Question: how to inspect local image? #360

qsLI · 2021-07-29T10:08:26Z

Can we skip pulling from hub，using local image insted？
My image is imported via command docker load -i， and it's not avaliable in registry.

The text was updated successfully, but these errors were encountered:

dunklesToast · 2021-08-03T16:44:58Z

For me it simply worked by using dive 482ca299fbe2. You can just put the image id or name / tag in there. Fetching image does not mean it's being pulled from Docker Hub, it's just fetching the image from the Docker Daemon as far as I understood.

indera-shsp · 2021-08-23T18:04:49Z

Does inspecting a local image create large temporary files? and where are they stored?

abitrolly · 2021-10-11T06:01:00Z

@indera-shsp at least for podman inspecting uses podman image save which streams image in .tar format to stdout.

dive/dive/image/podman/resolver_linux.go

Line 36 in c7d121b

err, reader := streamPodmanCmd("image", "save", id)

Then the image is parsed on the fly.

dive/dive/image/docker/image_archive.go

Line 23 in c7d121b

func NewImageArchive(tarFile io.ReadCloser) (*ImageArchive, error) {

oskar-gmerek · 2023-08-09T16:30:29Z

I have similar problem.

dive fbbae5f27e2a
Image Source: docker://fbbae5f27e2a
Fetching image... (this can take a while for large images)
Handler not available locally. Trying to pull 'fbbae5f27e2a'...
Using default tag: latest
Error response from daemon: failed to resolve reference "docker.io/library/fbbae5f27e2a:latest": pull access denied, repository does not exist or may require authorization: server message: insufficient_scope: authorization failed
cannot fetch image
exit status 1

This is local image, not available on hub.
In above example I trying to dive via image id, but I also tried with image tag and get the same output.

fedulovivan · 2023-09-20T08:57:24Z

Still not possible to dive into local image neither by its name, nor by id.
dive 40bea9d7fd53 gives cannot fetch image
docker inspect 40bea9d7fd53 succeeds!

Workaround is wrappring into script like:

IMAGE_NAME="${1}"
TMP_FILE=/tmp/dive-tmp-image.tar
docker save "$IMAGE_NAME" > $TMP_FILE && dive $TMP_FILE --source=docker-archive && rm $TMP_FILE

yehudamakarov · 2023-12-20T19:19:59Z

this definitely used to work for me (way after this issue was opened), i thought i was crazy and i see everyone else can't dive b2b32512c2cf
i'm using docker desktop and maybe dive is trying to use the default context?

dive b2b32512c2cf
Image Source: docker://b2b32512c2cf
Fetching image... (this can take a while for large images)
Handler not available locally. Trying to pull 'b2b32512c2cf'...
Using default tag: latest
Error response from daemon: pull access denied for b2b32512c2cf, repository does not exist or may require 'docker login': denied: requested access to the resource is denied
cannot fetch image
exit status 1

mark2185 · 2023-12-22T07:37:48Z

@yehudamakarov could you try building the branch fix/docker-context from source and test it out to see if it helps?

Just running go run main.go b2b32512c2cf should work.

cdepillabout · 2024-01-09T06:39:56Z

I had the same question of how to inspect a local docker image in a tarball.

The docker image I am working with is built by nix using dockerTools, so it is a gzipped tarball.

I was able to easily inspect it with dive like the following:

$ nix-build ... # build the docker image
...
/nix/store/q9hl1xlcyglqlc4jp0yzm7riajjymmrg-my-docker-image.tar.gz
$ dive --source docker-archive <(gunzip -c /nix/store/q9hl1xlcyglqlc4jp0yzm7riajjymmrg-my-docker-image.tar.gz)

This uses gunzip to unzip the tarball on the fly, and pass the unzipped tarball to dive.

iamludal · 2024-04-01T23:36:13Z

Same as @yehudamakarov, it used to work for me, but it does not anymore.
I tried @mark2185's solution, but it does not seem to work either:

cannot fetch image
could not find image config
exit status 1

EDIT : I was running version 0.11.0, and upgrading to 0.12.0 seemed to solve the problem.

mikejwhat · 2024-04-09T17:30:27Z

this is annoying

3manuek · 2024-04-22T12:43:12Z

I upgraded to version 0.12.0 on Darwin and it works for me now.

yehudamakarov · 2024-05-06T18:09:42Z

i've been noticing it has been working for me not sure what the difference is. i was on 0.11.0

parallaxe · 2024-05-15T11:28:01Z

Still having this issue on macOS 14.3. Updated dive to 0.12 and Docker Desktop to 4.30.0. Didn't help. Any more ideas?

