nix: create efficient oci images with reusable layers

[malt3]

This set of functions generates layers that can be combined into OCI image layout directories. Those can directly be pushed to a registry.
Strong focus was placed on making the layers reusable in arbitrary ways. This allows for efficient distribution of binary artifacts via container image layers.

Feel free to suggest a different layout in nix!

[katexochen]

only reviewd the ociLayer file in detail.

I think adding a README with some documentation would be nice. Maybe we can add it to the top level function and link it into the other pkgs?

[github-actions]

PR Preview Action v1.4.7
🚀 Deployed preview to https://edgelesssys.github.io/contrast/pr-preview/pr-294/
on branch gh-pages at 2024-04-15 09:59 UTC

[katexochen]

Looks pretty good to me. Is there any easy way to add a test for this?

[malt3]

Looks pretty good to me. Is there any easy way to add a test for this?

I think the best real test case will be the node installer image. We could also add a dummy image with expected file contents. Would that be preferred as part of this PR?

[katexochen]

Looks pretty good to me. Is there any easy way to add a test for this?

I think the best real test case will be the node installer image. We could also add a dummy image with expected file contents. Would that be preferred as part of this PR?

Likely you're right and having it in our end-to-end flow is enough. I thought about a simple test creating an image and running it with docker or so just to see it is valid. But not strictly necessary.

[katexochen]

I think the best real test case will be the node installer image. We could also add a dummy image with expected file contents. Would that be preferred as part of this PR?

Maybe using a file format validator could be enough of a test? https://github.com/opencontainers/image-tools/blob/master/man/oci-image-tool-validate.1.md

[katexochen]

Thanks!