oci-unpack

oci-unpack is a Rust crate to download and unpack OCI images from a container registry.

The unpack process is running in a sandbox created with Landlock, so it only has access to the files beneath the target directory.

See the API documentation for more details.

Example

The repository includes an CLI program in the examples directory.

$ cargo run --quiet --release --example unpack -- alpine /tmp/alpine-unpack

Alternatives

• skopeo can be used to download an OCI image from a registry.
• umoci can be used to unpack the layers.

The following commands are equivalent to the process implemented in this crate:

$ skopeo copy docker://alpine oci:alpine-image:latest

$ umoci unpack --image alpine-image alpine-unpack