* [Topics](/en/topics "Topics") * [Open source](/en/topics/open-source "Open source") * What is Skopeo? What is Skopeo? =============== Published July 18, 2022•*5*-minute read Copy URL Jump to section --------------- OverviewWhat are container images?How does Skopeo work?Why Skopeo?Red Hat can help Overview -------- Skopeo is a tool for manipulating, inspecting, signing, and transferring [container](/en/topics/containers/whats-a-linux-container) images and image repositories on Linux® systems, Windows and MacOS. Like [Podman](/en/topics/containers/what-is-podman) and [Buildah](/en/topics/containers/what-is-buildah), Skopeo is an open source community-driven project that does not require running a container daemon. With Skopeo, you can inspect images on a remote registry without having to download the entire image with all its layers, making it a lightweight and modular solution for working with container images across different formats, including [Open Container Initiative](https://opencontainers.org/) (OCI) and [Docker](/en/topics/containers/what-is-docker) images. [Install Skopeo for free on Red Hat® Enterprise Linux](/en/technologies/linux-platforms/enterprise-linux/server/trial "product | red hat enterprise linux | try it") What are container images? -------------------------- A container image is a file with executable code that can be run in an isolated process. Container images consist of two parts: ### tar archive The first part is one or more tar archives of the container’s file system. A tar archive is a collection of files and the file system directory contains all of the code and configuration files required to run an application. ### JSON file The second part is JSON files which describe the application, provide configuration from the developer about how to run the container, transmit data between the application and the server, and store metadata about the individual components of the image and how to refer to them. A container repository is a group of container images providing different versions of an application, and a [container registry](/en/topics/cloud-native-apps/what-is-a-container-registry) is a server providing access to images or the ability to upload new images. [Learn more about Linux containers](/en/topics/containers/whats-a-linux-container "article | what's a linux container?") Red Hat to Contribute Comprehensive Container Tools Collection to Cloud Native Computing Foundation --------------------------------------------------------------------------------------------------- [Read the report](/en/blog/red-hat-contribute-comprehensive-container-tools-collection-cloud-native-computing-foundation "Read the report") How does Skopeo work? --------------------- Skopeo (Greek for "remote viewing") was the first container tool developed by Red Hat engineers alongside the open source community. Skopeo works with Podman and Buildah to manage OCI containers. Put simply, Podman runs containers, Buildah builds containers, and Skopeo transports containers –– among other things. Think of these tools as a swiss army knife for your container environment. Skopeo is a deft and versatile blade at your disposal. Skopeo inspects images with the *skopeo inspect* command. Before Skopeo was released, to inspect an image, you had to pull the whole image, even if you only wanted to inspect some metadata. Skopeo’s inspect command shows image properties, including layers, image tags, and labels, so you don’t have to pull the image to the host. This allows you to gather information about a repository or a tag without using any of your capacity. Skopeo also allows you to delete an image from a repository and sync an external image repository to an internal registry for more secure disconnected network (also known as air-gapped) deployments. When required by the repository, Skopeo can pass the appropriate credentials and certificates for authentication. *Skopeo sync* allows direct registry-to-registry copies for on-line use as well as registry-to-files and files-to-registry for preparing disconnected environments. Unlike *skopeo copy*, which assumes that the requested copy requires action, *skopeo sync* is tuned to be faster