Image Source: docker://1717b97bca46
Fetching image... (this can take a while for large images)
Handler not available locally. Trying to pull '1717b97bca46'...
Using default tag: latest
Error response from daemon: pull access denied for 1717b97bca46, repository does not exist or may require 'docker login': denied: requested access to the resource is denied
cannot fetch image
exit status 1

orensbruli · 2024-06-12T09:20:18Z

+1

sourcecodemage · 2024-06-30T23:06:34Z

I get a different error using :

homebrew
Macbook M1
macOS 14.5
dive 0.12.0
Docker Desktop

dive eea501fd5002 Image Source: docker://eea501fd5002 Fetching image... (this can take a while for large images) cannot fetch image could not find 'blobs/sha256/30925498a597bd44ffd2e5cf104fa3e4d62284f466e5294dc2aa199c1e6b7fae' in parsed layers

andreish · 2024-09-25T21:23:59Z

dive version
dive 0.12.0

not working :

dive 3d3ce4619eab  --source=docker 
Image Source: docker://3d3ce4619eab
Fetching image... (this can take a while for large images)
Handler not available locally. Trying to pull '3d3ce4619eab'...
Using default tag: latest
Error response from daemon: pull access denied for 3d3ce4619eab, repository does not exist or may require 'docker login': denied: requested access to the resource is denied
cannot fetch image

docker version 
Client: Docker Engine - Community
 Version:           27.3.1

docker inspect works:

docker inspect 3d3ce4619eab | head -n 10
[
    {
        "Id": "3d3ce4619eab5e76267b67cf344623891ac0e191d5d943b01242b97260519fba",
        "Created": "2024-09-25T21:08:07.43788861Z",
        "Path": "/entrypoint.sh",
        "Args": [],
        "State": {
            "Status": "running",
            "Running": true,
            "Paused": false

abitrolly · 2024-09-26T04:23:27Z

@andreish need to ensure that your shell and dive are using the same docker daemon with the same environment variables. I would start to put more print statements around here

dive/dive/image/docker/engine_resolver.go

Line 89 in 925cdd8

fmt.Println("Handler not available locally. Trying to pull '" + id + "'...")

stringang · 2024-09-26T07:13:39Z

dive version
dive 0.12.0

working normally

dive 131f24102f9ebc5fb2e4b024f97 --source=docker

djamaile · 2024-10-03T15:06:45Z

Have the same issue, can confirm that @fedulovivan script works. You can just wrap it into a function

function dive_local
    set IMAGE_NAME $argv[1]

    if test -z "$IMAGE_NAME"
        echo "Usage: dive_local_image <image_name_or_id>"
        return 1
    end

    set TMP_FILE (mktemp /tmp/dive-tmp-image.XXXXXX.tar)
    docker save "$IMAGE_NAME" > "$TMP_FILE"
    if test $status -eq 0
        dive "$TMP_FILE" --source=docker-archive
        rm "$TMP_FILE"
    else
        echo "Failed to save Docker image."
        rm "$TMP_FILE"
        return 1
    end
end

dive_local <image-id>

ondrovic · 2024-10-05T14:27:56Z

Having a similar issue when trying to inspect local images using docker desktop on windows

Image Source: docker://bccad7447e2a
Fetching image... (this can take a while for large images)
cannot fetch image
could not find 'blobs/sha256/e9e6580aad05144f1c93d072d5ee99b65ba05edbbc6cc3b3dc02d8ba24a2ac99' in parsed layers

