OS Manuals

/usr/bin/executor

Build Container Images In Kubernetes

From kaniko 1.25.15-r6 (os), captured 2026-11-05 by running executor --help (exit 0). permalink

Also provided by 2 other package versions
Usage:
  executor [flags]
  executor [command]

Available Commands:
  completion  Generate the autocompletion script for the specified shell
  help        Help about any command
  version     Print the version number of kaniko

Flags:
      --annotation key-value-arg type             Set metadata annotations for the image in key=value format. Set it repeatedly for multiple annotations.
      --build-arg multi-arg type                  This flag allows you to pass in ARG values at build time. Set it repeatedly for multiple values.
      --cache                                     Use cache when building image
      --cache-copy-layers                         Caches copy layers
      --cache-dir string                          Specify a local directory to use as a cache. (default "/cache")
      --cache-repo string                         Specify a repository to use as a cache, otherwise one will be inferred from the destination provided; when prefixed with 'oci:' the repository will be written in OCI image layout format at the path provided
      --cache-run-layers                          Caches run layers (default true)
      --cache-ttl duration                        Cache timeout, requires value and unit of duration -> ex: 6h. Defaults to two weeks. (default 336h0m0s)
      --cleanup                                   Clean the filesystem at the end
      --compressed-caching                        Compress the cached layers. Decreases build time, but increases memory usage. (default true)
      --compression compression                   Compression algorithm (gzip, zstd)
      --compression-level int                     Compression level (default -1)
  -c, --context string                            Path to the dockerfile build context. (default "/workspace/")
      --context-sub-path string                   Sub path within the given context.
      --custom-platform string                    Specify the build platform if different from the current host
      --customPlatform string                     This flag is deprecated. Please use '--custom-platform'.
  -d, --destination multi-arg type                Registry the final image should be pushed to. Set it repeatedly for multiple destinations.
      --digest-file string                        Specify a file to save the digest of the built image to.
  -f, --dockerfile string                         Path to the dockerfile to be built. (default "Dockerfile")
      --force                                     Force building outside of a container
      --force-build-metadata                      Force add metadata layers to build image
      --git gitoptions                            Branch to clone if build context is a git repository (default branch=,single-branch=false,recurse-submodules=false)
  -h, --help                                      help for executor
      --ignore-path multi-arg type                Ignore these paths when taking a snapshot. Set it repeatedly for multiple paths.
      --ignore-var-run                            Ignore /var/run directory when taking image snapshot. Set it to false to preserve /var/run/ in destination image. (default true)
      --image-download-retry int                  Number of retries for downloading the remote image
      --image-fs-extract-retry int                Number of retries for image FS extraction
      --image-name-tag-with-digest-file string    Specify a file to save the image name w/ image tag w/ digest of the built image to.
      --image-name-with-digest-file string        Specify a file to save the image name w/ digest of the built image to.
      --insecure                                  Push to insecure registry using plain HTTP
      --insecure-pull                             Pull from insecure registry using plain HTTP
      --insecure-registry multi-arg type          Insecure registry using plain HTTP to push and pull. Set it repeatedly for multiple registries.
      --kaniko-dir string                         Path to the kaniko directory, this takes precedence over the KANIKO_DIR environment variable. (default "/kaniko")
      --label multi-arg type                      Set metadata for an image. Set it repeatedly for multiple labels.
      --log-format string                         Log format (text, color, json) (default "color")
      --log-timestamp                             Timestamp in log output
      --no-push                                   Do not push the image to the registry
      --no-push-cache                             Do not push the cache layers to the registry
      --oci-layout-path string                    Path to save the OCI image layout of the built image.
      --push-ignore-immutable-tag-errors          If true, known tag immutability errors are ignored and the push finishes with success.
      --push-retry int                            Number of retries for the push operation
      --registry-certificate key-value-arg type   Use the provided certificate for TLS communication with the given registry. Expected format is 'my.registry.url=/path/to/the/server/certificate'.
      --registry-client-cert key-value-arg type   Use the provided client certificate for mutual TLS (mTLS) communication with the given registry. Expected format is 'my.registry.url=/path/to/client/cert,/path/to/client/key'.
      --registry-map key-multi-value-arg type     Registry map of mirror to use as pull-through cache instead. Expected format is 'orignal.registry=new.registry;other-original.registry=other-remap.registry'
      --registry-mirror multi-arg type            Registry mirror to use as pull-through cache instead of docker.io. Set it repeatedly for multiple mirrors.
      --reproducible                              Strip timestamps out of the image to make it reproducible
      --single-snapshot                           Take a single snapshot at the end of the build.
      --skip-default-registry-fallback            If an image is not found on any mirrors (defined with registry-mirror) do not fallback to the default registry. If registry-mirror is not defined, this flag is ignored.
      --skip-push-permission-check                Skip check of the push permission
      --skip-tls-verify                           Push to insecure registry ignoring TLS verify
      --skip-tls-verify-pull                      Pull from insecure registry ignoring TLS verify
      --skip-tls-verify-registry multi-arg type   Insecure registry ignoring TLS verify to push and pull. Set it repeatedly for multiple registries.
      --skip-unused-stages                        Build only used stages if defined to true. Otherwise it builds by default all stages, even the unnecessaries ones until it reaches the target stage / end of Dockerfile
      --snapshot-mode string                      Change the file attributes inspected during snapshotting (default "full")
      --snapshotMode string                       This flag is deprecated. Please use '--snapshot-mode'.
      --tar-path string                           Path to save the image in as a tarball instead of pushing
      --tarPath string                            This flag is deprecated. Please use '--tar-path'.
      --target string                             Set the target build stage to build
      --use-new-run                               Use the experimental run implementation for detecting changes without requiring file system snapshots.
  -v, --verbosity string                          Log level (trace, debug, info, warn, error, fatal, panic) (default "info")

