Skip to content

Commit cd0e04e

Browse files
committed
Add note that the purl rpmmod type does not exist
1 parent ccd37e2 commit cd0e04e

1 file changed

Lines changed: 8 additions & 5 deletions

File tree

docs/purl.md

Lines changed: 8 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -65,7 +65,7 @@ repository from where the RPM can be downloaded. We are purposefully not using t
6565
Hat purls because the base URL can vary depending on whether packages are sourced from Red Hat-hosted repositories
6666
(at _cdn.redhat.com_), local Red Hat Satellite-mirrored repositories, or Cloud provider-hosted repositories. Instead,
6767
Red Hat purls use a `repository_id` qualifier that identifies the repository from which the package can be
68-
downloaded using YUM or DNF.
68+
downloaded using YUM or DNF.
6969

7070
The repository ID is a unique value that identifies an RPM repository from where RPM packages can be fetched. If the
7171
ID of the repository is the same and the other attributes of the RPM match, such packages even though sourced from
@@ -86,15 +86,18 @@ distribution versions.
8686
[RPM modules](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/managing_software_with_the_dnf_tool/assembly_distribution-of-content-in-rhel-9_managing-software-with-the-dnf-tool#con_modules_assembly_distribution-of-content-in-rhel-9)
8787
allow grouping a set of RPMs to represent a single component. Installing for example the `nodejs` module may result in
8888
the installation of the `c-ares` library, the `npm` package manager, the `nodejs` runtime, among other RPM packages.
89-
RPM modules do not yet have an existing purl type.
9089

91-
We most often want to refer to a specific RPM without a module, and rarely to the RPM module itself, therefore we use the RPM type
92-
to refer to the specific module, and add an `rpmmod` qualifier to specify the module. For example the purl for the `libecap` RPM in the `squid:4` module available for RHEL 8.6 EUS would be the following:
90+
RPM modules do not an existing purl type. We most often want to refer to a specific RPM without a module, and rarely
91+
to the RPM module itself, therefore we use the RPM type to refer to the specific RPM, and add an `rpmmod` qualifier
92+
to specify the module. For example the purl for the `libecap` RPM in the `squid:4` module available for RHEL 8.6 EUS
93+
would be the following:
9394

9495
```
95-
pkg:rpm/redhat/libecap@1.0.1-2.module+el8.1.0+4044+36416a77?rpmmod=squid:4&arch=ppc64le&repository_id=rhel-8-for-x86_64-appstream-eus-rpms__8_DOT_6
96+
pkg:rpm/redhat/libecap@1.0.1-2.module%2Bel8.1.0%2B4044%2B36416a77?rpmmod=squid:4:8030020200828070549:30b713e6&arch=ppc64le&repository_id=rhel-8-for-x86_64-appstream-eus-rpms__8_DOT_6
9697
```
9798

99+
The RPM module Name, Stream, Version, and Context can be parsed from `squid:4:8030020200828070549:30b713e6`.
100+
98101
## Identifying container images
99102

100103
An Open Container Initiative (OCI) artifact is an arbitrary file that adheres to the OCI specification. Here we'll

0 commit comments

Comments
 (0)