containers/skopeo
Skopeo
Skopeo is an OCI container image manager and registry client designed for inspecting, copying, and signing container images across different registries and storage backends. It enables the manipulation of container images using direct API calls to registries, operating independently of a local container daemon or runtime.
The tool provides specialized capabilities for container image mirroring and synchronization, specifically supporting the mirroring of external repositories to internal registries for air-gapped environments. It also functions as a container image signing tool, allowing for the attachment and verification of cryptographic signatures to ensure content integrity and authenticity.
Broad functional areas include remote registry administration and inspection, which allow for the retrieval of image manifests and metadata as well as the deletion of specific image versions and tags. The system also manages secure registry access through credential-based authentication and session management.
Features
- Container Image Management - Moves and copies container images between different registries or local storage without needing a full container runtime.
- Registry Mirroring - Mirrors external container repositories to internal registries to provide image access for air-gapped environments.
- Image Copying Utilities - Moves images between registries, local directories, and storage daemons without requiring a full container runtime.
- Container Image Mirroring Tools - Syncs images between remote registries and local storage to support air-gapped environments.
- Daemonless Image Manipulation - Manipulates container images using direct API calls to registries instead of relying on a local container daemon.
- Container Registry Management - Handles authentication and session management for authorizing protected operations on remote container registries.
- Image Registry Clients - Manages remote image repositories and manifests without requiring a full container runtime.
- Remote Image Inspection - Views image manifests and metadata from a remote registry without having to pull the actual image.
- Repository Mirrors - Provides mechanisms to synchronize remote container image repositories to local servers, supporting air-gapped environments.
- Container Image Signing Tools - Attaches and verifies cryptographic signatures on container images to ensure content integrity.
- Container Image Signatures - Attaches and verifies digital signatures on image manifests to ensure content integrity and origin.
- Registry Authentication Providers - Provides secure access to private registries using bearer tokens, certificates, and credential helpers.
- Remote Image Pulling - Retrieves manifests, layers, and metadata from a registry to view tags and labels without pulling images.
- Registry Management - Manages authenticated sessions and deletes specific image versions or tags directly from remote registries.
- Remote Image Deletion - Removes specific images or tags from a remote container image repository.
- Image Integrity Verification - Validates container image signatures to ensure only trusted code is deployed to the environment.
- Image Inspection - Retrieves low-level information and available tags from a remote registry to verify version details.
- Container Image Analyzers - Retrieves metadata and detailed information from remote registries without requiring a local container runtime.
- Filesystem Storage Drivers - Streams image layers between registries and storage without extracting them to a root filesystem.
- Manifest Resolvers - Moves images by parsing manifests to fetch and stream individual filesystem layers.
- Registry API Integrations - Communicates with remote registries via HTTP APIs to move, inspect, and delete manifests and layers.
- Container Image Signing - Enables attaching and verifying cryptographic signatures on container images to ensure content integrity.
- Container Management - Container image management tool.
- Build And Packaging - Retrieves and manages remote container registry images.
- Registry Clients - Retrieves information and copies images between registries.
