|
|
|
@ -195,7 +195,7 @@ You can check that this token is working properly by inspecting an image stream |
|
|
|
in the `openshift` namespace: |
|
|
|
|
|
|
|
```sh |
|
|
|
skopeo --tls-verify=false inspect --creds="skopeo:$TOKEN" docker://$REGISTRY/openshift/nodejs |
|
|
|
skopeo inspect --creds="skopeo:$TOKEN" docker://$REGISTRY/openshift/nodejs |
|
|
|
``` |
|
|
|
|
|
|
|
`nodejs` is an image stream that is provisioned by default on every OpenShift |
|
|
|
@ -232,7 +232,7 @@ You can then copy your images to the OpenShift registry, in the `my-images` |
|
|
|
project: |
|
|
|
|
|
|
|
```sh |
|
|
|
skopeo --dest-tls-verify=false copy --dest-creds="skopeo:$TOKEN" oci:./target:rhel7:7.5 docker://$REGISTRY/my-images/rhel7:7.5 |
|
|
|
skopeo copy --dest-creds="skopeo:$TOKEN" oci:./target:rhel7:7.5 docker://$REGISTRY/my-images/rhel7:7.5 |
|
|
|
``` |
|
|
|
|
|
|
|
Did you know that even if you can store the images locally, you can also copy |
|
|
|
@ -241,7 +241,7 @@ them "on the fly" without any local storage ? |
|
|
|
Try to copy an image from the Docker Hub directly to the OpenShift registry: |
|
|
|
|
|
|
|
```sh |
|
|
|
skopeo --dest-tls-verify=false --src-tls-verify=false copy --dest-creds="skopeo:$TOKEN" docker://docker.io/centos:7 docker://$REGISTRY/my-images/centos:7 |
|
|
|
skopeo copy --dest-creds="skopeo:$TOKEN" docker://docker.io/centos:7 docker://$REGISTRY/my-images/centos:7 |
|
|
|
``` |
|
|
|
|
|
|
|
## Pulling an image to the OpenShift registry |
|
|
|
@ -270,7 +270,7 @@ You can then copy your images from the OpenShift registry, located in the |
|
|
|
`other-images` project: |
|
|
|
|
|
|
|
```sh |
|
|
|
skopeo --dest-tls-verify=false --src-tls-verify=false copy --src-creds="skopeo:$TOKEN" docker://$REGISTRY/other-images/myimage:latest oci:./target:myimage:latest |
|
|
|
skopeo copy --src-creds="skopeo:$TOKEN" docker://$REGISTRY/other-images/myimage:latest oci:./target:myimage:latest |
|
|
|
``` |
|
|
|
|
|
|
|
## Persist the registry credentials |
|
|
|
@ -351,6 +351,8 @@ You can now update the CA Trust Store: |
|
|
|
sudo update-ca-trust extract |
|
|
|
``` |
|
|
|
|
|
|
|
Otherwise, you can just pass the `--tls-verify=false` or `--src-tls-verify=false`/`--dest-tls-verify=false` options to skopeo... |
|
|
|
|
|
|
|
## Conclusion |
|
|
|
|
|
|
|
Skopeo is a powerful tool to copy and archive container images. It is |
|
|
|
|