Fix 'ocitool push' for oci_images based on other oci_images

[BryceBeagle]

There's been a bug in the OCILayout implementation where it did not
contain the correct metadata for pushing an oci_image where the base
is another oci_image.

The way rules_oci works is it build each blob in the bazel build dir,
and then creates a blob -> path mapping called blob_index that is used
at push time.

The previous implementation naively assumed that an image would only
ever have one blob_index map, but this isn't the case. Every image has
one for itself and its base(s).

This hasn't been an issue because the push operation short-circuits: if
a blob is already in the registry, it doesn't try to push the blob
again. If it doesn't try to push the blob, it doesn't try to find the
blob in the blob_index.

This was fine because until now all bases for images we had been using
were "remote" ones (i.e. already pushed to the registry). But I'm trying
to create an oci_image target that bases itself on another in-repo
oci_image target.

In this case, the base's blobs aren't in the registry, the push
operation tries to push them, and then freaks out because the
blob_index doesn't have the metadata.

This PR fixes this so that blob_index is turned into
direct_blob_index (for the current image) and
transitive_blob_indices, a superset that also includes the index/es
for the base.

These indices are then all provided to the push tool, we can properly
find the blobs at push time.

[BryceBeagle]

• Fix 'ocitool push' for oci_images based on other oci_images #141 👈 (View in Graphite)
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[BryceBeagle]

/merge

[gh-worker-devflow-routing-ef8351]

View all feedbacks in Devflow UI.

2026-09-09 13:48:41 UTC ℹ️ Start processing command /merge

---

2026-09-09 13:48:47 UTC ℹ️ MergeQueue: pull request added to the queue

The expected merge time in main is approximately 0s (p90).

---

2026-09-09 14:06:51 UTC ⚠️ MergeQueue: This merge request build was cancelled

bryce.beagle@datadoghq.com cancelled this merge request build