push (Apple Containers) makes an index whose platform manifest is unpullable on Forgejo

1h ago

#4050

Streak projector: incremental runs instead of a full scan every minute

1h ago

#4047

Studio board: "Show finished" / "Show claimed" are pushed off-screen, with no scroll, when a factory has many stages

2h ago

#4045

datastore v3: a parent run recording its child's rejected approval on a nested step is judged as needing approve

3h ago

#4041

Scheduled flaky-test detection is failing

4h ago

#4040

Docs: doctor datastores --repair --json describes a repairReport shape the CLI never produced

4h ago

#4039

Registry: detect code from outside npm and JSR in a v2 archive itself, not only from the author's dependency-audit.json

4h ago

#4035

Scorecard: code past the analyzer's read caps, or unreadable, is skipped silently instead of counting as not audited

4h ago

#4032

Datastore v2 on macOS: order data-version writes with F_BARRIERFSYNC instead of full syncs

5h ago

#4028

@swamp/cloudflare/analytics README documents CRUD methods the GraphQL analytics model does not have

5h ago

#4027

swamp extension source add rejects a relative direct-content path that works as an absolute path

6h ago

#4026

swamp hangs silently when an extension source directory contains the swamp repo itself

6h ago

#4022

Inbox: automatic points message when a quest season or double-points event starts

6h ago

#4021

Inbox: automatic issue_update message when a Lab issue ships

6h ago

#4020

Inbox sending: segments, a per-user limit of 3 messages per 24 hours, and terminal preview

6h ago

#4019

Datastore v3: data writes the datastore filter keeps local are never fsynced

6h ago

#4016

Docs: doctor datastores reference — unreadable data version check and repair (swamp-club#3955)

7h ago

#4010

judgeRunRecord lets a forged record settle a waiting approval gate to skipped without an approve

9h ago

#4009

Claude audit hook misses PowerShell tool calls and sessions started above the swamp repo

9h ago

#4008

access can-i: evaluate a local grants file without --server

9h ago

#4007

Show each method's kind in type describe --json

9h ago

#4006

Team mode: serve sends the compacted base, so a serve-mode checkout can catch up past compaction

9h ago

#3999

Support search and filters as URL query parameters on /extensions

10h ago

#3998

bundleExtension same-cache test can pass with a broken first-bundle gate under CPU load

10h ago

#3994

Five Mongo queues can hand the same row to two replicas

15h ago

#3993

Docs: run-workflows-on-a-schedule tells readers to curl /health for queue state, which no longer lists schedules

15h ago

#3992

Collective invite shows "This invitation has expired or has already been used" after a successful join via Google sign-in

1d ago

#3991

Move the Zod argument-field extractor into @swamp-club/extension-scoring so the CLI and registry read schemas alike

1d ago

#3988

serve: dispatch to an idle worker waits for its worker_busy write on the shared gateway transition tail

1d ago

#3987

serve: worker enrollment resolves and creates the worker definition inside the serialized gateway transition tail

1d ago

#3980

Rescore every extension's current version under rubric v5

1d ago

#3964

stagecraft studio ticket columns: round-5 review lows from #3828 (source watch cost, relationText lookup, cross-instance claim)

1d ago

#3963

A long-lived serve client for extensions, and a stable rate_limited error code

1d ago

#3962

swamp serve on a v3 datastore never settles a workflow run left running by a stopped instance: boot reaper skips it as belonging to a remote instance

1d ago

#3961

swamp serve on a v3 datastore: a run interrupted at a clean shutdown is never committed when the bucket is slow, and stays running for every other checkout

1d ago

#3957

Support creating 1Password vaults for new clients

1d ago

#3953

datastore_v3_replica_verify_test stall case flakes under the full integration run: restore.pid is read before the stub writes it

1d ago

#3946

Generated state schemas require every child of nested objects, so normal resources warn on create/get

2d ago

#3930

Add LinkedIn as a login provider

2d ago

#3929

Showcase reward backfill can double-pay 5,000,000 points when replicas start together

2d ago

#3928

Docs: --trusted-hosts accepts host:port for public addresses on non-default ports

2d ago

#3887

A workflow step's method output is invisible to `data query` and `data list`, and the method summary's retrieval command returns an older run's data

1d ago

#3885

Skill propulsion rule is silent when no transition is satisfied because stage work is outstanding

3d ago

#3865

serve shutdown does not wait for worker status writes, and its listener accepts workers after the gateway is disposed

4d ago

#3855

stagecraft: rename work mode `method` to `behavior`, matching swamp's rename of models to behaviors

4d ago

← Back to list

01Issue

BugOpenExtensionsPublic

AssigneesNone

Relationships

#4051 push (Apple Containers) makes an index whose platform manifest is unpullable on Forgejo

Opened by dmc · 10/27/2026

Summary

push with the Apple Containers runtime makes an image that cannot be pulled from a Forgejo (Gitea) registry. The tag resolves to the image index, but the platform manifest that the index points to returns 404 MANIFEST_UNKNOWN.

Cause

push runs container image push <ref>. Apple's containerization library pushes every descriptor with the same ref: tag (ImageStore+Export.swift: client.push(name: name, ref: tag, descriptor: descriptor, …)), so the child manifest goes to PUT /v2/<name>/manifests/<tag> and then the index goes to the same tag. Docker, buildah, skopeo and crane push child manifests by digest.

Forgejo keeps one package version per tag, so the index push replaces the child manifest, and the child manifest is no longer addressable by digest. A registry that keeps replaced manifests by digest (Docker Hub, distribution) hides the problem.

container image push --platform linux/amd64 does not help: it still pushes an index.

