Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-14838

Random version deleted if there are multiple versions with same digest

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Not A Bug
    • Affects Version/s: 3.4.0, 3.6.1, 3.7.1
    • Fix Version/s: None
    • Component/s: Docker
    • Labels:
      None
    • Story Points:
      3

      Description

      Issue: If multiple image version exist with same digest/sha value, nexus randomly picks and deletes any one version.

      Usecase:

      Developers build snapshots as part of CI/CD process during development phase.

      Final snapshot is tagged as release version so digest stays the same.

      Developer tries to delete the snapshot version using the API but nexus randomly deletes any version that has the same digest.

      Command used to delete :
      curl -v -X DELETE -u '<userid>:<passwd>' https://<host>:<port>/v2/<image name>/manifests/<digest>
       

      Fix Suggestion:

      Option1 :

      Digest should be unique per version

      Option2:

      Expose delete API that accepts version in the input request so clients know which exact version will be deleted.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              mdodgson Mark Dodgson
              Reporter:
              bmittal Benita
              Last Updated By:
              Peter Lynch Peter Lynch
              Team:
              NXRM - Cypher
              Votes:
              4 Vote for this issue
              Watchers:
              7 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Date of First Response:

                  tigCommentSecurity.panel-title