Inside an Image: Layers, Tags, Digests, Registries and Multi-platform Manifests
An image is made of read-only layers, a config and a manifest listing them; for multi-platform images the tag points to an index with one manifest per architecture. Tags move, digests do not: on a local registry we repoint a tag to another image and see what a digest pin buys, read Docker Hub's rate-limit header, and look at the containerd image store and a semver plus SHA tag strategy instead of latest.
14 Nov 2026
·
13 min
·
11
