Registry is getting an upgrade: Inside OCI artifacts

Registry is getting an upgrade: Inside OCI artifacts

Author: Bret Fisher December 8, 2023 Duration: 20:34

The OCI specifications for registry and image are getting a minor version number update to 1.1 soon, and this could be a big deal for anyone storing artifacts other than images somewhere in their infrastructure. This episode digs into the problem with artifacts today, and how the OCI and CNCF are planning to fix it with the "one registry to serve them all (artifacts)" in 2023/2024.

💥 This episode is brought to you by our valued sponsor and friends at CAST AI! 💥
CAST AI is an all-in-one Kubernetes cost optimization and automation platform that achieves over 60% average compute cost savings without months of onboarding. You get lightning fast autoscaling, downscaling, spot VM support and more with no hit to performance.

Use the link below and optimize your first cluster for FREE.

cast.ai/bretfisher

★Topics★
OCI image and runtime specifications
Helms's new OCI artifact support
Brandon Mitchell's recent OCI Distribution 1.1 RC talk on how registries relate data objects today
Here are the Helm docs on how to use your existing registries to store charts
ORAS project
Great talk on ORAS
OCI has a great, short post summarizing technical changes in OCI Image 1.1 and Distribution 1.1 specifications.
My original newsletter with more links and screenshots, Part 1, Part 2, Part 3

Creators & Guests

  • (00:00) -
  • (00:04) - Introduction to Docker and OCI Registries
  • (02:29) - The Challenges of Artifact Storage in Enterprises
  • (03:13) - The Role of Artifactory and Other Commercial Solutions
  • (03:36) - The Problem with Artifact-Specific Storage Systems
  • (03:52) - The Need for a Single Artifact Storage Standard
  • (05:17) - The Future of OCI or Docker Registry
  • (05:28) - The OCI Registry and its Main Data Objects
  • (05:57) - The Use of Registries to Store Non-Container Image Data
  • (07:03) - The Evolution of Container Registries
  • (12:41) - The Vision of the OCI and CNCF Teams
  • (13:32) - How to Use OCI Artifacts Today
  • (15:00) - The Two Types of Artifacts and How to Use Them
  • (16:34) - The Use of OCI Artifacts in Various Tools
  • (19:03) - Conclusion: The Future of Artifact Storage

You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com ★ Support this podcast ★

Bret Fisher hosts DevOps and Docker Talk: Cloud Native Interviews and Tooling alongside Nirmal Mehta, pulling conversations directly from their live audience sessions. This isn't a theoretical lecture series; it's grounded in the practical, often messy realities of building and running modern systems. Each episode digs into the specific tools and philosophies shaping infrastructure today, from the foundational elements like Docker and container orchestration with Kubernetes or Swarm to the broader cultural shifts of DevOps, SRE, and platform engineering. You'll hear discussions that span the entire software lifecycle, touching on the integration of security with DevSecOps, the automation promises of GitOps, and what "Cloud Native" truly means for development teams. The dialogue stays focused on actionable insights and real-world use cases, offering a genuine sense of what works and what doesn't in the field. For anyone navigating the container and cloud ecosystem, this podcast serves as a regular, insightful check-in with practitioners and experts, hosted by someone deeply embedded in the community. The natural, interview-driven format makes complex topics accessible, ensuring listeners come away with more than just buzzwords-they get context and clarity.
Author: Language: English Episodes: 50

DevOps and Docker Talk: Cloud Native Interviews and Tooling
Podcast Episodes
A single API for multicloud with Control Plane [not-audio_url] [/not-audio_url]

Duration: 54:26
Control Plane CEO Doron Grinstein joins me to discuss how they’ve created an AI-native cloud API that virtualizes multi-cloud and hybrid cloud to simplify management and ship faster.Watch the video of this episode. 🖥️ Wa…
CI/CD via agent tools: Skills, CLIs, MCP, and more with Semaphore [not-audio_url] [/not-audio_url]

Duration: 1:17:24
What does an AI-native CI look like? The Semaphore team joins me to talk about their focus on making your agent harness the gateway to testing, fixing, and deploying your code.Video podcast version here: https://youtu.be…
K8s Maxxing with AI-Native Platform Engineering Stack with OpenChoreo [not-audio_url] [/not-audio_url]

Duration: 54:59
OpenChoreo is a “batteries included”, AI-native Kubernetes platform stack for Platform Engineers that combines GitOps, Observability, AI Agents, and Workflows into a custom K8s distribution “super pack” that is managed v…
Docker AI, what’s new with MCP, Agents, Sandboxes, and more [not-audio_url] [/not-audio_url]

Duration: 1:16:20
Michael Irwin of Docker joins me to run through Gordon AI improvements, Docker Hardened Images and what's now free, Docker Sandboxes for running agents in proper isolation, Model Runner updates including MLX support on M…
Backup S3, Google Drive, iCloud, Notion with Plakar [not-audio_url] [/not-audio_url]

Duration: 1:06:53
Bret is joined by the founders of Plakar - Julien Mangeard and Gilles Chehade - to nerd out over backup engineering. The kind where you're building your own file formats and cryptographic layers, not just wiring up cron…
Your Images are Out of Date (probably) - The Silent Rebuilds problem [not-audio_url] [/not-audio_url]

Duration: 36:41
Container base images (like Official Docker Hub images) are often updated without new tag versions. I call this Silent Rebuilds. There's no way to know this happens without image digest-checking automation like Dependabo…
AI Wins and Misses for 2025 [not-audio_url] [/not-audio_url]

Duration: 1:14:56
I'm joined by Nirmal Mehta of AWS and Viktor Farcic from Upbound, to go through our 2025 year in review. We look into the AI tools that consumed us this year, from CLI agents to terminal emulators, IDEs, AI browsers - wh…
Find Your K8s Happy Path with RawKode Academy [not-audio_url] [/not-audio_url]

Duration: 51:12
I talk with David Flanagan, aka Rawkode, about his new opinionated Tech Matrix that helps you navigate the overwhelming CNCF landscape. https://rawkode.academy/technology/matrix😇 My new GitHub Security workshop has launc…
Move K8s Stateful Pods Between Nodes [not-audio_url] [/not-audio_url]

Duration: 44:42
Bret is joined by Philip Andrews and Dan Muret of Cast AI to discuss pod live migration between nodes in a Kubernetes cluster. 😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to…
Swarm 2030. Let's Go! [not-audio_url] [/not-audio_url]

Duration: 23:47
Bret discusses exciting news about Swarm being maintained until 2030.😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply ch…