Popping podman/dockers bonnet: Unraveling the image pull process while developing for Forgejo (gpn24)

Popping podman/dockers bonnet: Unraveling the image pull process while developing for Forgejo (gpn24)

Author: CCC media team June 7, 2026 Duration: 17:28
Developing an OCI image pull through cache for Forgejo had some interesting rabbit holes and it was surprisingly hard to get in depth information on a supposedly well known system. So I got to deep dive and do bits of research and reverse engineering to make the parts communicate properly. In this talk I'll share my insights into the process of pulling OCI images according to the distribution spec (and its slight deviations) and try to answer questions like: - Which requests are sent by Podman or the Docker daemon when doing `docker pull image`? - Whats that with the /v2 endpoint and discovery? - How about authentication? - What does the pull sequence look like? - Help, I got an index manifest, what should I do? - How should Forgejo communicate with the daemon for a successful pull? If there is time, I'll also share small pieces of knowledge of where the implementation sits in the Forgejo codebase and how it interacts with the existing package registry. - PR containing the implementation: https://codeberg.org/forgejo/forgejo/pulls/11611 Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://cfp.gulas.ch/gpn24/talk/8SDDSH/

Tune into the Chaos Computer Club-recent events feed for a direct line to the forefront of digital culture and critical technology discourse. Curated by the CCC media team, this podcast channels the raw, insightful atmosphere of Europe's most influential hacker association, bringing you recordings from their major gatherings and community events. Each episode is a deep dive into talks and presentations from the last two years, covering topics from cryptography and privacy rights to hardware hacking, societal impacts of surveillance, and open-source philosophy. You'll hear from researchers, activists, and engineers who are actively shaping our digital future, offering perspectives rarely found in mainstream tech conversations. This isn't a produced show with hosts; it's an archival audio stream of genuine conference sessions, complete with audience questions and the spontaneous energy of the live event. For anyone interested in the technical details and ethical debates at the heart of modern technology, this feed serves as an essential, unfiltered resource. Subscribe to this podcast to keep your finger on the pulse of the Chaos Computer Club's ongoing dialogue, where complex ideas are broken down and the tools for a more empowered digital life are openly discussed.
Author: Episodes: 100

Chaos Computer Club - recent events feed
Podcast Episodes
Warum produziert Köln Hbf Verspätungen? (gpn24) [not-audio_url] [/not-audio_url]

Duration: 52:20
Wer mit dem Zug nach Köln fährt, wird schonmal erlebt haben: der Zug hält auf der Hohenzollernbrücke vor dem Bahnhof. Grund: Gleis belegt. Aber warum passiert das so häufig? Der Frage bin ich auf ungewöhnlichem Wege nach…
Wie funktionieren Software-Synthesizer Part 1: Oszillatoren (gpn24) [not-audio_url] [/not-audio_url]

Duration: 51:18
Wir schauen uns die grundlegenden Bausteine eines Audio-Synthesizers an und wie man diese in Software umsetzen kann. In diesem Teil geht es zunächst um Oszillatoren: Wie entsteht der eigentliche Ton am Anfang der Signalk…
How to decompile a DSP architecture (gpn24) [not-audio_url] [/not-audio_url]

Duration: 59:24
About a year ago, a friend gave me a binary to reverse engineer to playtest for a CTF. As the architecture lacked the necessary tooling, I started developing a decompiler plugin. What started as a small side project for…
But Can It Run Fake News?! (gpn24) [not-audio_url] [/not-audio_url]

Duration: 58:39
Grafikkarten sind für Grafik?! Diese namensgebende Weisheit stimmt heute nicht mehr, stattdessen werden Grafikkarten für alles mögliche eingesetzt, von wissenschaftlichen Simulationen von Galaxiekollisionen bis ihn zu re…
Why Even Signal Calls Apple & Google (gpn24) [not-audio_url] [/not-audio_url]

Duration: 46:00
I just wanted Zulip notifications on my phone. So I started building something myself - and fell into a rabbit hole. This talk tells the story of how I tried to solve a problem - and in doing so, understood how push noti…
Energiewende.exe at the Chaos of Scale (gpn24) [not-audio_url] [/not-audio_url]

Duration: 59:43
Neue Regierung, neues Sondervermögen, da gibt es doch jetzt frischen Wind für die Energiewende in Deutschland, richtig? Leider ist das Gegenteil der Fall. Die politische Unterstützung auf Bundesebene für die Energiewende…
Encoding, wie funktioniert das eigentlich? (gpn24) [not-audio_url] [/not-audio_url]

Duration: 57:41
Kommunikation ist für Menschen mindestens genauso schwierig wie für Computer. Wir reisen von `ASCII` bis `UTF` und betrachten dabei (fast) alles dazwischen und *daneben*. Historische Anforderungen an unterschiedliche Met…