# 使用 Homebrew, apk, apt, dnf, Nix, pacman, zypper 安装 umoci

查看 umoci 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:umoci
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install umoci
```

  证据: local Homebrew formula metadata

### Linux

- apk (92%):

```sh
sudo apk add umoci
```

  证据: Alpine Linux edge package indexes: umoci from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install umoci
```

  证据: Debian stable package indexes: umoci from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install umoci
```

  证据: Fedora Rawhide package metadata: umoci from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#umoci
```

  证据: nixpkgs package indexes: pkgs/by-name/um/umoci/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S umoci
```

  证据: Arch Linux sync databases: umoci from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install umoci
```

  证据: openSUSE Tumbleweed package metadata: umoci from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

## 软件包事实

- **软件包键:** brew:umoci
- **软件包管理器:** Homebrew
- **版本:** 0.6.0
- **来源摘要:** Reference OCI implementation for creating, modifying and inspecting images
- **主页:** <https://umo.ci>
- **仓库:** <https://github.com/opencontainers/umoci>
- **最后更新:** 2026-07-25T21:47:58+02:00
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- umoci (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 0.6.0
## 项目历史与用法

umoci is a low-level command-line and Go-library tool for creating, modifying, unpacking, repacking, and inspecting Open Container Initiative container images.

### 项目历史

The official documentation gives umoci a clear origin story: it was originally developed in 2016 by Aleksa Sarai as part of the openSUSE project. Its name expands to 'Umoci Modifies Open Containers' Images', and the project describes itself as a small, unopinionated reference implementation of the OCI image specification.

In mid-2020, umoci was donated to the Open Container Initiative as a reference implementation of the OCI image specification. The 0.4.6 changelog records the adoption and the corresponding import-path/module move from github.com/openSUSE/umoci to github.com/opencontainers/umoci.

The project retained its role as infrastructure rather than an end-user container runtime. The README and docs emphasize that umoci is meant to be a foundation for larger systems, while its Go API is useful but historically treated cautiously because it was not promised as stable.

### 采用历史

The OCI adoption made umoci part of the official container-image standards ecosystem. The project documentation explicitly says the adoption solidified it as useful 'boring container infrastructure' for larger systems.

The Homebrew input shows broad downstream packaging across apk, Homebrew, Debian/Ubuntu source packages, dnf, Nix, pacman, and zypper. That distribution pattern matches the tool's role: a specialized container-image utility useful to build systems, distro packaging, rootless-container workflows, and OCI conformance work.

### 使用方式

umoci is used from a subcommand-based CLI for OCI image operations such as getting an image, unpacking, modifying, repacking, garbage collection, rootless workflows, and reference operations documented in generated man pages.

For package-focused users, the appeal is that umoci manipulates OCI image layouts directly without requiring a full Docker-style daemon. That makes it useful in scripts, package build pipelines, distro tooling, and low-level debugging of container-image contents.

### 为什么软件包爱好者会关心

umoci is significant in the package-nerd niche because it sits at the boundary between package building and container image building: it is small enough to install as a CLI, official enough to be under the Open Containers organization, and low-level enough for reproducible or rootless image workflows.

Its 2020 move from openSUSE to Open Containers is especially important for provenance: package maintainers had to track the import-path change, while users gained an OCI-hosted reference implementation.

### 时间线

- 2016: umoci originally developed by Aleksa Sarai as part of openSUSE.
- 2020-06-24: umoci 0.4.6 changelog announces adoption by the Open Container Initiative and import-path move to github.com/opencontainers/umoci.
- 2021-04-05: umoci 0.4.7 fixes CVE-2021-29136 in unpack/raw unpack behavior.
- 2025: Release notes for 0.6.0 describe support for OCI image-spec v1.1.1 reading features and OCI runtime-spec v1.2.1 config generation.

### Related projects

- Related standards and projects include the OCI image specification, OCI runtime specification, openSUSE, Open Container Initiative governance, and larger systems built on top of OCI image layouts.

### 来源

- <https://github.com/opencontainers/umoci>
- <https://github.com/opencontainers/umoci/releases>
- <https://umo.ci/>
- <https://umo.ci/meta/changelog/>
- source_facts.package-manager


## 安全说明

broad file, network, media, or database tool signal.

- **Geiger 风险:** blue / 中
- broad file, network, media, or database tool signal

## 其他软件包管理器记录

- Debian apt - golang-github-opensuse-umoci-dev - 0.4.7+ds-4: normalized package name match | Debian stable package indexes: golang-github-opensuse-umoci-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | umoci development files | https://umo.ci
- Debian apt - umoci - 0.4.7+ds-4+b10: normalized package name match | Debian stable package indexes: umoci from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Open Container Images manipulation tool | https://umo.ci
- Nix - umoci: normalized package name match | nixpkgs package indexes: pkgs/by-name/um/umoci/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - golang-github-opensuse-umoci-dev - 0.4.7+ds-4: normalized package name match | Ubuntu 24.04 LTS package indexes: golang-github-opensuse-umoci-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | umoci development files | https://umo.ci
- Ubuntu apt - umoci - 0.4.7+ds-4: normalized package name match | Ubuntu 24.04 LTS package indexes: umoci from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Open Container Images manipulation tool | https://umo.ci
- apk - umoci - 0.4.7-r41: normalized package name match | Alpine Linux edge package indexes: umoci from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | umoci modifies Open Container images | https://umo.ci/
- dnf - umoci - 0.6.0-4.fc45: normalized package name match | Fedora Rawhide package metadata: umoci from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Open Container Image manipulation tool | https://umo.ci
- pacman - umoci - 0.6.0-1: normalized package name match | Arch Linux sync databases: umoci from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Umoci Modifies Open Container Images | https://umo.ci/
- zypper - umoci - 0.6.0-1.7: normalized package name match | openSUSE Tumbleweed package metadata: umoci from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Open Container Image manipulation tool | https://umo.ci


## Combined YAML source

View the package source record on GitHub. [combined/umoci.yml](https://github.com/mxcl/pkgdb/blob/main/combined/umoci.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
