1podman-pull(1)() podman-pull(1)()
2
3
4
6 podman-pull - Pull an image from a registry
7
8
10 podman pull [options] name[:tag|@digest]
11
12
13 podman image pull [options] name[:tag|@digest]
14
15
17 Copies an image from a registry onto the local machine. podman pull
18 pulls an image from Docker Hub if a registry is not specified in the
19 command line argument. If an image tag is not specified, podman pull
20 defaults to the image with the latest tag (if it exists) and pulls it.
21 After the image is pulled, podman will print the full image ID. podman
22 pull can also pull an image using its digest podman pull image@digest.
23 podman pull can be used to pull images from archives and local storage
24 using different transports.
25
26
28 Image stored in local container/storage
29
30
32 The SOURCE is a location to get container images
33 The Image "SOURCE" uses a "transport":"details" format.
34
35
36 Multiple transports are supported:
37
38
39 dir:path
40 An existing local directory path storing the manifest, layer tarballs
41 and signatures as individual files. This is a non-standardized format,
42 primarily useful for debugging or noninvasive container inspection.
43
44
45 docker://docker-reference
46 An image in a registry implementing the "Docker Registry HTTP API
47 V2". By default, uses the authorization state in $XDG_RUNTIME_DIR/con‐
48 tainers/auth.json, which is set using (podman login). If the authoriza‐
49 tion state is not found there, $HOME/.docker/config.json is checked,
50 which is set using (docker login).
51
52
53 docker-archive:path[:docker-reference]
54 An image is stored in the docker save formatted file. docker-refer‐
55 ence is only used when creating such a file, and it must not contain a
56 digest.
57
58
59 docker-daemon:docker-reference
60 An image docker-reference stored in the docker daemon internal stor‐
61 age. docker-reference must contain either a tag or a digest. Alterna‐
62 tively, when reading images, the format can also be docker-dae‐
63 mon:algo:digest (an image ID).
64
65
66 oci-archive:path:tag
67 An image tag in a directory compliant with "Open Container Image Lay‐
68 out Specification" at path.
69
70
72 --all-tags, a
73
74
75 All tagged images in the repository will be pulled.
76
77
78 Note: When using the all-tags flag, Podman will not iterate over the
79 search registries in the containers-registries.conf(5) but will always
80 use docker.io for unqualified image names.
81
82
83 --authfile=path
84
85
86 Path of the authentication file. Default is ${XDG_RUNTIME_DIR}/contain‐
87 ers/auth.json, which is set using podman login. If the authorization
88 state is not found there, $HOME/.docker/config.json is checked, which
89 is set using docker login. (Not available for remote commands)
90
91
92 Note: You can also override the default path of the authentication file
93 by setting the REGISTRY_AUTH_FILE environment variable. export REG‐
94 ISTRY_AUTH_FILE=path
95
96
97 --cert-dir=path
98
99
100 Use certificates at path (*.crt, *.cert, *.key) to connect to the reg‐
101 istry. Default certificates directory is /etc/containers/certs.d. (Not
102 available for remote commands)
103
104
105 --creds=[username[:password]]
106
107
108 The [username[:password]] to use to authenticate with the registry if
109 required. If one or both values are not supplied, a command line
110 prompt will appear and the value can be entered. The password is
111 entered without echo.
