nerdctl pull - failed to extract layer (failed to get stream processor for application/vnd.dev.cosign.simplesigning.v1+json: no processor for media-type: unknown )

[wicope]

nerdctl pull. The 'latest' tag works, but another tag of the type 'sha256:xxx' doesn't work for me.

Perhaps it's just my issue. Could you please tell me if you encounter the same error?
In my case, I'm using rootless nerdctl.

nerdctl --debug pull tuleap/tuleap-community-edition:sha256-1f458ca9f5eeaf7c2aa7f1a7722883453b14f87f6ad1c69e8e584895f417ce5b.sig
DEBU[0000] stateDir: /run/user/1000/containerd-rootless 
DEBU[0000] rootless parent main: executing "/usr/bin/nsenter" with [-r/ -w/home/usuario --preserve-credentials -m -n -U -t 2650 -F nerdctl --debug pull tuleap/tuleap-community-edition:sha256-1f458ca9f5eeaf7c2aa7f1a7722883453b14f87f6ad1c69e8e584895f417ce5b.sig] 
DEBU[0000] verifying process skipped                    
DEBU[0000] Found hosts dir "/media/nerdctl/containerd/config/containerd/certs.d" 
DEBU[0000] The image will be unpacked for platform {"amd64" "linux" "" [] ""}, snapshotter "overlayfs". 
DEBU[0000] fetching                                      image="docker.io/tuleap/tuleap-community-edition:sha256-1f458ca9f5eeaf7c2aa7f1a7722883453b14f87f6ad1c69e8e584895f417ce5b.sig"
DEBU[0000] resolving                                     host=registry-1.docker.io
DEBU[0000] do request                                    host=registry-1.docker.io request.header.accept="application/vnd.docker.distribution.manifest.v2+json, application/vnd.docker.distribution.manifest.list.v2+json, application/vnd.oci.image.manifest.v1+json, application/vnd.oci.image.index.v1+json, */*" request.header.user-agent=containerd/1.7.3+unknown request.method=HEAD url="https://registry-1.docker.io/v2/tuleap/tuleap-community-edition/manifests/sha256-1f458ca9f5eeaf7c2aa7f1a7722883453b14f87f6ad1c69e8e584895f417ce5b.sig"
docker.io/tuleap/tuleap-community-edition:sha256-1f458ca9f5eeaf7c2aa7f1a7722883453b14f87f6ad1c69e8e584895f417ce5b.sig: resolving      |--------------------------------------| 
elapsed: 0.2 s                                                                                                         total:   0.0 B (0.0 B/s)                                         
DEBU[0000] fetch response received                       host=registry-1.docker.io response.header.content-length=174 response.header.content-type=application/json response.header.date="Tue, 19 Sep 2023 18:16:56 GMT" response.header.docker-distribution-api-version=registry/2.0 response.header.docker-ratelimit-source=46.8.167.124 response.header.strict-transport-security="max-age=31536000" response.header.www-authenticate="Bearer realm=\"https://auth.docker.io/token\",service=\"registry.docker.io\",scope=\"repository:tuleap/tuleap-community-edition:pull\"" response.status="401 Unauthorized" url="https://registry-1.docker.io/v2/tuleap/tuleap-community-edition/manifests/sha256-1f458ca9f5eeaf7c2aa7f1a7722883453b14f87f6ad1c69e8e584895f417ce5b.sig"
DEBU[0000] Unauthorized                                  header="Bearer realm=\"https://auth.docker.io/token\",service=\"registry.docker.io\",scope=\"repository:tuleap/tuleap-community-edition:pull\"" host=registry-1.docker.io
docker.io/tuleap/tuleap-community-edition:sha256-1f458ca9f5eeaf7c2aa7f1a7722883453b14f87f6ad1c69e8e584895f417ce5b.sig: resolving      |--------------------------------------| 
elapsed: 0.7 s                                                                                                         total:   0.0 B (0.0 B/s)                                         
