public:99_annexes:annex-b-terms-and-definitions:c:container_mirror

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
public:99_annexes:annex-b-terms-and-definitions:c:container_mirror [2026/09/12 17:42] – removed - external edit (Unknown date) 127.0.0.1public:99_annexes:annex-b-terms-and-definitions:c:container_mirror [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido
Line 1: Line 1:
 +====== Container Mirror ======
  
 +[[public:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]]
 +
 +===== Discussion =====
 +
 +A Container Mirror is a controlled local or internal copy of selected container images and associated metadata obtained from one or more source registries.
 +
 +The mirror may preserve image names, tags, immutable digests, manifests, platform variants, signatures, attestations, and [[public:99_annexes:annex-b-terms-and-definitions:p:provenance|Provenance]].
 +
 +A Container Mirror allows systems in a restricted, disconnected, or air-gapped environment to retrieve approved container images without direct access to an external container registry.
 +
 +Within Crucible, container images may be captured, included in a [[public:99_annexes:annex-b-terms-and-definitions:t:transfer_bundle|Transfer Bundle]], and imported into a Container Mirror inside the target enclave.
 +
 +===== Definition =====
 +
 +//controlled local or internal copy of selected container images and associated metadata obtained from one or more source registries//
 +
 +===== Source =====
 +
 +Generalized from container-image distribution, repository mirroring, disconnected operations, software supply-chain management, and platform engineering and specialized for the Crucible architecture and operational model.
 +
 +===== Note =====
 +
 +A Container Mirror may contain only an approved subset of the images available from its source registries.
 +
 +The mirror should preserve immutable image digests and associated integrity information so that users can verify that the mirrored image matches the approved source image.
 +
 +===== Example =====
 +
 +A connected environment captures approved Kubernetes and application container images, records their immutable digests, exports them in a Transfer Bundle, and imports them into a Container Mirror inside an air-gapped enclave.
 +
 +----
 +
 +<WRAP centeralign>
 +© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.
 +</WRAP>