/bin/sh\"]",
                    "empty_layer": true
               },
               {
                    "created": "2023-12-28T16:57:32Z",
                    "created_by": "RUN /bin/sh -c apk add --no-cache         ca-certificates         gcc # buildkit",
                    "comment": "buildkit.dockerfile.v0"
               },
               {
                    "created": "2023-12-28T16:57:32Z",
                    "created_by": "ENV RUSTUP_HOME=/usr/local/rustup CARGO_HOME=/usr/local/cargo PATH=/usr/local/cargo/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin RUST_VERSION=1.75.0",
                    "comment": "buildkit.dockerfile.v0",
                    "empty_layer": true
               },
               {
                    "created": "2023-12-28T16:57:32Z",
                    "created_by": "RUN /bin/sh -c set -eux;     apkArch=\"$(apk --print-arch)\";     case \"$apkArch\" in         x86_64) rustArch='x86_64-unknown-linux-musl'; rustupSha256='7aa9e2a380a9958fc1fc426a3323209b2c86181c6816640979580f62ff7d48d4' ;;         aarch64) rustArch='aarch64-unknown-linux-musl'; rustupSha256='b1962dfc18e1fd47d01341e6897cace67cddfabf547ef394e8883939bd6e002e' ;;         *) echo >&2 \"unsupported architecture: $apkArch\"; exit 1 ;;     esac;     url=\"https://static.rust-lang.org/rustup/archive/1.26.0/${rustArch}/rustup-init\";     wget \"$url\";     echo \"${rustupSha256} *rustup-init\" | sha256sum -c -;     chmod +x rustup-init;     ./rustup-init -y --no-modify-path --profile minimal --default-toolchain $RUST_VERSION --default-host ${rustArch};     rm rustup-init;     chmod -R a+w $RUSTUP_HOME $CARGO_HOME;     rustup --version;     cargo --version;     rustc --version; # buildkit",
                    "comment": "buildkit.dockerfile.v0"
               }
          ],
          "NamesHistory": [
               "docker.io/library/rust:1-alpine",
               "docker.io/library/rust:1.75-alpine"
          ]
     }
]

[rhatdan]

@mtrmac PTAL

[mtrmac]

I don’t understand the problem. Steps to reproduce / expected results / actual results?

If the registry tag points at and image with an amd64 digest of sha256:9af4ed962405e24b37240ce34a2272e40cff99b4f5150cc6a53b03f95d40e6e0 and the pulled image has an amd64 digest sha256:9af4ed962405e24b37240ce34a2272e40cff99b4f5150cc6a53b03f95d40e6e0 , AFAICT Podman’s job is done and whatever is or isn’t inside the image is between the producer and consumer. Or is the claim that the pulled image is not actually sha256:9af4ed962405e24b37240ce34a2272e40cff99b4f5150cc6a53b03f95d40e6e0 ?

There isn’t any reason in general to expect that the time an image was built and the time the image was published should match.