on regular re-syncs of large repositories with few modifications. In addition to direct command-line use, the sync operation can be configured in a *config* file, and that allows only syncing a subset of tags from a large repository. If your inspection indicates a need to copy a container image from one location or storage type to another, you can do it with the *Skopeo copy* command. The tool allows you to copy container images between registries like docker.io, quay.io, and your internal container registry or various storage mechanisms on your local system. Skopeo’s direct registry-to-registry copy is fast and preserves the unmodified form (and the image’s manifest digest) if the destination registry allows it. Copying images between registries does not require any local disk use or free space on a local disk. Skopeo also moves between container engine storage and even directories. It is frequently used in [CI/CD](/en/topics/devops/what-is-ci-cd) systems to keep container registries up to date and maintain storage on container servers. Why Skopeo? ----------- ### Flexible tooling Skopeo is part of a modular suite of container tools which comes with many advantages. Introducing significant changes into a monolithic tool without breaking it for existing users can be a challenge. Smaller, more specialized tools such as Skopeo, Podman and Buildah can be evolved more quickly. Having a set of tools allows each tool to focus on a single purpose, and new tools can be added to increase functionality or to experiment with ideas and architectures that might be incompatible with existing tools. Smaller and more modular tools are also easier to secure. Similar to the way parts of Podman’s functionality comes from the libpod library that allows code to be shared with other tools, Skopeo’s functionality is also implemented in a library. Skopeo’s containers/image library is shared by other container tools including Podman, Buildah, and CRI-O, and it is compatible with the Docker command line interface (CLI). [Read more about these tools in the the Universal Base Image ebook](https://connect.redhat.com/en/partner-resources/red-hat-ubi-ebook)  ### Security and accessibility The main advantages of using Podman, Skopeo and Buildah together include: * Rootless container management. Users can create, run, and manage containers without requiring processes with admin privileges, making your container environment more accessible while reducing security risks. * Daemonless architecture. Daemons require administrative access (while also bypassing the need for admin verification) to read files, install programs, edit applications, and more. This makes daemons an ideal target for hackers who want to gain control of your containers and infiltrate the host system. * Native systemd integration. Using Podman and associated container tools allows you to create systemd unit files and run containers as system services. [Understand root inside and outside a container](/en/blog/understanding-container-users)  ### Kubernetes [Kubernetes](/en/topics/containers/what-is-kubernetes) is an open source container orchestration platform that automates many of the manual processes involved in deploying, managing, and scaling containerized applications. If you run a CI/CD system inside of Kubernetes or use [Red Hat OpenShift®](/en/technologies/cloud-computing/openshift) to build your container images, you may need to distribute those images across different container registries. Skopeo is an ideal tool for such tasks. [Take a deeper dive into Kubernetes architecture](/en/topics/containers/kubernetes-architecture)  ### High performance computing Users running an older operating system on their host system may want to run Skopeo or other tools to take advantage of the latest features and updates. A common restriction in high performance computing (HPC) environments is that rootless users are not allowed to install packages on the host. With the increasing popularity of Podman in HPC, running the Skopeo container with Podman to perform specific tasks is just a few commands away, and users do not need root access. Red Hat can help ---------------- Red Hat Enterprise Linux