sincecutoff.com
← all changes

skopeo copy adds manifest-list signature removal and sparse-list stripping

Introduced 2026-07-30 · score 0.94

HOW TO USE IT

When copying only selected platforms from a multi-architecture image to a registry that rejects sparse lists, use `--strip-removed-platforms` and explicitly remove signatures. Use `--remove-list-signatures` to preserve per-instance signatures, or `--remove-signatures` to remove all signatures.

skopeo copy --multi-arch=linux/amd64,linux/arm64 --strip-removed-platforms --remove-list-signatures docker://quay.io/skopeo/stable:latest docker://registry.example.com/skopeo:latest

WHY THIS HELPS

Copy selected platforms from a multi-architecture image to a registry that rejects manifest lists referencing missing images.

BEFORE THIS CHANGE

Use `--remove-signatures` to remove both manifest-list and per-instance signatures; sparse manifest lists may contain entries for images not copied to the destination.

REQUIREMENTS AND LIMITATIONS

  • Version: v1.24.0
  • --multi-arch=<platform-list> (required): Select specific platforms using a comma-separated list of OS/architecture pairs; all compression variants and other variations for each platform are copied.
  • --strip-removed-platforms (required): Write a manifest list containing only copied platforms. Requires explicit signature removal because stripping changes the list digest and invalidates its signature.
  • --remove-list-signatures (required): Do not copy the manifest list signature while preserving per-instance signatures. It is an alternative to `--remove-signatures`; the documentation does not state that the two flags are mutually exclusive or describe precedence.
  • --remove-signatures: Do not copy any source signatures. Use instead of `--remove-list-signatures` when all signatures should be removed; the documentation does not state that the two flags are mutually exclusive or describe precedence.
  • source-image (required): Image name to copy from, using Skopeo's image-name format.
  • destination-image (required): Image name to copy to, using Skopeo's image-name format.
  • `--strip-removed-platforms` requires signatures to be removed using either `--remove-signatures` or `--remove-list-signatures`; the operation fails if signatures are present and not explicitly removed.
  • If both signature-removal flags are specified, `--remove-signatures` takes precedence.
  • `--strip-removed-platforms` applies when copying only a subset of platforms from a multi-architecture image using `--multi-arch` with a platform list.

FIRST-PARTY EVIDENCE

Check the installed version and the source before using it. Entry JSON

Report a problem with this card