1podman-pull(1)()                                              podman-pull(1)()
2
3
4

NAME

6       podman-pull - Pull an image from a registry
7
8

SYNOPSIS

10       podman pull [options] name[:tag|@digest]
11
12
13       podman image pull [options] name[:tag|@digest]
14
15

DESCRIPTION

17       Copies  an  image  from  a registry onto the local machine. podman pull
18       pulls an image from Docker Hub if a registry is not  specified  in  the
19       command  line  argument.  If an image tag is not specified, podman pull
20       defaults to the image with the latest tag (if it exists) and pulls  it.
21       After the image is pulled, podman will print the full image ID.  podman
22       pull can also pull an image using its digest podman pull  image@digest.
23       podman  pull can be used to pull images from archives and local storage
24       using different transports.
25
26

imageID

28       Image stored in local container/storage
29
30

SOURCE

32       The SOURCE is a location to get container images
33        The Image "SOURCE" uses a "transport":"details" format.
34
35
36       Multiple transports are supported:
37
38
39       dir:path
40         An existing local directory path storing the manifest, layer tarballs
41       and  signatures as individual files. This is a non-standardized format,
42       primarily useful for debugging or noninvasive container inspection.
43
44
45       docker://docker-reference
46         An image in a registry implementing the  "Docker  Registry  HTTP  API
47       V2".  By default, uses the authorization state in $XDG_RUNTIME_DIR/con‐
48       tainers/auth.json, which is set using (podman login). If the authoriza‐
49       tion  state  is  not found there, $HOME/.docker/config.json is checked,
50       which is set using (docker login).
51
52
53       docker-archive:path[:docker-reference]
54         An image is stored in the docker save formatted file.   docker-refer‐
55       ence  is only used when creating such a file, and it must not contain a
56       digest.
57
58
59       docker-daemon:docker-reference
60         An image docker-reference stored in the docker daemon internal  stor‐
61       age.  docker-reference must contain either a tag or a digest.  Alterna‐
62       tively, when  reading  images,  the  format  can  also  be  docker-dae‐
63       mon:algo:digest (an image ID).
64
65
66       oci-archive:path:tag
67         An image tag in a directory compliant with "Open Container Image Lay‐
68       out Specification" at path.
69
70

OPTIONS

72       --all-tags, a
73
74
75       All tagged images in the repository will be pulled.
76
77
78       Note: When using the all-tags flag, Podman will not  iterate  over  the
79       search  registries in the containers-registries.conf(5) but will always
80       use docker.io for unqualified image names.
81
82
83       --authfile=path
84
85
86       Path of the authentication file. Default is ${XDG_RUNTIME_DIR}/contain‐
87       ers/auth.json,  which  is set using podman login.  If the authorization
88       state is not found there, $HOME/.docker/config.json is  checked,  which
89       is set using docker login. (Not available for remote commands)
90
91
92       Note: You can also override the default path of the authentication file
93       by setting the REGISTRY_AUTH_FILE  environment  variable.  export  REG‐
94       ISTRY_AUTH_FILE=path
95
96
97       --cert-dir=path
98
99
100       Use  certificates at path (*.crt, *.cert, *.key) to connect to the reg‐
101       istry.  Default certificates directory is /etc/containers/certs.d. (Not
102       available for remote commands)
103
104
105       --creds=[username[:password]]
106
107
108       The  [username[:password]]  to use to authenticate with the registry if
109       required.  If one or both values  are  not  supplied,  a  command  line
110       prompt  will  appear  and  the  value  can be entered.  The password is
111       entered without echo.
112
113
114       --override-arch=ARCH
115
116
117       Override the machine's default architecture of the image to be  pulled.
118       For example, arm.
119
120
121       --quiet, -q
122
123
124       Suppress output information when pulling images
125
126
127       --tls-verify=true|false
128
129
130       Require  HTTPS  and  verify  certificates  when  contacting  registries
131       (default: true). If explicitly set to true, then TLS verification  will
132       be  used.  If  set to false, then TLS verification will not be used. If
133       not specified, TLS verification will be used unless the target registry
134       is  listed  as  an insecure registry in registries.conf. (Not available
135       for remote commands)
136
137
138       --help, -h
139
140
141       Print usage statement
142
143