simplifies container development with fewer repositories and more developer tools. Container tools like Podman, Buildah, and Skopeo are included with a Red Hat Enterprise Linux subscription and form a strong base to support your container image and container needs. [Upgrading Red Hat Enterprise Linux](/en/technologies/linux-platforms/enterprise-linux/upgrade-rhel) helps ensure you're ready to take full advantage of these tools. In addition to these tools, Red Hat provides base images to act as the foundation for your own images. Run, build, and share container images with Red Hat Enterprise Linux command-line tools, the [universal base image](https://developers.redhat.com/products/rhel/ubi) (UBI), the repository in [Red Hat Quay](/en/technologies/cloud-computing/quay), and the [Supplemental repository](https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/package_manifest/supplementary-repository), all of which lessen the complexity of developing containers. Red Hat named a Leader in 2025 Gartner® Magic Quadrant™ for Container Management -------------------------------------------------------------------------------- Read the 2025 Gartner® Magic Quadrant™ for Container Management to learn why Red Hat OpenShift has been named a “Leader” for the 3rd year in a row. [Keep reading](/en/engage/gartner-magic-quadrant-container-management-analyst-report "Red Hat named a Leader in 2025 Gartner® Magic Quadrant™ for Container Management") All Red Hat product trials -------------------------- Our no-cost product trials help you gain hands-on experience, prepare for a certification, or assess if a product is right for your organization. [Keep reading](/en/products/trials "All Red Hat product trials") Keep reading ------------ ### What is Istio? Find out more about Istio, an open source service mesh that controls how microservices share data with one another. [Read the article](/en/topics/microservices/what-is-istio "article | What is Istio?") ### What is CentOS Stream? CentOS Stream is a Linux® development platform where open source community members can contribute to Red Hat® Enterprise Linux in tandem with Red Hat developers. [Read the article](/en/topics/linux/what-is-centos-stream "product article | what is centos stream") ### What is KVM? Kernel-based virtual machines (KVM) are an open source virtualization technology that turns Linux into a hypervisor. [Read the article](/en/topics/virtualization/what-is-KVM "article | what is KVM?") Open source resources --------------------- ### Related content * Blog post [Red Hat Named a Leader in 2025 Gartner® Magic Quadrant™ for Container Management for the Third Consecutive Year](/en/blog/red-hat-named-leader-2025-container-management) * Blog post [Getting to know Navtez Singh Bal, Vice President & General Manager, India and South Asia](/en/blog/getting-know-navtez-singh-bal-vice-president-general-manager-india-and-south-asia) * Blog post [Zero trust starts here: Validated patterns for confidential container deployment](/en/blog/validated-patterns-confidential-container-deployment) * Blog post [Deploy sensitive workloads with OpenShift confidential containers](/en/blog/deploy-sensitive-workloads-with-openshift-confidential-containers) ### Related articles * [What is a Linux container?](/en/topics/containers/whats-a-linux-container) * [What is container orchestration?](/en/topics/containers/what-is-container-orchestration) * [What is Istio?](/en/topics/microservices/what-is-istio) * [What is CentOS Stream?](/en/topics/linux/what-is-centos-stream) * [Stateful vs stateless applications](/en/topics/cloud-native-apps/stateful-vs-stateless) * [What is Kubernetes?](/en/topics/containers/what-is-kubernetes) * [Red Hat OpenShift on VMware](/en/technologies/cloud-computing/openshift/vmware) * [What is KVM?](/en/topics/virtualization/what-is-KVM) * [What is KubeVirt?](/en/topics/virtualization/what-is-kubevirt) * [Why use Red Hat Ansible Automation Platform with Red Hat OpenShift?](/en/technologies/cloud-computing/openshift/ansible-on-openshift) * [What is Podman Desktop?](/en/topics/containers/what-is-podman-desktop) * [What are CentOS replacements?](/en/topics/linux/centos-alternatives) * [What