DEBU[0000] fetch response received                       host=registry-1.docker.io response.header.content-length=1620 response.header.content-type=application/vnd.oci.image.manifest.v1+json response.header.date="Tue, 19 Sep 2023 18:16:56 GMT" response.header.docker-content-digest="sha256:be29dca61c1bcbfb3d9f37a186c69c8536b4a84ce560267a418236eafb64aca7" response.header.docker-distribution-api-version=registry/2.0 response.header.docker-ratelimit-source=46.8.167.124 response.header.etag="\"sha256:be29dca61c1bcbfb3d9f37a186c69c8536b4a84ce560267a418236eafb64aca7\"" response.header.ratelimit-limit="100;w=21600" response.header.ratelimit-remaining="97;w=21600" response.header.strict-transport-security="max-age=31536000" response.status="200 OK" url="https://registry-1.docker.io/v2/tuleap/tuleap-community-edition/manifests/sha256-1f458ca9f5eeaf7c2aa7f1a7722883453b14f87f6ad1c69e8e584895f417ce5b.sig"
DEBU[0000] resolved                                      desc.digest="sha256:be29dca61c1bcbfb3d9f37a186c69c8536b4a84ce560267a418236eafb64aca7" host=registry-1.docker.io
DEBU[0000] fetch                                         digest="sha256:be29dca61c1bcbfb3d9f37a186c69c8536b4a84ce560267a418236eafb64aca7" mediatype=application/vnd.oci.image.manifest.v1+json size=1620
docker.io/tuleap/tuleap-community-edition:sha256-1f458ca9f5eeaf7c2aa7f1a7722883453b14f87f6ad1c69e8e584895f417ce5b.sig: resolved       |++++++++++++++++++++++++++++++++++++++| 
manifest-sha256:be29dca61c1bcbfb3d9f37a186c69c8536b4a84ce560267a418236eafb64aca7:                                      downloading    |--------------------------------------|    0.0 B/1.6 KiB 
elapsed: 1.0 s                                                                                                         total:   0.0 B (0.0 B/s)                                         
DEBU[0001] fetch response received                       digest="sha256:be29dca61c1bcbfb3d9f37a186c69c8536b4a84ce560267a418236eafb64aca7" mediatype=application/vnd.oci.image.manifest.v1+json response.header.content-length=174 response.header.content-type=application/json response.header.date="Tue, 19 Sep 2023 18:16:56 GMT" response.header.docker-distribution-api-version=registry/2.0 response.header.docker-ratelimit-source=46.8.167.124 response.header.strict-transport-security="max-age=31536000" response.header.www-authenticate="Bearer realm=\"https://auth.docker.io/token\",service=\"registry.docker.io\",scope=\"repository:tuleap/tuleap-community-edition:pull\"" response.status="401 Unauthorized" size=1620 url="https://registry-1.docker.io/v2/tuleap/tuleap-community-edition/manifests/sha256:be29dca61c1bcbfb3d9f37a186c69c8536b4a84ce560267a418236eafb64aca7"
DEBU[0001] Unauthorized                                  digest="sha256:be29dca61c1bcbfb3d9f37a186c69c8536b4a84ce560267a418236eafb64aca7" header="Bearer realmdocker.io/tuleap/tuleap-community-edition:sha256-1f458ca9f5eeaf7c2aa7f1a7722883453b14f87f6ad1c69e8e584895f417ce5b.sig: resolved       |++++++++++++++++++++++++++++++++++++++| 
manifest-sha256:be29dca61c1bcbfb3d9f37a186c69c8536b4a84ce560267a418236eafb64aca7:                                      downloading    |--------------------------------------|    0.0 B/1.6 KiB 
elapsed: 1.8 s                                                                                                         total:   0.0 B (0.0 B/s)                                         
