From f067549aaa1f7c65fbd578a0e9d6ce754e62d68a Mon Sep 17 00:00:00 2001
From: David Cassany <dcassany@suse.de>
Date: Tue, 6 Nov 2018 16:31:37 +0100
Subject: [PATCH] Add history metadata for container builds

This commit adds the history section in contianerconfig. With it
'author', 'created_by' and 'comment' can be customized. In addition
'created' is always included with the image creation date time.
'created_by' entry is set to 'KIWI __version__' by default if nothing
is provided.

Fixes #852
---
 kiwi/container/oci.py                 |  17 +++-
 kiwi/defaults.py                      |  16 +++-
 kiwi/oci_tools/base.py                |   7 +-
 kiwi/oci_tools/umoci.py               |  44 ++++++---
 kiwi/schema/kiwi.rnc                  | 103 +++++++++++++--------
 kiwi/schema/kiwi.rng                  |  57 ++++++++++--
 kiwi/xml_parse.py                     | 125 +++++++++++++++++++++++++-
 kiwi/xml_state.py                     |  20 +++++
 test/data/example_config.xml          |   1 +
 test/unit/container_image_oci_test.py |  20 +++--
 test/unit/oci_tools_umoci_test.py     |  65 +++++++++-----
 test/unit/xml_state_test.py           |  12 ++-
 12 files changed, 382 insertions(+), 105 deletions(-)

diff --git a/kiwi/container/oci.py b/kiwi/container/oci.py
index f5a3870c460..fdb2897b594 100644
--- a/kiwi/container/oci.py
+++ b/kiwi/container/oci.py
@@ -52,7 +52,12 @@ class ContainerImageOCI(object):
                 'expose_ports': ['80', '42'],
                 'volumes': ['/var/log', '/tmp'],
                 'environment': {'PATH': '/bin'},
-                'labels': {'name': 'value'}
+                'labels': {'name': 'value'},
+                'history': {
+                    'created_by': 'some explanation here',
+                    'comment': 'some comment here',
+                    'author': 'tux'
+                }
             }
     """
     def __init__(self, root_dir, custom_args=None):
@@ -95,6 +100,12 @@ def __init__(self, root_dir, custom_args=None):
             self.oci_config['entry_subcommand'] = \
                 Defaults.get_default_container_subcommand()
 
+        if 'history' not in self.oci_config:
+            self.oci_config['history'] = {}
+        if 'created_by' not in self.oci_config['history']:
+            self.oci_config['history']['created_by'] = \
+                Defaults.get_default_container_created_by()
+
         self.oci = OCI(self.oci_config['container_tag'])
 
     def create(self, filename, base_image):
@@ -117,7 +128,7 @@ def create(self, filename, base_image):
             image_tar = ArchiveTar(base_image)
             image_tar.extract(self.oci.container_dir)
 
-        self.oci.init_layout(base_image)
+        self.oci.init_layout(True if base_image else False) 
 
         self.oci.unpack(self.oci_root_dir)
         oci_root = DataSync(
@@ -133,7 +144,7 @@ def create(self, filename, base_image):
             for tag in self.oci_config['additional_tags']:
                 self.oci.add_tag(tag)
 
-        self.oci.set_config(self.oci_config)
+        self.oci.set_config(self.oci_config, True if base_image else False)
 
         self.oci.garbage_collect()
 
diff --git a/kiwi/defaults.py b/kiwi/defaults.py
index 125730cfbdf..3edb7862724 100644
--- a/kiwi/defaults.py
+++ b/kiwi/defaults.py
@@ -25,7 +25,10 @@
 
 # project
 from .path import Path
-from .version import __githash__
+from .version import (
+    __githash__,
+    __version__
+)
 
 
 class Defaults(object):
@@ -1173,6 +1176,17 @@ def get_default_container_subcommand(self):
         """
         return ['/bin/bash']
 
+    @classmethod
+    def get_default_container_created_by(self):
+        """
+        Provides the default 'created by' history entry for containers.
+
+        :return: the specific kiwi version used for the build
+
+        :rtype: str
+        """
+        return 'KIWI {0}'.format(__version__)
+
     @classmethod
     def set_python_default_encoding_to_utf8(self):
         """
diff --git a/kiwi/oci_tools/base.py b/kiwi/oci_tools/base.py
index 0869d9b9dda..f5d654ef552 100644
--- a/kiwi/oci_tools/base.py
+++ b/kiwi/oci_tools/base.py
@@ -17,6 +17,7 @@
 #
 import os
 from tempfile import mkdtemp
+from datetime import datetime
 
 # project
 from kiwi.path import Path
@@ -51,6 +52,9 @@ def __init__(self, container_tag, container_dir=None):
         self.container_name = ':'.join(
             [self.container_dir, self.container_tag]
         )
+        self.creation_date = datetime.utcnow().strftime(
+            '%Y-%m-%dT%H:%M:%S+00:00'
+        )
 
     def init_layout(self, base_image=False):
         """
@@ -81,7 +85,6 @@ def repack(self, oci_root_dir):
         Implementation in specialized tool class
 
         :param string oci_root_dir: root data directory
-        :param string container_name: custom container_dir:tag specifier
         """
         raise NotImplementedError
 
@@ -96,7 +99,7 @@ def add_tag(self, tag_name):
         """
         raise NotImplementedError
 
-    def set_config(self, oci_config):
+    def set_config(self, oci_config, base_image=False):
         """
         Set list of meta data information such as entry_point,
         maintainer, etc... to the container. The validation of
diff --git a/kiwi/oci_tools/umoci.py b/kiwi/oci_tools/umoci.py
index a0efb62f747..10b0521d4b6 100644
--- a/kiwi/oci_tools/umoci.py
+++ b/kiwi/oci_tools/umoci.py
@@ -15,7 +15,6 @@
 # You should have received a copy of the GNU General Public License
 # along with kiwi.  If not, see <http://www.gnu.org/licenses/>
 #
-from datetime import datetime
 