is CentOS?](/en/topics/linux/what-is-centos) * [What is Podman?](/en/topics/containers/what-is-podman) * [What is the Kubernetes Java client?](/en/topics/cloud-computing/what-is-kubernetes-java-client) * [What are hosted control planes?](/en/topics/containers/what-are-hosted-control-planes) * [What is kubernetes security?](/en/topics/containers/kubernetes-security) * [What is Helm?](/en/topics/devops/what-is-helm) * [What is InstructLab?](/en/topics/ai/what-is-instructlab) * [What is Argo CD?](/en/topics/devops/what-is-argocd) * [Red Hat OpenShift for developers](/en/technologies/cloud-computing/openshift/developers) * [Containers vs VMs](/en/topics/containers/containers-vs-vms) * [Edge computing with Red Hat OpenShift](/en/technologies/cloud-computing/openshift/edge-computing) * [What is MicroShift?](/en/topics/edge-computing/microshift) * [How Kubernetes can help AI/ML](/en/topics/cloud-computing/how-kubernetes-can-help-ai) * [OpenJDK versus Oracle JDK](/en/topics/application-modernization/openjdk-vs-oracle-jdk) * [What is Cloud Foundry?](/en/topics/application-modernization/what-is-cloud-foundry) * [What is Kubeflow?](/en/topics/cloud-computing/what-is-kubeflow) * [What are microservices?](/en/topics/microservices/what-are-microservices) * [OpenShift vs. OpenStack: What are the differences?](/en/technologies/cloud-computing/openshift/openshift-vs-openstack) * [What is container security?](/en/topics/security/container-security) * [What are sandboxed containers](/en/topics/containers/sandboxed-containers) * [what is Buildah?](/en/topics/containers/what-is-buildah) * [Kubernetes vs OpenStack](/en/topics/openstack/kubernetes-vs-openstack) * [What are validated patterns?](/en/topics/cloud-computing/what-are-validated-patterns) * [Understanding Ansible, Terraform, Puppet, Chef, and Salt](/en/topics/automation/understanding-ansible-vs-terraform-puppet-chef-and-salt) * [Ansible vs. Chef: What you need to know](/en/topics/automation/ansible-vs-chef) * [Ansible vs. Salt: What you need to know](/en/topics/automation/ansible-vs-salt) * [Kubernetes on AWS: Self-Managed vs. Managed Applications Platforms](/en/topics/containers/kubernetes-on-aws) * [What is Linux?](/en/topics/linux/what-is-linux) * [What's the best Linux distro for you?](/en/topics/linux/whats-the-best-linux-distro-for-you) * [What is an image builder?](/en/topics/linux/what-is-an-image-builder) * [Ansible vs. Puppet: What you need to know](/en/topics/automation/ansible-vs-puppet) * [Red Hat OpenShift vs. OKD](/en/topics/containers/red-hat-openshift-okd) * [Red Hat OpenShift vs. Kubernetes: What's the difference?](/en/technologies/cloud-computing/openshift/red-hat-openshift-kubernetes) * [What is Apache Kafka?](/en/topics/integration/what-is-apache-kafka) * [What is high availability and disaster recovery for containers?](/en/topics/containers/high-availability-containers) * [Spring on Kubernetes with Red Hat OpenShift](/en/technologies/cloud-computing/openshift/spring) * [Why run Apache Kafka on Kubernetes?](/en/topics/integration/why-run-apache-kafka-on-kubernetes) * [Ansible vs. Terraform, clarified](/en/topics/automation/ansible-vs-terraform) * [What is a golden image?](/en/topics/linux/what-is-a-golden-image) * [Ansible vs. Red Hat Ansible Automation Platform](/en/technologies/management/ansible/ansible-vs-red-hat-ansible-automation-platform) * [What are Red Hat OpenShift cloud services?](/en/technologies/cloud-computing/openshift/what-are-red-hat-openshift-cloud-services) * [VNF and CNF, what’s the difference?](/en/topics/cloud-native-apps/vnf-and-cnf-whats-the-difference) * [What is a container registry?](/en/topics/cloud-native-apps/what-is-a-container-registry) * [What are Red Hat OpenShift Operators?](/en/technologies/cloud-computing/openshift/what-are-openshift-operators) * [Using Helm with Red Hat OpenShift](/en/technologies/cloud-computing/openshift/helm) * [Kubernetes security best practices](/en/topics/containers/kubernetes-security-best-practices) * [What is Grafana?](/en/topics/data-services/what-is-grafana) * [Orchestrating Windows containers on Red Hat OpenShift](/en/technologies/cloud-computing/openshift/windows-containers-on-red-hat-openshift) * [What