DEBU[0001] fetch response received                       digest="sha256:be29dca61c1bcbfb3d9f37a186c69c8536b4a84ce560267a418236eafb64aca7" mediatype=application/vnd.oci.image.manifest.v1+json response.header.content-length=1620 response.header.content-type=application/vnd.oci.image.manifest.v1+json response.header.date="Tue, 19 Sep 2023 18:16:57 GMT" response.header.docker-content-digest="sha256:be29dca61c1bcbfb3d9f37a186c69c8536b4a84ce560267a418236eafb64aca7" response.header.docker-distribution-api-version=registry/2.0 response.header.docker-ratelimit-source=46.8.167.124 response.header.etag="\"sha256:be29dca61c1bcbfb3d9f37a186c69c8536b4a84ce560267a418236eafb64aca7\"" response.header.ratelimit-limit="100;w=21600" response.header.ratelimit-remaining="97;w=21600" response.header.strict-transport-security="max-age=31536000" response.status="200 OK" size=1620 url="https://registry-1.docker.io/v2/tuleap/tuleap-community-edition/manifests/sha256:be29dca61c1bcbfb3d9f37a186c69c8536b4a84ce560267a418236eafb64aca7"
DEBU[0001] fetch                                         digest="sha256:6bfacd7019ccb7a6498e23e7f3f37b2933fdf41e028b79cb837ddb8fa78328d8" mediatype=application/vnd.dev.cosign.simplesigning.v1+json size=263
WARN[0001] reference for unknown type: application/vnd.dev.cosign.simplesigning.v1+json  digest="sha256:6bfacd7019ccb7a6498e23e7f3f37b2933fdf41e028b79cb837ddb8fa78328d8" mediatype=application/vnd.dev.cosign.simplesigning.v1+json size=263
DEBU[0001] fetch                                         digest="sha256:918fe46d3629f2f904f8416f43d99055ab32c47dbac5585ec858f47c41dd3496" mediatype=application/vnd.oci.image.config.v1+json size=243
DEBU[0001] do request                                    digest="sha256:918fe46d3629f2f904f8416f43d99055ab32c47dbac5585ec858f47c41dd3496" mediatype=application/vnd.oci.image.config.v1+json request.header.accept="application/vnd.oci.image.config.v1+json, */*" request.header.user-agent=containerd/1.7.3+unknown requesdocker.io/tuleap/tuleap-community-edition:sha256-1f458ca9f5eeaf7c2aa7f1a7722883453b14f87f6ad1c69e8e584895f417ce5b.sig: resolved       |+++++++++++++++++++++++docker.io/tuleap/tuleap-community-edition:sha256-1f458ca9f5eeaf7c2aa7f1a7722883453b14f87f6ad1c69e8e584895f417ce5b.sig: resolved       |+++++++++++++++++++++++docker.io/tuleap/tuleap-community-edition:sha256-1f458ca9f5eeaf7c2aa7f1a7722883453b14f87f6ad1c69e8e584895f417ce5b.sig: resolved       |+++++++++++++++++++++++docker.io/tuleap/tuleap-community-edition:sha256-1f458ca9f5eeaf7c2aa7f1a7722883453b14f87f6ad1c69e8e584895f417ce5b.sig: resolved       |+++++++++++++++++++++++docker.io/tuleap/tuleap-community-edition:sha256-1f458ca9f5eeaf7c2aa7f1a7722883453b14f87f6ad1c69e8e584895f417ce5b.sig: resolved       |++++++++++++++++++++++++++++++++++++++| 
manifest-sha256:be29dca61c1bcbfb3d9f37a186c69c8536b4a84ce560267a418236eafb64aca7:                                      done           |++++++++++++++++++++++++++++++++++++++| 
unknown-sha256:6bfacd7019ccb7a6498e23e7f3f37b2933fdf41e028b79cb837ddb8fa78328d8:                                       downloading    |--------------------------------------|    0.0 B/263.0 B 
config-sha256:918fe46d3629f2f904f8416f43d99055ab32c47dbac5585ec858f47c41dd3496:                                        downloading    |--------------------------------------|    0.0 B/243.0 B 
elapsed: 2.3 s                                                                                                         total:  1.6 Ki (703.0 B/s)             docker.io/tuleap/tuleap-community-edition:sha256-1f458ca9f5eeaf7c2aa7f1a7722883453b14f87f6ad1c69e8e584895f417ce5b.sig: resolved       |+++++++++++++++++++++++docker.io/tuleap/tuleap-community-edition:sha256-1f458ca9f5eeaf7c2aa7f1a7722883453b14f87f6ad1c69e8e584895f417ce5b.sig: resolved       |++++++++++++++++++++++++++++++++++++++| 