 # project
 from kiwi.oci_tools.base import OCIBase
@@ -36,16 +35,10 @@ def init_layout(self, base_image=False):
         The import and unpack of the base image is not a
         responsibility of this class and done beforehead
 
-        :param string base_image: True|False
+        :param bool base_image: True|False
         """
         if base_image:
-            Command.run(
-                [
-                    'umoci', 'config', '--image',
-                    '{0}:base_layer'.format(self.container_dir),
-                    '--tag', self.container_tag
-                ]
-            )
+            self.container_name = '{0}:base_layer'.format(self.container_dir)
         else:
             Command.run(
                 ['umoci', 'init', '--layout', self.container_dir]
@@ -87,24 +80,30 @@ def add_tag(self, tag_name):
             ]
         )
 
-    def set_config(self, oci_config):
+    def set_config(self, oci_config, base_image=False):
         """
         Set list of meta data information such as entry_point,
         maintainer, etc... to the container.
 
         :param list oci_config: meta data list
+        :param bool base_image: True|False
         """
         config_args = self._process_oci_config_to_arguments(oci_config)
         Command.run(
             [
                 'umoci', 'config'
             ] + config_args + [
+                '--history.created', self.creation_date,
                 '--image', self.container_name,
-                '--created', datetime.utcnow().strftime(
-                    '%Y-%m-%dT%H:%M:%S+00:00'
-                )
+                '--tag', self.container_tag,
+                '--created', self.creation_date
             ]
         )
+        if base_image:
+            Command.run(['umoci', 'rm', '--image', self.container_name])
+            self.container_name = self.container_name = ':'.join(
+                [self.container_dir, self.container_tag]
+            )
 
     @classmethod                                                # noqa:C091
     def _process_oci_config_to_arguments(self, oci_config):
@@ -168,8 +167,27 @@ def _process_oci_config_to_arguments(self, oci_config):
                     name, oci_config['labels'][name]
                 ))
 
+        arguments.extend(self._process_oci_history_to_arguments(oci_config))
         return arguments
 
+    @classmethod
+    def _process_oci_history_to_arguments(self, oci_config):
+        history_args = []
+        if 'history' in oci_config:
+            if 'comment' in oci_config['history']:
+                history_args.append('--history.comment={0}'.format(
+                    oci_config['history']['comment']
+                ))
+            if 'created_by' in oci_config['history']:
+                history_args.append('--history.created_by={0}'.format(
+                    oci_config['history']['created_by']
+                ))
+            if 'author' in oci_config['history']:
+                history_args.append('--history.author={0}'.format(
+                    oci_config['history']['author']
+                ))
+        return history_args
+
     def garbage_collect(self):
         """
         Cleanup unused data from operations
diff --git a/kiwi/schema/kiwi.rnc b/kiwi/schema/kiwi.rnc
index 479fcc1010f..58af3b5bde6 100644
--- a/kiwi/schema/kiwi.rnc
+++ b/kiwi/schema/kiwi.rnc
@@ -13,7 +13,7 @@
 #               : configuration files. The schema is maintained
 #               : in the relax compact syntax. Any changes should
 #               : made in !! *** kiwi.rnc *** !!
-#               : 
+#               :
 #               :
 # STATUS        : Development
 #****************
@@ -46,7 +46,7 @@ start =
 # main block: <image>
 #
 div {
-    k.image.name.attribute = k.imagename.attribute 
+    k.image.name.attribute = k.imagename.attribute
     k.image.displayname.attribute = k.displayname.attribute
     k.image.noNamespaceSchemaLocation.attribute =
         ## The location of the XSD Schema (not relevant for RELAX NG or DTD)
@@ -63,7 +63,7 @@ div {
         ## An identification number which is represented in a file
         ## named /etc/ImageID
         attribute id { xsd:string {length="10"} }
-    k.image.attlist = k.image.name.attribute 
+    k.image.attlist = k.image.name.attribute
         & k.image.displayname.attribute?
         & k.image.id?
         & k.image.schemaversion.attribute
@@ -71,7 +71,7 @@ div {
             | k.image.schemaLocation.attribute? )?
 
