1OC IMAGE(1)                        June 2016                       OC IMAGE(1)
2
3
4

NAME

6       oc image extract - Copy files from an image to the filesystem
7
8
9

SYNOPSIS

11       oc image extract [OPTIONS]
12
13
14

DESCRIPTION

16       Extract the contents of an image to disk
17
18
19       Download  an image or parts of an image to the filesystem. Allows users
20       to access the contents of images without requiring a container  runtime
21       engine running.
22
23
24       Pass  images  to  extract  as arguments. The --paths flag allows you to
25       define multiple source to destination directory  mappings.  The  source
26       section  may be either a file, a directory (ends with a '/'), or a file
27       pattern within a directory. The destination section is a  directory  to
28       extract to. Both source and destination must be specified.
29
30
31       If  the  specified image supports multiple operating systems, the image
32       that matches the current operating system will be chosen. Otherwise you
33       must pass --filter-by-os to select the desired image.
34
35
36       You may further qualify the image by adding a layer selector to the end
37       of the image string to only extract specific layers  within  an  image.
38       The supported selectors are:
39
40
41       [  <index>]  - select the layer at the provided index (zero-indexed)  [
42       <from_index>, <to_index>] - select layers by index, exclusive  [  <pre‐
43       fix>] - select the layer with the matching prefix or return an error
44
45
46       Negative  indices  are  counted  from  the  end  of the list, e.g. [-1]
47       selects the last layer.
48
49
50       Experimental: This command is under active development and  may  change
51       without notice.
52
53
54

OPTIONS

56       --dry-run=false
57           Print  the actions that would be taken and exit without writing any
58       contents.
59
60
61       --filter-by-os=""
62           A regular expression to control which images are  mirrored.  Images
63       will be passed as '<platform>/<architecture>[/<variant>]'.
64
65
66       --insecure=false
67           Allow pull operations to registries to be made over HTTP
68
69
70       --only-files=false
71           Only extract regular files and directories from the image.
72
73
74       --path=[/:.]
75           Extract  only  part  of  an image. Must be SRC:DST where SRC is the
76       path within the image and DST a local directory. If not  specified  the
77       default is to extract everything to the current directory.
78
79
80

