autonomy bundle pull

Pull a bundle artifact from an OCI registry

Synopsis

Fetches the policy bundle artifact for the given OCI reference and writes
the tarball to --out (default: bundle.tar).

The parent directory of --out is created automatically if it does not
already exist.  After pulling, run 'autonomy bundle verify' to confirm
supply-chain integrity before activating on an edge node.

Strategy selection (automatic, cached per registry host):
  1. OCI Referrers API (preferred, OCI 1.1 registries)
  2. Sidecar tag: <image-tag>-policy  (fallback for registry:2 and similar)

Usage

autonomy bundle pull <ref> [flags]

Examples

# Pull the stable release of a bundle
  autonomy bundle pull robot-behavior:stable --out ./bundles/robot.tar

  # Pull from a local insecure registry (e.g. during development)
  autonomy bundle pull localhost:5000/demo-bundle:v0.1.0 \
      --out ./demo.tar --allow-insecure-registry

Options

      --allow-insecure-registry   allow plain HTTP registry (auto-detected for localhost)
      --out string                output path for the pulled bundle tarball (default "bundle.tar")

See also

• autonomy bundle — Manage AutonomyOps bundles (pull, push, inspect, verify)