manifest-sha256:be29dca61c1bcbfb3d9f37a186c69c8536b4a84ce560267a418236eafb64aca7:                                      done           |++++++++++++++++++++++++++++++++++++++| 
unknown-sha256:6bfacd7019ccb7a6498e23e7f3f37b2933fdf41e028b79cb837ddb8fa78328d8:                                       downloading    |--------------------------------------|    0.0 B/263.0 B 
config-sha256:918fe46d3629f2f904f8416f43d99055ab32c47dbac5585ec858f47c41dd3496:                                        done           |++++++++++++++++++++++++++++++++++++++| 
elapsed: 2.5 s                                                                                                         total:  1.8 Ki (744.0 B/s)                                       
WARN[0002] reference for unknown type: application/vnd.dev.cosign.simplesigning.v1+json 
DEBU[0002] fetch response received                       digest="sha256:6bfacd7019ccb7a6498e23e7f3f37b2933fdf41e028b79cb837ddb8fa78328d8" mediatype=application/vnd.dev.cosign.simplesigning.v1+json response.header.accept-ranges=bytes response.header.cache-control="public, max-age=14400" response.header.cf-cache-status=MISS response.header.cf-ray=8093d2a2b9800412-MAD response.header.connection=keep-alive response.header.content-length=263 response.header.content-type=application/octet-stream response.header.date="Tue, 19 Sep 2023 18:16:58 GMT" response.header.etag="\"19d4a092cdc9eeccd37eaae3176e51bd\"" response.header.expires="Tue, 19 Sep 2023 22:16:58 GMT" response.header.last-modified="Tue, 19 Sep 2023 14:24:51 GMT" response.header.server=cloudflare response.header.vary=Accept-Encoding response.header.x-amz-id-2="pZPVNoO5X9dU7/USPVD2Vq4/6dNJ3zET4f43dSSs3/eNjGfpwIwSkjgWflE7Z6LlXlnq4yuSoCM=" response.header.x-amz-request-id=PDF1FY1029979YGE response.header.x-amz-server-side-encryption=AES256 response.header.x-amz-version-id=Eaxn.sEqhOrQ.x5wTN7feSmrnuKTAmBv response.status="200 OK" size=263 url="https://registry-1.docker.io/v2/tuleap/tuleap-community-edition/blobs/sha256:6bfacd7019ccb7a6498e23e7f3f37b2933fdf41e028b79cb837ddb8fa78328d8"
DEBU[0002] encountered unknown type application/vnd.dev.cosign.simplesigning.v1+json; children may not be fetched 
INFO[0002] apply failure, attempting cleanup             error="failed to extract layer sha256:6bfacd7019ccb7a6498e23e7f3f37b2933fdf41e028b79cb837ddb8fa78328d8: failed to get stream processor for application/vnd.dev.cosign.simplesigning.v1+json: no processor for media-type: unknown" key="extract-456193209-ZWfm sha256:6bfacd7019ccb7a6498e23e7f3f37b2933fdf41e028b79cb837ddb8fa78328d8"
FATA[0002] failed to unpack image on snapshotter overlayfs: failed to extract layer sha256:6bfacd7019ccb7a6498e23e7f3f37b2933fdf41e028b79cb837ddb8fa78328d8: failed to get stream processor for application/vnd.dev.cosign.simplesigning.v1+json: no processor for media-type: unknown 

nerdctl --debug pull tuleap/tuleap-community-edition:latest
DEBU[0000] stateDir: /run/user/1000/containerd-rootless 
DEBU[0000] rootless parent main: executing "/usr/bin/nsenter" with [-r/ -w/home/usuario --preserve-credentials -m -n -U -t 2650 -F nerdctl --debug pull tuleap/tuleap-community-edition:latest] 
DEBU[0000] verifying process skipped                    
DEBU[0000] Found hosts dir "/media/nerdctl/containerd/config/containerd/certs.d" 
DEBU[0000] The image will be unpacked for platform {"amd64" "linux" "" [] ""}, snapshotter "overlayfs". 
