1OC IMAGE(1) June 2016 OC IMAGE(1)
2
6 oc image mirror - Mirror images from one repository to another
7
11 oc image mirror [OPTIONS]
12
16 Mirror images from one image repository to another.
17 Accepts a list of arguments defining source images that should be
20 pushed to the provided destination image tag. The images are streamed
21 from registry to registry without being stored locally. The default
22 docker credentials are used for authenticating to the registries.
23 When using S3 mirroring the region and bucket must be the first two
26 segments after the host. Mirroring will create the necessary metadata
27 so that images can be pulled via tag or digest, but listing manifests
28 and tags will not be possible. You may also specify one or more
29 --s3-source-bucket parameters (as <bucket>/ <path>) to designate buck‐
30 ets to look in to find blobs (instead of uploading). The source bucket
31 also supports the suffix "/ [store]", which will transform blob identi‐
32 fiers into the form the Docker registry uses on disk, allowing you to
33 mirror directly from an existing S3-backed Docker registry. Credentials
34 for S3 may be stored in your docker credential file and looked up by
35 host.
36 Images in manifest list format will be copied as-is unless you use
39 --filter-by-os to restrict the allowed images to copy in a manifest
40 list. This flag has no effect on regular images.
41
45 --dry-run=false
46 Print the actions that would be taken and exit without writing to
47 the destinations.
48 -f, --filename=[]
51 One or more files to read SRC=DST or SRC DST [DST ...] mappings
52 from.
53 --filter-by-os=""
56 A regular expression to control which images are mirrored. Images
57 will be passed as '<platform>/<architecture>[/<variant>]'.
58 --force=false
61 Attempt to write all layers and manifests even if they exist in the
62 remote repository.
63 --insecure=false
66 Allow push and pull operations to registries to be made over HTTP
67 --max-per-registry=6
70 Number of concurrent requests allowed per registry.
71 --max-registry=4
74 Number of concurrent registries to connect to at any one time.
75 --s3-source-bucket=[]
78 A list of bucket/path locations on S3 that may contain already
79 uploaded blobs. Add [store] to the end to use the Docker registry path
80 convention.
81 --skip-mount=false
84 Always push layers instead of cross-mounting them
85 --skip-multiple-scopes=false
88 Some registries do not support multiple scopes passed to the reg‐
89 istry login.
90
94 --allow_verification_with_non_compliant_keys=false
95 Allow a SignatureVerifier to use keys which are technically
96 non-compliant with RFC6962.
97 --alsologtostderr=false
100 log to standard error as well as files
101 --application_metrics_count_limit=100
104 Max number of application metrics to store (per container)
105 --as=""
108 Username to impersonate for the operation
109 --as-group=[]
112 Group to impersonate for the operation, this flag can be repeated
113 to specify multiple groups.
114 --azure-container-registry-config=""
117 Path to the file containing Azure container registry configuration
118 information.
119 --boot_id_file="/proc/sys/kernel/random/boot_id"
122 Comma-separated list of files to check for boot-id. Use the first
123 one that exists.
124 --cache-dir="/builddir/.kube/http-cache"
127 Default HTTP cache directory
128 --certificate-authority=""
131 Path to a cert file for the certificate authority
132 --client-certificate=""
135 Path to a client certificate file for TLS
136 --client-key=""
139 Path to a client key file for TLS
140 --cloud-provider-gce-lb-src-cidrs=130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16
143 CIDRs opened in GCE firewall for LB traffic proxy health checks
144 --cluster=""
147 The name of the kubeconfig cluster to use
148 --container_hints="/etc/cadvisor/container_hints.json"
151 location of the container hints file
152 --containerd="unix:///var/run/containerd.sock"
155 containerd endpoint
156 --context=""
159 The name of the kubeconfig context to use
160 --default-not-ready-toleration-seconds=300
163 Indicates the tolerationSeconds of the toleration for
164 notReady:NoExecute that is added by default to every pod that does not
165 already have such a toleration.
166 --default-unreachable-toleration-seconds=300
169 Indicates the tolerationSeconds of the toleration for unreach‐
170 able:NoExecute that is added by default to every pod that does not
171 already have such a toleration.
