Module image 

Extract local Docker/OCI images into rootfs directories for sandboxing.

Uses docker create + docker export to extract a locally available image. No registry pulling — the image must already be present in local Docker storage.

let rootfs = image::extract("python:3.12-slim", None)?;
let cmd = image::inspect_cmd("python:3.12-slim")?;
// Use rootfs as chroot, cmd as default command

Functions

extract

Extract a local Docker image into a cached rootfs directory.

inspect_cmd

Get the default command (ENTRYPOINT + CMD) for a local Docker image.