批量扫描镜像信息

hangar inspect list 命令可用于批量扫描容器镜像所支持的架构平台等信息。

v1.9.3 及后续版本可用。

快速上手

扫描镜像列表中的所有镜像所支持的架构信息，并保存扫描报告。

hangar inspect list \
      --file="image-list.txt" \
      --format="txt" \
      --report="inspect-report.txt"

保存报告支持 json/yaml/csv/txt 格式，使用 json/yaml 格式可查看更多信息。

hangar inspect list \
      --file="image-list.txt" \
      --format="json" \
      --report="inspect-report.json"

输出的报告样例：

{
  "list": [
    {
      "source": "registry.rancher.cn/cnrancher/hangar",
      "tag": "latest",
      "images": [
        {
          "arch": "arm64",
          "os": "linux",
          "mediaType": "application/vnd.oci.image.manifest.v1+json",
          "digest": "sha256:8f018c7973c85831ecf0b9..."
        },
        {
          "arch": "amd64",
          "os": "linux",
          "mediaType": "application/vnd.oci.image.manifest.v1+json",
          "digest": "sha256:a6ec3b05a21890f70d996a67..."
        },
      ]
    },
......

使用方法

hangar inspect list --help

Inspect multiple container images by image-list file

Usage:
  hangar inspect list -f IMAGE_LIST.txt [flags]

Examples:
# Inspect image list file:
hangar inspect list --file=image-list.txt --report=inspect-report.txt

Flags:
  -y, --auto-yes           answer yes automatically (used in shell script)
  -o, --failed string      file name of the inspect failed image list (default "inspect-failed.txt")
  -f, --file string        image list file
      --format string      inspect report format (json/yaml/csv/txt)
  -h, --help               help for list
  -j, --jobs int           worker number, inspect images parallelly (1-20) (default 1)
      --project string     override the project in image list
      --registry string    override the registry in image list
  -r, --report string      inspect report filename (default: inspect-report.[FORMAT])
      --timeout duration   timeout when inspect each images (default 10m0s)
      --tls-verify         require HTTPS and verify certificates (default true)

Global Flags:
      --debug             enable debug output
      --insecure-policy   run Hangar without policy check