DEBU[0000] fetching                                      image="docker.io/tuleap/tuleap-community-edition:latest"
DEBU[0000] resolving                                     host=registry-1.docker.io
DEBU[0000] do request                                    host=registry-1.docker.io request.header.accept="application/vnd.docker.distribution.manifest.v2+json, application/vnd.docker.distribution.manifest.list.v2+json, application/vnd.oci.image.manifest.v1+json, application/vnd.oci.image.index.v1+json, */*" request.header.user-agent=containerd/1.7.3+unknown request.method=HEAD url="https://registry-1.docker.io/v2/tuleap/tuleap-community-edition/manifests/latest"
docker.io/tuleap/tuleap-community-edition:latest: resolving      |--------------------------------------| 
elapsed: 0.2 s                                    total:   0.0 B (0.0 B/s)                                         
DEBU[0000] fetch response received                       host=registry-1.docker.io response.header.content-length=174 response.header.content-type=application/json response.header.date="Tue, 19 Sep 2023 18:19:31 GMT" response.header.docker-distribution-api-version=registry/2.0 response.header.docker-ratelimit-source=46.8.167.124 response.header.strict-transport-security="max-age=31536000" response.header.www-authenticate="Bearer realm=\"https://auth.docker.io/token\",service=\"registry.docker.io\",scope=\"repository:tuleap/tuleap-community-edition:pull\"" response.status="401 Unauthorized" url="https://registry-1.docker.io/v2/tuleap/tuleap-community-edition/manifests/latest"
DEBU[0000] Unauthorized                                  header="Bearer realm=\"https://auth.docker.io/token\",service=\"registry.docker.io\",scope=\"repository:tuleap/tuleap-community-edition:pull\"" host=registry-1.docker.io
DEBU[0000] do request                                    host=registry-1.docker.io request.header.accept="application/vnd.docker.distribution.manifest.v2+jsondocker.io/tuleap/tuleap-community-edition:latest: resolving      |--------------------------------------| 
elapsed: 0.7 s                                    total:   0.0 B (0.0 B/s)                                         
DEBU[0000] fetch response received                       host=registry-1.docker.io response.header.content-length=530 response.header.content-type=application/vnd.docker.distribution.manifest.v2+json response.header.date="Tue, 19 Sep 2023 18:19:32 GMT" response.header.docker-content-digest="sha256:c36ba55e65d5c9c32904675f8965f9387c92c2bad482f42bb6a3f77ddd398076" response.header.docker-distribution-api-version=registry/2.0 response.header.docker-ratelimit-source=46.8.167.124 response.header.etag="\"sha256:c36ba55e65d5c9c32904675f8965f9387c92c2bad482f42bb6a3f77ddd398076\"" response.header.ratelimit-limit="100;w=21600" response.header.ratelimit-remaining="97;w=21600" response.header.strict-transport-security="max-age=31536000" response.status="200 OK" url="https://registry-1.docker.io/v2/tuleap/tuleap-community-edition/manifests/latest"
DEBU[0000] resolved                                      desc.digest="sha256:c36ba55e65d5c9c32904675f8965f9387c92c2bad482f42bb6a3f77ddd398076" host=registry-1.docker.io
DEBU[0000] fetch                                         digest="sha256:c36ba55e65d5c9c32904675f8965f9387c92c2bad482f42bb6a3f77ddd398076" mediatype=application/vnd.docker.distribution.manifest.v2+json size=530
DEBU[0000] fetch                                         digest="sha256:7b5836d4cbba38c0fe169e8c9c31c860977d706b331aff1b4d2ce0264fc92a11" mediatype=application/vnd.docker.container.image.v1+json size=2036
docker.io/tuleap/tuleap-community-edition:latest:                                 resolved       |++++++++++++++++++++++++++++++++++++++| 
manifest-sha256:c36ba55e65d5c9c32904675f8965f9387c92c2bad482f42bb6a3f77ddd398076: done           |++++++++++++++++++++++++++++++++++++++| 
docker.io/tuleap/tuleap-community-edition:latest:                                 resolved       |++++++++++++++++++++++++++++++++++++++| 
manifest-sha256:c36ba55e65d5c9c32904675f8965f9387c92c2bad482f42bb6a3f77ddd398076: done           |++++++++++++++++++++++++++++++++++++++| 
config-sha256:7b5836d4cbba38c0fe169e8c9c31c860977d706b331aff1b4d2ce0264fc92a11:   done           |++++++++++++++++++++++++++++++++++++++| 
layer-sha256:2927263d4f2af111695551f6543591d1629ac8636b69017b427963e32a05f88a:    done           |++++++++++++++++++++++++++++++++++++++| 
elapsed: 17.3s                                                                    total:  676.6  (39.1 MiB/s)