112
113
114 --override-arch=ARCH
115
116
117 Override the machine's default architecture of the image to be pulled.
118 For example, arm.
119
120
121 --quiet, -q
122
123
124 Suppress output information when pulling images
125
126
127 --tls-verify=true|false
128
129
130 Require HTTPS and verify certificates when contacting registries
131 (default: true). If explicitly set to true, then TLS verification will
132 be used. If set to false, then TLS verification will not be used. If
133 not specified, TLS verification will be used unless the target registry
134 is listed as an insecure registry in registries.conf. (Not available
135 for remote commands)
136
137
138 --help, -h
139
140
141 Print usage statement
142
143
145 $ podman pull alpine:latest
146 Trying to pull registry.access.redhat.com/alpine:latest... Failed
147 Trying to pull registry.fedoraproject.org/alpine:latest... Failed
148 Trying to pull docker.io/library/alpine:latest...Getting image source signatures
149 Copying blob sha256:88286f41530e93dffd4b964e1db22ce4939fffa4a4c665dab8591fbab03d4926
150 1.90 MB / 1.90 MB [========================================================] 0s
151 Copying config sha256:76da55c8019d7a47c347c0dceb7a6591144d232a7dd616242a367b8bed18ecbc
152 1.48 KB / 1.48 KB [========================================================] 0s
153 Writing manifest to image destination
154 Storing signatures
155 04660052281190168dbb2362eb15bf7067a8dc642d2498055e0e72efa961a4b6
156
157
158
159 $ podman pull --authfile temp-auths/myauths.json docker://docker.io/umohnani/finaltest
160 Trying to pull docker.io/umohnani/finaltest:latest...Getting image source signatures
161 Copying blob sha256:6d987f6f42797d81a318c40d442369ba3dc124883a0964d40b0c8f4f7561d913
162 1.90 MB / 1.90 MB [========================================================] 0s
163 Copying config sha256:ad4686094d8f0186ec8249fc4917b71faa2c1030d7b5a025c29f26e19d95c156
164 1.41 KB / 1.41 KB [========================================================] 0s
165 Writing manifest to image destination
166 Storing signatures
167 03290064078cb797f3e0a530e78c20c13dd22a3dd3adf84a5da2127b48df0438
168
169
170
171 $ podman pull --creds testuser:testpassword docker.io/umohnani/finaltest
172 Trying to pull docker.io/umohnani/finaltest:latest...Getting image source signatures
173 Copying blob sha256:6d987f6f42797d81a318c40d442369ba3dc124883a0964d40b0c8f4f7561d913
174 1.90 MB / 1.90 MB [========================================================] 0s
175 Copying config sha256:ad4686094d8f0186ec8249fc4917b71faa2c1030d7b5a025c29f26e19d95c156
176 1.41 KB / 1.41 KB [========================================================] 0s
177 Writing manifest to image destination
178 Storing signatures
179 03290064078cb797f3e0a530e78c20c13dd22a3dd3adf84a5da2127b48df0438
180
181
182
183 $ podman pull --tls-verify=false --cert-dir image/certs docker.io/umohnani/finaltest
184 Trying to pull docker.io/umohnani/finaltest:latest...Getting image source signatures
185 Copying blob sha256:6d987f6f42797d81a318c40d442369ba3dc124883a0964d40b0c8f4f7561d913
186 1.90 MB / 1.90 MB [========================================================] 0s
187 Copying config sha256:ad4686094d8f0186ec8249fc4917b71faa2c1030d7b5a025c29f26e19d95c156
188 1.41 KB / 1.41 KB [========================================================] 0s
189 Writing manifest to image destination
190 Storing signatures
191 03290064078cb797f3e0a530e78c20c13dd22a3dd3adf84a5da2127b48df0438
192
193
194
195 $ podman pull --override-arch=arm arm32v7/debian:stretch
196 Trying to pull docker.io/arm32v7/debian:stretch...
197 Getting image source signatures
198 Copying blob b531ae4a3925 done
199 Copying config 3cba58dad5 done
200 Writing manifest to image destination
201 Storing signatures
202 3cba58dad5d9b35e755b48b634acb3fdd185ab1c996ac11510cc72c17780e13c
203
204
205
207 registries.conf (/etc/containers/registries.conf)
208
209
210 registries.conf is the configuration file which specifies which container registries should be consulted when completing image names which do not include a registry or domain portion.
211
212
213
214 NOTE: Use the environment variable TMPDIR to change the temporary stor‐
215 age location of downloaded container images. Podman defaults to use
216 /var/tmp.
217
218
220 podman(1), podman-push(1), podman-login(1), containers-reg‐
221 istries.conf(5)
222
223
225 July 2017, Originally compiled by Urvashi Mohnani umohnani@redhat.com
226 ⟨mailto:umohnani@redhat.com⟩
227
228
229
230 podman-pull(1)()