is kinda BULLPOOP actually that docker do NOT do what is minimum of good sense and report such thing, and unfortunately the only solution I seem to find is ... oh well, ACTUALLY FISHING:
go to image webpage (nigix in my case) https://hub.docker.com/_/nginx
then press tags tab,
go to any latest, and copy sha256 sum
then sort by newest, then scroll down until first numbered version
and check if the exact same sha256 is displayed
now ... STILL after that fishing, there library/nginxit comes a sure thing:
you can verify if you did it right, for example now I manage to find that nginx:latest is actually 1.17.8, so, I run:
docker pull nginx:1.17.8
1.17.8: Pulling from library/nginx
bc51dd8edc1b: Pull complete
66ba67045f57: Pull complete
bf317aa10aa5: Pull complete
Digest:sha256:ad5552c786f128e389a0263104ae39f3d3c7895579d45ae716f528185b36bc6f
Status: Downloaded newer image for nginx:1.17.8
and then I verify by atempt to pull latest:
docker pull nginx:latest
latest: Pulling from library/nginx
Digest: sha256:ad5552c786f128e389a0263104ae39f3d3c7895579d45ae716f528185b36bc6f
Status: Downloaded newer image for nginx:latest
how you can see it didn't actually pull anything, and sha256 is the exact same ;)
latest
tag actually refers to.