1OC IMAGE(1) June 2016 OC IMAGE(1)
2
6 oc image mirror - Mirror images from one repository to another
7
11 oc image mirror [OPTIONS]
12
16 Mirror images from one image repository to another.
17 Accepts a list of arguments defining source images that should be
20 pushed to the provided destination image tag. The images are streamed
21 from registry to registry without being stored locally. The default
22 docker credentials are used for authenticating to the registries.
23 When using S3 mirroring the region and bucket must be the first two
26 segments after the host. Mirroring will create the necessary metadata
27 so that images can be pulled via tag or digest, but listing manifests
28 and tags will not be possible. You may also specify one or more
29 --s3-source-bucket parameters (as <bucket>/ <path>) to designate buck‐
30 ets to look in to find blobs (instead of uploading). The source bucket
31 also supports the suffix "/ [store]", which will transform blob identi‐
32 fiers into the form the Docker registry uses on disk, allowing you to
33 mirror directly from an existing S3-backed Docker registry. Credentials
34 for S3 may be stored in your docker credential file and looked up by
35 host.
36 Images in manifest list format will be copied as-is unless you use
39 --filter-by-os to restrict the allowed images to copy in a manifest
40 list. This flag has no effect on regular images.
41
45 --dry-run=false
46 Print the actions that would be taken and exit without writing to
47 the destinations.
48 -f, --filename=[]
51 One or more files to read SRC=DST or SRC DST [DST ...] mappings
52 from.
53 --filter-by-os=""
56 A regular expression to control which images are mirrored. Images
57 will be passed as '<platform>/<architecture>[/<variant>]'.
58 --force=false
61 Attempt to write all layers and manifests even if they exist in the
62 remote repository.
63 --insecure=false
66 Allow push and pull operations to registries to be made over HTTP
67 --max-per-registry=6
70 Number of concurrent requests allowed per registry.
71 --max-registry=4
74 Number of concurrent registries to connect to at any one time.
75 --s3-source-bucket=[]
78 A list of bucket/path locations on S3 that may contain already
79 uploaded blobs. Add [store] to the end to use the Docker registry path
80 convention.
81 --skip-mount=false
84 Always push layers instead of cross-mounting them
85 --skip-multiple-scopes=false
88 Some registries do not support multiple scopes passed to the reg‐
89 istry login.
90
94 --allow_verification_with_non_compliant_keys=false
95 Allow a SignatureVerifier to use keys which are technically
96 non-compliant with RFC6962.
97 --alsologtostderr=false
100 log to standard error as well as files
101 --application_metrics_count_limit=100
104 Max number of application metrics to store (per container)
105 --as=""
108 Username to impersonate for the operation
109 --as-group=[]
112 Group to impersonate for the operation, this flag can be repeated
113 to specify multiple groups.
114 --azure-container-registry-config=""
117 Path to the file containing Azure container registry configuration
118 information.
119 --boot_id_file="/proc/sys/kernel/random/boot_id"
122 Comma-separated list of files to check for boot-id. Use the first
123 one that exists.
124 --cache-dir="/builddir/.kube/http-cache"
127 Default HTTP cache directory
128 --certificate-authority=""
131 Path to a cert file for the certificate authority
132 --client-certificate=""
135 Path to a client certificate file for TLS
136 --client-key=""
139 Path to a client key file for TLS
140 --cloud-provider-gce-lb-src-cidrs=130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16
143 CIDRs opened in GCE firewall for LB traffic proxy health checks
144 --cluster=""
147 The name of the kubeconfig cluster to use
148 --container_hints="/etc/cadvisor/container_hints.json"
151 location of the container hints file
152 --containerd="unix:///var/run/containerd.sock"
155 containerd endpoint
156 --context=""
159 The name of the kubeconfig context to use
160 --default-not-ready-toleration-seconds=300
163 Indicates the tolerationSeconds of the toleration for
164 notReady:NoExecute that is added by default to every pod that does not
165 already have such a toleration.
166 --default-unreachable-toleration-seconds=300
169 Indicates the tolerationSeconds of the toleration for unreach‐
170 able:NoExecute that is added by default to every pod that does not
171 already have such a toleration.
