projectatomic/skopeo
Skopeo
Skopeo is a command line utility for inspecting, copying, and managing OCI and Docker container images across registries and local storage. It functions as a container image tool and registry manager that performs these operations without requiring a background daemon to be running on the host.
The tool specializes in daemonless image manipulation, allowing users to retrieve metadata, manifests, and tags from remote registries without pulling the full image locally. It provides capabilities for mirroring external repositories to internal registries for air-gapped deployments and manages the transfer of images between different remote registries and local filesystem directories.
Additional capabilities cover container image security through the generation and verification of cryptographic signatures to ensure image integrity. The utility also handles registry administration, including image deletion and tag listing, while managing authentication for private registries.
Features
- Daemonless Image Manipulation - Enables the modification and retrieval of container images via direct registry APIs without requiring a local daemon.
- OCI Registry API Clients - Implements the OCI distribution specification for transporting container images and layers through a programmatic client.
- OCI Container Registry Clients - Functions as a general-purpose client for inspecting, copying, and managing OCI and Docker images.
- Container Image Management - Provides utilities for managing and transferring container images across registries and local storage.
- Image Copying Utilities - Transfers container images between registries, local directories, and daemon storage.
- Container Image Registries - Manages the storage and distribution of container images across remote and local environments.
- Container Registry Management - Provides centralized management for transferring, mirroring, and deleting images across remote registries.
- Remote Image Inspection - Allows for viewing manifests and metadata of remote images without pulling the full image locally.
- Remote Image Inspection - A utility to retrieve metadata, manifests, and tags from remote container registries without pulling the image locally.
- Container Storage Abstractions - Abstracts differences between remote registries and local storage through a common interface.
- Container Registry Authentications - Passes required credentials and certificates to registries using configured login states or explicit flags.
- Air-Gapped Deployment Strategies - Implements strategies for mirroring external repositories to internal registries for use in isolated network environments.
- Registry Mirroring - Synchronizes images from external registries to internal ones for air-gapped environments.
- Remote Image Deletion - Provides capabilities to remove specific image tags or mark them for garbage collection in remote registries.
- Image Listing - Lists all available tags and images on a remote server for inspection.
- Manifest Resolvers - Parses image manifests to identify and stream individual filesystem layers between source and destination.
- Registry Administration Tools - Enables the management of image tags and the deletion of images within remote repositories.
- Container Image Signing - Applies digital signatures to container image manifests to ensure software authenticity and integrity.
- Container Image Signatures - Generates and verifies cryptographic signatures on container image manifests to ensure integrity.
- Signature Verification Tools - Provides utilities for validating cryptographic signatures and security policies to ensure the integrity of container images.
- Image Metadata Retrievers - Fetches comprehensive technical configuration and metadata for specific images stored in registries.
- Image Build and Analysis - Manages remote image registries and content signing.
