crane

Pull image

$ crane pull [registry/image:tag] [output.tar]

$ crane push [image.tar] [registry/image:tag]

$ crane copy [src/image:tag] [dst/image:tag]

$ crane ls [registry/image]

$ crane digest [registry/image:tag]

$ crane manifest [registry/image:tag]

$ crane config [registry/image:tag]

$ crane auth login [registry] -u [user] -p [password]

crane command [options] [arguments]

crane is a tool for interacting with container registries. It can pull, push, copy, and inspect container images without requiring a container runtime like Docker. Part of the go-containerregistry project.

--platform os/arch

Target platform (e.g., linux/amd64)

Allow insecure registry connections

Verbose output

pull

Download image as tarball

Upload tarball as image

Copy image between registries

List tags for repository

Get image digest

Get image manifest

Get image config

List repositories in registry

Manage registry authentication

Append layers to image

Flatten image layers

Modify image metadata

Validate image

Export filesystem from image

DOCKER_CONFIG

Path to Docker config for credentials

Does not require Docker daemon. Uses OCI registry API directly. Credentials read from Docker config by default.

docker(1), skopeo(1), cosign(1)