Configuration¶

Tako determines what to fetch and where to store images from a config file, one per image. Config files follow the same syntax as systemd unit files.

Example¶

Origin=https://images.example.com/app-foo
PublicKey=8+r5DKNN/cwI+h0oHxMtgdyND3S/5xDLHQu0hFUmq+g=
Destination=/var/lib/images/app-foo
Version=1.*

# Restart app-foo after a new image has been fetched.
Restart=app-foo.service

Options¶

The following options are available. Unless noted otherwise, all options must be specified exactly once.

Origin=¶

Remote uri to fetch the manifest and images from. Usually an https url, but anything supported by Curl will do, such as a file:// or ssh:// uri. The uri must point to a directory that contains a manifest file. A trailing slash is allowed, but not required.

PublicKey=¶

Public key used to verify image integrity and authenthicity. The public key should be announced by the distributor of the image. Distributors can generate a key pair with tako gen-key.

Destination=¶

Directory where images will be stored. This directory must exist. Tako will create a store subdirectory to hold images, a manifest file which is a copy of the remote manifest, and a latest symlink that points to the latest compatible image in the store. A trailing slash is allowed, but not required.

Version=¶

A version pattern that indicates which version range is compatible. Tako will fetch the latest (highest numbered) compatible version. The version pattern can be a fixed version, a wildcard pattern, or a bounds pattern. See Versions for more information.

Restart=¶

A systemd unit to restart in case a newer image has been fetched. The format is the same as that of Requires= in systemd units. This option may be specified more than once, or multiple space-separated units may be specified in one option. This option is not required: if it is not set, no unit will be restarted.

Comments¶

Like systemd unit files, lines starting with # or ; are ignored. Empty lines are ignored as well.