is a Kubernetes operator?](/en/topics/containers/what-is-a-kubernetes-operator) * [What is open source software?](/en/topics/open-source/what-is-open-source-software) * [Open source vs. proprietary software in vehicles](/en/topics/open-source/open-source-vs-proprietary-software-in-vehicles) * [High performance computing with Red Hat OpenShift](/en/technologies/cloud-computing/openshift/high-performance-computing) * [Advantages of Kubernetes-native security](/en/topics/containers/advantages-of-kubernetes-native-security) * [What is KubeLinter?](/en/topics/containers/what-is-kubelinter) * [Container and Kubernetes compliance considerations](/en/topics/containers/compliance) * [Intro to Kubernetes security](/en/topics/containers/intro-kubernetes-security) * [How microservices support IT integration in healthcare](/en/topics/microservices/microservices-in-healthcare) * [Kubernetes cluster management](/en/technologies/cloud-computing/openshift/kubernetes-cluster-management) * [Red Hat OpenShift on IBM IT infrastructure](/en/technologies/cloud-computing/openshift/what-is-red-hat-openshift-on-IBM-IT-infrastructure) * [Red Hat OpenShift for business leaders](/en/technologies/cloud-computing/openshift/business-leaders) * [How to deploy Red Hat OpenShift](/en/technologies/cloud-computing/openshift/deploy-red-hat-openshift) * [Cost management for Kubernetes on Red Hat OpenShift](/en/technologies/cloud-computing/openshift/cost-management) * [Why choose Red Hat for Kubernetes?](/en/topics/containers/why-choose-red-hat-kubernetes) * [What makes Red Hat OpenShift the right choice for SAP?](/en/technologies/cloud-computing/openshift/sap) * [Kubernetes-native Java development with Quarkus](/en/technologies/cloud-computing/openshift/quarkus) * [What is enterprise Kubernetes?](/en/topics/containers/what-is-enterprise-kubernetes) * [What is RKT?](/en/topics/containers/what-is-rkt) * [What makes Red Hat OpenShift the right choice for IT operations?](/en/technologies/cloud-computing/openshift/it-operations) * [What is Kubernetes role-based access control (RBAC)](/en/topics/containers/what-kubernetes-role-based-access-control-rbac) * [What is Kogito?](/en/topics/automation/what-is-kogito) * [What is containerization?](/en/topics/cloud-native-apps/what-is-containerization) * [What was CoreOS and CoreOS container Linux](/en/technologies/cloud-computing/openshift/what-was-coreos) * [Learning Kubernetes basics](/en/topics/containers/learning-kubernetes-tutorial) * [What is service-oriented architecture?](/en/topics/cloud-native-apps/what-is-service-oriented-architecture) * [What is the Kubernetes API?](/en/topics/containers/what-is-the-kubernetes-api) * [What is Kubernetes cluster management?](/en/topics/containers/what-is-kubernetes-cluster-management) * [What is a Kubernetes deployment?](/en/topics/containers/what-is-kubernetes-deployment) * [Why choose the Red Hat build of Quarkus?](/en/topics/cloud-native-apps/why-choose-red-hat-quarkus) * [Introduction to Kubernetes architecture](/en/topics/containers/kubernetes-architecture) * [What is CaaS?](/en/topics/cloud-computing/what-is-caas) * [Introduction to Kubernetes patterns](/en/topics/cloud-native-apps/introduction-to-kubernetes-patterns) * [What is a Kubernetes cluster?](/en/topics/containers/what-is-a-kubernetes-cluster) * [What is Quarkus?](/en/topics/cloud-native-apps/what-is-quarkus) * [What is Jaeger?](/en/topics/microservices/what-is-jaeger) * [What is open source?](/en/topics/open-source/what-is-open-source) * [What is Knative?](/en/topics/microservices/what-is-knative) * [What is etcd?](/en/topics/containers/what-is-etcd) * [What is container-native virtualization?](/en/topics/containers/what-is-container-native-virtualization) * [What is Clair?](/en/topics/containers/what-is-clair) * [Why choose Red Hat for microservices?](/en/topics/microservices/why-choose-red-hat-microservices) * [Why choose Red Hat for containers?](/en/topics/containers/why-choose-red-hat-containers) * [What is Docker?](/en/topics/containers/what-is-docker) * [What is a Kubernetes pod?](/en/topics/containers/what-is-kubernetes-pod) [More about this topic](/en/topics/open-source "More about this topic")