Proposal to add OCI Image Annotations on Buildpacks

[candrews]

Summary

Use Cases

Checklist

• I have viewed, signed, and submitted the Contributor License Agreement.
• I have linked issue(s) that this PR should close using keywords or the Github UI (See docs)
• I have added an integration test, if necessary.
• I have reviewed the styleguide for guidance on my code quality.
• I'm happy with the commit history on this PR (I have rebased/squashed as needed).

[sophiewigmore]

according to the spec you sent, would org.opencontainers.image.created, org.opencontainers.image.authors, org.opencontainers.image.documentation, etc be required as well?

[candrews]

I don't believe they would be required, but if they are available, they should be specified. For paketo, I don't see any of that information readily available in buildpack.toml or elsewhere, so I didn't include them in this RFC.

[sophiewigmore]

How do you know which fields in the upstream spec you sent are required?

[candrews]

I'm assuming that no fields are required, only that if they are present, they are required to meet the requirements for that field's value.

That's what I see in the wild, at least. I can't find a single image that specifies all of those fields, but I see a number that specify some.

[sophiewigmore]

Ah ok. The wording of the RFC All Paketo Buildpacks must have at least the following OCI image annotations made me think that this was required to be OCI compliant which was why I was confused.

I think this RFC seems like a good idea, especially if we can pull from the buildpack.toml fields as you suggested

[ForestEckhardt]

As a quick clarifying question this is seeking to add these image labels to the buildpack images we release. Not to add them to the images that are produced by the buildpacks correct?

[candrews]

As a quick clarifying question this is seeking to add these image labels to the buildpack images we release. Not to add them to the images that are produced by the buildpacks correct?

Correct.

Although I do think that's a good idea, I think it would best be pursued in a separate RFC. https://github.com/paketo-buildpacks/image-labels does most of that already, so the implementation of such an RFC would be to apply it by default with reasonable default values.

[ForestEckhardt]

It this is something that you would like added to the buildpack images themselves that I think it my make sense to try and push this up the stack into pack. We use the pack buildpack package to turn a "formatted" tarball into an OCI image so it may make sense to ask them to add these terms to that tarball by default using the values present in the buildpack.toml.

I would be more than happy to help facilitate an interaction if that is something that you are interested in.

[candrews]

It this is something that you would like added to the buildpack images themselves that I think it my make sense to try and push this up the stack into pack. We use the pack buildpack package to turn a "formatted" tarball into an OCI image so it may make sense to ask them to add these terms to that tarball by default using the values present in the buildpack.toml.

That makes sense to me! That would benefit more than just paketo too, which is nice.

I would be more than happy to help facilitate an interaction if that is something that you are interested in.

I'm certainly interested, can you please point me in the right direction? Thank you!

[ForestEckhardt]

For sure. The upstream project has an RFCs repository https://github.com/buildpacks/rfcs. Their RFCs have a slightly different format but that is laid out in the repository itself. You are free to open a PR with an RFC in it. Please feel free to link me the RFC when you open it.

[ForestEckhardt]

@candrews Is there anything else that needs to be done on this RFC? Should we close it out in favor of an upstream PR or do you want to modify this one?

[candrews]

@candrews Is there anything else that needs to be done on this RFC? Should we close it out in favor of an upstream PR or do you want to modify this one?

I submitted the RFC to buildpacks at buildpacks/rfcs#314 - could you please facilitate this process?