Container images
Examples described relate to container images. An example method may include generating a mapping of respective unique identifiers of container images of a software container and respective metadata of the container images, validating the mapping against a rule to identify a unique identifier of a mapped container image that meets the rule, generating a target mapping that includes the unique identifier of the mapped container image that meets the rule and the action specified in the rule, and performing the action specified in the rule on the mapped container image corresponding to the unique identifier in the target mapping.
1. A method comprising:
generating a mapping of respective unique identifiers of container images of a software container and respective metadata of the container images, wherein the container images include build components of the software container to be used at runtime;
validating the mapping against a rule at regular time periods to identify, based on evaluation of the respective metadata of the container images, a unique identifier of a mapped container image from among the container images that meets the rule, wherein the rule specifies an action to be performed on the mapped container image in an event the mapped container image meets a condition defined in the rule for performing the action;
responsive to identifying the unique identifier of the mapped container image that meets the rule, generating a target mapping that includes the unique identifier of the mapped container image that meets the rule and the action specified in the rule; and
performing the action specified in the rule on the mapped container image corresponding to the unique identifier in the target mapping,
wherein the rule specifies a plurality of conditions against which the respective metadata of the container images are evaluated and specifies associated actions for the plurality of conditions, including:
a condition of the mapped container being stale as indicated by a last access time in metadata of the mapped container image exceeding a policy threshold time, and a corresponding action of deleting the mapped container,
a condition of the mapped container image being corrupt as indicated by a checksum status in the metadata of the mapped container image being set to false, and a corresponding action of deleting the mapped container image meeting the condition of being corrupt, and
a condition of the mapped container being unsecure as indicated by an encryption status in the metadata of the mapped container image being set to false, and a corresponding action of transferring to a different storage device the mapped container image meeting the condition of being unsecure.
2. The method of claim 1 , wherein the validating comprises comparing the respective metadata of the container images in the mapping against the rule to identify unique identifiers of mapped container images that meet the rule.
3. The method of claim 1 , wherein the generating comprises:
scanning the respective unique identifiers of the container images of the software container and respective metadata of the container images from a software container repository.
4. The method of claim 1 , wherein the performing comprises:
obtaining the mapped container image from a software container repository.
5. The method of claim 1 , wherein at least one of the respective unique identifiers of the container images of the software container and the respective metadata of the container images are stored in a software container repository on a cloud.
6. A system comprising:
a processor; and
a memory storing non-transitory machine-readable instructions to cause the processor to:
generate a mapping of respective unique identifiers of container images of a software container and respective metadata of the container images, wherein the container images include build components of the software container to be used at runtime;
validate the mapping against a rule at regular time periods to identify, based on evaluation of the respective metadata of the container images, a unique identifier of a mapped container image from among the container images that meets the rule, wherein the rule specifies an action to be performed on the mapped container image in an event the mapped container image meets a condition defined in the rule for performing the action;
responsive to an identification that the unique identifier of the mapped container image that meets the rule, generate a target mapping of the unique identifier of the mapped container image that meets the rule and the action specified in the rule;
obtain the mapped container image corresponding to the unique identifier in the target mapping from a software container repository; and
perform the action specified in the rule on the mapped container image,
wherein the rule specifies a plurality of conditions against which the respective metadata of the container images are evaluated and specifies associated actions for the plurality of conditions, including:
a condition of the mapped container being stale as indicated by a last access time in metadata of the mapped container image exceeding a policy threshold time, and a corresponding action of deleting the mapped container,
a condition of the mapped container image being corrupt as indicated by a checksum status in the metadata of the mapped container image being set to false, and a corresponding action of deleting the mapped container image meeting the condition of being corrupt, and
a condition of the mapped container being unsecure as indicated by an encryption status in the metadata of the mapped container image being set to false, and a corresponding action of transferring to a different storage device the mapped container image meeting the condition of being unsecure.
7. The system of claim 6 , wherein the action includes to relocate the mapped container image to one of a relatively low cost storage device and a relatively high cost storage device.
8. The system of claim 6 , wherein the action includes to send a notification related to the mapped container image to a user.
9. The system of claim 6 , wherein the respective metadata of the container images is defined in a JavaScript Object Notation (JSON) format.
10. The system of claim 6 , wherein the action includes to exclude the mapped container image from a backup process.
11. A non-transitory machine-readable storage medium comprising instructions, the instructions executable by a processor to:
generate a mapping of a respective Universal Unique Identifiers (UUIDs) of container images of a software container and respective metadata of the container images, wherein the container images are stored in a software container repository on a cloud, wherein the container images include build components of the software container to be used at runtime;
validate the mapping against a rule at regular time periods to identify, based on evaluation of the respective metadata of the container images, a UUID of a mapped container image from among the container images that meets the rule, wherein the rule specifies an action to be performed on the mapped container image in an event the mapped container image meets a condition defined in the rule for performing the action;
responsive to an identification that the unique identifier of the mapped container image that meets the rule, generate a target mapping comprising the UUID of the mapped container image that meets the rule and the action specified in the rule;
obtain the mapped container image corresponding to the UUID in the target mapping from the software container repository on the cloud; and
perform the action specified in the rule on the mapped container image,
wherein the rule specifies a plurality of conditions against which the respective metadata of the container images are evaluated and specifies associated actions for the plurality of conditions, including:
a condition of the mapped container being stale as indicated by a last access time in metadata of the mapped container image exceeding a policy threshold time, and the action of deleting the mapped container,
a condition of the mapped container image being corrupt as indicated by a checksum status in the metadata of the mapped container image being set to false, and a corresponding action of deleting the mapped container image meeting the condition of being corrupt, and
a condition of the mapped container being unsecure as indicated by an encryption status in the metadata of the mapped container image being set to false, and a corresponding action of transferring to a different storage device the mapped container image meeting the condition of being unsecure.
12. The storage medium of claim 11 , further comprising instructions to:
generate the respective metadata of the container images, wherein the respective metadata is defined in a JavaScript Object Notation (JSON) format.
13. The storage medium of claim 12 , wherein the respective metadata includes at least one of respective application types of the container images; respective application versions of the container images; respective application vendors of the container images;
respective generation dates of the container images; respective last access dates of the container images; respective encryption status of the container images; respective compression status of the container images; and respective copyright information of the container images.
14. The storage medium of claim 11 , wherein the action includes to delete the mapped container image.
15. The storage medium of claim 11 , wherein the metadata of the mapped container image includes:
a size of the particular container image,
an application type of the particular container image,
an application version of the particular container image,
an application vendor of the particular container image,
a generation date of the particular container image,
a last access date of the particular container image,
an encryption status of the particular container image,
a compression status of the particular container image, or
copyright information of the particular container images.
16. The storage medium of claim 11 , wherein
the plurality of actions further includes deleting the mapped container image, relocating the mapped container image to a different storage device than a storage device on which the mapped container image is currently stored, and excluding the mapped container image from a backup process.