Skip to main content

Docker, containers, rootfs and virtual machine related software composition analysis (SCA) utilities.

Project description

container-inspector is a suite of analysis utilities and command line tools for Docker images, containers, root filesystems and virtual machine images.

For Docker images, it can process layers and how these relate to each other as well as Dockerfiles.

container-inspector provides utilities to:

  • identify Docker images in a file system, its layers and the related metadata.

  • given a Docker image, collect and report its metadata.

  • given a Docker image, extract the layers used to rebuild what how a runtime rootfs would look.

  • find and parse Dockerfiles.

  • find how Dockerfiles relate to actual images and their layers.

  • given a Docker image, rootfs or Virtual Machime image collect inventories of packages and files installed in an image or layer or rootfs (implemented using a provided callable)

  • detect the “distro” of a rootfs of image using os-release files (and an extensive test suite for these)

  • detect the operating system, architecture and

Quick start

  • Only runs on POSIX OSes

  • Get Python 3.6+

  • Check out a clone or download of container-inspector, then run: ./configure –dev.

  • Then run env/bin/container-inspector -h for help.

Container image formats

container-inspector handles the formats of Docker images as created by the docker save command. There are three versions for this Docker image format. The latest v1.2 is a minor update to v1.1.

  • v1.1 provides improved and richer metadata over v1.0 with a top level manifest.json file and a Config file for each image with full layer history and ordeing. It also use checksum for enhanced security and traceability of images and layers.

  • v1.0 uses a simple repositories meta file and requires infering the ordering of the layers in an image based on each individual layer json meta file. This format is no longer support in the latest version of container-inspector.

  • All V1.x formats use the same storage format for layers e.g the layer format V1.0 where each layer is stored in a sub-directories named after the layer id. Each of this directories contains a “layer.tar” tarball with the layer payload, a “json” JSON metadata file describing the layer and a “VERSION” file describing the layer format version. Each tarball represents a slice or diff of the image root file system using the AUFS conventions.

At runtime, in a sequence of layers of an image, each root filesystem slice of a layer is “layered” on top of each other from the root bottom layer to the latest layer (or selected tagged layer) using a union file system (e.g. AUFS). In AUFS, any file or directory prefixed with .wh. are “white outs” files deleting files in the underlying layers.

See the image specifications saved in docs/references/

Internal data model

  • Image: this is a runnable image composed of metadata and a sequence of layers.

  • Layer: this is a slice of an image root filesystem with a payload and metadata

  • Resource: this a file or directory

Plans

  • in progress: support OCI image layout

  • improved suport for Windows containers

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

container-inspector-31.0.0.tar.gz (219.9 kB view details)

Uploaded Source

Built Distribution

container_inspector-31.0.0-py3-none-any.whl (39.1 kB view details)

Uploaded Python 3

File details

Details for the file container-inspector-31.0.0.tar.gz.

File metadata

  • Download URL: container-inspector-31.0.0.tar.gz
  • Upload date:
  • Size: 219.9 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/4.0.0 CPython/3.9.12

File hashes

Hashes for container-inspector-31.0.0.tar.gz
Algorithm Hash digest
SHA256 b05ee4009e06d26ee94bab9621ccbb559593fc4f07f91c77cf662a6207736a18
MD5 6d9ee4e5abb410560f8c2a5fa38b6849
BLAKE2b-256 8efba08279fa6d0ac3c0c7c2934f56b47bfa9e2224f04e689098f70edfc92d41

See more details on using hashes here.

Provenance

File details

Details for the file container_inspector-31.0.0-py3-none-any.whl.

File metadata

File hashes

Hashes for container_inspector-31.0.0-py3-none-any.whl
Algorithm Hash digest
SHA256 9cecf2a0376fbb0a18d89fab8081e4f3713dee4612a6e3dc4e05c95504870773
MD5 d746d5de584d2fc2a5076f880bb68ed0
BLAKE2b-256 b8905aaad937c721b89906298d4d384654de030854ea9956cce5bf94e835fc0e

See more details on using hashes here.

Provenance

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page