     k.image =
-        ## The root element of the configuration file   
+        ## The root element of the configuration file
         element image {
             k.image.attlist &
             k.description &
@@ -247,7 +247,7 @@ div {
     k.configuration.source.attribute = k.source.attribute
     k.configuration.dest.attribute = k.dest.attribute
     k.configuration.arch.attribute = k.arch.attribute
-    k.configuration.attlist = 
+    k.configuration.attlist =
         k.configuration.source.attribute &
         k.configuration.dest.attribute &
         k.configuration.arch.attribute?
@@ -267,7 +267,7 @@ div {
 #
 div {
     k.contact.attlist = empty
-    k.contact = 
+    k.contact =
         ## Contact Information from the Author, like Email etc.
         element contact {
             k.contact.attlist,
@@ -301,7 +301,7 @@ div {
     k.ignore.attlist =
         k.ignore.name.attribute &
         k.ignore.arch.attribute?
-    k.ignore = 
+    k.ignore =
         ## Ignores a Package
         element ignore {
             k.ignore.attlist,
@@ -571,7 +571,7 @@ div {
     k.oem-shutdown.content = xsd:boolean
     k.oem-shutdown.attlist = empty
     k.oem-shutdown =
-        ## For oemboot driven images: shutdown after first deployment 
+        ## For oemboot driven images: shutdown after first deployment
         ## true/false
         element oem-shutdown {
             k.oem-shutdown.attlist,
@@ -586,7 +586,7 @@ div {
     k.oem-shutdown-interactive.content = xsd:boolean
     k.oem-shutdown-interactive.attlist = empty
     k.oem-shutdown-interactive =
-        ## For oemboot driven images: shutdown after first deployment 
+        ## For oemboot driven images: shutdown after first deployment
         ## true/false
         element oem-shutdown-interactive {
             k.oem-shutdown-interactive.attlist,
@@ -799,7 +799,7 @@ div {
 # common element <packagemanager>
 #
 div {
-    k.packagemanager.content = 
+    k.packagemanager.content =
         "apt-get" | "zypper" | "yum" | "dnf"
     k.packagemanager.attlist = empty
     k.packagemanager =
@@ -821,7 +821,7 @@ div {
         ## Partition ID
         attribute number { text }
     k.partition.size.attribute = k.size.attribute
-    k.partition.mountpoint.attribute = 
+    k.partition.mountpoint.attribute =
         ## Mount path for this partition
         attribute mountpoint { text }
     k.partition.target.attribute =
@@ -830,7 +830,7 @@ div {
         attribute target { xsd:boolean }
     k.partition.attlist =
         k.partition.type.attribute &
-        k.partition.number.attribute & 
+        k.partition.number.attribute &
         k.partition.size.attribute? &
         k.partition.mountpoint.attribute? &
         k.partition.target.attribute?
@@ -853,8 +853,8 @@ div {
     k.partitions.attlist = k.partitions.device.attribute?
     k.partitions =
         ## A List of Partitions
-        element partitions { 
-            k.partitions.attlist, 
+        element partitions {
+            k.partitions.attlist,
             k.partition+
         }
 }
@@ -892,7 +892,7 @@ div {
 # common element <requires>
 #
 div {
-    k.requires.profile.attribute = 
+    k.requires.profile.attribute =
         ## The profile name required as part of the current profile
         ## definition.
         attribute profile {text}
@@ -1012,7 +1012,7 @@ div {
     k.rpm-check-signatures.content = xsd:boolean
     k.rpm-check-signatures.attlist = empty
     k.rpm-check-signatures =
-        ## Sets the used package manager to validate, or not, the 
+        ## Sets the used package manager to validate, or not, the
         ## repository and/or package signatures. The behavior can be
         ## slightly different depending on the used package manager.
         ## This is a system wide package manager option, so that, this
@@ -1136,7 +1136,7 @@ div {
 #
 div {
     k.timeout.attlist = empty
-    k.timeout = 
+    k.timeout =
         ## Specifies an ATFTP Download Timeout
         element timeout {
             k.timeout.attlist,
@@ -1149,7 +1149,7 @@ div {
 #
 div {
     k.timezone.attlist = empty
-    k.timezone =  
+    k.timezone =
         ## Setup Image Timezone setup
         element timezone {
             k.timezone.attlist,
@@ -1327,7 +1327,7 @@ div {
         ]
     k.type.efiparttable.attribute =
         ## For images with an EFI firmware specifies the partition
-        ## table type to use. If not set defaults to gpt partition 
+        ## table type to use. If not set defaults to gpt partition
         ## table type.
         attribute efiparttable { "msdos" | "gpt" }
         >> sch:pattern [ id = "efiparttable" is-a = "image_type"
@@ -1386,7 +1386,7 @@ div {
             sch:param [ name = "attr" value = "editbootinstall" ]
             sch:param [ name = "types" value = "vmx oem" ]
         ]
-    k.type.filesystem.attribute = 
+    k.type.filesystem.attribute =
         ## Specifies the root filesystem type
         attribute filesystem {
             "btrfs" | "ext2" | "ext3" | "ext4" | "squashfs" | "xfs"
@@ -1651,7 +1651,7 @@ div {
         >> sch:pattern [ id = "rootfs_label" is-a = "image_type"
             sch:param [ name = "attr" value = "rootfs_label" ]
             sch:param [ name = "types" value = "oem vmx pxe docker" ]
-        ] 
+        ]
     k.type.vga.attribute =
         ## Specifies the kernel framebuffer mode. More information
         ## about the possible values can be found by calling
@@ -1779,7 +1779,7 @@ div {
         k.type.disk_start_sector.attribute?
     k.type =
         ## The Image Type of the Logical Extend
-        element type { 
+        element type {
             k.type.attlist &
             k.containerconfig? &
             k.machine? &
@@ -1796,7 +1796,7 @@ div {
 #
 div {
     k.union.ro.attribute =
-        ## Device only for read-only 
+        ## Device only for read-only
         attribute ro { text }
     k.union.rw.attribute =
         ## Device for Read-Write
@@ -1808,8 +1808,8 @@ div {
         k.union.ro.attribute &
         k.union.rw.attribute &
         k.union.type.attribute
-    
-    k.union =  
+
+    k.union =
         ## As part of the network deploy configuration this section
         ## specifies the overlay filesystem setup if required by the
         ## filesystem type of the system image.An overlay setup is
@@ -1826,7 +1826,7 @@ div {
 #
 div {
     k.user.name.attribute = k.name.attribute
-    k.user.id.attribute = 
+    k.user.id.attribute =
         ## The user ID for this user
         attribute id { xsd:nonNegativeInteger }
     k.user.groups.attribute =
@@ -1871,7 +1871,7 @@ div {
 div {
     k.version.attlist = empty
     k.version =
-        ## A Version Number for the Image, Consists of Major.Minor.Release 
+        ## A Version Number for the Image, Consists of Major.Minor.Release
         element version {
             k.version.attlist &
             text
@@ -1915,7 +1915,7 @@ div {
     k.vmdisk.device.attribute =
         ## The disk device to appear in the guest (xen only)
         attribute device { text }
-    k.vmdisk.diskmode.attribute = 
+    k.vmdisk.diskmode.attribute =
         ## The disk mode (vmdk only)
         attribute diskmode {
             "monolithicSparse"     |
@@ -2042,7 +2042,7 @@ div {
     k.pxedeploy.server.attribute =
         ## Name or IP Address of server for downloading the data
         attribute server { text }
-    k.pxedeploy.blocksize.attribute = 
+    k.pxedeploy.blocksize.attribute =
         ## Blocksize value used for atftp downloads
         attribute blocksize { xsd:nonNegativeInteger }
     k.pxedeploy.attlist =
@@ -2065,7 +2065,7 @@ div {
 # main block: <description>
 #
 div {
-    k.description.type.attribute = 
+    k.description.type.attribute =
         ## Kiwi distinguishes between two basic image description types
         ## which uses the same format but one is created and provided by
         ## the kiwi developers and the other is created by the users of
@@ -2074,7 +2074,7 @@ div {
         ## a standard image description created by a kiwi user.
         attribute type { "boot" | "system" }
     k.description.attlist = k.description.type.attribute
-    k.description =  
+    k.description =
         ## A Short Description
         element description {
             k.description.attlist &
@@ -2090,11 +2090,11 @@ div {
 #
 div {
     k.drivers.profiles.attribute = k.profiles.attribute
-    k.drivers.attlist = 
+    k.drivers.attlist =
         k.drivers.profiles.attribute?
-        
+
     k.drivers =
-        ## A Collection of Driver Files 
+        ## A Collection of Driver Files
         element drivers {
             k.drivers.attlist &
             k.file+
@@ -2207,7 +2207,8 @@ div {
             k.expose? &
             k.volumes? &
             k.environment? &
-            k.labels?
+            k.labels? &
+            k.history?
         }
 }
 
