---
title: "Get Oci Manifest"
method: HEAD
path: "/v2/fleet/{base}/{flavor}/manifests/{ref}"
---

# Get Oci Manifest

`HEAD /v2/fleet/{base}/{flavor}/manifests/{ref}`

## Request

- Base URL: `https://api-docs.session-exchange.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api-docs.session-exchange.com/v2/fleet/{base}/{flavor}/manifests/{ref}`
- Auth: none declared

GET and HEAD both, and the 401 carries the challenge.

The containerd image-store resolver (docker 29 with the containerd snapshotter) requests the
MANIFEST first and does a HEAD before the GET. The legacy resolver hits /v2/ first, picks the
challenge up there and caches a token, so it never needed either. Two consequences, both of
which broke pulls on a containerd host while the same registry served a legacy host fine:

  * a 401 from Depends(require_read_or_emit) carries no WWW-Authenticate, so containerd has
    nothing to act on and gives up rather than fetching a token;
  * FastAPI does not synthesise HEAD from a GET route, so the HEAD probe got 405.

## Path parameters

- `base` string, required
- `flavor` string, required
- `ref` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/session-exchange/apis/a4sx.md) · [All operations](https://skmtc.dev/session-exchange/apis/a4sx/llms.txt) · [OpenAPI document](https://skmtc.dev/session-exchange/apis/a4sx/revisions/abaefc33dfc7?raw)