Glossary

Skopeo

Skopeo is a command-line utility that performs operations on container images and image repositories, including copying between registries, without requiring a container runtime daemon.

Get in touch Learn more

Operations room with a large monitor wall for system visibility and control.

DAEMONLESS IMAGE UTILITY

What is Skopeo?

Skopeo is a command-line utility that performs operations on container images and image repositories without requiring a container runtime daemon.

Skopeo is a command-line utility that performs various operations on container images and image repositories, including copying, inspecting, and deleting images, without requiring a container runtime daemon like Docker. It operates directly on image manifests, filesystem layers, and registry APIs, making it a lightweight, standalone tool for CI/CD pipelines and air-gapped environments.

Unlike Docker, Skopeo can copy an image between disparate registries—such as from Docker Hub to a private Harbor registry—without ever pulling the image to a local daemon. It uses the skopeo copy command to transfer images, preserving the image digest and multi-arch image manifests. This daemonless architecture is critical for air-gapped registry synchronization and enforcing image promotion workflows.

DAEMONLESS IMAGE OPERATIONS

Key Features of Skopeo

Skopeo is a command-line utility that performs remote inspection, copying, and synchronization of container images without requiring a running container daemon. It operates directly on image registries and local storage.

Daemonless Architecture

Skopeo works directly with container image registries and local storage without requiring Docker, Podman, or any container runtime daemon. This eliminates the overhead and security surface of a running daemon.

Direct registry API calls using the containers/image library
No root privileges required for most operations
Ideal for CI/CD pipelines and minimal environments
Works on systems without any container runtime installed

Cross-Registry Image Copying

Skopeo can copy container images between any OCI-compliant registries without pulling to local storage first. This enables efficient image promotion workflows.

Registry-to-registry copy: skopeo copy docker://source/image docker://dest/image
Format conversion: Copy between OCI, Docker, and dir formats
Selective layer transfer: Only copies layers not already present at destination
Supports authenticated registries with credential passing

Remote Image Inspection

Skopeo can inspect container image metadata and configuration from a remote registry without downloading the entire image. This is critical for security auditing and compliance checks.

Retrieve image digests and manifest data remotely
Inspect image configuration: entrypoint, environment variables, exposed ports
List available tags in a remote repository
Verify image signatures and attestations before deployment
Output in JSON for programmatic consumption in scripts

Image Synchronization

The skopeo sync command enables bulk mirroring of container images between registries, essential for maintaining air-gapped or geo-replicated registry environments.

Sync entire namespaces or specific tag patterns
Supports incremental synchronization to minimize bandwidth
Source YAML files define complex sync configurations
Scoped synchronization: filter by architecture, OS, or tag regex
Critical for air-gapped registry population and disaster recovery

Image Deletion and Tag Management

Skopeo can delete container images and tags from remote registries, enabling automated cleanup and retention policy enforcement without registry-specific APIs.

Delete specific tags or entire image manifests
Remove images by digest for precise cleanup
Automate garbage collection workflows in CI/CD
Supports OCI and Docker Registry HTTP API V2
Useful for implementing retention policies across heterogeneous registries

Format Conversion and Layering

Skopeo can convert container images between different storage formats and compress or decompress image layers on the fly during copy operations.

Convert between formats: OCI, Docker v2s2, and dir
Layer compression control: --dest-compress and --dest-decompress flags
Generate OCI archives for offline transport
Preserve image digests when copying between compatible formats
Integrates with containers/storage for local image management

SKOPEO DEEP DIVE

Frequently Asked Questions

Explore the most common technical questions about using Skopeo to inspect, copy, and manage container images across isolated and disparate registries without a daemon.

Skopeo is a command-line utility that performs various operations on container images and image repositories without requiring a container runtime daemon like Docker. It works by directly interacting with the container registry's API and the local filesystem to inspect manifests, copy blobs, and delete images. Unlike Docker, which requires a running daemon and pulls images into a local graph storage, Skopeo operates entirely in userspace. It can copy an image from a Docker Registry to a Private Container Registry, or even to a local directory in the OCI layout format, by streaming the necessary layers and manifests. This makes it an essential tool for air-gapped environments and sovereign AI infrastructure where direct daemon access is restricted or undesirable.

Enabling Efficiency, Speed & Accuracy

Intelligent Analysis, Decision & Execution

We build AI systems for teams that need search across company data, workflow automation across tools, or AI features inside products and internal software.

Talk to Us

Search across company data

Give teams answers from docs, tickets, runbooks, and product data with sources and permissions.

Useful when people spend too long searching or get different answers from different systems.

Enterprise searchRAGPermissions

Automate internal workflows

Use AI to route work, draft outputs, trigger actions, and keep approvals and logs in place.

Useful when repetitive work moves across multiple tools and teams.

AI agentsWorkflow automationGovernance

Add AI to products and internal tools

Build assistants, guided actions, or decision support into the software your team or customers already use.

Useful when AI needs to be part of the product, not a separate tool.

AI integrationDecision supportModel routing

About the author

Prasad Kumkar

CEO & MD, Inference Systems

Prasad Kumkar is the CEO & MD of Inference Systems and writes about AI systems architecture, LLM infrastructure, model serving, evaluation, and production deployment. Over 5+ years, he has worked across computer vision models, L5 autonomous vehicle systems, and LLM research, with a focus on taking complex AI ideas into real-world engineering systems.

His work and writing cover AI systems, large language models, AI agents, multimodal systems, autonomous systems, inference optimization, RAG, evaluation, and production AI engineering.

Limited slotsGet a Free AI Consultation

How We Work

Custom AI workflows for your Business

One-fit-all AI don't work for modern businesses. At Inferensys, we aim to understand your business & custom requirements; which we use to define most efficient agentic workflows, the data, and the tools for your business.

Talk to Us

Skopeo

What is Skopeo?