Registry is getting an upgrade: Inside OCI artifacts
DevOps and Docker Talk: Cloud Native Interviews and ToolingShow Notes
The OCI specifications for registry and image are getting a minor version number update to 1.1 soon, and this could be a big deal for anyone storing artifacts other than images somewhere in their infrastructure. This episode digs into the problem with artifacts today, and how the OCI and CNCF are planning to fix it with the "one registry to serve them all (artifacts)" in 2023/2024.
💥 This episode is brought to you by our valued sponsor and friends at CAST AI! 💥 CAST AI is an all-in-one Kubernetes cost optimization and automation platform that achieves over 60% average compute cost savings without months of onboarding. You get lightning fast autoscaling, downscaling, spot VM support and more with no hit to performance. Use the link below and optimize your first cluster for FREE. cast.ai/bretfisher ★Topics★ OCI image and runtime specifications Helms's new OCI artifact support Brandon Mitchell's recent OCI Distribution 1.1 RC talk on how registries relate data objects today Here are the Helm docs on how to use your existing registries to store charts ORAS project Great talk on ORAS OCI has a great, short post summarizing technical changes in OCI Image 1.1 and Distribution 1.1 specifications. My original newsletter with more links and screenshots, Part 1, Part 2, Part 3 Creators & Guests
Cristi Cotovan - Editor
Beth Fisher - Producer
Bret Fisher - Host
(00:00) -
(00:04) - Introduction to Docker and OCI Registries
(02:29) - The Challenges of Artifact Storage in Enterprises
(03:13) - The Role of Artifactory and Other Commercial Solutions
(03:36) - The Problem with Artifact-Specific Storage Systems
(03:52) - The Need for a Single Artifact Storage Standard
(05:17) - The Future of OCI or Docker Registry
(05:28) - The OCI Registry and its Main Data Objects
(05:57) - The Use of Registries to Store Non-Container Image Data
(07:03) - The Evolution of Container Registries
(12:41) - The Vision of the OCI and CNCF Teams
(13:32) - How to Use OCI Artifacts Today
(15:00) - The Two Types of Artifacts and How to Use Them
(16:34) - The Use of OCI Artifacts in Various Tools
(19:03) - Conclusion: The Future of Artifact Storage
You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news! Grab the best coupons for my Docker and Kubernetes courses. Join my cloud native DevOps community on Discord. Grab some merch at Bret's Loot Box Homepage bretfisher.com
★ Support this podcast ★
More from DevOps and Docker Talk: Cloud Native Interviews and Tooling
Control Plane CEO Doron Grinstein joins me to discuss how they’ve created an AI-native cloud API that virtualizes multi-cloud and hybrid cloud to simplify management and ship faster. Watch the video of this episode.
What does an AI-native CI look like? The Semaphore team joins me to talk about their focus on making your agent harness the gateway to testing, fixing, and deploying your code. Video podcast version here: https://youtu.be/HzXAdtVrW70
OpenChoreo is a “batteries included”, AI-native Kubernetes platform stack for Platform Engineers that combines GitOps, Observability, AI Agents, and Workflows into a custom K8s distribution “super pack” that is managed via Backstage, CLI, API, or MCP. Check out the video podcast version here: https://youtu.be/AqGWjxEfj2g
Michael Irwin of Docker joins me to run through Gordon AI improvements, Docker Hardened Images and what's now free, Docker Sandboxes for running agents in proper isolation, Model Runner updates including MLX support on Mac, MCP Toolkit dynamic discovery, and the newly renamed Docker Agent with its GitHub Action for automating PR reviews and docs checks. Check out the video podcast version here: https://youtu.be/dTF3b36Bq6w
Bret is joined by the founders of Plakar - Julien Mangeard and Gilles Chehade - to nerd out over backup engineering. The kind where you're building your own file formats and cryptographic layers, not just wiring up cron jobs. We get into how Plakar deduplicates and encrypts at the source so your cloud provider never sees your keys. Also, their snapshot model has no chain dependencies, which means you can delete any backup without breaking the others. We had a fun hour of backup horror stories, ransomware pragmatism, where I'm lobbying hard for a Docker volume integration. Check out the video podcast version here: https://youtu.be/OPRK5osKQHI