genuinetools/img
Img
img is a collection of toolsets for building, managing, and manipulating OCI compliant container images. It functions as an image build tool and registry client, providing the capabilities to create images from configuration files, push and pull images to remote registries, and extract image layers into root filesystems or archives.
The project distinguishes itself through support for multi-platform builds using hardware emulators and the ability to perform unprivileged container builds via namespace-based process isolation and user ID mapping. It also includes a cross-platform binary compiler for producing static executables and container images targeting multiple operating systems and hardware architectures.
Additional capabilities cover the full image lifecycle, including local storage analysis, build cache optimization, and image metadata inspection. The toolset also manages registry authentication and session credentials for secure interactions with remote image stores.
Features
- Container Image Management - Provides a command-line interface for creating, tagging, pushing, and pulling OCI compliant container images.
- Container Filesystem Manipulation - Extracts image layers to root filesystems or archives for inspection and modification of container contents.
- Container Build Tools - Creates OCI compliant container images from configuration files with support for secret mounts and multi-platform builds.
- Image Builders - Creates container images from configuration files using environment variables, labels, and secret mounts.
- Multi-Platform Builds - Produces images for multiple operating systems and architectures by integrating hardware emulators.
- Image Registry Clients - Implements a client for authenticating with remote registries and performing image push and pull operations.
- Layered Filesystems - Provides capabilities to unpack layered container image filesystems into local directories for root filesystem creation.
- Unprivileged Image Building - Allows the creation of container images and namespace management without requiring root privileges on the host.
- Namespace-Based Isolation - Utilizes Linux kernel namespaces and user ID mapping to isolate the build environment from the host system.
- Multi-Architecture Emulators - Integrates hardware emulators to enable building container images for different architectures from a single host.
- Build Artifact Exports - Enables outputting image contents as tar archives, bundles, or local directories via specific exporters.
- Standalone Binary Compilation - Compiles source code and embeds all external dependencies into a single, standalone executable file.
- Cross-Architecture Binary Compilation - Enables the compilation of static binaries targeting multiple hardware architectures and operating systems.
- Static Binary Compilers - Compiles source code into standalone, statically linked executables to ensure portability across environments.
- Build Caching Systems - Provides utilities to analyze and prune unused build cache data to reclaim local disk space.
- Remote Image Pulling - Provides a utility for retrieving container images from remote registries for local use.
- Image Archive Portability - Exports container images into industry-standard tar archives for distribution or storage.
- Image Push-Pull Workflows - Implements functionality to upload locally built or modified images to remote registries.
- Unprivileged Mounts - Provides user and group ID mapping to enable filesystem mounting without requiring root access.
- Layer Extraction - Extracts the entire filesystem of an image into a specified directory for manual inspection or modification.
- Cross-Platform Binary Generation - Generates platform-specific native binaries for diverse CPU architectures and operating systems.
- Registry Authentication Providers - Provides a mechanism for logging into container registries using username and password credentials.
- Registry Authentication Managers - Manages authentication tokens and session records for secure interactions with remote container registries.
- Container Runtimes and Platforms - Daemon-less container image builder.
- Image Builders - Daemon-less and unprivileged OCI image builder.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