@@ -2400,6 +2401,32 @@ div {
         }
 }
 
+#==========================================
+# main block: <history>
+#
+div {
+    k.history.created_by.attribute =
+        ## Specifies the 'created by' history record. By default set to 'KIWI'
+        attribute created_by { text }
+
+	k.history.author.attribute =
+        ## Specifies the 'author' history record.
+        attribute author { text }
+
+    k.history.attlist =
+        k.history.created_by.attribute? &
+		k.history.author.attribute?
+
+    k.history =
+        ## Provides details about the container history. Includes the
+        ## 'created by', 'author' as attributes and its content represents
+        ## the 'comment' entry.
+        element history {
+            k.history.attlist,
+            text
+        }
+}
+
 #==========================================
 # main block: <oemconfig>
 #
@@ -2587,7 +2614,7 @@ div {
     k.preferences.profiles.attribute = k.profiles.attribute
     k.preferences.attlist =
         k.preferences.profiles.attribute?
-    k.preferences =  
+    k.preferences =
         ## Configuration Information Needed for Logical Extend
         ## All elements are optional since the combination of appropriate
         ## preference sections based on profiles combine to create on vaild
@@ -2613,7 +2640,7 @@ div {
 #
 div {
     k.profiles.attlist = empty
-    k.profiles =  
+    k.profiles =
         ## Namespace section which creates a namespace and the
         ## drivers can bind itself to one of the listed namespaces.
         element profiles {
@@ -2629,7 +2656,7 @@ div {
     k.users.profiles.attribute = k.profiles.attribute
     k.users.attlist =
         k.users.profiles.attribute?
-    k.users = 
+    k.users =
         ## A List of Users
         element users {
             k.users.attlist &
diff --git a/kiwi/schema/kiwi.rng b/kiwi/schema/kiwi.rng
index 5575d9db8ed..78549e4a061 100644
--- a/kiwi/schema/kiwi.rng
+++ b/kiwi/schema/kiwi.rng
@@ -15,7 +15,7 @@
                 : configuration files. The schema is maintained
                 : in the relax compact syntax. Any changes should
                 : made in !! *** kiwi.rnc *** !!
-                : 
+                :
                 :
   STATUS        : Development
   ****************
@@ -146,7 +146,7 @@ named /etc/ImageID</a:documentation>
     </define>
     <define name="k.image">
       <element name="image">
-        <a:documentation>The root element of the configuration file   </a:documentation>
+        <a:documentation>The root element of the configuration file</a:documentation>
         <interleave>
           <ref name="k.image.attlist"/>
           <ref name="k.description"/>
@@ -896,7 +896,7 @@ recovery partition. Value is interpreted as MB</a:documentation>
     </define>
     <define name="k.oem-shutdown">
       <element name="oem-shutdown">
-        <a:documentation>For oemboot driven images: shutdown after first deployment 
+        <a:documentation>For oemboot driven images: shutdown after first deployment
 true/false</a:documentation>
         <ref name="k.oem-shutdown.attlist"/>
         <ref name="k.oem-shutdown.content"/>
@@ -917,7 +917,7 @@ true/false</a:documentation>
     </define>
     <define name="k.oem-shutdown-interactive">
       <element name="oem-shutdown-interactive">
-        <a:documentation>For oemboot driven images: shutdown after first deployment 
+        <a:documentation>For oemboot driven images: shutdown after first deployment
 true/false</a:documentation>
         <ref name="k.oem-shutdown-interactive.attlist"/>
         <ref name="k.oem-shutdown-interactive.content"/>
@@ -1577,7 +1577,7 @@ as well as a path specification</a:documentation>
     </define>
     <define name="k.rpm-check-signatures">
       <element name="rpm-check-signatures">
-        <a:documentation>Sets the used package manager to validate, or not, the 
+        <a:documentation>Sets the used package manager to validate, or not, the
 repository and/or package signatures. The behavior can be
 slightly different depending on the used package manager.
 This is a system wide package manager option, so that, this
@@ -1985,7 +1985,7 @@ size is set to 20 MB</a:documentation>
     <define name="k.type.efiparttable.attribute">
       <attribute name="efiparttable">
         <a:documentation>For images with an EFI firmware specifies the partition
-table type to use. If not set defaults to gpt partition 
+table type to use. If not set defaults to gpt partition
 table type.</a:documentation>
         <choice>
           <value>msdos</value>
@@ -2750,7 +2750,7 @@ default.</a:documentation>
   <div>
     <define name="k.union.ro.attribute">
       <attribute name="ro">
-        <a:documentation>Device only for read-only </a:documentation>
+        <a:documentation>Device only for read-only</a:documentation>
       </attribute>
     </define>
     <define name="k.union.rw.attribute">
@@ -2879,7 +2879,7 @@ to the user according to he specifing toolchain behaviour.</a:documentation>
     </define>
     <define name="k.version">
       <element name="version">
-        <a:documentation>A Version Number for the Image, Consists of Major.Minor.Release </a:documentation>
+        <a:documentation>A Version Number for the Image, Consists of Major.Minor.Release</a:documentation>
         <interleave>
           <ref name="k.version.attlist"/>
           <text/>
@@ -3258,7 +3258,7 @@ a standard image description created by a kiwi user.</a:documentation>
     </define>
     <define name="k.drivers">
       <element name="drivers">
-        <a:documentation>A Collection of Driver Files </a:documentation>
