OCI (Open Container Initiative)
Image, runtime, and distribution specifications separate packaging, execution, and registry exchange. Compatibility depends on features and platforms.
-
-
Container Image
A layer is a changeset, not a snapshot. Removals are recorded as entries, which is why a deleted credential still ships.
-
Containers, Images, and Their Boundaries
Deleting a file in a later image layer does not remove it. The removal is recorded as an entry; the bytes are still in the layer below.