If you've ever wondered what's really inside a container image, this article by Kirill Shirinkin takes you on a hands-on journey through the OCI image-spec to show you exactly how it all works under the hood. It’s not just theory—you’ll inspect real image files, see how digests, manifests, configs, and layers fit together, and uncover why Docker tags are just metadata illusions.