% ATOMIC(1) Atomic Man Pages % Dan Walsh % July 2015 # NAME atomic-images - operations on container images # SYNOPSIS **atomic images COMMAND [OPTIONS] [IMAGES...]** atomic images allows the user to view and operate on container images in a docker registry. # COMMANDS **delete** Delete the specified container image(s). If you use the **--remote option** remote disk space will not be freed until the **registry garbage-collection** command is invoked for the remote registry. **generate** Generates a gomtree validation manifest for all images. Gomtree is required for this feature to be available. **help** Displays a help file associated with a container or image. If a container or image has a help file (in man format) embedded in itself, atomic help will display the help file in a pager similar to man. The default location for a help file is /image_help.1 but the location of the help can be overridden with the HELP LABEL. If you choose to override the default location, ensure the path provided is a fully-qualified path that includes the help file itself. The help file can be written using the middleman markup and the converted using the go-md2man utility as follows: ``` go-md2man -in image_help.1.md -out image_help.1 ``` You can also use any of the many options to create the help file including using native man tagging. **info** Displays the LABEL fields within an image. By default, it will check first for a local image and then all configured registries. For a system container image, this will also display the environment variables a user can set. **list** List all installed container images on your system. A **>** preceding the image name indicates that the image is used by a container. A **\*** in the first column indicates a dangling image. **Dangling** images are images with no name/tag and which are not used by any other images. Since they are not used, they waste system space. Dangling images can be caused by using 'docker build' to update an image without removing the older version of the image. **prune** Prune/delete all **dangling** images, freeing wasted disk space. **tag** Tag locally the image with a different name. The source image won't be modified. **update** Pulls the latest update of the image from the repository. If a container based on this image exists, the container will continue to use the old image. Use --force to remove the container. **verify** Checks whether there is a newer image available. If the image differs, it will capture any of its relevant information like version (where applicable). Verify will always attempt to use the **Version** and **Release** labels to determine if there is a newer version. If that information is not available, then for 'ostree' images, verify will compare using the manifest digests. In the case of docker images, it will use the image's ID for comparison. **version** Display image 'Id Name:Version:Release RepoTag' label # delete OPTIONS [**-h|--help**] Print usage statement [**-f|--force**] Force the deletion of specified local images, even if they are in use. [**--remote**] Delete images in remote registry. *--force* is not supported with this option. [**--storage=[ostree|docker]**] Optionally specify the storage from which to delete the image from. Will prompt user to specify if the same image name exists in both ostree and docker, and the user did not specify. # Note: Atomic --assumeyes option can be used [**-y|--assumeyes**] Delete image(s) without conformation from the user # info OPTIONS [**-h|--help**] Print usage statement [**--remote**] Ignore all local images, only search configured registries. [**--storage=[ostree|docker]**] Optionally specify the storage of the image. Will prompt user to specify if the same image name exists in both ostree and docker, and the user did not specify. # list OPTIONS [**-h|--help**] Print usage statement [**-a|--all**] Show all images, including intermediate images [**-f|--filter**] Filter output based on given filters, example usage: '--filter repo=foo' will list all images that has "foo" as part of their repository name. Filterables: `created`, `id`, `image`, `is_dangling`, `repo`, `size`, `tag`, `type` [**-n|--noheading**] Do not print heading when listing the images [**--no-trunc**] Do not truncate output [**-q|--quiet**] Only display image IDs [**--json**] Output in the form of JSON. # update OPTIONS [**-f**|**--force**] Remove all containers based on this image [**-h**|**--help**] Print usage statement [**-a|--all**] Update all the images in a storage. [**--storage=[ostree|docker]**] Optionally specify the storage of the image. Defaults to docker. # verify OPTIONS [**-h|--help**] Print usage statement [**--no-validate**] Skip validation of the files contained inside the image. [**--storage=[ostree|docker]**] Optionally specify the storage of the image. Will prompt user to specify if the same image name exists in both ostree and docker, and the user did not specify. [**-v|--verbose**] Will output the status of each base image that makes up the image being verified. [**-a|--all**] Will verify all images in a storage. # version OPTIONS [**-h|--help**] Print usage statement [**-r|--recurse**] Recurse through all layers of the specified image. [**--storage=[ostree|docker]**] Optionally specify the storage of the image. Will prompt user to specify if the same image name exists in both ostree and docker, and the user did not specify. # EXAMPLES Verify the Red Hat rsyslog image # atomic images verify registry.access.redhat.com/rhel7/rsyslog # Verify the Red Hat rsyslog image and show status of each image layer # atomic images verify -v registry.access.redhat.com/rhel7/rsyslog registry.access.redhat.com/rhel7/rsyslog contains the following images: rhel7/rsyslog-7.1-29 rhel7/rsyslog-7.1-29 redhat/rhel7-7.1-24 redhat/rhel7-7.1-24 * = version difference Verify a system image # sudo atomic images verify busybox validation output for layer a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4: (no changes detected) validation output for layer 8ddc19f16526912237dd8af81971d5e4dd0587907234be2b83e249518d5b673f: "etc/shadow": keyword "size": expected 243; got 268 "etc/shadow": keyword "sha256digest": expected 22d9cee21ee808c52af44ac...; got 7a07ac69054c2a3533569874c2... # HISTORY July 2015, Originally compiled by Daniel Walsh (dwalsh at redhat dot com) July 2016, Updated to reflect images sub-command changes (jhonce at redhat dot com) July 2016, Added sub-commands all, filter and quiet to list (jerzhang at redhat dot com)