Info

docker info
Client:
 Version:    27.2.0
 Context:    desktop-linux
 Debug Mode: false
 Plugins:
  buildx: Docker Buildx (Docker Inc.)
    Version:  v0.16.2-desktop.1
    Path:     C:\Program Files\Docker\cli-plugins\docker-buildx.exe
  compose: Docker Compose (Docker Inc.)
    Version:  v2.29.2-desktop.2
    Path:     C:\Program Files\Docker\cli-plugins\docker-compose.exe
  debug: Get a shell into any image or container (Docker Inc.)
    Version:  0.0.34
    Path:     C:\Program Files\Docker\cli-plugins\docker-debug.exe
  desktop: Docker Desktop commands (Alpha) (Docker Inc.)
    Version:  v0.0.15
    Path:     C:\Program Files\Docker\cli-plugins\docker-desktop.exe
  dev: Docker Dev Environments (Docker Inc.)
    Version:  v0.1.2
    Path:     C:\Program Files\Docker\cli-plugins\docker-dev.exe
  extension: Manages Docker extensions (Docker Inc.)
    Version:  v0.2.25
    Path:     C:\Program Files\Docker\cli-plugins\docker-extension.exe
  feedback: Provide feedback, right in your terminal! (Docker Inc.)
    Version:  v1.0.5
    Path:     C:\Program Files\Docker\cli-plugins\docker-feedback.exe
  init: Creates Docker-related starter files for your project (Docker Inc.)
    Version:  v1.3.0
    Path:     C:\Program Files\Docker\cli-plugins\docker-init.exe
  sbom: View the packaged-based Software Bill Of Materials (SBOM) for an image (Anchore Inc.)
    Version:  0.6.0
    Path:     C:\Program Files\Docker\cli-plugins\docker-sbom.exe
  scout: Docker Scout (Docker Inc.)
    Version:  v1.13.0
    Path:     C:\Program Files\Docker\cli-plugins\docker-scout.exe

Server:
 Containers: 6
  Running: 6
  Paused: 0
  Stopped: 0
 Images: 11
 Server Version: 27.2.0
 Storage Driver: overlayfs
  driver-type: io.containerd.snapshotter.v1
 Logging Driver: json-file
 Cgroup Driver: cgroupfs
 Cgroup Version: 1
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
 Swarm: inactive
 Runtimes: io.containerd.runc.v2 nvidia runc
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: 8fc6bcff51318944179630522a095cc9dbf9f353
 runc version: v1.1.13-0-g58aa920
 init version: de40ad0
 Security Options:
  seccomp
   Profile: unconfined
 Kernel Version: 5.15.153.1-microsoft-standard-WSL2
 Operating System: Docker Desktop
 OSType: linux
 Architecture: x86_64
 CPUs: 32
 Total Memory: 31.29GiB
 Name: docker-desktop
 ID: 64560818-ff19-4724-9534-7083b61a9b57
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 HTTP Proxy: http.docker.internal:3128
 HTTPS Proxy: http.docker.internal:3128
 No Proxy: hubproxy.docker.internal
 Labels:
  com.docker.desktop.address=npipe://\\.\pipe\docker_cli
 Experimental: false
 Insecure Registries:
  hubproxy.docker.internal:5555
  127.0.0.0/8
 Live Restore Enabled: false

Built using

docker build --no-cache -t <img name> .

# also tried
dive build -t <img name> .
Image Source: docker://
Fetching image... (this can take a while for large images)
Handler not available locally. Trying to pull ''...
"docker pull" requires exactly 1 argument.
See 'docker pull --help'.

Usage:  docker pull [OPTIONS] NAME[:TAG|@DIGEST]

Download an image from a registry
cannot fetch image
exit status 1

Tried using --source the following ways

desktop-linux
docker-desktop
docker

Sadly they all failed

abitrolly · 2024-10-06T08:12:10Z

@ondrovic

I know this used to work

Can you prove it?

ondrovic · 2024-10-06T14:36:13Z

@ondrovic

I know this used to work

Can you prove it?

No as a matter of fact, based on your question I spent the last 15 mins trying every version since release and can no confirm without a doubt that it never worked :-D

abitrolly · 2024-10-06T16:06:15Z

@ondrovic then it is useless for the sake of this discussion. There are old versions that you can try, but if might have used local name instead of hash. It could be the case that Docker changed the protocol, but without proof that it worked, your issue report is useless. It doesn't specify the version of dive used, the image, and doesn't show that you've read the thread and tried workarounds. I am just trying to explain the downvote without giving one myself. )

In any case, the project doesn't have any funding and is not maintained. I guess the only way a new releases are made is when problem is escalated with some corporation and they give @wagoodman money to spend time on fixing it.