172 --docker="unix:///var/run/docker.sock"
175 docker endpoint
176 --docker-tls=false
179 use TLS to connect to docker
180 --docker-tls-ca="ca.pem"
183 path to trusted CA
184 --docker-tls-cert="cert.pem"
187 path to client certificate
188 --docker-tls-key="key.pem"
191 path to private key
192 --docker_env_metadata_whitelist=""
195 a comma-separated list of environment variable keys that needs to
196 be collected for docker containers
197 --docker_only=false
200 Only report docker containers in addition to root stats
201 --docker_root="/var/lib/docker"
204 DEPRECATED: docker root is read from docker info (this is a fall‐
205 back, default: /var/lib/docker)
206 --enable_load_reader=false
209 Whether to enable cpu load reader
210 --event_storage_age_limit="default=24h"
213 Max length of time for which to store events (per type). Value is a
214 comma separated list of key values, where the keys are event types
215 (e.g.: creation, oom) or "default" and the value is a duration. Default
216 is applied to all non-specified event types
217 --event_storage_event_limit="default=100000"
220 Max number of events to store (per type). Value is a comma sepa‐
221 rated list of key values, where the keys are event types (e.g.: cre‐
222 ation, oom) or "default" and the value is an integer. Default is
223 applied to all non-specified event types
224 --global_housekeeping_interval=0
227 Interval between global housekeepings
228 --housekeeping_interval=0
231 Interval between container housekeepings
232 --httptest.serve=""
235 if non-empty, httptest.NewServer serves on this address and blocks
236 --insecure-skip-tls-verify=false
239 If true, the server's certificate will not be checked for validity.
240 This will make your HTTPS connections insecure
241 --kubeconfig=""
244 Path to the kubeconfig file to use for CLI requests.
245 --log-flush-frequency=0
248 Maximum number of seconds between log flushes
249 --log_backtrace_at=:0
252 when logging hits line file:N, emit a stack trace
253 --log_cadvisor_usage=false
256 Whether to log the usage of the cAdvisor container
257 --log_dir=""
260 If non-empty, write log files in this directory
261 --logtostderr=true
264 log to standard error instead of files
265 --machine_id_file="/etc/machine-id,/var/lib/dbus/machine-id"
268 Comma-separated list of files to check for machine-id. Use the
269 first one that exists.
270 --match-server-version=false
273 Require server version to match client version
274 -n, --namespace=""
277 If present, the namespace scope for this CLI request
278 --request-timeout="0"
281 The length of time to wait before giving up on a single server
282 request. Non-zero values should contain a corresponding time unit (e.g.
283 1s, 2m, 3h). A value of zero means don't timeout requests.
284 -s, --server=""
287 The address and port of the Kubernetes API server
288 --stderrthreshold=2
291 logs at or above this threshold go to stderr
292 --storage_driver_buffer_duration=0
295 Writes in the storage driver will be buffered for this duration,
296 and committed to the non memory backends as a single transaction
297 --storage_driver_db="cadvisor"
300 database name
301 --storage_driver_host="localhost:8086"
304 database host:port
305 --storage_driver_password="root"
308 database password
309 --storage_driver_secure=false
312 use secure connection with database
313 --storage_driver_table="stats"
316 table name
317 --storage_driver_user="root"
320 database username
321 --token=""
324 Bearer token for authentication to the API server
325 --user=""
328 The name of the kubeconfig user to use
329 -v, --v=0
332 log level for V logs
333 --version=false
336 Print version information and quit
337 --vmodule=
340 comma-separated list of pattern=N settings for file-filtered log‐
341 ging
342
346 # Copy image to another tag
347 oc image mirror myregistry.com/myimage:latest myregistry.com/myimage:stable
348 # Copy image to another registry
350 oc image mirror myregistry.com/myimage:latest docker.io/myrepository/myimage:stable
351 # Copy image to S3 (pull from <bucket>.s3.amazonaws.com/image:latest)
353 oc image mirror myregistry.com/myimage:latest s3://s3.amazonaws.com/<region>/<bucket>/image:latest
354 # Copy image to S3 without setting a tag (pull via @<digest>)
356 oc image mirror myregistry.com/myimage:latest s3://s3.amazonaws.com/<region>/<bucket>/image
357 # Copy image to multiple locations
359 oc image mirror myregistry.com/myimage:latest docker.io/myrepository/myimage:stable \
360 docker.io/myrepository/myimage:dev
361 # Copy multiple images
363 oc image mirror myregistry.com/myimage:latest=myregistry.com/other:test \
364 myregistry.com/myimage:new=myregistry.com/other:target
365
370 oc-image(1),
371
375 June 2016, Ported from the Kubernetes man-doc generator
376Openshift Openshift CLI User Manuals OC IMAGE(1)