Git & Delivery Core A2 · Formal specification Platform: General

Container Image

A container image is a layered package used to create containers. After a build, its content stays fixed.

See how it works
You might call it OCI imageDocker imagecontainer image artifact

See how it works

Original worked exampleContainer Image
BUILD → RUN → RELEASEContainer Imagemanifest digest -> config + ordered read-only layers + platform metadata
CATALOG:1.4linux/amd64
OCI MANIFESTConfig + ordered layersapplication/vnd.oci.image.manifest.v1+json
configsha256:c81…layers [0…2]sha256:a2f…
IMAGE IDENTITYsha256:91f…✓
Image layers stay read-onlycontainer adds writable layer
RESULTThe manifest digest names one exact image graph.BOUNDARYA tag can move. A digest fixes content, not trust.
manifest digest -> config + ordered read-only layers + platform metadataOPS
Container ImageRuntime & progressive delivery

Another example

A team publishes `shop/app:1.4`. That tag can move later. Production uses a digest to choose the exact image content.

Main parts

  1. 01Image manifest
  2. 02Image configuration
  3. 03Ordered file-system layers
  4. 04Platform metadata
  5. 05Movable tag
  6. 06Content digest

Use it when

Use an image to package one tested build for repeatable container starts. Record its source, digest, platform, and build time.

Do not use it when

Do not use a tag as proof of exact content or safety. A digest pins content, but it does not prove trust.

Name used in code

manifest digest -> config + ordered read-only layers + platform metadata

Before you ship

Before publishing, check the exact repository, branch, target, and diff. Keep unpublished work. Pass review and CI checks. Record conflict and data-loss risks, release order, traceability, recovery, and rollback.

Request you can copy

Outcome: Use Container Image to release or recover the change safely, with a clear record. User context: A team publishes `shop/app:1.4`. That tag can move later. Production uses a digest to choose the exact image content. Delivery concept or operation: Container Image. Why it fits: Use an image to package one tested build for repeatable container starts. Record its source, digest, platform, and build time. Do not use it when: Do not use a tag as proof of exact content or safety. A digest pins content, but it does not prove trust. Delivery requirements: Name the code repository and target. List preconditions, changes, review and CI checks, conflict and data-loss risks, release order, and the rollback or recovery command. Repository safeguards: Keep unpublished work and a clear history. Do not run destructive steps without an explicit backup. Check the exact code diff and remote target before publishing. Acceptance criteria: Review the intended diff and pass all required checks. Keep the target version traceable. Practice failure recovery and keep published history clear. Evidence and limits (evidence boundary): A formal document may still be a draft, release candidate, or final version. Check its status and browser or platform support. Unknowns to confirm: Repository, branch, team activity, release environment, approval owner, protected checks, and rollback target.

Check this request

Review the current use of Container Image. Definition: A container image is a layered package used to create containers. After a build, its content stays fixed. Release checks: Before publishing, check the exact repository, branch, target, and diff. Keep unpublished work. Pass review and CI checks. Record conflict and data-loss risks, release order, traceability, recovery, and rollback. Before changing code, report the evidence you found, gaps, severity, and the smallest safe fix.

A2
How official is this term?

Formal specification

A published, versioned formal specification defines this term for the listed technical scope.

A formal document may still be a draft, release candidate, or final version. Check its status and browser or platform support.

Scope
OCI Image Format 1.1.1 image-manifest model for one container image; not image build, signing, scanning, or vendor behavior
Document status
stable
Checked on
2026-07-30

Evidence sources & scope

Authority source + Term reference · Open Container Initiative · stable OCI Image Format Specification 1.1.1 — Image Manifest Image Manifest Scope: OCI Image Format 1.1.1 image manifests, configuration, and layers; not image-build, signing, scanning, or vendor-product behavior; direct scope: Image Manifest Role here: Direct term reference Source covers: canonical name, definition, semantics, implementation Authority source · Open Container Initiative · stable OCI Image Format Specification 1.1.1 Scope: OCI Image Format 1.1.1 image manifests, configuration, and layers; not image-build, signing, scanning, or vendor-product behavior Role here: Authority within stated scope Source covers: canonical name, definition, semantics, implementation Background source Kubernetes — Images Role here: Helpful background, not a definition

Copy it yourself

The browser could not copy this. Select the request below and copy it yourself.