GeorgeAndreiBals · 2024-10-21T12:48:54Z

On dive 0.12.0 I can inspect a local image just fine with dive <image tag>

loretoparisi · 2024-10-23T15:14:01Z

image

Uhm using

% dive --version            
dive 0.12.0

when running dive image tag I get


accepts at most 1 arg(s), received 2

loretoparisi · 2024-10-23T15:48:46Z

the only solution worked was the script by @fedulovivan
Here I have added optional deletion to speed up further inspection

#!/bin/bash

IMAGE_NAME="${1}"
DELETE_FILE="${2}"  # yes | no

# Check if the image file exists
if [ -f "$TMP_FILE" ]; then
    echo "Image file $TMP_FILE already exists. Skipping docker save."
else
    docker save "$IMAGE_NAME" > $TMP_FILE
fi

# Run dive on the image file
dive $TMP_FILE --source=docker-archive

# Check if the user wants to delete the file
if [ "$DELETE_FILE" == "yes" ]; then
    echo "Deleting the temporary file $TMP_FILE."
    rm $TMP_FILE
else
    echo "Keeping the temporary file $TMP_FILE."
fi

./divelocal image
./divelocal image
./divelocal image yes

DeanAyalon · 2024-10-24T02:32:12Z

image

Uhm using
% dive --version            
dive 0.12.0
when running dive image tag I get
accepts at most 1 arg(s), received 2

You're doing image tag instead of image:tag, is that intentional?

The Fetching... message was confusing. This replaces it with a clearer messages to avoid confusion. Additional fix: show original error unless image is not found Only try doing a pull if the image isn't found. Everything else should just generate the error so the user can fix it. Fixes wagoodman#360 Co-authored-by: Christian Höltje <[email protected]>

lloeki · 2024-11-19T13:25:39Z

One-liner without temporary files:

dive <(docker save your/image:tag) --source=docker-archive

Those that say "works for me" are probably running dive on the same Linux machine (including being a VM) as the Docker storage. On macOS it goes through a Linux VM, so falls back to pulling:

Handler not available locally. Trying to pull 'wh4t3v3r'

Which will fail:

loudly if the image is local-only (not published) or behind authentication (when unauthenticated).
silently if the image with the same name is pushed (it'll pull that version instead of the local one, which may differ, which means you'll be looking at the wrong thing)

Probably, as a sane default, when unable to get to the local storage it should:

fall back to trying to read from docker save as above instead
if (and only if) the image/tag is not present locally, attempt to pull and do 1.

codecowboy · 2024-12-05T13:21:17Z

Can confirm dive <(docker save your/image:tag) --source=docker-archive also works on MacOS 15.1 (24B83) but the docs don't mention this. Thanks to @lloeki

njuptlzf · 2025-01-21T02:07:58Z

how to containerd + dive ?

# ./dive version
dive 0.12.0
# ctr images export 5.tar test.img.com/image/app:0.0.1
# ./dive --source docker-archive ./5.tar
Image Source: docker-archive://./5.tar
Fetching image... (this can take a while for large images)
cannot fetch image
could not find 'blobs/sha256/e85e534aa5d895d8ad44fdb2e660d158462c054f5a53e0f6baf7af6ded844ba7' in parsed layers

I unpacked the tarball and confirmed that there are blobs/sha256/e85e534aa5d895d8ad44fdb2e660d158462c054f5a53e0f6baf7af6ded844ba7

DeanAyalon · 2025-01-21T04:18:15Z

@njuptlzf unrelated to this issue. You're describing the same isue appearing on #507 #510 #534 #558
It is fixed with PR #511

Joschi's fork has this fix and others merged in

roberts-github-name · 2025-01-30T07:46:34Z

I struggled a lot with dive on local containers as well. Anyone else using rootless Docker like I am by chance? I'm thinking that might be relevant.

Anyway I was able to solve it by running dive in a container, mounting the right docker socket as suggested in the readme.

