Answer
Layer digests are verified before extraction to detect tampering.
Quick Answer
Docker validates layers using SHA256 content digests from the image manifest. When pulling, Docker computes the SHA256 of each downloaded layer and compares it to the manifest's expected digest. If they don't match, the pull fails with a checksum error. This detects both transmission corruption and registry tampering.
S
SugharaIQ Editorial Team
Verified Answer
This answer has been peer-reviewed by industry experts holding senior engineering roles to ensure technical accuracy and relevance for modern interview standards.
Want to bookmark, take notes, or join discussions?
Sign in to access all features and personalize your learning experience.
Source: SugharaIQ