Crane is a tool for interacting with remote images and registries. It allows to efficiently inspect, verify and manipulate containers, manifests and image layers as well as checking cryptographic signatures.
Crane is a tool for interacting with remote images and registries. It allows to efficiently inspect, verify and manipulate containers, manifests and image layers as well as checking cryptographic signatures.
linux/amd64, arm64, etc.)Crane works with any OCI-compliant registry, including:
The crane CLI offers a wide range of commands for image and registry manipulation. Some common operations include:
crane pull - Pull an image and save it as a tarballcrane push - Push a tarball or image to a registrycrane copy - Copy an image from one registry to anothercrane digest - Get the digest of an imagecrane config - Fetch and inspect image configurationcrane manifest - Fetch and inspect the raw manifestcrane ls - List repositories or tags in a registrycrane delete - Delete an image from a registrycrane export - Export image layers and metadatacrane append - Append layers to an existing imageThis Ghost hardened image provides a secure, minimal environment for running Crane operations in containerized workflows and CI/CD pipelines.