+        <a:documentation>A Collection of Driver Files</a:documentation>
         <interleave>
           <ref name="k.drivers.attlist"/>
           <oneOrMore>
@@ -3427,6 +3427,9 @@ section provides globally useful container information.</a:documentation>
           <optional>
             <ref name="k.labels"/>
           </optional>
+          <optional>
+            <ref name="k.history"/>
+          </optional>
         </interleave>
       </element>
     </define>
@@ -3699,6 +3702,42 @@ At least one label must be configured</a:documentation>
       </element>
     </define>
   </div>
+  <!--
+    ==========================================
+    main block: <history>
+    
+  -->
+  <div>
+    <define name="k.history.created_by.attribute">
+      <attribute name="created_by">
+        <a:documentation>Specifies the 'created by' history record. By default set to 'KIWI'</a:documentation>
+      </attribute>
+    </define>
+    <define name="k.history.author.attribute">
+      <attribute name="author">
+        <a:documentation>Specifies the 'author' history record.</a:documentation>
+      </attribute>
+    </define>
+    <define name="k.history.attlist">
+      <interleave>
+        <optional>
+          <ref name="k.history.created_by.attribute"/>
+        </optional>
+        <optional>
+          <ref name="k.history.author.attribute"/>
+        </optional>
+      </interleave>
+    </define>
+    <define name="k.history">
+      <element name="history">
+        <a:documentation>Provides details about the container history. Includes the
+'created by', 'author' as attributes and its content represents
+the 'comment' entry.</a:documentation>
+        <ref name="k.history.attlist"/>
+        <text/>
+      </element>
+    </define>
+  </div>
   <!--
     ==========================================
     main block: <oemconfig>
diff --git a/kiwi/xml_parse.py b/kiwi/xml_parse.py
index 5bb12008690..ebd3615fee5 100644
--- a/kiwi/xml_parse.py
+++ b/kiwi/xml_parse.py
@@ -16,7 +16,7 @@
 #   kiwi/schema/kiwi_for_generateDS.xsd
 #
 # Command line:
-#   /home/ms/Project/kiwi/.tox/3.6/bin/generateDS.py -f --external-encoding="utf-8" --no-dates --no-warnings -o "kiwi/xml_parse.py" kiwi/schema/kiwi_for_generateDS.xsd
+#   /home/david/work/kiwi/.env3/bin/generateDS.py -f --external-encoding="utf-8" --no-dates --no-warnings -o "kiwi/xml_parse.py" kiwi/schema/kiwi_for_generateDS.xsd
 #
 # Current working directory (os.getcwd()):
 #   kiwi
@@ -4865,7 +4865,7 @@ class containerconfig(GeneratedsSuper):
     useful container information."""
     subclass = None
     superclass = None
-    def __init__(self, name=None, tag=None, additionaltags=None, maintainer=None, user=None, workingdir=None, entrypoint=None, subcommand=None, expose=None, volumes=None, environment=None, labels=None):
+    def __init__(self, name=None, tag=None, additionaltags=None, maintainer=None, user=None, workingdir=None, entrypoint=None, subcommand=None, expose=None, volumes=None, environment=None, labels=None, history=None):
         self.original_tagname_ = None
         self.name = _cast(None, name)
         self.tag = _cast(None, tag)
@@ -4897,6 +4897,10 @@ def __init__(self, name=None, tag=None, additionaltags=None, maintainer=None, us
             self.labels = []
         else:
             self.labels = labels
+        if history is None:
+            self.history = []
+        else:
+            self.history = history
     def factory(*args_, **kwargs_):
         if CurrentSubclassModule_ is not None:
             subclass = getSubclassFromModule_(
@@ -4938,6 +4942,11 @@ def set_labels(self, labels): self.labels = labels
     def add_labels(self, value): self.labels.append(value)
     def insert_labels_at(self, index, value): self.labels.insert(index, value)
     def replace_labels_at(self, index, value): self.labels[index] = value
+    def get_history(self): return self.history
+    def set_history(self, history): self.history = history
+    def add_history(self, value): self.history.append(value)
+    def insert_history_at(self, index, value): self.history.insert(index, value)
+    def replace_history_at(self, index, value): self.history[index] = value
     def get_name(self): return self.name
     def set_name(self, name): self.name = name
     def get_tag(self): return self.tag
@@ -4957,7 +4966,8 @@ def hasContent_(self):
             self.expose or
             self.volumes or
             self.environment or
-            self.labels
+            self.labels or
+            self.history
         ):
             return True
         else:
@@ -5019,6 +5029,8 @@ def exportChildren(self, outfile, level, namespace_='', name_='containerconfig',
             environment_.export(outfile, level, namespace_, name_='environment', pretty_print=pretty_print)
         for labels_ in self.labels:
             labels_.export(outfile, level, namespace_, name_='labels', pretty_print=pretty_print)
+        for history_ in self.history:
+            history_.export(outfile, level, namespace_, name_='history', pretty_print=pretty_print)
     def build(self, node):
         already_processed = set()
         self.buildAttributes(node, node.attrib, already_processed)
@@ -5082,6 +5094,11 @@ def buildChildren(self, child_, node, nodeName_, fromsubclass_=False):
             obj_.build(child_)
             self.labels.append(obj_)
             obj_.original_tagname_ = 'labels'
+        elif nodeName_ == 'history':
+            obj_ = history.factory()
+            obj_.build(child_)
+            self.history.append(obj_)
+            obj_.original_tagname_ = 'history'
 # end class containerconfig
 
