containerd / containerd/nerdctl
Consider propagating `.config.Labels` from `vnd.oci.image.config.v1+json` (difficult due to security concerns)
Open
enhancement
expert
status/needs-design-discussion
- Dominant language
- Go
- Stars
- 10.4k
- Forks
- 826
- Avg merge
- 1d 23h
- Merged PRs (30d)
- 44
Description
https://github.com/opencontainers/image-spec/blob/v1.0.2/config.md#properties
Currently nerdctl does NOT propagate `.config.Labels` from `vnd.oci.image.config.v1+json` to containerd labels and OCI annotations due to security concerns, but maybe we can partially support them with allowlist in `nerdctl.toml`
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.