Skip to main content

oci layers on top

Project description

oci layers on top

olot is a python-based tool to append layers (files) onto an OCI-compatible image. It is meant to be used in conjunction with command-line based tools to fetch and upload these images. Tools such as skopeo or oras. But importantly, it also supports natively the oras Python library as a pure-Python backend (no external Skopeo/CLI tools required). It leverages standard oci-layout format from the OCI Image Layout Specification. It can be used either as a CLI tool, or via standard python interface. The package is published to pypi.

Usage

As a CLI

  1. use simple tool like skopeo ( or oras cp, or ...) and produce an oci image layout of the base image for the Modelcar (ie base image could be: A. ubi-micro, B. busybox, or C. even simple base image for KServe Modelcar, etc.)
  2. (this project) use pure python way to add layers of the ML models, and any metadata like ModelCarD
  3. use simple tool from step 1 to push the resulting layout to the remote registry (i.e. simpletool cp ... quay.io/mmortari/model:car)
  4. ... you now have a Modelcar inside of your OCI registry that can be used with KServe and more!
IMAGE_DIR=download
OCI_REGISTRY_SOURCE=quay.io/mmortari/hello-world-wait:latest
OCI_REGISTRY_DESTINATION=quay.io/mmortari/demo20241208:latest
rm -rf $IMAGE_DIR

# Downloads the image `/quay.io/mmortari/hello-world-wait:latest` to the folder `download` with tag `latest`
skopeo copy --multi-arch all docker://${OCI_REGISTRY_SOURCE} oci:${IMAGE_DIR}:latest

# If using oras, you will need to also need to add write permissions
# oras copy --to-oci-layout $OCI_REGISTRY_SOURCE ./${IMAGE_DIR}:latest
# chmod +w ${IMAGE_DIR}/blobs/sha256/*

# Appends to the image found in `download` the files `model.joblib` and as ModelCarD the `README.md`
poetry run olot $IMAGE_DIR --modelcard tests/data/sample-model/README.md tests/data/sample-model/model.joblib

# Pushes the (updated) image found in `download` folder to the registry `quay.io/mmortari/demo20241208` with tag `latest`
skopeo copy --multi-arch all oci:${IMAGE_DIR}:latest docker://${OCI_REGISTRY_DESTINATION}

# If using oras
# oras cp --from-oci-layout ./${IMAGE_DIR}:latest $OCI_REGISTRY_DESTINATION

You can now test the image to validate the files exist in it

podman run --rm -it $OCI_REGISTRY_DESTINATION ls -la /models/

Expected Output:

Unable to find image 'quay.io/mmortari/demo20241208:latest' locally
latest: Pulling from mmortari/demo20241208
6163eebc9af4: Download complete 
1933e30a3373: Download complete 
3dc1903f1fc8: Download complete 
Digest: sha256:6effaec653c4ba4711c8bda5d18211014016e543e6657eb36ced186fb9aed9e4
Status: Downloaded newer image for quay.io/mmortari/demo20241208:latest
total 20
drwxr-xr-x    1 root     root          4096 Feb 13 15:17 .
drwxr-xr-x    1 root     root          4096 Feb 13 15:17 ..
-rw-rw-r--    1 root     root          6625 Dec 24 09:24 README.md
-rw-rw-r--    1 root     root          3299 Dec 24 09:24 model.joblib

Cleanup your local image

podman image rm quay.io/mmortari/demo20241208:latest

Dev notes

If copying the resulting image to local filesystem oci-layout using skopeo, make sure to enable --dest-oci-accept-uncompressed-layers option.

As a Python Package

Install the package

pip install olot
# poetry add olot

Import and add layers onto a locally available model (using skopeo):

from olot.basic import oci_layers_on_top
from olot.backend.skopeo import skopeo_pull, skopeo_push

model_dir = 'download'
oci_registry_source='quay.io/mmortari/hello-world-wait:latest'
oci_registry_destination='quay.io/mmortari/demo20241208:latest'

model_files = [
    'tests/data/sample-model/model.joblib',
    'tests/data/sample-model/README.md',
]

# Download the model
skopeo_pull(oci_registry_source, model_dir)

# Add the layers
oci_layers_on_top(model_dir, model_files)

# Push the model
skopeo_push(model_dir, oci_registry_destination)

Or using oras-py (no external Tools like Skopeo needed):

from olot.basics import oci_layers_on_top
from olot.backend.oras_py import oras_py_pull, oras_py_push

model_dir = 'download'
oci_registry_source='quay.io/mmortari/hello-world-wait:latest'
oci_registry_destination='quay.io/mmortari/demo20241208:latest'

model_files = [
    'tests/data/sample-model/model.joblib',
    'tests/data/sample-model/README.md',
]

# pip install olot[oras-py]

# Download the model (no external Skopeo/CLI tools needed)
oras_py_pull(oci_registry_source, model_dir)

# Add the layers
oci_layers_on_top(model_dir, model_files)

# Push the model (no external Skopeo/CLI tools needed)
oras_py_push(model_dir, oci_registry_destination)

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

olot-0.1.17.tar.gz (29.5 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

olot-0.1.17-py3-none-any.whl (37.4 kB view details)

Uploaded Python 3

File details

Details for the file olot-0.1.17.tar.gz.

File metadata

  • Download URL: olot-0.1.17.tar.gz
  • Upload date:
  • Size: 29.5 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for olot-0.1.17.tar.gz
Algorithm Hash digest
SHA256 0e55538df2fa4cc386a71338ede415266e60fcc2a19c42bfcf435ba38cf786c4
MD5 336559d9eb74a77a62352e18f2f2c322
BLAKE2b-256 7623a8e7599a35d102b7fa65d4a1c3fc5a8cf78ec1c1e1113deb22eff58a8fb1

See more details on using hashes here.

Provenance

The following attestation bundles were made for olot-0.1.17.tar.gz:

Publisher: release.yaml on containers/olot

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file olot-0.1.17-py3-none-any.whl.

File metadata

  • Download URL: olot-0.1.17-py3-none-any.whl
  • Upload date:
  • Size: 37.4 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for olot-0.1.17-py3-none-any.whl
Algorithm Hash digest
SHA256 32e5251a447f82a1f0a854c5c6642ccfaa99e5a431251e21340f13508fbfb743
MD5 2fa13f9a783f63f7d8ec2c2b2ff53f1f
BLAKE2b-256 c99189542ae30f44623a64084c021f6512ece884c91f9066e159a47478fd5bbe

See more details on using hashes here.

Provenance

The following attestation bundles were made for olot-0.1.17-py3-none-any.whl:

Publisher: release.yaml on containers/olot

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page