Use "executor [command] --help" for more information about a command.
Options (60)
OptionDescriptionSource
--annotation key-value-argSet metadata annotations for the image in key=value format.help
--build-arg multi-argThis flag allows you to pass in ARG values at build time.help
--cacheUse cache when building imagehelp
--cache-copy-layersCaches copy layershelp
--cache-dir stringSpecify a local directory to use as a cache.help
--cache-repo stringSpecify a repository to use as a cache, otherwise one will be inferred from the destination provided;help
--cache-run-layersCaches run layers (default true)help
--cache-ttl durationCache timeout, requires value and unit of duration -> ex: 6h.help
--cleanupClean the filesystem at the endhelp
--compressed-cachingCompress the cached layers.help
--compression compressionCompression algorithm (gzip, zstd)help
--compression-level intCompression level (default -1)help
-c, --context stringPath to the dockerfile build context.help
--context-sub-path stringSub path within the given context.help
--custom-platform stringSpecify the build platform if different from the current hosthelp
--customPlatform stringThis flag is deprecated.help
-d, --destination multi-argRegistry the final image should be pushed to.help
--digest-file stringSpecify a file to save the digest of the built image to.help
-f, --dockerfile stringPath to the dockerfile to be built.help
--forceForce building outside of a containerhelp
--force-build-metadataForce add metadata layers to build imagehelp
--git gitoptionsBranch to clone if build context is a git repository (default branch=,single-branch=false,recurse-submodules=false)help
-h, --helphelp for executorhelp
--ignore-path multi-argIgnore these paths when taking a snapshot.help
--ignore-var-runIgnore /var/run directory when taking image snapshot.help
--image-download-retry intNumber of retries for downloading the remote imagehelp
--image-fs-extract-retry intNumber of retries for image FS extractionhelp
--image-name-tag-with-digest-file stringSpecify a file to save the image name w/ image tag w/ digest of the built image to.help
--image-name-with-digest-file stringSpecify a file to save the image name w/ digest of the built image to.help
--insecurePush to insecure registry using plain HTTPhelp
--insecure-pullPull from insecure registry using plain HTTPhelp
--insecure-registry multi-argInsecure registry using plain HTTP to push and pull.help
--kaniko-dir stringPath to the kaniko directory, this takes precedence over the KANIKO_DIR environment variable.help
--label multi-argSet metadata for an image.help
--log-format stringLog format (text, color, json) (default "color")help
--log-timestampTimestamp in log outputhelp
--no-pushDo not push the image to the registryhelp
--no-push-cacheDo not push the cache layers to the registryhelp
--oci-layout-path stringPath to save the OCI image layout of the built image.help
--push-ignore-immutable-tag-errorsIf true, known tag immutability errors are ignored and the push finishes with success.help
--push-retry intNumber of retries for the push operationhelp
--registry-certificate key-value-argUse the provided certificate for TLS communication with the given registry.help
--registry-client-cert key-value-argUse the provided client certificate for mutual TLS (mTLS) communication with the given registry.help
--registry-map key-multi-value-argRegistry map of mirror to use as pull-through cache instead.help
--registry-mirror multi-argRegistry mirror to use as pull-through cache instead of docker.io.help
--reproducibleStrip timestamps out of the image to make it reproduciblehelp
--single-snapshotTake a single snapshot at the end of the build.help
--skip-default-registry-fallbackIf an image is not found on any mirrors (defined with registry-mirror) do not fallback to the default registry.help
--skip-push-permission-checkSkip check of the push permissionhelp
--skip-tls-verifyPush to insecure registry ignoring TLS verifyhelp
--skip-tls-verify-pullPull from insecure registry ignoring TLS verifyhelp
--skip-tls-verify-registry multi-argInsecure registry ignoring TLS verify to push and pull.help
--skip-unused-stagesBuild only used stages if defined to true.help
--snapshot-mode stringChange the file attributes inspected during snapshotting (default "full")help
--snapshotMode stringThis flag is deprecated.help
--tar-path stringPath to save the image in as a tarball instead of pushinghelp
--tarPath stringThis flag is deprecated.help
--target stringSet the target build stage to buildhelp
--use-new-runUse the experimental run implementation for detecting changes without requiring file system snapshots.help
-v, --verbosity stringLog level (trace, debug, info, warn, error, fatal, panic) (default "info")help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.