Copying images to custom ECR repository

While copying images from the Cloudera hosted repository to your custom ECR repository, ensure that the metadata (SHA) of the copied images remains unchanged. Cloudera recommends using third-party tools, such as 'skopeo', to copy images while preserving the SHA.

Due to security considerations, Cloudera images are sensitive and require their hash values to remain unchanged when transferring images between repositories. Ensure that images are copied while retaining the image manifests and hash values (SHA). If the image SHA in the custom ECR repository differs from the SHA in the Cloudera hosted repository, you may encounter issues while activating the Cloudera Data Warehouse clusters.

To copy images between repositories while preserving image metadata, you may use third-party tools such as 'skopeo'. For more information on installing or building skopeo, refer to the skopeo documentation.

Run the following command to copy images from the source to your custom ECR repository:
```
$ skopeo copy --all [***SOURCE-IMAGE***] [***DESTINATION-IMAGE***]
```

Run the following Docker command on both the Cloudera hosted repository and your custom ECR repository to verify that the RepoDigests field remains unchanged after the transfer:

docker inspect [***CLOUDERA REPOSITORY***]/[***IMAGE-PATH***]/hardened/calico-cni:v3.28.2-r2-202501062350

Output:
[
    {
        "Id": "sha256:6282eb96238744a4f44b3086c5d16f8214c58969f3938b212d1329c3da65bd09",
        "RepoTags": [
            "[***CLOUDERA REPOSITORY***]/[***IMAGE-PATH***]/hardened/calico-cni:v3.28.2-r2-202501062350"
        ],
        "RepoDigests": [
            "[***CLOUDERA REPOSITORY***]/[***IMAGE-PATH***]/hardened/calico-cni@sha256:99c0db8740c07316b709e0bf6ea9f30179a78481ee55d81da6bdc3268a05bf6a"
        ],
        ....
        ....