projectatomic/skopeo
Skopeo
Skopeo es una utilidad de línea de comandos para inspeccionar, copiar y gestionar imágenes de contenedores OCI y Docker a través de registros y almacenamiento local. Funciona como una herramienta de imágenes de contenedores y gestor de registros que realiza estas operaciones sin necesidad de que un demonio en segundo plano se esté ejecutando en el host.
La herramienta se especializa en la manipulación de imágenes sin demonio (daemonless), permitiendo a los usuarios recuperar metadatos, manifiestos y etiquetas de registros remotos sin descargar la imagen completa localmente. Proporciona capacidades para replicar repositorios externos a registros internos para despliegues en entornos aislados (air-gapped) y gestiona la transferencia de imágenes entre diferentes registros remotos y directorios del sistema de archivos local.
Las capacidades adicionales cubren la seguridad de las imágenes de contenedores mediante la generación y verificación de firmas criptográficas para garantizar la integridad de la imagen. La utilidad también gestiona la administración del registro, incluyendo la eliminación de imágenes y el listado de etiquetas, mientras gestiona la autenticación para registros privados.
Features
- Daemonless Image Manipulation - Enables the modification and retrieval of container images via direct registry APIs without requiring a local daemon.
- OCI Registry API Clients - Implements the OCI distribution specification for transporting container images and layers through a programmatic client.
- OCI Container Registry Clients - Functions as a general-purpose client for inspecting, copying, and managing OCI and Docker images.
- Container Image Management - Provides utilities for managing and transferring container images across registries and local storage.
- Image Copying Utilities - Transfers container images between registries, local directories, and daemon storage.
- Container Image Registries - Manages the storage and distribution of container images across remote and local environments.
- Container Registry Management - Provides centralized management for transferring, mirroring, and deleting images across remote registries.
- Remote Image Inspection - Allows for viewing manifests and metadata of remote images without pulling the full image locally.
- Remote Image Inspection - A utility to retrieve metadata, manifests, and tags from remote container registries without pulling the image locally.
- Container Storage Abstractions - Abstracts differences between remote registries and local storage through a common interface.
- Container Registry Authentications - Passes required credentials and certificates to registries using configured login states or explicit flags.
- Air-Gapped Deployment Strategies - Implements strategies for mirroring external repositories to internal registries for use in isolated network environments.
- Registry Mirroring - Synchronizes images from external registries to internal ones for air-gapped environments.
- Remote Image Deletion - Provides capabilities to remove specific image tags or mark them for garbage collection in remote registries.
- Image Listing - Lists all available tags and images on a remote server for inspection.
- Manifest Resolvers - Parses image manifests to identify and stream individual filesystem layers between source and destination.
- Registry Administration Tools - Enables the management of image tags and the deletion of images within remote repositories.
- Container Image Signing - Applies digital signatures to container image manifests to ensure software authenticity and integrity.
- Container Image Signatures - Generates and verifies cryptographic signatures on container image manifests to ensure integrity.
- Signature Verification Tools - Provides utilities for validating cryptographic signatures and security policies to ensure the integrity of container images.
- Image Metadata Retrievers - Fetches comprehensive technical configuration and metadata for specific images stored in registries.
- Image Build and Analysis - Manages remote image registries and content signing.
