CLI Reference
CLI Reference
Global flags
Available on every command:
| Flag | Description |
|---|---|
--cache-dir | Metadata cache directory (default ~/.cache/sandwichcake) |
--insecure-registry | Registry host to access over plain HTTP (repeatable). When set, all registry traffic in that invocation is treated as insecure |
-v, --verbose | Verbose output (also makes compose render the transfer plan) |
Authentication
sandwichcake uses the standard Docker credential chain
(~/.docker/config.json and configured credential helpers). There are
no separate login commands — authenticate with docker login (or your
registry’s helper) first.
Commands
Pack a directory into a slice
Compose slices onto a base image
Show the transfer plan
Inspect an image or slice
Compare two images by diff_id
Copy a manifest to a new tag
List slices in repos
List repos under a prefix
Delete a manifest and its metadata
List registered pack types
Print build version
Shell completion scripts
Read-only commands (plan, inspect, diff, ls, discover,
types, version, completion) never write to the registry or the local
filesystem beyond the metadata cache. Commands that push (pack,
compose, tag) print the pushed ref and digest on success.