The following downloads an image from a docker(1) registry using skopeo(1), unpacks said image to a root
filesystem, generates an OCI runtime configuration file with umoci-raw-runtime-config(1) and then creates
a new container with runc(8).
% skopeo copy docker://opensuse/amd64:42.2 oci:image:latest
# umoci raw unpack --image image rootfs
# umoci raw runtime-config --image image --rootfs rootfs config.json
# runc run ctr
[ container session ]
With --rootless it is also possible to do the above example without root privileges. umoci will generate
a configuration that works with rootless containers in runc(8).
% skopeo copy docker://opensuse/amd64:42.2 oci:image:latest
% umoci raw unpack --image image --rootless rootfs
% umoci raw runtime-config --image image --rootfs rootfs --rootless config.json
% runc --root $HOME/runc run ctr
[ rootless container session ]