You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
As tested, oras-go is able to fetch blobs but not able to fetch manifests since the ollama registry does not return Content-Length header. As the OCI distribution-spec states
A successful response SHOULD contain the size in bytes of the uploaded blob in the header Content-Length.
the presentation of Content-Length is not a MUST. Therefore, oras-go is allowed to support this scenario with security well assessed.
The text was updated successfully, but these errors were encountered:
Ollama registry
registry.ollama.ai
is a container registry with incomplete APIs (ollama/ollama#6510, ollama/ollama#5021, ollama/ollama#5298) and does not support auth (ollama/ollama#7244).As tested,
oras-go
is able to fetch blobs but not able to fetch manifests since the ollama registry does not returnContent-Length
header. As the OCI distribution-spec statesthe presentation of
Content-Length
is not a MUST. Therefore,oras-go
is allowed to support this scenario with security well assessed.The text was updated successfully, but these errors were encountered: