owned this note
owned this note
Published
Linked with GitHub
---
tags: oras
---
# Oras & ORAS Artifacts-Spec Meeting Notes
###### tags: `oras`
- [Github: oras-project/artifacts-spec/](https://github.com/oras-project/artifacts-spec/)
- [CNCF Calendar](https://www.cncf.io/community/calendar/)
- [Slack: #oras-artifacts-spec](https://app.slack.com/client/T08PSQ7BQ/C02AJS1BUTX/thread/C01GVR8SY4R-1628548799.015400)
- [Archived Notes](https://github.com/oras-project/artifacts-spec/discussions/categories/meeting-notes)
## Zoom Call Info
- Meeting time:
- Tuesday 5-6pm pacific time, 8-9pm US Eastern, 8-9am Shanghai (US Summer time)
- Tuesday 4-5pm pacific time, 8-9pm US Eastern, 8~9 Shanghai (US Winter time)
- [Zoom Dial-in link](https://zoom.us/j/8079328631?pwd=UzN0NUlmbmcvTTN5L0o5VUQ2YndyQT09)
- Passcode: 77777 (5x 7)
- Meeting ID: 807 932 8631
- [Find your local number](https://zoom.us/u/aLDk4OXTu)
:::info
**Note:** Template for copying at the bottom of the note.
- Agenda items must identify the (owner) of the item
:::
## Next meeting: June 6, 5:00 PM ~ 6:00 PM PDT
### Attendees
### Agenda
- [oras v1.1.0](https://github.com/oras-project/oras/milestone/11) will be released on June 30
- [Artifact Explorer Project Brainstorming](https://docs.google.com/document/d/1nSAnzYcc7050jhDoacTmRMw3asdKd2MZG32MK5Cv3dA/edit#)
- LFX mentorship project updates
- [Design and implement Artifact Explore web portal](https://mentorship.lfx.linuxfoundation.org/project/9749bc0a-04c9-498d-a16c-e66c0930e819)
- [Refactor the ORAS documentation structure and write new user guides](https://mentorship.lfx.linuxfoundation.org/project/2314fcc1-f09b-4dab-90fb-d0ef092b6c0e)
- ORAS has a Snap package on Ubuntu now and the next step is to add a GitHub actions to upgrade it per new release automatically
### Meeting Notes
## May 23, 5:00 PM ~ 6:00 PM PDT
### Attendees
* Terry Howe
* Deepesha Burse
* Asmit Malakannawar
* ToddySM
* Billy Zha
* Yi Zha
* Yash Raut
* Sylvia Lei
### Agenda
- Request ORAS maintainers to review Asmit's nomination (PR https://github.com/oras-project/oras-www/pull/181)
- Artifact Explorer Project Brainstorming ([issue 158](https://github.com/oras-project/oras-www/issues/158))
- Allow oras command to skip referrer index clean up ([issue 954](https://github.com/oras-project/oras/issues/954))
- ORAS-go v2.2.0 release ETA date
- CNCF Artifacts Initiative
- First meeting held Friday May 19
- Recording: https://www.youtube.com/watch?v=IE7VjiJZx3g
- Notes: https://docs.google.com/document/d/1E7iKPOuyA1jxPe8vDG8aPd8jtnCEbpDpCifXDvDCnA0/
- Charter: https://docs.google.com/document/d/1w_lo2RZDKeEzQg4DMV-9Tq4ir_znONj_ypJ27CUfMgY/
### Meeting Notes
- We need to reach super-majority of approvals from ORAS maintainers for Asmit's nomination [PR 181](https://github.com/oras-project/oras-www/pull/181)
- To define a contributor ladder guide in the ORAS community repository
- Walked through the initial ideas of the Artifact Explorer project described in the ([issue 158](https://github.com/oras-project/oras-www/issues/158)). Terry asked if we need to create a new repository for this project
- We agree the proposal of skiping referrer index cleanup described in the ([issue 954](https://github.com/oras-project/oras/issues/954)). Action items are
- Toddy will consult this behavior suggestion in the OCI community meeting since cleanup is not defined in OCI distribution Spec yet
- Feynman will define the output and user experience for the new flag `--gc
- Sylvia will create an issue to vote for releasing ORAS-go v2.2.0. We will cut this release from the `main` branch and change the previous milestone
- Suggest reviewing the first CNCF Artifacts Working Group's meeting [information](https://docs.google.com/document/d/1E7iKPOuyA1jxPe8vDG8aPd8jtnCEbpDpCifXDvDCnA0/)
### Meeting recording
## May 9, 5:00 PM ~ 6:00 PM PDT
### Attendees
- Terry Howe
- Shiwei Zhang
- Sylvia Lei
- Yi Zha
- Feynman Zhow
- Andrew Block
- Toddy SM
- Billy Zha
- Asmit Malankannawar
-
### Agenda
- The PR of [Working Group Proposal](https://github.com/oras-project/community/pull/48) had majority of approval. Shall we merge it and discuss the next step - Feynman
- Support automatic https-to-http handling via `--insecure` - Billy Zha
- Discussion: https://github.com/oras-project/oras/discussions/943
- Issue: https://github.com/oras-project/oras/issues/914
- Doc: https://hackmd.io/7lGl2zRqQMWt413TttyyVw?view
- Project proposals are submitted to CNCF LFX mentorship program - Feynman
- [#1 Design and implement Artifact Explore web portal based on ORAS](https://github.com/oras-project/oras-www/issues/158)
- [#2 Refactor the ORAS documentation structure and write new user guides](https://github.com/oras-project/oras-www/issues/65)
- Introduce @vscoch's project ORAS-CSI (https://github.com/converged-computing/oras-csi)
### Meeting Notes
- Discussed flags regarding insecure experience in ORAS CLI, below options discussed
- option 1: keep `--plain-http` and make insecure flag more specific about tls checking, like `--insecure-skip-tls`
- option 2: remove `--plain-http` and make `--insecure` handles HTTPS-to-HTTP fallback automatically
- Opion 2 introduces breaking changes into CLI so if we are going to introduce it in 1.X release, there are below options
- option 2.1: keep `--plain-http`, make flag `--insecure` covers both HTTP and HTTPS cases with auto fallback (this also introduces breaking change)
- option 2.2: make no change to existing flags, add a new flag `--insecure-registry` which covers both HTTP and HTTPS cases with auto fallback (this is not optimal since extra flags are introduced)
- option 2.3: wait for 2.0 release to remove `--plain-http` and make `--insecure` handles both HTTP and HTTPS cases with auto fallback
- Andrew mentioned HELM is going to support HTTP OCI registry by **adding a new flag** to specify plain HTTP
## Apr 25, 5:00 PM ~ 6:00 PM PDT
This meeting was skipped due to no agenda
## Apr 11 2023, 5:00 PM ~ 6:00 PM PDT
### Attendees
- Feynman Zhou
- Asmit Malakannawar
- Alex Flom
- Shiwei Zhang
- Billy Zha
- Andrew Block
- Sylvia Lei
- Steve Lasker
- Yi Zha
- Sajay Antony
-
### Agenda
- Migrate the new ORAS website implementation to the `dev` branch of oras-www [#PR 140](https://github.com/oras-project/oras-www/pull/140) - Feynman
- Confirm the Working Group setup process and its differences from sub-project https://github.com/oras-project/community/pull/48 - Feynman
- CLI UX issues - Feynman
- Update the [CNCF maintainer list](https://github.com/cncf/foundation/blob/main/project-maintainers.csv#L954) and check the access of https://lists.cncf.io/g/cncf-oras-maintainers
- Setup CNCF/Gitvote for ORAS [@sajay]
- Draft PR https://github.com/oras-project/community/pull/49
### Meeting notes
We have some actionable items from this meeting:
- [x] ORAS org maintainers to review two PRs https://github.com/oras-project/community/pull/49 and https://github.com/oras-project/oras-www/pull/140
- [x] Terry will submit a PR to update the CNCF maintainer list
- [x] @shizh will help set the Netlify preview for ORAS-WWW dev branch
- [x] Asmit will submit an issue to track the oras go module redirect configuration: https://github.com/oras-project/oras-www/issues/141
- [x] Feynman to continue to clarify the differences between Working Group and sub-project in this PR: https://github.com/oras-project/community/pull/48
- [ ] All ORAS maintainers should join the CNCF mailing group: https://lists.cncf.io/g/cncf-oras-maintainers
## Mar 28 2023, 5:00 PM ~ 6:00 PM PDT
### Attendees
- Feynman Zhou (Microsoft)
- Andrew Block (Red Hat)
- Shiwei Zhang (Microsoft)
- Billy Zha (Microsoft)
- Sylvia Lei (Microsoft)
- Terry Howe (AWS)
- Yi Zha (Microsoft)
- Toddy Mladenov (Microsoft)
- Sajay Antony (Microsoft)
- Asmit Malakannawar (Individual)
- Aaron Friel (Pulumi)
- Alex Flom (Red Hat)
### Agenda
- Configure ORAS Go module name redirects, see [context](https://cloud-native.slack.com/archives/CJ1KHJM5Z/p1679463144003729) (Feynman)
- ORAS installation updates (Feynman)
- ORAS GitHub Actions has released v1.0.0 and published on the [GH marketplace](https://github.com/marketplace/actions/setup-oras)
- Added ORAS to NixOS: https://oras.land/cli/#nix
- New ORAS website updates, [preview](https://orasland.netlify.app/) (Asmit)
- Define the charter and scope for the ORAS project
- New issue triage and PR review
- ORAS governance issues follow-up
### Meeting Notes
- Feynman to create a new issue to list the solutions of configuring ORAS Go module name redirects
- Aaron suggests considering `go install` instructions as another option for installing from latest and opened an issue: https://github.com/oras-project/oras-www/issues/137
- Toddy suggests considering integrating ORAS with other CI/CD systems. Feynman will create issues for this idea and mark them as good-first issues
- Asmit submitted an issue to request to push the new website code to a new branch of ORAS-www: https://github.com/oras-project/oras-www/issues/138
- Feynman will create an issue to open discussion for ORAS project chapter and scope
- Andrew will follow up with CNCF TAG for App Delivery
- Finalize the PR of adding definitation and process for Working Group https://github.com/oras-project/community/pull/48
## Mar 14 2023, 4:00 PM ~ 5:00 PM PDT
### Attendees
- Feynman Zhou (Microsoft)
- Andrew Block (Red Hat)
- Shiwei Zhang (Microsoft)
- Billy Zha (Microsoft)
- Sylvia Lei (Microsoft)
- Terry Howe (AWS)
- Steve Lasker (Individual)
- Yi Zha (Microsoft)
- Toddy Mladenov (Microsoft)
- Sajay Antony (Microsoft)
- Samson Amaugo (Individual)
### Agenda
- Welcome new onwers and thanks Emeritus owners
- [Proposal: Create a new oras-dotnet repository](https://github.com/oras-project/community/issues/38) (Shiwei)
- Refresh oras governance (Toddy)
- [Clarify the process of setting up a new working group under ORAS
](https://github.com/oras-project/community/issues/33)
- [Enforce branch policies on the repository](https://github.com/oras-project/community/issues/41)
- Prepare for the release of [ORAS CLI v1.0.0](https://github.com/oras-project/oras/milestone/15) (Feynman)
## Meeting notes
- Welcomed new project owners.
- Called for review on [oras dotnet SDK sub-project proposal](https://github.com/oras-project/community/issues/38):
- Feynman will follow up on revising the voting part in [project governance guide](https://github.com/oras-project/community/blob/main/governance/GOVERNANCE.md) but it won't block the new SDK project creation.
- Shiwei will clarify who will be the owners for the SDK project.
- The SDK's Github repository will start as private and become public once the issue is resolved.
- Discussed on the Github issue: [creating a new oras working group](https://github.com/oras-project/community/issues/33), called for commenting.
## Feb 28 2023, 4:00 PM ~ 5:00 PM PST
### Attendees
- Alex Flom (Red Hat)
- Lachlan Evenson (Microsoft)
- Feynman Zhou (Microsoft)
- Gavin Scallon (Individual)
- Andrew Block (Red Hat)
- Shiwei Zhang (Microsoft)
- Terry Howe (AWS)
- Steve Lasker (Individual)
- Ramkumar Chinchani (Zot)
- Yi Zha (Microsoft)
- Sajay Antony (Microsoft)
- Asmit Malakannawar (LFX mentee)
- Toddy (Microsoft)
### Agenda
- Introduce [OCI Search API Working Group Vision](https://docs.google.com/document/d/1rcQROZP31q7BOjoZ977Ok7pt28z_UXfW0vAK3xC0wdI/edit?usp=sharing) (Toddy)
- [Disable auto conversion of manifest types](https://github.com/oras-project/oras/issues/782) proposed by Sajay
- Discuss and confirm a regular release cadence for ORAS-go v2 and deprecation plan of ORAS-go v1 (Feynman)
- Review the status of new issues, PRs, and proposals
- Add Billy Zha's GPG Key to `oras` for future releases (Shiwei)
- PR: https://github.com/oras-project/oras/pull/844
- Josh submitted an [issue](https://github.com/oras-project/community/issues/32) to request step down (org owner and sub projects)
### Meeting notes
- Welcome Gavin to the community
- Discussed and agreed to disable auto conversion of manifest type, and change the default to image manifest
- Per Josh's intent to step down, need a PR to move Josh from org-level owners to emeritus
- Create an issue and PR to nominate Andrew as ORAS org maintainter
- Andrew introduced OCI search API WG vision. The next step is to update the governace document for setting up new subproject and WG, and adding maintainers accordly.
- Toddy will create issues to request updating the governance
- Ask for PR review on adding Billy's GPG key for release purpose
- Feynman will raise an issue to discuss and confirm a regular release cadence for ORAS-go v2 and deprecation plan of ORAS-go v1
## Next meeting: Feb 14 2023, 4:00 PM ~ 5:00 PM PST
### Attendees
* Sylvia Lei
* Billy Zha
* Terry Howe
* Yi Zha
* Feynman Zhou
* Alex Flom
* Gavin Scallon
* Shiwei Zhang
* Asmit Malakannawar
### Agenda
- Introduce [CNCF LFX Mentoring program 2023](https://github.com/cncf/mentoring/tree/main/lfx-mentorship/2023/01-Mar-May) and ORAS proposals
- Refresh community governance guide and process, see [proposal issue](https://github.com/oras-project/community/issues/28) (Feynman)
- Nominate Terry and Billy to be subporect maintainers for ORAS (Feynman)
- Talk about one or more of the following (Terry)
- https://github.com/oras-project/oras/issues/730 (upload/download)
- https://github.com/oras-project/oras/issues/799 (tags list filter)
- https://github.com/oras-project/oras/issues/806 (get tag digest)
- https://github.com/oras-project/oras/issues/807 (expose cmd level in go)
- General discussion on ORAS Website (Bhawna )
- Discussion on the figma file of new ORAS Website. It would be helpful to write the proposol in more details.
- What type of candidate you are looking for completing this project. Like hugo expert and somewhat like that.
- How many candidate you are looking to select in this March term.
- Talk about one or more of the following (Amisha)
* Initial discussion regarding the ORAS contribution
* https://github.com/oras-project/oras-www/pull/103
* https://github.com/oras-project/oras-www/issues/113
- Introduce the initial proposal to the new ORAS website (Asmit Malakannawar)
- [Disable auto conversion of manifest types](https://github.com/oras-project/oras/issues/782) proposed by Sajay
### Meeting notes
- Shiwei will create PRs to nominate Terry and Billy to be subporect maintainers for ORAS
- Submission of the [CNCF LFX Mentoring program 2023](https://github.com/cncf/mentoring/tree/main/lfx-mentorship/2023/01-Mar-May) will be closed on Feb 21
- Asmit Malakannawar shared his thoughts on the ORAS website proposal and prototype design
-
## Jan 31, 2023, 4:00 PM ~ 5:00 PM PST
### Attendees
- Yi Zha (Microsoft)
- Aaron Friel (Pulumi)
- Sajay Antony (Microsoft)
- Shiwei Zhang (Microsoft)
- Andrew Block (Red Hat)
- Sylvia Lei (Microsoft)
- Jennifer Power (Red Hat)
- Alex Flom (Red Hat)
- Ramkumar Chinchani (Cisco/Zot)
- Steve Lasker (Individual)
### Agenda
- WG for search API https://github.com/oras-project/artifacts-spec/issues/72 (from Toddy Mladenov)
- Archive the artifact-spec repository https://github.com/oras-project/artifacts-spec/pull/119 (from Toddy Mladenov as per Michael Brown's PR)
- Release ORAS CLI v1.0.0 RC.1 (from Feynman)
- [Proposal: SDK for oras login](https://github.com/oras-project/oras-go/discussions/413) (from Shiwei)
### Meeting Notes
- Round table introduction, and welcome new participant Jennifer Power.
- The way forward for search API WG was discussed, and it is agreed during the meeting that is We establish the working group under oras-project first, and inform OCI once we have done some initial work. Other parties in the OCI group will be invited to share theirs work or insights.
- Proposal of SDK for oras login was discussed, and we agreed on the proposal during the meting. Shiwei will create a new repo and create an issue for governance guidance support
- The governace documents need to be updated for creating new repos and adding/updating maintainers for the repos. We could file an issue under oras-project/community repo to address these issues.
- Feynman did a brief intro on oras cli v1.0.0-rc.1 release.
- Regarding to agenda item "archive the artifact-spec repository", it is suggested to hold on the archive until things becomes clear on the OCI artifact manifest direction. A FAQ document is required to help the users understand the way forward for oras/artifact-spec, which also depends on how OCI artifact manifest issue is resolved.
- ORAS community meeting has changed from once a week to bi-weekly
## Jan 10, 2023, 4:00 PM ~ 5:00 PM PST
### Attendees
- Andrew Block (Red Hat)
- Alex Flom (Red Hat)
- Billy Zha (Microsoft)
- Feynman Zhou (Microsoft)
- Shiwei Zhang (Microsoft)
- Sylvia Lei (Microsoft)
- Nima Talebi (Amazon)
- Yi Zha (Microsoft)
- Terry Howe (Amazon)
### Agenda
- New year blog for ORAS
- [Proposal for adding compatibility mode](https://github.com/oras-project/oras/pull/739)
- Demo for OCI image layout by Billy
- Walk through new feature requests to ORAS
- [oras cp fails when copying artifacts to an OCI 1.0 registry](https://github.com/oras-project/oras/issues/727) by Aaron
- [oras repo ls to support sub namespaces](https://github.com/oras-project/oras/issues/733) by Steve
- [Add ability to download/upload one or more resources to/from disk](https://github.com/oras-project/oras/issues/730) by Terry
- ORAS v1.0.0-RC.1 and ORAS-go v2.0.0 status sharing:
- ORAS CLI v1.0.0-rc.1: before Jan 18, 2023
- ORAS-go v2.0.0: within Jan, 2023
- Request to [add GitHub Actions for ORAS](https://github.com/oras-project/oras/issues/744)
### Meeting notes
- Billy will prepare for the OCI layout doc to include the prototype binary download steps
- Terry asked a question: when using different folders or tar files to store the downloaded artifacts, will the blobs be shared across oci-layout without duplication? The answer is no by default in oci-layout spec, but community suggests that it's possible to hack the sharing, like hard-link `blobs` folders to a centralized folder.
- Triage the feature requests [oras cp fails when copying artifacts to an OCI 1.0 registry](https://github.com/oras-project/oras/issues/727) and [oras repo ls to support sub namespaces](https://github.com/oras-project/oras/issues/733)
- Publish the ORAS new year blog on Jan 11
- Created a good-first issue to [add GitHub Actions for ORAS](https://github.com/oras-project/oras/issues/744)
## Dec 12, 2022, 4:00 PM ~ 5:00 PM PST
### Attendees
- Billy Zha
- Feynman Zhou
- Shiwei Zhang
- Sylvia Lei
- Ramkumar Chinchani
- Yi Zha
### Agenda
- [ORAS-go v2.0.0-RC.6](https://github.com/oras-project/oras-go/releases/tag/v2.0.0-rc.6) release walkthrough
- Upcoming milestone and timeline updates
- ORAS CLI v1.0.0-rc.1: Jan 9, 2023
- ORAS-go v2.0.0: Jan 16, 2023
- ORAS CLI v1.0.0: Feb 6, 2023
- (Potential) Preparation for the [CNCF incubating criteria](https://github.com/cncf/toc/blob/main/process/graduation_criteria.md#incubating-stage)
## Dec 6, 2022, 4:00 PM ~ 5:00 PM PST
Canceled due to no agenda gathered this time
## Nov 29, 2022, 4:00 PM ~ 5:00 PM PST
### Attendees
- Aaron Friel
- Alex Flom
- Billy Zha
- Feynman Zhou
- Shiwei Zhang
- Sylvia Lei
- Ramkumar Chinchani
- Yi Zha
### Agenda
- Ramkumar to introduce Zot and demonstrate how to use ORAS v0.16 to distribute OCI artifacts to Zot registry
- Q & A
## Nov 15, 2022, 4:00 PM ~ 5:00 PM PST
### Attendees
- Feynman Zhou
- Shiwei Zhang
- Sylvia Lei
- Andrew Block
- Sajay Antony
- Nima Talebi
- Billy Zha
- Yi Zha
### Agenda
- Support OCI image layout discussion, see [issue](https://github.com/oras-project/oras/issues/378) and [draft proposal](https://hackmd.io/ogglvwhLTVW2-T6b2JC_Gg?view)
- [ORAS-go v2.0.0-rc.5](https://github.com/oras-project/oras-go/milestone/9) release is planned to be released on Nov 17
- Follow up the actionablt items in the last meeting:
- Toddy will help to validate the issue of [when coping windows-based images with non-distributable(foreign) layers](https://github.com/oras-project/oras-go/issues/319)
- Feynman will create a GitHub issue to track the new documentation structure work - Done, see [issue 65](https://github.com/oras-project/oras-www/issues/65)
- Sajay will help to confirm the criterial and timeline of cutting a stable release in OCI image-spec
- Q & A
### Meeting notes
- Support OCI image layout
- CLI UX
- Vote for two options
- Use prefixes
- Use flags
- Q:Can we use oci-layout for caching?
- OCI Layout folder is a ORAS Cache folder plus a index file. ORAS Cache (i.e. a file based CAS) can be R/W concurrently. However, OCI layout folder is not. Because, the index file is not concurrent safe. Especially, we have multiple processes accessing the same file system.
- Q: It would be nice if we can read manifests as well. For e.g. ratify could then use the cache as backing store (This is not in current scope)
- OCI Image & distribution spec stable release will be cut probably next year 2023
## Nov 8, 2022, 4:00 PM ~ 5:00 PM PST
### Attendees
- Feynman Zhou
- Billy Zha
- Sylvia Lei
- Shiwei Zhang
- Toddy
- Yi Zha
- Nima
- Alex Form
- Clark Porter
### Agenda
- Celebrate the ORAS CLI 0.16 release
- [Add ReferrerFinder to Repository interface](https://github.com/oras-project/oras-go/issues/356) - Shiwei
## Nov 1, 2022, 5:00 PM ~ 6:00 PM PST
### Attendees
- Feynman Zhou
- Andrew Block
- Billy Zha
- Sylvia Lei
- Shiwei Zhang
- Lin Cao
- Toddy
- Clark Porter
- Nima
- Yi Zha
- Sajay
### Agenda
1. Celebrate the ORAS-go v2.0.0-RC.4 release [https://github.com/oras-project/oras-go/releases/tag/v2.0.0-rc.4]
2. [ORAS documentation plan](https://hackmd.io/uXm-q0aDQ96hyB6TIWNh_w?view#New-Documentation-Directory1) walkthrough
3. Short updates on the ORAS Future milestones
4. Since Dockerhub doesn't support the Subject field should the CLI maybe remove subject when image manifest push fails or should we wait for Docker hub to support it?
### Meeting notes
- Breaking changes for RC4
- Actionablt items:
- Toddy will help to validate the issue of [when coping windows-based images with non-distributable(foreign) layers](https://github.com/oras-project/oras-go/issues/319)
- Feynman will create a GitHub issue to track the new documentation structure work
- Sajay will help to confirm the criterial and timeline of cutting a stable release in OCI image-spec
## Oct 25, 2022, 5:00 PM ~ 6:00 PM PST
Cancelled this occurrence due to no agenda gathered and KubeCon NA this week.
## Oct 18, 2022, 5:00 PM ~ 6:00 PM PST
### Attendees
- Feynman Zhou
- Alex Flom
- Nima
- Lin Cao
- Shiwei Zhang
- Vishrut Patel
- Andrew Block
- Sajay Antony
- Yi Zha
- Billy Zha
- Sylvia Lei
- Toddy Mladenov
- Nora Hu
### Agenda
- [ORAS-go v1.2.1](https://github.com/oras-project/oras-go/releases/tag/v1.2.1) and [ORAS CLI v0.15.1](https://github.com/oras-project/oras/releases/tag/v0.15.1) released this week
- [Retry design proposal updates](https://github.com/oras-project/oras-go/discussions/232#discussioncomment-3804712)
- Provide [ORAS CLI reference documentation](https://github.com/oras-project/oras-www/issues/59)
- Discuss possibility of shortening the commands like `repository` to just `repo` and other usability improvements @sajay
- Demo: OCI artifact support in ORAS CLI (Billy)
- Demo: ORAS CLI 0.15 and blog post walkthrough
### Meeting notes
- Review ORAS CLI 0.15 blog post
- Create a GitHub issue to track the request of shortening ORAS CLI command
- Record a demo for OCI artifact support in ORAS CLI
## Oct 11, 2022, 5:00 PM ~ 6:00 PM PST
### Attendees
- Feynman Zhou
- Alex Flom
- Nima
- Lin Cao
- Shiwei Zhang
- Vishrut Patel
- Andrew Block
- Sajay Antony
- Yi Zha
### Agenda
- ORAS CLI 0.15 live demo
- [ORAS migrating to OCI reference types doc](https://hackmd.io/zLnCh8WRQDG-3S_jXR626g?view) updates
- [Retry design proposal updates](https://github.com/oras-project/oras-go/discussions/232#discussioncomment-3804712)
- Follow up issue [Transfer-Encoding: chunked responses fail](https://github.com/oras-project/oras-go/issues/333) with Nima
- Provide [ORAS CLI reference documentation](https://github.com/oras-project/oras-www/issues/59)
- Discuss possibility of shortening the commands like `repository` to just `repo` and other usability improvements @sajay
### Meeting notes
- reorder the ORAS CLI demo to the end and prioritize other items that need discussion - Nima
- Oras Migration - ORAS Artifacts will be deprecated from v2.0.0-rc.4
- There is no dual support of ORAS artifact and OCI artifacts.
- Discuss fallback/compatibility flag names
- Does the CLI provide a choice or is that a portion of the spec.
- Why did we chose max,min.
- Can we differ the issue of compatability to a future release.
- Are there are Terms of Service issues in store non-image like data a Container Registry (Alex)
- Compatability could be considered as ON/OFF as well - @Nima
- I was thinking that --always-fallback would be `--no-fallback=false (default)` @Alex
- Deleting manifest
- Should we delete from leaf nodes to parent? @sajay
- Implement the default spec and create issues to dicuss advanced cases with capability mode @yizha1
- Actionable items:
- Feynman will create a blog to demonstrate the ORAS CLI 0.15 demo
- Feynman and Yi will create GitHub issues for advanced compatability of `oras push` and `oras attach`
- Nima follows up the issue of [Transfer-Encoding: chunked responses fail](https://github.com/oras-project/oras-go/issues/333)
## Sep 28, 2022, 5:00 PM ~ 6:00 PM PST
### Attendees
- Feynman Zhou
- Sajay Antony
- Yi Zha
- Lin Cao
- Nima Talebi
- Vishrut Patel
- Billy Zha
- Shiwei Zhang
### Agenda
- ORAS CLI 0.15 is released, see [Release Notes](https://github.com/oras-project/oras/releases/tag/v0.15.0)
- Share the [ORAS CNCF annual review](https://hackmd.io/sbXNtb56RmSq1JqsgUHNIA?view)
- [Transfer-Encoding: chunked responses fail in ECR with ORAS](https://github.com/oras-project/oras-go/issues/333)
- [Initial plan of ORAS migrating to OCI in ORAS-go](https://github.com/oras-project/oras-go/issues/271)
- [Propose to publish a new release of fixpack for ORAS-go v1](https://github.com/oras-project/oras-go/issues/278)
### Notes
- RC2 for image spec is need to get the `refers` field rename as it was missed in the v1.1.0-rc1 release https://github.com/opencontainers/image-spec/pull/958
- Current implementation for oras-go with OCI support -
- https://github.com/oci-playground/oras-go
- Welcome Lin and Vishrut
- Introduced new ORAS CLI release 0.15.0
- Testing towards GAR is in-process
- Feynman shared ORAS CNCF annual review report
- Issue discussion [Transfer-Encoding: chunked responses fail in ECR with ORAS](https://github.com/oras-project/oras-go/issues/333)
- ECR respones chunked manifest to the client
- Considering ORAS to support Chunked manifest for pull request
- ORAS will only support OCI artifact, no fallback to ORAS artifact
- Should we consider pushing the changes directly to main rather than having another branch @sajay
- ORAS migrating to OCI artifact document will be updated this week
- ORAS supporting OCI artifact in ORAS-go is planned in ORAS v2.0.0-rc.4
- Sajay shared a good practice for cutting a release
- Feynman will upload the recorded meetings into Youtube
## Sep 13, 2022, 5:00 PM ~ 6:00 PM PST
### Attendees
- Sajay Antony
- Feynman Zhou
- Yi Zha
- Nima Talebi
- Andrew Block
- Haoliang Yue
- Shiwei Zhang
- Steve Lasker
- Sylvia Lei
### Agenda
- [ORAS migrating to OCI Reference types](https://hackmd.io/@yizha1/ORAS_to_OCI_reference_type)
- [Migrate to OCI Artifact from ORAS Artifact in ORAS-go](https://github.com/oras-project/oras-go/issues/271)
- [Propose to publish a new release of fixpack for ORAS-go v1](https://github.com/oras-project/oras-go/issues/278)
- [Write blog series for ORAS CLI with ACR, ECR, GAR](https://github.com/oras-project/oras-www/issues/54)
### Meeting Notes
- [Migrate to OCI Artifact from ORAS Artifact in ORAS-go](https://github.com/oras-project/oras-go/issues/271) is planned on ORAS-go v2.0.0-rc.4
- a new release of fixpack for ORAS-go can be cut in Sep
- Feynman will drive the issue of [Write blog series for ORAS CLI with ACR, ECR, GAR](https://github.com/oras-project/oras-www/issues/54)
## Sep 6, 2022, 5:00 PM ~ 6:00 PM PST
### Attendees
- Billy Zha
- Nima Talebi
- Feynman Zhou
- Yi Zha
- Sajay Antony
- Shiwei Zhang
- Billy Zha
- Sylvia Lei
### Agenda
- [Released a patch ORAS v0.14.1 to fix ORAS usability issues with AWS ECR and Google GAR](https://github.com/oras-project/oras/releases/tag/v0.14.1)
- [ORAS Feature List and Roadmap](https://hackmd.io/c-q1od6tTlufHbMJC5T4SQ?view) walkthrough and discussion
### Meeting Notes
- Nima Talebi is interested in taking the issue of [Push / Pull Artifacts from OCI Image Layout #378](https://github.com/oras-project/oras/issues/378) and [Support customer-defined http headers#503](https://github.com/oras-project/oras/issues/503)
- Bring the OCI reference types support plan in the next community call
## Aug 30, 2022, 5:00 PM ~ 6:00 PM PST
### Attendees
- Andrew Block
- Alex Flom
- Nima Talebi
- Feynman Zhou
- Yi Zha
- Shiwei Zhang
- Billy Zha
- Sylvia Lei
### Agenda
- ORAS CLI 0.14 was released, see [Release Notes](https://github.com/oras-project/oras/releases/tag/v0.14.0)
- Preview of [ORAS CLI 0.15](https://hackmd.io/aLxws7mhSZukfFzx3PKq3w?view) and ORAS-go 2.0.0-RC.3
- UOR framework demo and ORAS-go use case
- ORAS will support OCI artifact menifest and provide backward compatability
- Request to upgrade [ORAS-go from v1 to v2](https://github.com/helm/helm/blob/main/go.mod#L45) in Helm
### Meeting notes
- UOR framework demo, by Andrew and Alex
- https://universalreference.io
- https://uor-framework.github.io/
- Walk through release notes for ORAS CLI v0.14.0
- ORAS CLI v0.15.0
- New commands will be supported
- ORAS-go v2.0.0-rc.3
- New APIs for simplified UX
- Still planning for ORAS supporting OCI artifact, more details will come later
- Andrew will help to bring this request to Helm community to get the conversion going. The expectation is ORAS-go GA release for Helm to uplift.
## Aug 16, 2022, 5:00 PM ~ 6:00 PM PST
### Attendees
- David Tesar
- Feynman Zhou
- Sajay Antony
- Shiwei Zhang
- Sylvia Lei
- Yi Zha
- Haoliang Yue
- Zhuyu(Zoey) Li
### Agenda
- Celebrate the new release: ORAS-go 2.0.0-rc.2
- Prepare for the release of ORAS CLI v0.14.0
- Feature request from Shiwei: [Output the descriptor of pushed artifact by oras push](https://github.com/oras-project/oras/issues/497)
- Discuss `--artifact-type` support in `oras push`: https://github.com/oras-project/oras/issues/466
- ORAS to support OCI artifact spec
- PR review: https://github.com/oras-project/oras-py/pull/42
## Meeting notes
- ORAS CLI v0.14.0 will be released on Aug 19
- Raise a GitHub discussion to dicuss when to support and transition to OCI artifact spec
- Request Billy Zha to help with ORAS-py [PR review](https://github.com/oras-project/oras-py/pull/42)
## Aug 10, 2022, 5:00 PM ~ 6:00 PM PST
### Attendees
- Alex Flom
- Andrew Block
- Billy Zha
- David Tesar
- Feynman Zhou
- Sajay Antony
- Shiwei Zhang
- Steve Lasker
- Sylvia Lei
- Xu Yang
- Zhuyu(Zoey) Li
### Agenda
- Sajay will share some updates about wg-reference-types and key takeaways related to ORAS
- Feynman will give a demo for previewing ORAS 0.14 and call for testing
- Billy will share his proposal to ORAS E2E testing framework
- ORAS user story discussion (Moved to next time)
### Meeting Notes
- Sajay shared the updates about wg-reference-types
- [Working Group Proposal for Reference Types from Lachie (Microsoft)](https://github.com/opencontainers/image-spec/pull/934/files)
- [Working Group Proposal for Reference Types from Michael (Amazon)](https://github.com/opencontainers/distribution-spec/pull/335/files)
- [Add filtering to references API from Michael (Amazon)](https://github.com/oci-playground/distribution-spec/pull/9/files)
- Feynman demonstrated an end-to-end use case of how to use the new features of ORAS 0.14 (oras copy, attach, discover) with MCR, ACR, and Docker SBOM
- Andrew shared his contribution to Helm: [Attach annotations to OCI artifacts](https://github.com/helm/helm/pull/11204)
- Billy shared his [proposal to ORAS E2E testing framework](https://github.com/oras-project/oras/discussions/485) and waiting for suggestions from the community
## July 6, 2022, 5:00 PM ~ 6:00 PM PST
### Attendees
- Sajay Antony
- Steve Lasker
- Alex Flom
- Andrew Block
- Shiwei Zhang
- David Tesar
- Akash Singhal
- Billy Zha
- Clifford Sutter
- Patric Zheng
- Vanessa Sochat
### Agenda and Notes
- Celebrate the new release: ORAS CLI 0.13.0 and ORAS-go 2.0.0-Alpha
- What’s new in ORAS 0.14.0 and how to build & test it in advance
- ORAS-artifacts-spec GA (proposed by Sajay)
- ORAS-python future work discussion
- Propose to create a GitHub project board for ORAS
- Discuss command UX for [ORAS Copy](https://github.com/oras-project/oras/issues/307)
- Q & A
-- NOTES --
- Possibly add an issue template to provide guidance of adding new capabilities to ORAS. - @Feynman, Vanessa
- Consider exposing OCI store for caching scenarios - sajay/Alex.
-
### Action items
## January 05, 2022
### Attendees
### Agenda and Notes
- [Scott] ORAS community maturity updates [oras-project/community#9](https://github.com/oras-project/community/issues/9)
- []
### Action items
## November 18, 2021
### Attendees:
- Steve Lasker (Microsoft)
- Sajay Antony (Microsoft)
- Josh Dolsky (Blood Orange)
- Scott Rigby (Weaveworks)
- Tejaswini Duggaraju (Microsoft)
### Agenda Items:
- ORAS `v1.0.0` first stable release
- backwards compatibility contract
- Community managers role
- Various suggestions to help project maturity
- <https://github.com/oras-project/community/issues/9>
### Notes:
- Yes to backwards compatibility contract 🎉
- Yes to Scott helping, just need to do something official
- For now Scott will make a PR to add "community managers" role to <https://github.com/oras-project/community/blob/main/governance/RELEASE-PROCESS.md>
- then can make an issue to add Scott to that role, which maintainers can vote on
- Scott: i'm happy however as long as we do it correctly :-)
- Plan for oras-go development and release strategy (summary):
- Create new `v1` branch based on the `v0.5.0` release commit (`293f55c`)
- Update go modules/dependencies on `v1`
- Release a `v1.0.0` release based on the `v1` branch
- `v1` branch will be maintained primarily for stability/security updates, with Helm as primary customer
- If possible we can port tag listing work from `main` into a `v1.1.0` release (to support semantic version ranges)
- All feature development will occur on `main` and treated as features to be included in some future `v2.0.0`
- This includes containerd removal work
- This includes anything related to notary/discovery/referrers/etc.
- Project board
- Exactly where (org, repo) TBD
- Steve introducing Scott to Samir, who did a similar thing for a different project
- Let's compare notes then just do whatever gives us what we need in the easiest way. Need for now is to be able to connect work needed for the 1.0.0 release, and distinguish from v2 development
## November 18, 2021
### Attendees:
- _add yourself_
### Agenda Items:
- ORAS (Scott Rigby)
- _add your topics_
### Notes:
- _meeting minutes_
## Octoboer 27, 2021
### Attendees:
- Steve Lasker (Microsoft)
- Tejaswini Naduggar(Microsoft)
- Sajay Antony(Microsoft)
- Shiwei Zhang (Microsoft)
- Hector Fernandez (VMware)
- _add yourself_
### Agenda Items:
- [OCI Distribution Extension API](https://github.com/opencontainers/distribution-spec/pull/111) (Teja)
- _add your topics_
### Notes:
- _meeting minutes_
## October 20, 2021
### Attendees:
- Hector Fernandez (VMware)
- Steve Lasker (Microsoft)
- Michael Brown (AWS)
- Sajay Antony
- Shiwei Zhang (Microsoft)
### Agenda Items:
- [hector] Indexing artifacts content to provide better query capabilities across a signle or all artifacts in the repos.
### Notes:
- _meeting minutes_
## October 13, 2021
### Attendees:
- Sajay Antony
- Shiwei Zhang (Microsoft)
- Michael Brown (AWS)
- Steve Lasker (Microsoft)
- _add yourself_
### Agenda Items:
- [brownxmi@] OCI next steps: suggestion from OCI summit was to submit a proposal for a working group. How should we move forward with gathering feedback from outside this group and incorporating it into our proposal?
- [sajay/Shiwei] - Extension API updates.
- [Extensions API for Distribution](https://hackmd.io/8vXj0k1HSIGF2kauCgnroA?view)
- [Distribution Extension](https://hackmd.io/1zvOVNsvQ3a9D0knPOBrZw?view)
- [[Display PR] Distribution Extension](https://github.com/shizhMSFT/distribution/pull/1)
- [[Display PR] ORAS Extension](https://github.com/shizhMSFT/distribution/pull/2)
- [lahiru] - https://github.com/oras-project/artifacts-spec/pull/58
- _add your topics_
### Notes:
- Working group proposal is being updated, with dicussions hopefully happening this week while at KubeCon
- References can already exist without the subject, but we currently reject pushes if the subject doesn't exist
- lahiru: why do we need to make a constraint to prevent a valid state?
