regctl

List tags for an image

$ regctl tag ls [registry/image]

$ regctl image inspect [registry/image:tag]

$ regctl image copy [source/image:tag] [dest/image:tag]

$ regctl image digest [registry/image:tag]

$ regctl tag rm [registry/image:tag]

$ regctl image export [registry/image:tag] [output.tar]

$ regctl repo ls [registry]

$ regctl registry ratelimit docker.io

regctl command [subcommand] [options] [arguments]

regctl is a CLI tool for interacting with OCI-compliant container registries without requiring a container runtime or privileged access. It provides efficient image operations by working directly with registry APIs.
The tool excels at copying images between registries, transferring only layers that don't exist at the destination. This makes it efficient for mirroring, promoting images between environments, or synchronizing across air-gapped systems.
Regctl supports multi-platform images, OCI artifacts, and can work with OCI Layout directories as local registry equivalents. It automatically imports credentials from Docker CLI configuration.
Common workflows include inspecting remote images, copying between registries, managing tags, checking rate limits, and exporting/importing images for offline transfer.

image inspect ref

Display image configuration and metadata

Copy image between registries (efficient layer reuse)

Get image digest

Export image to tar file (OCI or Docker format)

Import image from tar file

List tags in a repository

Delete a tag from registry

List repositories in a registry

Get raw manifest content

Upload manifest to registry

Download blob content

Authenticate with a registry

Filter by platform (linux/amd64, linux/arm64)

Output format (Go template)

Set logging verbosity

~/.regctl/config.json

Main configuration file storing registry credentials, default settings, and registry-specific options.

Docker CLI credential store, automatically imported by regctl for registry authentication.

Delete operations require registries to support the delete API, which some (like Docker Hub for free accounts) may restrict.
Authentication is inherited from Docker CLI config by default. Use regctl registry login for separate credential management.
Multi-platform images require --platform to select a specific architecture when operations cannot handle manifests lists (like some exports).
Rate limits apply to Docker Hub and other registries. Use regctl registry ratelimit to check current status before bulk operations.

docker(1), skopeo(1), crane(1), podman(1)