Container Image
A container image is a layered package used to create containers. After a build, its content stays fixed.
manifest digest -> config + ordered read-only layers + platform metadataapplication/vnd.oci.image.manifest.v1+jsonsha256:c81…layers [0…2]sha256:a2f…sha256:91f…✓manifest digest -> config + ordered read-only layers + platform metadataOPSAnother example
A team publishes `shop/app:1.4`. That tag can move later. Production uses a digest to choose the exact image content.
Main parts
- 01Image manifest
- 02Image configuration
- 03Ordered file-system layers
- 04Platform metadata
- 05Movable tag
- 06Content digest
Use it when
Use an image to package one tested build for repeatable container starts. Record its source, digest, platform, and build time.
Do not use it when
Do not use a tag as proof of exact content or safety. A digest pins content, but it does not prove trust.
Name used in code
manifest digest -> config + ordered read-only layers + platform metadata Before you ship
Before publishing, check the exact repository, branch, target, and diff. Keep unpublished work. Pass review and CI checks. Record conflict and data-loss risks, release order, traceability, recovery, and rollback.
Outcome: Use Container Image to release or recover the change safely, with a clear record. User context: A team publishes `shop/app:1.4`. That tag can move later. Production uses a digest to choose the exact image content. Delivery concept or operation: Container Image. Why it fits: Use an image to package one tested build for repeatable container starts. Record its source, digest, platform, and build time. Do not use it when: Do not use a tag as proof of exact content or safety. A digest pins content, but it does not prove trust. Delivery requirements: Name the code repository and target. List preconditions, changes, review and CI checks, conflict and data-loss risks, release order, and the rollback or recovery command. Repository safeguards: Keep unpublished work and a clear history. Do not run destructive steps without an explicit backup. Check the exact code diff and remote target before publishing. Acceptance criteria: Review the intended diff and pass all required checks. Keep the target version traceable. Practice failure recovery and keep published history clear. Evidence and limits (evidence boundary): A formal document may still be a draft, release candidate, or final version. Check its status and browser or platform support. Unknowns to confirm: Repository, branch, team activity, release environment, approval owner, protected checks, and rollback target.
Check this request
Review the current use of Container Image. Definition: A container image is a layered package used to create containers. After a build, its content stays fixed. Release checks: Before publishing, check the exact repository, branch, target, and diff. Keep unpublished work. Pass review and CI checks. Record conflict and data-loss risks, release order, traceability, recovery, and rollback. Before changing code, report the evidence you found, gaps, severity, and the smallest safe fix.