 
@@ -5933,6 +5950,107 @@ def buildChildren(self, child_, node, nodeName_, fromsubclass_=False):
 # end class label
 
 
+class history(GeneratedsSuper):
+    """Provides details about the container history. Includes the 'created
+    by', 'author' as attributes and its content represents the
+    'comment' entry."""
+    subclass = None
+    superclass = None
+    def __init__(self, created_by=None, author=None, valueOf_=None, mixedclass_=None, content_=None):
+        self.original_tagname_ = None
+        self.created_by = _cast(None, created_by)
+        self.author = _cast(None, author)
+        self.valueOf_ = valueOf_
+        if mixedclass_ is None:
+            self.mixedclass_ = MixedContainer
+        else:
+            self.mixedclass_ = mixedclass_
+        if content_ is None:
+            self.content_ = []
+        else:
+            self.content_ = content_
+        self.valueOf_ = valueOf_
+    def factory(*args_, **kwargs_):
+        if CurrentSubclassModule_ is not None:
+            subclass = getSubclassFromModule_(
+                CurrentSubclassModule_, history)
+            if subclass is not None:
+                return subclass(*args_, **kwargs_)
+        if history.subclass:
+            return history.subclass(*args_, **kwargs_)
+        else:
+            return history(*args_, **kwargs_)
+    factory = staticmethod(factory)
+    def get_created_by(self): return self.created_by
+    def set_created_by(self, created_by): self.created_by = created_by
+    def get_author(self): return self.author
+    def set_author(self, author): self.author = author
+    def get_valueOf_(self): return self.valueOf_
+    def set_valueOf_(self, valueOf_): self.valueOf_ = valueOf_
+    def hasContent_(self):
+        if (
+            (1 if type(self.valueOf_) in [int,float] else self.valueOf_)
+        ):
+            return True
+        else:
+            return False
+    def export(self, outfile, level, namespace_='', name_='history', namespacedef_='', pretty_print=True):
+        imported_ns_def_ = GenerateDSNamespaceDefs_.get('history')
+        if imported_ns_def_ is not None:
+            namespacedef_ = imported_ns_def_
+        if pretty_print:
+            eol_ = '\n'
+        else:
+            eol_ = ''
+        if self.original_tagname_ is not None:
+            name_ = self.original_tagname_
+        showIndent(outfile, level, pretty_print)
+        outfile.write('<%s%s%s' % (namespace_, name_, namespacedef_ and ' ' + namespacedef_ or '', ))
+        already_processed = set()
+        self.exportAttributes(outfile, level, already_processed, namespace_, name_='history')
+        outfile.write('>')
+        self.exportChildren(outfile, level + 1, namespace_, name_, pretty_print=pretty_print)
+        outfile.write(self.convert_unicode(self.valueOf_))
+        outfile.write('</%s%s>%s' % (namespace_, name_, eol_))
+    def exportAttributes(self, outfile, level, already_processed, namespace_='', name_='history'):
+        if self.created_by is not None and 'created_by' not in already_processed:
+            already_processed.add('created_by')
+            outfile.write(' created_by=%s' % (self.gds_encode(self.gds_format_string(quote_attrib(self.created_by), input_name='created_by')), ))
+        if self.author is not None and 'author' not in already_processed:
+            already_processed.add('author')
+            outfile.write(' author=%s' % (self.gds_encode(self.gds_format_string(quote_attrib(self.author), input_name='author')), ))
+    def exportChildren(self, outfile, level, namespace_='', name_='history', fromsubclass_=False, pretty_print=True):
+        pass
+    def build(self, node):
+        already_processed = set()
+        self.buildAttributes(node, node.attrib, already_processed)
+        self.valueOf_ = get_all_text_(node)
+        if node.text is not None:
+            obj_ = self.mixedclass_(MixedContainer.CategoryText,
+                MixedContainer.TypeNone, '', node.text)
+            self.content_.append(obj_)
+        for child in node:
+            nodeName_ = Tag_pattern_.match(child.tag).groups()[-1]
+            self.buildChildren(child, node, nodeName_)
+        return self
+    def buildAttributes(self, node, attrs, already_processed):
+        value = find_attr_value_('created_by', node)
+        if value is not None and 'created_by' not in already_processed:
+            already_processed.add('created_by')
+            self.created_by = value
+        value = find_attr_value_('author', node)
+        if value is not None and 'author' not in already_processed:
+            already_processed.add('author')
+            self.author = value
+    def buildChildren(self, child_, node, nodeName_, fromsubclass_=False):
+        if not fromsubclass_ and child_.tail is not None:
+            obj_ = self.mixedclass_(MixedContainer.CategoryText,
+                MixedContainer.TypeNone, '', child_.tail)
+            self.content_.append(obj_)
+        pass
+# end class history
+
+
 class oemconfig(GeneratedsSuper):
     """The oemconfig element specifies the OEM image configuration options
     which are used to repartition and setup the system disk."""
@@ -7688,6 +7806,7 @@ def main():
     "expose",
     "extension",
     "file",
+    "history",
     "ignore",
     "image",
     "k_source",
diff --git a/kiwi/xml_state.py b/kiwi/xml_state.py
index 17172bc1a15..e4f85004093 100644
--- a/kiwi/xml_state.py
+++ b/kiwi/xml_state.py
@@ -891,6 +891,9 @@ def get_container_config(self):
         container_config.update(
             self._match_docker_labels()
         )
+        container_config.update(
+            self._match_docker_history()
+        )
         return container_config
 
     def set_container_config_tag(self, tag):
@@ -1812,6 +1815,23 @@ def _match_docker_labels(self):
                         label.get_value()
         return container_labels
 