OPTIONS INHERITED FROM PARENT COMMANDS

82       --allow_verification_with_non_compliant_keys=false
83           Allow  a  SignatureVerifier  to  use  keys  which  are  technically
84       non-compliant with RFC6962.
85
86
87       --alsologtostderr=false
88           log to standard error as well as files
89
90
91       --application_metrics_count_limit=100
92           Max number of application metrics to store (per container)
93
94
95       --as=""
96           Username to impersonate for the operation
97
98
99       --as-group=[]
100           Group to impersonate for the operation, this flag can  be  repeated
101       to specify multiple groups.
102
103
104       --azure-container-registry-config=""
105           Path  to the file containing Azure container registry configuration
106       information.
107
108
109       --boot_id_file="/proc/sys/kernel/random/boot_id"
110           Comma-separated list of files to check for boot-id. Use  the  first
111       one that exists.
112
113
114       --cache-dir="/builddir/.kube/http-cache"
115           Default HTTP cache directory
116
117
118       --certificate-authority=""
119           Path to a cert file for the certificate authority
120
121
122       --client-certificate=""
123           Path to a client certificate file for TLS
124
125
126       --client-key=""
127           Path to a client key file for TLS
128
129
130       --cloud-provider-gce-lb-src-cidrs=130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16
131           CIDRs opened in GCE firewall for LB traffic proxy  health checks
132
133
134       --cluster=""
135           The name of the kubeconfig cluster to use
136
137
138       --container_hints="/etc/cadvisor/container_hints.json"
139           location of the container hints file
140
141
142       --containerd="unix:///var/run/containerd.sock"
143           containerd endpoint
144
145
146       --context=""
147           The name of the kubeconfig context to use
148
149
150       --default-not-ready-toleration-seconds=300
151           Indicates   the   tolerationSeconds   of   the    toleration    for
152       notReady:NoExecute  that is added by default to every pod that does not
153       already have such a toleration.
154
155
156       --default-unreachable-toleration-seconds=300
157           Indicates the tolerationSeconds  of  the  toleration  for  unreach‐
158       able:NoExecute  that  is  added  by  default to every pod that does not
159       already have such a toleration.
160
161
162       --docker="unix:///var/run/docker.sock"
163           docker endpoint
164
165
166       --docker-tls=false
167           use TLS to connect to docker
168
169
170       --docker-tls-ca="ca.pem"
171           path to trusted CA
172
173
174       --docker-tls-cert="cert.pem"
175           path to client certificate
176
177
178       --docker-tls-key="key.pem"
179           path to private key
180
181
182       --docker_env_metadata_whitelist=""
183           a comma-separated list of environment variable keys that  needs  to
184       be collected for docker containers
185
186
187       --docker_only=false
188           Only report docker containers in addition to root stats
189
190
191       --docker_root="/var/lib/docker"
192           DEPRECATED:  docker  root is read from docker info (this is a fall‐
193       back, default: /var/lib/docker)
194
195
196       --enable_load_reader=false
197           Whether to enable cpu load reader
198
199
200       --event_storage_age_limit="default=24h"
201           Max length of time for which to store events (per type). Value is a
202       comma  separated  list  of  key  values, where the keys are event types
203       (e.g.: creation, oom) or "default" and the value is a duration. Default
204       is applied to all non-specified event types
205
206
207       --event_storage_event_limit="default=100000"
208           Max  number  of  events to store (per type). Value is a comma sepa‐
209       rated list of key values, where the keys are event  types  (e.g.:  cre‐
210       ation,  oom)  or  "default"  and  the  value  is an integer. Default is
211       applied to all non-specified event types
212
213
214       --global_housekeeping_interval=0
215           Interval between global housekeepings
216
217
218       --housekeeping_interval=0
219           Interval between container housekeepings
220
221
222       --insecure-skip-tls-verify=false
223           If true, the server's certificate will not be checked for validity.
224       This will make your HTTPS connections insecure
225
226
227       --kubeconfig=""
228           Path to the kubeconfig file to use for CLI requests.
229
230
231       --log-flush-frequency=0
232           Maximum number of seconds between log flushes
233
234
235       --log_backtrace_at=:0
236           when logging hits line file:N, emit a stack trace
237
238
239       --log_cadvisor_usage=false
240           Whether to log the usage of the cAdvisor container
241
242
243       --log_dir=""
244           If non-empty, write log files in this directory
245
246
247       --logtostderr=true
248           log to standard error instead of files
249
250
251       --machine_id_file="/etc/machine-id,/var/lib/dbus/machine-id"
252           Comma-separated  list  of  files  to  check for machine-id. Use the
253       first one that exists.
254
255
256       --match-server-version=false
257           Require server version to match client version
258
259
260       -n, --namespace=""
261           If present, the namespace scope for this CLI request
262
263
264       --request-timeout="0"
265           The length of time to wait before giving  up  on  a  single  server
266       request. Non-zero values should contain a corresponding time unit (e.g.
267       1s, 2m, 3h). A value of zero means don't timeout requests.
268
269
270       -s, --server=""
271           The address and port of the Kubernetes API server
272
273
274       --stderrthreshold=2
275           logs at or above this threshold go to stderr
276
277
278       --storage_driver_buffer_duration=0
279           Writes in the storage driver will be buffered  for  this  duration,
280       and committed to the non memory backends as a single transaction
281
282
283       --storage_driver_db="cadvisor"
284           database name
285
286
287       --storage_driver_host="localhost:8086"
288           database host:port
289
290
291       --storage_driver_password="root"
292           database password
293
294
295       --storage_driver_secure=false
296           use secure connection with database
297
298
299       --storage_driver_table="stats"
300           table name
301
302
303       --storage_driver_user="root"
304           database username
305
306
307       --token=""
308           Bearer token for authentication to the API server
309
310
311       --user=""
312           The name of the kubeconfig user to use
313
314
315       -v, --v=0
316           log level for V logs
317
318
319       --version=false
320           Print version information and quit
321
322
323       --vmodule=
324           comma-separated  list  of pattern=N settings for file-filtered log‐
325       ging
326
327
328

EXAMPLE

330                # Extract the busybox image into the current directory
331                oc image docker.io/library/busybox:latest
332
333                # Extract the busybox image to a temp directory (must exist)
334                oc image docker.io/library/busybox:latest --path /:/tmp/busybox
335
336                # Extract a single file from the image into the current directory
337                oc image docker.io/library/centos:7 --path /bin/bash:.
338
339                # Extract all .repo files from the image's /etc/yum.repos.d/ folder.
340                oc image docker.io/library/centos:7 --path /etc/yum.repos.d/*.repo:.
341
342                # Extract the last layer in the image
343                oc image docker.io/library/centos:7[-1]
344
345                # Extract the first three layers of the image
346                oc image docker.io/library/centos:7[:3]
347
348                # Extract the last three layers of the image
349                oc image docker.io/library/centos:7[-3:]
350
351
352
353

SEE ALSO

355       oc-image(1),
356
357
358

HISTORY

360       June 2016, Ported from the Kubernetes man-doc generator
361
362
363
364Openshift                  Openshift CLI User Manuals              OC IMAGE(1)
Impressum