Reproduce

build with platform: linux/amd64 and tag forgejo.example/owner/repo/image:testing.
push that image (Apple Containers runtime).
skopeo inspect --raw docker://forgejo.example/owner/repo/image:testing → an OCI index with one linux/amd64 manifest sha256:X.
GET /v2/owner/repo/image/manifests/sha256:X → 404 {"errors":[{"code":"MANIFEST_UNKNOWN"}]}. podman pull / bootc switch fail with reading manifest sha256:X … manifest unknown.

Versions: swamp 20261027.021509.0, @swamp/container-image 2026.10.22.1, Apple container 1.5.0, Forgejo 16.0.6.

Workaround that works

container image save --platform linux/amd64 -o image.tar <ref>
skopeo copy --multi-arch all oci-archive:image.tar docker://<ref>

skopeo pushes the child manifest by digest and the index to the tag. The digests do not change, and the image pulls.

Request

For the Apple Containers runtime, make push give a pullable result on registries like Forgejo. For example, route it through image save + skopeo copy (when skopeo is present), or add an option for that path.

Upstream repository: https://github.com/swamp-club/swamp-extensions

Environment

Extension: @swamp/container-image@2026.10.22.1
swamp: 20261027.021509.0-sha.f96841b5
OS: darwin (aarch64)
Deno: 2.9.8
Shell: /bin/zsh

02Bog Flow

Open

10/27/2026, 10:05:17 PM

No activity in this phase yet.

03Sludge Pulse

system commented 10/27/2026, 10:05:17 PM

Classified automatically when this issue was filed.

Source: Extensions

If you feel this classification is incorrect, add a ripple to tell us so.

push (Apple Containers) makes an index whose platform manifest is unpullable on Forgejo

Streak projector: incremental runs instead of a full scan every minute

Studio board: "Show finished" / "Show claimed" are pushed off-screen, with no scroll, when a factory has many stages

datastore v3: a parent run recording its child's rejected approval on a nested step is judged as needing approve

Scheduled flaky-test detection is failing

Docs: doctor datastores --repair --json describes a repairReport shape the CLI never produced

Registry: detect code from outside npm and JSR in a v2 archive itself, not only from the author's dependency-audit.json

Scorecard: code past the analyzer's read caps, or unreadable, is skipped silently instead of counting as not audited

Datastore v2 on macOS: order data-version writes with F_BARRIERFSYNC instead of full syncs

@swamp/cloudflare/analytics README documents CRUD methods the GraphQL analytics model does not have

swamp extension source add rejects a relative direct-content path that works as an absolute path

swamp hangs silently when an extension source directory contains the swamp repo itself

Inbox: automatic points message when a quest season or double-points event starts

Inbox: automatic issue_update message when a Lab issue ships

Inbox sending: segments, a per-user limit of 3 messages per 24 hours, and terminal preview

Datastore v3: data writes the datastore filter keeps local are never fsynced

Docs: doctor datastores reference — unreadable data version check and repair (swamp-club#3955)

judgeRunRecord lets a forged record settle a waiting approval gate to skipped without an approve

Claude audit hook misses PowerShell tool calls and sessions started above the swamp repo

access can-i: evaluate a local grants file without --server

Show each method's kind in type describe --json

Team mode: serve sends the compacted base, so a serve-mode checkout can catch up past compaction

Support search and filters as URL query parameters on /extensions

bundleExtension same-cache test can pass with a broken first-bundle gate under CPU load

Five Mongo queues can hand the same row to two replicas

Docs: run-workflows-on-a-schedule tells readers to curl /health for queue state, which no longer lists schedules

Collective invite shows "This invitation has expired or has already been used" after a successful join via Google sign-in

Move the Zod argument-field extractor into @swamp-club/extension-scoring so the CLI and registry read schemas alike

serve: dispatch to an idle worker waits for its worker_busy write on the shared gateway transition tail

serve: worker enrollment resolves and creates the worker definition inside the serialized gateway transition tail

Rescore every extension's current version under rubric v5

stagecraft studio ticket columns: round-5 review lows from #3828 (source watch cost, relationText lookup, cross-instance claim)

A long-lived serve client for extensions, and a stable rate_limited error code

swamp serve on a v3 datastore never settles a workflow run left running by a stopped instance: boot reaper skips it as belonging to a remote instance

swamp serve on a v3 datastore: a run interrupted at a clean shutdown is never committed when the bucket is slow, and stays running for every other checkout

Support creating 1Password vaults for new clients

datastore_v3_replica_verify_test stall case flakes under the full integration run: restore.pid is read before the stub writes it

Generated state schemas require every child of nested objects, so normal resources warn on create/get

Add LinkedIn as a login provider

Showcase reward backfill can double-pay 5,000,000 points when replicas start together

Showcase editor: caption counter is not announced to screen readers

Profile showcase read: approved list sorts on review.reviewedAt in memory

Showcase countByStatus: $match live statuses before the $group

Showcase admin queues: index-serve the updatedAt sort on approved/rejected

Annotate and retain past workflow runs and data after the fact

Docs: --trusted-hosts accepts host:port for public addresses on non-default ports

A workflow step's method output is invisible to `data query` and `data list`, and the method summary's retrieval command returns an older run's data

Skill propulsion rule is silent when no transition is satisfied because stage work is outstanding

serve shutdown does not wait for worker status writes, and its listener accepts workers after the gateway is disposed

stagecraft: rename work mode `method` to `behavior`, matching swamp's rename of models to behaviors

Relationships

#4051 push (Apple Containers) makes an index whose platform manifest is unpullable on Forgejo

Summary

Cause

Reproduce

Workaround that works

Request

Environment

Open