726d982ceb
Differentiate, again, between (skopeo --tls-verify subcommand) and (skope subcommand --tls-verify), by - using a "local" Corba flag for the (skopeo --tls-verify ...) variant - adding separate --tls-verify flags to subcommands that only accept them as legacy, available through deprecatedTLSVerifyFlags (unlike the non-legacy path of dockerImageFlags()); - using TraverseChildren: true; this causes the global and per-subcommand flags to be treated separately by Corba, i.e. they no longer happen to share the "Hidden" flag and Corba actually sets the right flag variable now. So, we can now warn on (skopeo --tls-verify command) again, and --help lists the flag correctly (it is hidden at the global level, and in subcommands like copy that deprecated it, but visible in subcommands like inspect where it's not deprecated). NOTE: This removes --tls-verify from (skopeo manifest-digest) and the three signing commands; it never made sense there. This change could, in principle, break some users. Also update man pages to match. Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2.3 KiB
% skopeo-delete(1)
NAME
skopeo-delete - Mark the image-name for later deletion by the registry's garbage collector.
SYNOPSIS
skopeo delete [options] image-name
Mark image-name for deletion. To release the allocated disk space, you must login to the container registry server and execute the container registry garbage collector. E.g.,
/usr/bin/registry garbage-collect /etc/docker-distribution/registry/config.yml
Note: sometimes the config.yml is stored in /etc/docker/registry/config.yml
If you are running the container registry inside of a container you would execute something like:
$ docker exec -it registry /usr/bin/registry garbage-collect /etc/docker-distribution/registry/config.yml
OPTIONS
--authfile path
Path of the authentication file. Default is ${XDG_RUNTIME_DIR}/containers/auth.json, which is set using skopeo login.
If the authorization state is not found there, $HOME/.docker/config.json is checked, which is set using docker login.
--creds username[:password]
Credentials for accessing the registry.
--cert-dir path
Use certificates at path (*.crt, *.cert, *.key) to connect to the registry.
--daemon-host host
Use docker daemon host at host (docker-daemon: transport only)
--help, -h
Print usage statement
--no-creds bool-value
Access the registry anonymously.
Additionally, the registry must allow deletions by setting REGISTRY_STORAGE_DELETE_ENABLED=true for the registry daemon.
--registry-token token
Bearer token for accessing the registry.
--retry-times
The number of times to retry. Retry wait time will be exponentially increased based on the number of failed attempts.
--shared-blob-dir directory
Directory to use to share blobs across OCI repositories.
--tls-verify=bool
Require HTTPS and verify certificates when talking to the container registry or daemon (defaults to true)
EXAMPLES
Mark image example/pause for deletion from the registry.example.com registry:
$ skopeo delete --force docker://registry.example.com/example/pause:latest
See above for additional details on using the command delete.
SEE ALSO
skopeo(1), skopeo-login(1), docker-login(1), containers-auth.json(5)
AUTHORS
Antonio Murdaca runcom@redhat.com, Miloslav Trmac mitr@redhat.com, Jhon Honce jhonce@redhat.com