download: Remove checksums for all container

The pull by digest hasn't been working since 800c84dcc (download: use
full hash form (including hash alg), 2025-01-14), where the key was
renamed to checksum, but the download_container still checked sha256.

Stop pretending we pull by digest.
This commit is contained in:
Max Gautier
2026-09-23 13:18:50 +02:00
parent e013507027
commit 6ff47af1ce
3 changed files with 1 additions and 65 deletions
@@ -12,13 +12,3 @@
set_fact:
pull_required: "{{ (download.image_name | regex_replace('^docker\\.io/(library/)?', '')) not in docker_images.stdout.split(',') }}"
when: not download_always_pull
- name: Check_pull_required | Check that the local digest sha256 corresponds to the given image tag
assert:
that: "{{ download.repo }}:{{ download.tag }} in docker_images.stdout.split(',')"
when:
- not download_always_pull
- not pull_required
- pull_by_digest
tags:
- asserts
@@ -1,13 +1,4 @@
---
- name: Set_container_facts | Set if containers should be pulled by digest
set_fact:
pull_by_digest: "{{ download.sha256 is defined and download.sha256 }}"
- name: Set_container_facts | Define by what name to pull the image
set_fact:
image_reponame: >-
{%- if pull_by_digest %}{{ download.repo }}@sha256:{{ download.sha256 }}{%- else -%}{{ download.repo }}:{{ download.tag }}{%- endif -%}
- name: Set_container_facts | Define file name of image
set_fact:
image_filename: "{{ download.image_name | regex_replace('/|\0|:', '_') }}.tar"