Some functions for dealing with docker registry manifests

docker_manifest.py

import urllib

import docker

def get_manifest_auth_token(repo):
    # https://docs.docker.com/registry/spec/auth/token/

    query = urllib.parse.urlencode({
        'service': 'registry.docker.io',
        'scope': 'repository:{repo}:pull'.format(repo=repo)
    })

    login = urllib.parse.urlunsplit((
        'https',
        'auth.docker.io',
        'token',
        query,
        ''
    ))

    token = requests.get(login, json=True).json()["token"]
    return token


def get_tags(repo):
    token = get_manifest_auth_token(repo)
    url = "https://registry.hub.docker.com/v2/{repo}/tags/list"
    tags = requests.get(
        url.format(repo=repo),
        headers={
            'Authorization': 'Bearer {}'.format(token)
        },
        json=True
    ).json()['tags']
    return tags


def get_manifest(repo, tag):
    # https://docs.docker.com/registry/spec/api/#manifest
    # https://docs.docker.com/registry/spec/manifest-v2-2/
    token = get_manifest_auth_token(repo)
    url = "https://registry.hub.docker.com/v2/{repo}/manifests/{tag}"
    response = requests.get(
        url.format(repo=repo, tag=tag),
        headers={
            'Authorization': 'Bearer {}'.format(token),
            'Accept': 'application/vnd.docker.distribution.manifest.v2+json'
        },
        json=True
    )
    return response.json()


def get_tag_digest(repo, tag):
    manifest = get_manifest(repo, tag)
    return manifest['config']['digest']