- steve: we should be prescriptive to provide consistency in expectations, but prescriptive isn't exclusive of options if they're well understood options
- lahiru: the other case is what happens when the subject digest from the referrers api doesn't exist in the repo
- lahiru: also, references vs. referrers seems inconsistent
- sajay: we can change it, should probably create a seperate issue. this might cause friction with some of the clients that have started to implement it.
- [AI]: create an issue to resolve the consistency issues in the spec & merge the current PR without error
- extensions api discussion during OCI meeting last week
- _meeting minutes_
## October 6, 2021
### Attendees:
- _add yourself_
### Agenda Items:
- [brownxmi@] OCI next steps: suggestion from OCI summit was to submit a proposal for a working group. How should we move forward with gathering feedback from outside this group and incorporating it into our proposal?
### Notes:
- _meeting minutes_
## September 29, 2021
### Attendees:
- Shiwei Zhang (Microsoft)
- Michael Brown (AWS)
- _add yourself_
### Agenda Items:
- Meeting regularity
- https://github.com/oras-project/artifacts-spec/pull/58
- https://github.com/oras-project/artifacts-spec/issues/59
- _add your topics_
### Notes:
- We're at a point of stability with the spec we don't have Will keep the meeting time, but we're at a point of stability
- _meeting minutes_
## September, 15, 2021
### Attendees:
- Steve Lasker (Microsoft)
- Shiwei Zhang (Microsoft)
- Michael Brown (AWS)
- _add yourself_
### Agenda Items:
- [Artifacts Spec](https://github.com/oras-project/artifacts-spec/) Draft Release Update (Steve)
- Doc Updates to oras.land (Steve)
- Blog Post, on oras.land (Steve)
-
### Notes:
- _meeting minutes_
## September, 8, 2021
### Attendees:
- Steve Lasker (Microsoft)
- Shiwei Zhang (Microsoft)
- Michael Brown (AWS)
- _add yourself_
### Agenda Items:
- Cutting spec draft.1 - Now that [PR#35](https://github.com/oras-project/artifacts-spec/pull/35) is closed. What's left before we cut draft.1? (Lachlan)
- Open Items for Draft1 or Post draft 1 (group discussion)
- Versioning of Artifacts 1 or 2? (Steve)
### Notes:
- _meeting minutes_
## September 1, 2021
### Attendees:
- Lachlan Evenson (Microsoft)
- Shiwei Zhang (Microsoft)
- Steve Lasker (Microsoft)
- Michael Brown (AWS)
- Sajay Antony (Microsoft)
### Agenda Items:
- Cutting spec draft - What's left? Discussion on process [PR#19](https://github.com/oras-project/artifacts-spec/pull/19) (Lachlan)
- `subject` conversation (Michael)
- https://hackmd.io/wFmCCyv8Rv6vGY4M_vjjRw?view
### Notes:
- Steve/Lachlan: Clean up release PR & move issues to draft releases. RC releases should be declared once all issues have been fixed.
- `subject` conversation: https://hackmd.io/wFmCCyv8Rv6vGY4M_vjjRw?view
- pointing to blobs would be a breaking change in the future.
- Take a look at oras-project/distribution PR: https://github.com/oras-project/distribution/pull/8
## August 25, 2021
### Attendees:
- Justin Cormack (Docker)
- Steve Lasker (Microsoft)
- Michael Brown (AWS)
- Lahiru Dissanayake (AWS)
- Shiwei Zhang (Microsoft)
- Sravan Rengarajan (AWS)
- Sajay Antony (Microsoft)
### Agenda Items:
- Release manager process (Sajay)[PR#8](https://github.com/oras-project/community/pull/8)
- Lifecycle Management in artifact spec (Lahiru) [Issue#20](https://github.com/oras-project/artifacts-spec/issues/20)
- _add your topics_
### Notes:
- Lifecycle management
- Agreement to change SHOULD to MAY to reduce concerns around conformance tests. Also agreed to remove refernces to ref-count. The secion would remain in the same artifact-manifest.md doc to avoid having too many docs, but reudced content.
- _meeting minutes_
## August 18, 2021
### Attendees:
- Tejaswini Duggaraju (Microsoft)
- Steve Lasker (Microsoft)
- Shiwei Zhang (Microsoft)
- Michael Brown (AWS)
- Aviral Takkar (Microsoft)
- Lahiru Dissanayake (AWS)
- Sajay Antony (Microsoft)
- _add yourself_
### Agenda Items:
- What's left to cut a 1.0 RC release of the artifacts-sepc? (Steve)
- Triage the [list of issues](https://github.com/oras-project/artifacts-spec/issues)
- [PR #9 - Add @michaelb990 as an owner](https://github.com/oras-project/artifacts-spec/pull/9) (Sajay/Michael)
- [PR #17 - Add go spec](https://github.com/oras-project/artifacts-spec/pull/17)(Aviral/Sajay)
- _add your topics_
### Notes:
- [ORAS Projects/Release](https://github.com/oras-project/artifacts-spec/projects/1)
- _meeting minutes_
## August 11, 2021
### Attendees:
- Sajay Antony (Microsoft)
- Justin Cormack (Docker)
- Michael Brown (AWS)
- Tejaswini Duggaraju (Microsoft)
- Shiwei Zhang (Microsoft)
- Steve Lasker (Microsoft)
- Sravan Rengarajan (AWS)
- Aviral Takkar (Microsoft)
### Agenda Items:
- [Discuss the `referrers` api payload PR](https://github.com/oras-project/artifacts-spec/pull/3) (Steve/Michael)
- [Discussion #7](https://github.com/oras-project/artifacts-spec/discussions/7)
- [Paging API](https://github.com/oras-project/artifacts-spec/issues/4) (Michael)
- Working group next steps (Michael)
- Getting additional maintainers on the sub-project (Sajay)
- _add your topics_
### Notes:
- _meeting minutes_
# Meeting Notes Template
(template for copying)
## Meeting Date
### Attendees:
- _add yourself_
### Agenda Items:
- _add your topics_
### Notes:
- _meeting minutes_