v0.1.24

• Improvements to macOS builds: A make binary-local should work without extra options.
• make install on macOS now installs to /usr/local
• The destination in docker-archive: now can be a pipe.
• When building with containers_image_openpgp, signatures with PGP v3 signature packets are accepted.
• Unreadable /etc/docker/certs.d now only logs a warning instead of aborting the operation.
• oci-layout: naming semantics changes:
  • A full range of org.opencontainers.image.ref.name values is now accepted
  • A name must be specified for oci-layout: destinations (it does not default to latest any more).
  • For oci-layout: sources, a name is now optional if the image index contains exactly one image (instead of using the image with the latest name).
  • Policy configuration identities of oci-layout: images now consist only of the directory name, to avoid the ambiguity created by the unspecified annotation values above.
• ~/.docker/config.json credential helpers (configured in credHelpers) are now supported.
• Annotations are now preserved when copying and compressing OCI images.
• New transport oci-archive:, works exactly like oci-layout:, but works on tarballs instead of extracted directories.
• When copying images, skopeo always asks for the same image schema, and optionally converts the image itself to make it acceptable to the destination, instead of asking for a schema dependent on the destinations’ capabilities (relying on the source to convert the image).
• Improved installation instructions.
• ostree: image names can now contain colons (e.g. port specifications)
• skopeo now does not declare support for manifest lists, so that the source registry provides a single image. This allows skopeo copy to copy various images recently published to Docker Hub. (More complete support for manifest lists will come in the future.)
• The containers-storage: backend has been updated, incl. support for the override_kernel_checks option.
• Improved the output of progress bars in skopeo copy.
• Fixed fetching blobs with external URLs in images served by docker/distribution registries.
• OCI images now support reading blobs with external URLs, ands storing information about such blobs without copying the contents.
• Writing ostree: images creates a docker.digest annotation.
• docker/distribution registry credentials are now read from $XDG_RUNTIME_DIR/containers/auth.json before trying ~/.docker/config.json and ~/.dockercfg.
• skopeo inspect no longer crashes on images where the config blob does not contain a container configuration.