Skiff - OCI image analysis utility
summary
skiff is a read only OCI image introspection CLI built on podman's container libraries that reports compressed vs uncompressed layer sizes and pinpoints the biggest files inside an image. It diffs two images by unpacking them and comparing contents and RPM databases so it shows packages added removed or version changed, and it can list per-layer hashes and sizes without always pulling blobs. Planned bits include diff installed packages, a skiff mount prototype and sunburst visualizations.
AI-written summary · about
chapters (10)
- 0:00Skiff introduction
- 2:34What is Skiff
- 3:19Current features
- 4:23Analyzing image layers
- 6:06Comparing images with diff
- 7:12Diffing packages
- 8:19Skiff mount feature
- 10:06Future plans
- 11:13Live demo: package diffing
- 13:45Q&A
related talks
11mSkiff - OCI image analysis utility
25mBuild Distroless Containers the Easy Way: From Full Fat To Featherweight With Unbase_oci
33mDetection of vulnerabilities and misconfigurations in production images
37mCarvel: Clean Tools for Cloudy Problems
23mViewing images through layered SBOMs
36mBuild a Container Image from Scratch
44mThe Containerization of the Operating System: Exploring Bootc and the Future of Linux Deployment
05mLightning Talk: What Made Your Container Fat? Visualizing the Size of Container Layers