title: How can I verify a docker image hash?
body: <p>I'm trying to reproduce the hash produced by <code>docker images --digests</code> myself.</p>
  
  <p>I've tried running <code>docker save -o image.tar &lt;image&gt;</code> extracting it and running <code>cat metadata.json | shasum -a 256</code> (and a few variants, like piping through jq or trimming it) but haven't been able to match the hash that docker gives me.</p>
  
  <p>Should what I'm trying work, or is there another mechanism I can use?</p>