Index contents of Docker image without running it

abitrolly commented 4 years ago

I need to speed up the build of my project inside Docker image
- Time for installing tools with apt is long, I need to find image with installed tools
- There are no tools that search contents of DockerHub images, I need to create index of top images myself
  - Need to list files in Docker container image without running it for security reasons

The possible way is to parse layers after docker save and join them together. dive already does this to present in its GUI, and the solution is to patch it to output the information to console.

abitrolly commented 4 years ago

Using buildah it is possible to create container from image and then mount it for inspection - https://github.com/containers/buildah/issues/2046

abitrolly commented 4 years ago

Another way is to patch dive to unpack podman image on the fly and merge the parsed layers https://github.com/wagoodman/dive/blob/master/dive/image/docker/image_archive.go

abitrolly commented 3 years ago

Some things happened.

https://github.com/heroku/terrier
https://github.com/anchore - SBOM and analyzers

abitrolly commented 2 years ago

https://github.com/google/go-containerregistry/blob/main/cmd/crane/doc/crane_export.md

yakshaveinc / tasks

Index contents of Docker image without running it #55