+    def _match_docker_history(self):
+        container_config_section = self.get_build_type_containerconfig_section()
+        container_history = {}
+        if container_config_section:
+            history = container_config_section.get_history()
+            if history:
+                container_history['history'] = {} 
+                if history[0].get_created_by():
+                    container_history['history']['created_by'] = \
+                        history[0].get_created_by()
+                if history[0].get_author():
+                    container_history['history']['author'] = \
+                        history[0].get_author()
+                container_history['history']['comment'] = \
+                    history[0].get_valueOf_()
+        return container_history
+
     def _solve_profile_dependencies(
         self, profile, available_profiles, current_profiles
     ):
diff --git a/test/data/example_config.xml b/test/data/example_config.xml
index fa4b261952a..5d266ca97b8 100644
--- a/test/data/example_config.xml
+++ b/test/data/example_config.xml
@@ -128,6 +128,7 @@
                     <label name="somelabel" value="labelvalue"/>
                     <label name="someotherlabel" value="anotherlabelvalue"/>
                 </labels>
+                <history author="history author" created_by="created by text">This is a comment</history>
             </containerconfig>
         </type>
         <type image="iso" mediacheck="true"/>
diff --git a/test/unit/container_image_oci_test.py b/test/unit/container_image_oci_test.py
index 784d1490d57..97c3575eb51 100644
--- a/test/unit/container_image_oci_test.py
+++ b/test/unit/container_image_oci_test.py
@@ -6,6 +6,7 @@
 from .test_helper import patch_open
 
 from kiwi.container.oci import ContainerImageOCI
+from kiwi.version import __version__
 
 
 class TestContainerImageOCI(object):
@@ -47,7 +48,8 @@ def test_init_without_custom_args(self):
         assert container.oci_config == {
             'container_name': 'kiwi-container',
             'container_tag': 'latest',
-            'entry_subcommand': ['/bin/bash']
+            'entry_subcommand': ['/bin/bash'],
+            'history': {'created_by': 'KIWI {0}'.format(__version__)}
         }
 
     @patch('kiwi.defaults.Defaults.is_buildservice_worker')
@@ -106,15 +108,16 @@ def test_create(
 
         self.oci.create('result.tar', None)
 
-        self.oci.oci.init_layout.assert_called_once_with(None)
+        self.oci.oci.init_layout.assert_called_once_with(False)
         self.oci.oci.unpack.assert_called_once_with('kiwi_oci_root_dir')
         self.oci.oci.repack.assert_called_once_with('kiwi_oci_root_dir')
         self.oci.oci.set_config.assert_called_once_with({
             'container_name': 'foo/bar',
             'additional_tags': ['current', 'foobar'],
             'container_tag': 'latest',
-            'entry_subcommand': ['/bin/bash']
-        })
+            'entry_subcommand': ['/bin/bash'],
+            'history': {'created_by': 'KIWI {0}'.format(__version__)}
+        }, False)
         assert self.oci.oci.add_tag.call_args_list == [
             call('current'), call('foobar')
         ]
@@ -164,17 +167,16 @@ def test_create_derived(
 
         mock_create.assert_called_once_with('kiwi_oci_dir.XXXX/oci_layout')
 
-        self.oci.oci.init_layout.assert_called_once_with(
-            'root_dir/image/image_file'
-        )
+        self.oci.oci.init_layout.assert_called_once_with(True)
         self.oci.oci.unpack.assert_called_once_with('kiwi_oci_root_dir')
         self.oci.oci.repack.assert_called_once_with('kiwi_oci_root_dir')
         self.oci.oci.set_config.assert_called_once_with({
             'container_name': 'foo/bar',
             'additional_tags': ['current', 'foobar'],
             'container_tag': 'latest',
-            'entry_subcommand': ['/bin/bash']
-        })
+            'entry_subcommand': ['/bin/bash'],
+            'history': {'created_by': 'KIWI {0}'.format(__version__)}
+        }, True)
         assert self.oci.oci.add_tag.call_args_list == [
             call('current'), call('foobar')
         ]
diff --git a/test/unit/oci_tools_umoci_test.py b/test/unit/oci_tools_umoci_test.py
index c758371fc33..c938cd731d3 100644
--- a/test/unit/oci_tools_umoci_test.py
+++ b/test/unit/oci_tools_umoci_test.py
@@ -3,12 +3,19 @@
 )
 
 from kiwi.oci_tools.umoci import OCIUmoci
+from kiwi.version import __version__
 
 
 class TestOCIBase(object):
+    @patch('kiwi.oci_tools.base.datetime')
     @patch('kiwi.oci_tools.base.mkdtemp')
-    def setup(self, mock_mkdtemp):
+    def setup(self, mock_mkdtemp, mock_datetime):
         mock_mkdtemp.return_value = 'tmpdir'
+        strftime = Mock()
+        strftime.strftime = Mock(return_value='current_date')
+        mock_datetime.utcnow = Mock(
+            return_value=strftime
+        )
         self.oci = OCIUmoci('tag')
 
     @patch('kiwi.oci_tools.umoci.Command.run')
@@ -22,12 +29,7 @@ def test_init_layout(self, mock_Command_run):
     @patch('kiwi.oci_tools.umoci.Command.run')
     def test_init_layout_base_image(self, mock_Command_run):
         self.oci.init_layout(True)
-        mock_Command_run.assert_called_once_with(
-            [
-                'umoci', 'config', '--image',
-                'tmpdir/oci_layout:base_layer', '--tag', 'tag'
-            ]
-        )
+        assert self.oci.container_name == 'tmpdir/oci_layout:base_layer'
 