In particular first get the right socket, in my case /run/user/1000/docker.sock below:

$ docker context ls

NAME            DESCRIPTION                               DOCKER ENDPOINT                                 ERROR
default         Current DOCKER_HOST based configuration   unix:///var/run/docker.sock                     
rootless *      Rootless mode                             unix:///run/user/1000/docker.sock

Then use docker run -v to mount that socket on your host to /var/run/docker.sock in the container where dive looks:

$ docker run -ti --rm  -v /run/user/1000/docker.sock:/var/run/docker.sock wagoodman/dive <hash|repo:tag|...>

Without the -v I get another error about "Cannot connect to the Docker daemon..."

mark2185 mentioned this issue Apr 29, 2022

dive always fetch a new image from my dockerhub #359

Open

docwhat mentioned this issue Oct 25, 2023

Describe what "Fetching" is really doing #482

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Question: how to inspect local image? #360

Question: how to inspect local image? #360

qsLI commented Jul 29, 2021

dunklesToast commented Aug 3, 2021

indera-shsp commented Aug 23, 2021 •

edited

Loading

abitrolly commented Oct 11, 2021

oskar-gmerek commented Aug 9, 2023

fedulovivan commented Sep 20, 2023 •

edited

Loading

yehudamakarov commented Dec 20, 2023 •

edited

Loading

mark2185 commented Dec 22, 2023

cdepillabout commented Jan 9, 2024

iamludal commented Apr 1, 2024 •

edited

Loading

mikejwhat commented Apr 9, 2024

3manuek commented Apr 22, 2024

yehudamakarov commented May 6, 2024

parallaxe commented May 15, 2024

orensbruli commented Jun 12, 2024

sourcecodemage commented Jun 30, 2024

andreish commented Sep 25, 2024 •

edited

Loading

abitrolly commented Sep 26, 2024

stringang commented Sep 26, 2024

djamaile commented Oct 3, 2024

ondrovic commented Oct 5, 2024 •

edited

Loading

abitrolly commented Oct 6, 2024

ondrovic commented Oct 6, 2024 •

edited

Loading

abitrolly commented Oct 6, 2024

GeorgeAndreiBals commented Oct 21, 2024

loretoparisi commented Oct 23, 2024

loretoparisi commented Oct 23, 2024

DeanAyalon commented Oct 24, 2024

lloeki commented Nov 19, 2024 •

edited

Loading

codecowboy commented Dec 5, 2024

njuptlzf commented Jan 21, 2025 •

edited

Loading

DeanAyalon commented Jan 21, 2025

roberts-github-name commented Jan 30, 2025

Question: how to inspect local image? #360

Question: how to inspect local image? #360

Comments

qsLI commented Jul 29, 2021

dunklesToast commented Aug 3, 2021

indera-shsp commented Aug 23, 2021 • edited Loading

abitrolly commented Oct 11, 2021

oskar-gmerek commented Aug 9, 2023

fedulovivan commented Sep 20, 2023 • edited Loading

yehudamakarov commented Dec 20, 2023 • edited Loading

mark2185 commented Dec 22, 2023

cdepillabout commented Jan 9, 2024

iamludal commented Apr 1, 2024 • edited Loading

mikejwhat commented Apr 9, 2024

3manuek commented Apr 22, 2024

yehudamakarov commented May 6, 2024

parallaxe commented May 15, 2024

orensbruli commented Jun 12, 2024

sourcecodemage commented Jun 30, 2024

andreish commented Sep 25, 2024 • edited Loading

abitrolly commented Sep 26, 2024

stringang commented Sep 26, 2024

djamaile commented Oct 3, 2024

ondrovic commented Oct 5, 2024 • edited Loading

abitrolly commented Oct 6, 2024

ondrovic commented Oct 6, 2024 • edited Loading

abitrolly commented Oct 6, 2024

GeorgeAndreiBals commented Oct 21, 2024

loretoparisi commented Oct 23, 2024

loretoparisi commented Oct 23, 2024

DeanAyalon commented Oct 24, 2024

lloeki commented Nov 19, 2024 • edited Loading

codecowboy commented Dec 5, 2024

njuptlzf commented Jan 21, 2025 • edited Loading

DeanAyalon commented Jan 21, 2025

roberts-github-name commented Jan 30, 2025

indera-shsp commented Aug 23, 2021 •

edited

Loading

fedulovivan commented Sep 20, 2023 •

edited

Loading

yehudamakarov commented Dec 20, 2023 •

edited

Loading

iamludal commented Apr 1, 2024 •

edited

Loading

andreish commented Sep 25, 2024 •

edited

Loading

ondrovic commented Oct 5, 2024 •

edited

Loading

ondrovic commented Oct 6, 2024 •

edited

Loading

lloeki commented Nov 19, 2024 •

edited

Loading

njuptlzf commented Jan 21, 2025 •

edited

Loading