Directories
¶
| Path | Synopsis |
|---|---|
|
auth
|
|
|
Package basemeta reads and writes streams of base image content metadata.
|
Package basemeta reads and writes streams of base image content metadata. |
|
elfinfo
Package elfinfo reads the few pieces of ELF metadata a base image needs from a shared library: its SONAME and its machine type.
|
Package elfinfo reads the few pieces of ELF metadata a base image needs from a shared library: its SONAME and its machine type. |
|
ldcache
Package ldcache writes the glibc dynamic loader cache (/etc/ld.so.cache).
|
Package ldcache writes the glibc dynamic loader cache (/etc/ld.so.cache). |
|
pkgfile
Package pkgfile extracts files from Debian and RPM packages.
|
Package pkgfile extracts files from Debian and RPM packages. |
|
truststore
Package truststore collects X.509 CA certificates from heterogeneous inputs and renders them in the layouts a container base image needs: a concatenated PEM bundle, an exploded /etc/ssl/certs directory with OpenSSL subject-hash links, and a PKCS#12 truststore for the JVM.
|
Package truststore collects X.509 CA certificates from heterogeneous inputs and renders them in the layouts a container base image needs: a concatenated PEM bundle, an exploded /etc/ssl/certs directory with OpenSSL subject-hash links, and a PKCS#12 truststore for the JVM. |
|
util
command
|
|
|
Package gateway provides client-side support for routing container registry requests through an OCI distribution gateway (see //cmd/oci-distribution-gateway).
|
Package gateway provides client-side support for routing container registry requests through an OCI distribution gateway (see //cmd/oci-distribution-gateway). |
|
Package kvfile parses key/value data — such as image labels, annotations, and environment variables — that may be supplied either as JSON or as newline-delimited text.
|
Package kvfile parses key/value data — such as image labels, annotations, and environment variables — that may be supplied either as JSON or as newline-delimited text. |
|
Package mtree renders an mtree(8) specification describing the metadata of one or more container image layers.
|
Package mtree renders an mtree(8) specification describing the metadata of one or more container image layers. |
|
Package ocilayout is the single writer for every container image layout format produced by the img tool: OCI image layouts (directory or tar), Docker "save" tarballs (the hybrid oci-layout + manifest.json form), and the sparse OCI layout (layer blobs replaced by descriptor stubs).
|
Package ocilayout is the single writer for every container image layout format produced by the img tool: OCI image layouts (directory or tar), Docker "save" tarballs (the hybrid oci-layout + manifest.json form), and the sparse OCI layout (layer blobs replaced by descriptor stubs). |
|
Package prefetch provides a go-containerregistry v1.Layer wrapper that reads ahead ("prefetches") a layer's contents into an in-memory buffer on a background goroutine.
|
Package prefetch provides a go-containerregistry v1.Layer wrapper that reads ahead ("prefetches") a layer's contents into an in-memory buffer on a background goroutine. |
|
proto
|
|
|
Package registry implements a docker V2 registry and the OCI distribution specification.
|
Package registry implements a docker V2 registry and the OCI distribution specification. |
|
internal/and
Package and provides helpers for adding Close to io.{Reader|Writer}.
|
Package and provides helpers for adding Close to io.{Reader|Writer}. |
|
internal/verify
Package verify provides a ReadCloser that verifies content matches the expected hash values.
|
Package verify provides a ReadCloser that verifies content matches the expected hash values. |
|
Package registryopts centralizes the go-containerregistry remote.Options that the img tool enforces for every registry operation: multi-keychain authentication, a patient retry backoff, a transport routed through the oci-distribution-gateway (when one is configured) that honors a registry's Retry-After header and accounts for how many requests are in flight, and a default concurrency.
|
Package registryopts centralizes the go-containerregistry remote.Options that the img tool enforces for every registry operation: multi-keychain authentication, a patient retry backoff, a transport routed through the oci-distribution-gateway (when one is configured) that honors a registry's Retry-After header and accounts for how many requests are in flight, and a default concurrency. |
|
serve
|
|
|
bes/syncer
Package syncer implements container image synchronization from CAS to registries.
|
Package syncer implements container image synchronization from CAS to registries. |
|
gateway
Package gateway implements an OCI distribution gateway: an HTTP handler that speaks the container registry (Docker Registry v2 / OCI Distribution) protocol but only forwards requests to real upstream registries.
|
Package gateway implements an OCI distribution gateway: an HTTP handler that speaks the container registry (Docker Registry v2 / OCI Distribution) protocol but only forwards requests to real upstream registries. |
|
telemetry
Package telemetry wires OpenTelemetry metric exporters for the rules_img server binaries.
|
Package telemetry wires OpenTelemetry metric exporters for the rules_img server binaries. |
|
Package signer implements the `img deploy` side of container image signing.
|
Package signer implements the `img deploy` side of container image signing. |
|
Package structuretest defines the JSON wire types shared between the image_structure_test rule/aspect, the `img oci-layout-metadata` producer, and the `img image-structure-test` consumer.
|
Package structuretest defines the JSON wire types shared between the image_structure_test rule/aspect, the `img oci-layout-metadata` producer, and the `img image-structure-test` consumer. |
|
transport
|
|
|
Package version holds the rules_img version, stamped in at build time.
|
Package version holds the rules_img version, stamped in at build time. |
|
Package ztoc implements pure-Go generation of a "ztoc" (zTOC), the seekable table-of-contents metadata used by the SOCI (Seekable OCI) snapshotter to lazily pull container image layers without unpacking the whole blob.
|
Package ztoc implements pure-Go generation of a "ztoc" (zTOC), the seekable table-of-contents metadata used by the SOCI (Seekable OCI) snapshotter to lazily pull container image layers without unpacking the whole blob. |
Click to show internal directories.
Click to hide internal directories.