Incompatibility Between jib and OCI Image Index Spec 1.1

Overview

Chainguard has recently updated our build process to generate OCI Image Index Spec 1.1 compliant manifests for our container images.

As a result, customers using jib for Java container image builds have been facing incompatibility issues due to an upstream bug. There is a pending fix and we recommend that customers add a thumbs-up on the issue and PR for traction.

Workaround

For the time being, this issue is limited to multi-architecture image indexes so using just the single-architecture image manifest will not result in the same failure mode.

Using a tool like crane you can get the digest of the image for a particular architecture and reference that in the jib configuration.

$ crane manifest --platform=linux/amd64 | jq -r '.digest'