     @patch('kiwi.oci_tools.umoci.Command.run')
     def test_unpack(self, mock_Command_run):
@@ -54,13 +56,7 @@ def test_add_tag(self, mock_Command_run):
         )
 
     @patch('kiwi.oci_tools.umoci.Command.run')
-    @patch('kiwi.oci_tools.umoci.datetime')
-    def test_set_config(self, mock_datetime, mock_Command_run):
-        strftime = Mock()
-        strftime.strftime = Mock(return_value='current_date')
-        mock_datetime.utcnow = Mock(
-            return_value=strftime
-        )
+    def test_set_config(self, mock_Command_run):
         oci_config = {
             'entry_command': ['/bin/bash', '-x'],
             'entry_subcommand': ['ls', '-l'],
@@ -70,7 +66,12 @@ def test_set_config(self, mock_datetime, mock_Command_run):
             'expose_ports': ['80', '42'],
             'volumes': ['/var/log', '/tmp'],
             'environment': {'FOO': 'bar', 'PATH': '/bin'},
-            'labels': {'a': 'value', 'b': 'value'}
+            'labels': {'a': 'value', 'b': 'value'},
+            'history': {
+                'author': 'history author',
+                'comment': 'This is a comment',
+                'created_by': 'created by text'
+            }
         }
         self.oci.set_config(oci_config)
         mock_Command_run.assert_called_once_with(
@@ -82,20 +83,35 @@ def test_set_config(self, mock_datetime, mock_Command_run):
                 '--config.exposedports=80', '--config.exposedports=42',
                 '--config.env=FOO=bar', '--config.env=PATH=/bin',
                 '--config.label=a=value', '--config.label=b=value',
-                '--image', 'tmpdir/oci_layout:tag', '--created', 'current_date'
+                '--history.comment=This is a comment',
+                '--history.created_by=created by text',
+                '--history.author=history author',
+                '--history.created', 'current_date',
+                '--image', 'tmpdir/oci_layout:tag', '--tag', 'tag',
+                '--created', 'current_date'
             ]
         )
 
     @patch('kiwi.oci_tools.umoci.Command.run')
-    @patch('kiwi.oci_tools.umoci.datetime')
+    def test_set_config_dervied_image(self, mock_Command_run):
+        self.oci.init_layout(True)
+        self.oci.set_config({}, True)
+        assert mock_Command_run.call_args_list == [
+            call([
+                'umoci', 'config', 
+                '--history.created', 'current_date',
+                '--image', 'tmpdir/oci_layout:base_layer', '--tag', 'tag',
+                '--created', 'current_date'
+            ]),
+            call(['umoci', 'rm', '--image', 'tmpdir/oci_layout:base_layer'])
+        ]
+        self.oci.container_name == 'tmpdir/oci_layout:tag'
+        
+
+    @patch('kiwi.oci_tools.umoci.Command.run')
     def test_set_config_clear_inherited_commands(
-        self, mock_datetime, mock_Command_run
+        self, mock_Command_run
     ):
-        strftime = Mock()
-        strftime.strftime = Mock(return_value='current_date')
-        mock_datetime.utcnow = Mock(
-            return_value=strftime
-        )
         oci_config = {
             'entry_command': [],
             'entry_subcommand': []
@@ -104,7 +120,8 @@ def test_set_config_clear_inherited_commands(
         mock_Command_run.assert_called_once_with(
             [
                 'umoci', 'config', '--clear=config.entrypoint',
-                '--clear=config.cmd', '--image', 'tmpdir/oci_layout:tag',
+                '--clear=config.cmd', '--history.created', 'current_date',
+                '--image', 'tmpdir/oci_layout:tag', '--tag', 'tag',
                 '--created', 'current_date'
             ]
         )
diff --git a/test/unit/xml_state_test.py b/test/unit/xml_state_test.py
index dc4c31af3ff..06c645820f0 100644
--- a/test/unit/xml_state_test.py
+++ b/test/unit/xml_state_test.py
@@ -4,6 +4,7 @@
 
 from kiwi.xml_state import XMLState
 from kiwi.xml_description import XMLDescription
+from kiwi.version import __version__
 from kiwi.exceptions import (
     KiwiTypeNotFound,
     KiwiDistributionNameError,
@@ -620,7 +621,7 @@ def test_add_container_label_without_contianerconfig(self):
         }
 
     @patch('kiwi.logger.log.warning')
-    def test_add_container_label_no_contianer_image_type(self, mock_log_warn):
+    def test_add_container_label_no_container_image_type(self, mock_log_warn):
         xml_data = self.description.load()
         state = XMLState(xml_data, ['vmxFlavour'], 'vmx')
         state.add_container_config_label('somelabel', 'newlabelvalue')
@@ -652,7 +653,12 @@ def test_get_container_config(self):
             'user': 'root',
             'volumes': ['/tmp', '/var/log'],
             'entry_command': ['/bin/bash', '-x'],
-            'expose_ports': ['80', '8080']
+            'expose_ports': ['80', '8080'],
+            'history': {
+                'author': 'history author',
+                'comment': 'This is a comment',
+                'created_by': 'created by text'
+            }
         }
         xml_data = self.description.load()
         state = XMLState(xml_data, ['vmxFlavour'], 'docker')
@@ -666,7 +672,7 @@ def test_get_container_config_clear_commands(self):
             'container_tag': 'container_tag',
             'workingdir': '/root',
             'user': 'root',
-            'entry_command': []
+            'entry_command': [],
         }
         xml_data = self.description.load()
         state = XMLState(xml_data, ['derivedContainer'], 'docker')