EXAMPLES

145              $ podman pull alpine:latest
146              Trying to pull registry.access.redhat.com/alpine:latest... Failed
147              Trying to pull registry.fedoraproject.org/alpine:latest... Failed
148              Trying to pull docker.io/library/alpine:latest...Getting image source signatures
149              Copying blob sha256:88286f41530e93dffd4b964e1db22ce4939fffa4a4c665dab8591fbab03d4926
150               1.90 MB / 1.90 MB [========================================================] 0s
151              Copying config sha256:76da55c8019d7a47c347c0dceb7a6591144d232a7dd616242a367b8bed18ecbc
152               1.48 KB / 1.48 KB [========================================================] 0s
153              Writing manifest to image destination
154              Storing signatures
155              04660052281190168dbb2362eb15bf7067a8dc642d2498055e0e72efa961a4b6
156
157
158
159              $ podman pull --authfile temp-auths/myauths.json docker://docker.io/umohnani/finaltest
160              Trying to pull docker.io/umohnani/finaltest:latest...Getting image source signatures
161              Copying blob sha256:6d987f6f42797d81a318c40d442369ba3dc124883a0964d40b0c8f4f7561d913
162               1.90 MB / 1.90 MB [========================================================] 0s
163              Copying config sha256:ad4686094d8f0186ec8249fc4917b71faa2c1030d7b5a025c29f26e19d95c156
164               1.41 KB / 1.41 KB [========================================================] 0s
165              Writing manifest to image destination
166              Storing signatures
167              03290064078cb797f3e0a530e78c20c13dd22a3dd3adf84a5da2127b48df0438
168
169
170
171              $ podman pull --creds testuser:testpassword docker.io/umohnani/finaltest
172              Trying to pull docker.io/umohnani/finaltest:latest...Getting image source signatures
173              Copying blob sha256:6d987f6f42797d81a318c40d442369ba3dc124883a0964d40b0c8f4f7561d913
174               1.90 MB / 1.90 MB [========================================================] 0s
175              Copying config sha256:ad4686094d8f0186ec8249fc4917b71faa2c1030d7b5a025c29f26e19d95c156
176               1.41 KB / 1.41 KB [========================================================] 0s
177              Writing manifest to image destination
178              Storing signatures
179              03290064078cb797f3e0a530e78c20c13dd22a3dd3adf84a5da2127b48df0438
180
181
182
183              $ podman pull --tls-verify=false --cert-dir image/certs docker.io/umohnani/finaltest
184              Trying to pull docker.io/umohnani/finaltest:latest...Getting image source signatures
185              Copying blob sha256:6d987f6f42797d81a318c40d442369ba3dc124883a0964d40b0c8f4f7561d913
186               1.90 MB / 1.90 MB [========================================================] 0s
187              Copying config sha256:ad4686094d8f0186ec8249fc4917b71faa2c1030d7b5a025c29f26e19d95c156
188               1.41 KB / 1.41 KB [========================================================] 0s
189              Writing manifest to image destination
190              Storing signatures
191              03290064078cb797f3e0a530e78c20c13dd22a3dd3adf84a5da2127b48df0438
192
193
194
195              $ podman pull --override-arch=arm arm32v7/debian:stretch
196              Trying to pull docker.io/arm32v7/debian:stretch...
197              Getting image source signatures
198              Copying blob b531ae4a3925 done
199              Copying config 3cba58dad5 done
200              Writing manifest to image destination
201              Storing signatures
202              3cba58dad5d9b35e755b48b634acb3fdd185ab1c996ac11510cc72c17780e13c
203
204
205

FILES

207       registries.conf (/etc/containers/registries.conf)
208
209
210              registries.conf is the configuration file which specifies which container registries should be consulted when completing image names which do not include a registry or domain portion.
211
212
213
214       NOTE: Use the environment variable TMPDIR to change the temporary stor‐
215       age  location  of  downloaded  container images. Podman defaults to use
216       /var/tmp.
217
218

SEE ALSO

220       podman(1),     podman-push(1),     podman-login(1),     containers-reg‐
221       istries.conf(5)
222
223

HISTORY

225       July  2017,  Originally compiled by Urvashi Mohnani umohnani@redhat.com
226       ⟨mailto:umohnani@redhat.com⟩
227
228
229
230                                                              podman-pull(1)()
Impressum