# umoci を Homebrew, apk, apt, dnf, Nix, pacman, zypper でインストール

umoci のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:umoci
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install umoci
```

  証拠: local Homebrew formula metadata

### Linux

- apk (92%):

```sh
sudo apk add umoci
```

  証拠: Alpine Linux edge package indexes: umoci from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install umoci
```

  証拠: Debian stable package indexes: umoci from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install umoci
```

  証拠: Fedora Rawhide package metadata: umoci from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#umoci
```

  証拠: nixpkgs package indexes: pkgs/by-name/um/umoci/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S umoci
```

  証拠: Arch Linux sync databases: umoci from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install umoci
```

  証拠: openSUSE Tumbleweed package metadata: umoci from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

## パッケージ情報

- **パッケージキー:** brew:umoci
- **パッケージマネージャ:** Homebrew
- **バージョン:** 0.6.0
- **ソース概要:** Reference OCI implementation for creating, modifying and inspecting images
- **ホームページ:** <https://umo.ci>
- **リポジトリ:** <https://github.com/opencontainers/umoci>
- **最終更新:** 2026-07-25T21:47:58+02:00
- **生成日時:** 2026-08-03T19:37:03+00:00

## 実行可能ファイル

- umoci (エイリアス)

## インストール挙動

- Bottle: 利用不可

## バージョンと鮮度

- ページ生成日: 2026-08-03
- マネージャ版: 0.6.0
## プロジェクトの歴史と使われ方

umoci is a low-level command-line and Go-library tool for creating, modifying, unpacking, repacking, and inspecting Open Container Initiative container images.

### プロジェクトの歴史

The official documentation gives umoci a clear origin story: it was originally developed in 2016 by Aleksa Sarai as part of the openSUSE project. Its name expands to 'Umoci Modifies Open Containers' Images', and the project describes itself as a small, unopinionated reference implementation of the OCI image specification.

In mid-2020, umoci was donated to the Open Container Initiative as a reference implementation of the OCI image specification. The 0.4.6 changelog records the adoption and the corresponding import-path/module move from github.com/openSUSE/umoci to github.com/opencontainers/umoci.

The project retained its role as infrastructure rather than an end-user container runtime. The README and docs emphasize that umoci is meant to be a foundation for larger systems, while its Go API is useful but historically treated cautiously because it was not promised as stable.

### 採用の歴史

The OCI adoption made umoci part of the official container-image standards ecosystem. The project documentation explicitly says the adoption solidified it as useful 'boring container infrastructure' for larger systems.

The Homebrew input shows broad downstream packaging across apk, Homebrew, Debian/Ubuntu source packages, dnf, Nix, pacman, and zypper. That distribution pattern matches the tool's role: a specialized container-image utility useful to build systems, distro packaging, rootless-container workflows, and OCI conformance work.

### 使われ方

umoci is used from a subcommand-based CLI for OCI image operations such as getting an image, unpacking, modifying, repacking, garbage collection, rootless workflows, and reference operations documented in generated man pages.

For package-focused users, the appeal is that umoci manipulates OCI image layouts directly without requiring a full Docker-style daemon. That makes it useful in scripts, package build pipelines, distro tooling, and low-level debugging of container-image contents.

### パッケージ好きにとっての重要性

umoci is significant in the package-nerd niche because it sits at the boundary between package building and container image building: it is small enough to install as a CLI, official enough to be under the Open Containers organization, and low-level enough for reproducible or rootless image workflows.

Its 2020 move from openSUSE to Open Containers is especially important for provenance: package maintainers had to track the import-path change, while users gained an OCI-hosted reference implementation.

### タイムライン

- 2016: umoci originally developed by Aleksa Sarai as part of openSUSE.
- 2020-06-24: umoci 0.4.6 changelog announces adoption by the Open Container Initiative and import-path move to github.com/opencontainers/umoci.
- 2021-04-05: umoci 0.4.7 fixes CVE-2021-29136 in unpack/raw unpack behavior.
- 2025: Release notes for 0.6.0 describe support for OCI image-spec v1.1.1 reading features and OCI runtime-spec v1.2.1 config generation.

### Related projects

- Related standards and projects include the OCI image specification, OCI runtime specification, openSUSE, Open Container Initiative governance, and larger systems built on top of OCI image layouts.

### ソース

- <https://github.com/opencontainers/umoci>
- <https://github.com/opencontainers/umoci/releases>
- <https://umo.ci/>
- <https://umo.ci/meta/changelog/>
- source_facts.package-manager


## セキュリティノート

broad file, network, media, or database tool signal.

- **Geiger リスク:** blue / 中
- broad file, network, media, or database tool signal

## 他のパッケージマネージャ記録

- Debian apt - golang-github-opensuse-umoci-dev - 0.4.7+ds-4: normalized package name match | Debian stable package indexes: golang-github-opensuse-umoci-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | umoci development files | https://umo.ci
- Debian apt - umoci - 0.4.7+ds-4+b10: normalized package name match | Debian stable package indexes: umoci from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Open Container Images manipulation tool | https://umo.ci
- Nix - umoci: normalized package name match | nixpkgs package indexes: pkgs/by-name/um/umoci/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - golang-github-opensuse-umoci-dev - 0.4.7+ds-4: normalized package name match | Ubuntu 24.04 LTS package indexes: golang-github-opensuse-umoci-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | umoci development files | https://umo.ci
- Ubuntu apt - umoci - 0.4.7+ds-4: normalized package name match | Ubuntu 24.04 LTS package indexes: umoci from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Open Container Images manipulation tool | https://umo.ci
- apk - umoci - 0.4.7-r41: normalized package name match | Alpine Linux edge package indexes: umoci from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | umoci modifies Open Container images | https://umo.ci/
- dnf - umoci - 0.6.0-4.fc45: normalized package name match | Fedora Rawhide package metadata: umoci from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Open Container Image manipulation tool | https://umo.ci
- pacman - umoci - 0.6.0-1: normalized package name match | Arch Linux sync databases: umoci from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Umoci Modifies Open Container Images | https://umo.ci/
- zypper - umoci - 0.6.0-1.7: normalized package name match | openSUSE Tumbleweed package metadata: umoci from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Open Container Image manipulation tool | https://umo.ci


## Combined YAML source

View the package source record on GitHub. [combined/umoci.yml](https://github.com/mxcl/pkgdb/blob/main/combined/umoci.yml)


## ソース

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph