failed to extract layer contents from artifact: tar file entry bin/arch contained unsupported file type Lrwxrwxrwx

[djschny]

Describe the bug

Using the following definition with redaction:

apiVersion: source.toolkit.fluxcd.io/v1beta2
kind: OCIRepository
metadata:
  name: my-app
  namespace: flux-system
spec:
  interval: 1m
  url: oci://ghcr.io/<my_org>/<my_repo>
  ref:
    tag: staging
---
apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
  name: my-app
  namespace: flux-system
spec:
  interval: 1m
  prune: true
  sourceRef:
    kind: OCIRepository
    name: my-app
  path: /my-resources/

The following error is produced:

kubectl get events -n flux-system
LAST SEEN   TYPE      REASON                            OBJECT                        MESSAGE
3m2s        Warning   OCIArtifactLayerOperationFailed   ocirepository/course-tapper   failed to extract layer contents from artifact: tar file entry bin/arch contained unsupported file type Lrwxrwxrwx

Steps to reproduce

See above

Expected behavior

It should succeed and/or error should be more relevant.

Screenshots and recordings

No response

OS / Distro

N/A

Flux version

latest

Flux check

N/A - not use flux CLI

Git provider

N/A

Container Registry provider

GitHub Packages

Additional context

No response

Code of Conduct

• I agree to follow this project's Code of Conduct

[makkes]

Without more information on the image that you're referring to it's going to be a little tough to track down the root cause here.

[djschny]

From what I can tell you can reproduce this with any docker image. So use something like https://hub.docker.com/_/nginx and set the path to a directory and you should see the error.

[stefanprodan]

Using a Docker image with a base OS will not work with Flux. Use flux push artifact to publish yamls.

[djschny]

Docker images are OCI compliant images. Please re-open.

[makkes]

A little clarification here: Flux Kustomizations can only consume OCI images that have a certain structure and media type and these images are created using flux push artifact.

[stefanprodan]

This is a duplicate of fluxcd/pkg#538 let's discuss there.

[djschny]

That is very shorted sited FWIW

[djschny]

Happy to discuss over there too.

[djschny]

Regardless I believe a more appropriate error should be supplied to a user.

[makkes]

That is very shorted sited FWIW

I would like to understand your goal here. From what I understand you would like to use a Kustomization with any arbitrary OCI image but what would you expect it to do with the contents? Are you putting Kubernetes manifests in the same image as other content such as binaries? If that's the case then you might want to take a look at layer selectors but that still won't work with any arbitrary OCI image of course.