https://github.com/leplusorg/docker-img
Docker container to manipulate images (imagemagick, exiftool...).
https://github.com/leplusorg/docker-img
docker docker-container docker-image dockerfile exif exif-data exif-data-extraction exif-deletion exif-metadata exif-orientation exif-reader exif-remover exiftool image-converter image-manipulation image-processing imagemagick jpeg jpg png
Last synced: 25 days ago
JSON representation
Docker container to manipulate images (imagemagick, exiftool...).
- Host: GitHub
- URL: https://github.com/leplusorg/docker-img
- Owner: leplusorg
- License: apache-2.0
- Created: 2019-12-03T19:57:08.000Z (over 5 years ago)
- Default Branch: main
- Last Pushed: 2024-10-29T12:15:36.000Z (8 months ago)
- Last Synced: 2024-10-29T14:43:48.463Z (8 months ago)
- Topics: docker, docker-container, docker-image, dockerfile, exif, exif-data, exif-data-extraction, exif-deletion, exif-metadata, exif-orientation, exif-reader, exif-remover, exiftool, image-converter, image-manipulation, image-processing, imagemagick, jpeg, jpg, png
- Language: Dockerfile
- Homepage: https://hub.docker.com/r/leplusorg/img
- Size: 318 KB
- Stars: 11
- Watchers: 2
- Forks: 3
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Security: SECURITY.md
Awesome Lists containing this project
README
# Images
Multi-platform Docker container with utilities to process images (imagemagick, exiftool, optipng...).
[](img/Dockerfile)
[](https://github.com/leplusorg/docker-img/actions?query=workflow:"Docker")
[](https://hub.docker.com/r/leplusorg/img)
[](https://hub.docker.com/r/leplusorg/img)
[](https://hub.docker.com/r/leplusorg/img)
[](https://bestpractices.coreinfrastructure.org/projects/10073)
[](https://securityscorecards.dev/viewer/?uri=github.com/leplusorg/docker-img)
## Example without using the filesystem
Let's say that you have an image `foo.jpg` in your current working directory that you want to extract its metadata:
**Mac/Linux**
```bash
cat foo.jpg | docker run --rm -i --net=none leplusorg/img magick identify -
```
**Windows**
```batch
type foo.jpg | docker run --rm -i --net=none leplusorg/img magick identify -
```
## Example using the filesystem
Same thing, assuming that you have an image `foo.jpg` in your current working directory that you want to extract its metadata:
**Mac/Linux**
```bash
docker run --rm -t --user="$(id -u):$(id -g)" --net=none -v "$(pwd):/tmp" leplusorg/img magick identify /tmp/foo.jpg
```
**Windows**
In `cmd`:
```batch
docker run --rm -t --net=none -v "%cd%:/tmp" leplusorg/img magick identify /tmp/foo.jpg
```
In PowerShell:
```pwsh
docker run --rm -t --net=none -v "${PWD}:/tmp" leplusorg/img magick identify /tmp/foo.jpg
```
## Help
To know more command-line options of one of the imagemagick command:
```bash
docker run --rm --net=none leplusorg/img magick -help
```
## Software Bill of Materials (SBOM)
To get the SBOM for the latest image (in SPDX JSON format), use the
following command:
```bash
docker buildx imagetools inspect leplusorg/img --format '{{ json (index .SBOM "linux/amd64").SPDX }}'
```
Replace `linux/amd64` by the desired platform (`linux/amd64`, `linux/arm64` etc.).
### Sigstore
[Sigstore](https://docs.sigstore.dev) is trying to improve supply
chain security by allowing you to verify the origin of an
artifcat. You can verify that the jar that you use was actually
produced by this repository. This means that if you verify the
signature of the ristretto jar, you can trust the integrity of the
whole supply chain from code source, to CI/CD build, to distribution
on Maven Central or whever you got the jar from.
You can use the following command to verify the latest image using its
sigstore signature attestation:
```bash
cosign verify leplusorg/img --certificate-identity-regexp 'https://github\.com/leplusorg/docker-img/\.github/workflows/.+' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'
```
The output should look something like this:
```text
Verification for index.docker.io/leplusorg/xml:main --
The following checks were performed on each of these signatures:
- The cosign claims were validated
- Existence of the claims in the transparency log was verified offline
- The code-signing certificate was verified using trusted certificate authority certificates
[{"critical":...
```
For instructions on how to install `cosign`, please read this [documentation](https://docs.sigstore.dev/cosign/system_config/installation/).
## Request new tool
Please use [this link](https://github.com/leplusorg/docker-img/issues/new?assignees=thomasleplus&labels=enhancement&template=feature_request.md&title=%5BFEAT%5D) (GitHub account required) to request that a new tool be added to the image. I am always interested in adding new capabilities to these images.