172 --docker="unix:///var/run/docker.sock"
175 docker endpoint
176 --docker-tls=false
179 use TLS to connect to docker
180 --docker-tls-ca="ca.pem"
183 path to trusted CA
184 --docker-tls-cert="cert.pem"
187 path to client certificate
188 --docker-tls-key="key.pem"
191 path to private key
192 --docker_env_metadata_whitelist=""
195 a comma-separated list of environment variable keys that needs to
196 be collected for docker containers
197 --docker_only=false
200 Only report docker containers in addition to root stats
201 --docker_root="/var/lib/docker"
204 DEPRECATED: docker root is read from docker info (this is a fall‐
205 back, default: /var/lib/docker)
206 --enable_load_reader=false
209 Whether to enable cpu load reader
210 --event_storage_age_limit="default=24h"
213 Max length of time for which to store events (per type). Value is a
214 comma separated list of key values, where the keys are event types
215 (e.g.: creation, oom) or "default" and the value is a duration. Default
216 is applied to all non-specified event types
217 --event_storage_event_limit="default=100000"
220 Max number of events to store (per type). Value is a comma sepa‐
221 rated list of key values, where the keys are event types (e.g.: cre‐
222 ation, oom) or "default" and the value is an integer. Default is
223 applied to all non-specified event types
224 --global_housekeeping_interval=0
227 Interval between global housekeepings
228 --housekeeping_interval=0
231 Interval between container housekeepings
232 --insecure-skip-tls-verify=false
235 If true, the server's certificate will not be checked for validity.
236 This will make your HTTPS connections insecure
237 --kubeconfig=""
240 Path to the kubeconfig file to use for CLI requests.
241 --log-flush-frequency=0
244 Maximum number of seconds between log flushes
245 --log_backtrace_at=:0
248 when logging hits line file:N, emit a stack trace
249 --log_cadvisor_usage=false
252 Whether to log the usage of the cAdvisor container
253 --log_dir=""
256 If non-empty, write log files in this directory
257 --logtostderr=true
260 log to standard error instead of files
261 --machine_id_file="/etc/machine-id,/var/lib/dbus/machine-id"
264 Comma-separated list of files to check for machine-id. Use the
265 first one that exists.
266 --match-server-version=false
269 Require server version to match client version
270 -n, --namespace=""
273 If present, the namespace scope for this CLI request
274 --request-timeout="0"
277 The length of time to wait before giving up on a single server
278 request. Non-zero values should contain a corresponding time unit (e.g.
279 1s, 2m, 3h). A value of zero means don't timeout requests.
280 -s, --server=""
283 The address and port of the Kubernetes API server
284 --stderrthreshold=2
287 logs at or above this threshold go to stderr
288 --storage_driver_buffer_duration=0
291 Writes in the storage driver will be buffered for this duration,
292 and committed to the non memory backends as a single transaction
293 --storage_driver_db="cadvisor"
296 database name
297 --storage_driver_host="localhost:8086"
300 database host:port
301 --storage_driver_password="root"
304 database password
305 --storage_driver_secure=false
308 use secure connection with database
309 --storage_driver_table="stats"
312 table name
313 --storage_driver_user="root"
316 database username
317 --token=""
320 Bearer token for authentication to the API server
321 --user=""
324 The name of the kubeconfig user to use
325 -v, --v=0
328 log level for V logs
329 --version=false
332 Print version information and quit
333 --vmodule=
336 comma-separated list of pattern=N settings for file-filtered log‐
337 ging
338
342 # Copy image to another tag
343 oc image mirror myregistry.com/myimage:latest myregistry.com/myimage:stable
344 # Copy image to another registry
346 oc image mirror myregistry.com/myimage:latest docker.io/myrepository/myimage:stable
347 # Copy image to S3 (pull from <bucket>.s3.amazonaws.com/image:latest)
349 oc image mirror myregistry.com/myimage:latest s3://s3.amazonaws.com/<region>/<bucket>/image:latest
350 # Copy image to S3 without setting a tag (pull via @<digest>)
352 oc image mirror myregistry.com/myimage:latest s3://s3.amazonaws.com/<region>/<bucket>/image
353 # Copy image to multiple locations
355 oc image mirror myregistry.com/myimage:latest docker.io/myrepository/myimage:stable \
356 docker.io/myrepository/myimage:dev
357 # Copy multiple images
359 oc image mirror myregistry.com/myimage:latest=myregistry.com/other:test \
360 myregistry.com/myimage:new=myregistry.com/other:target
361
366 oc-image(1),
367
371 June 2016, Ported from the Kubernetes man-doc generator
372Openshift Openshift CLI User Manuals OC IMAGE(1)