autonomy bundle pull

Pull a bundle artifact from an OCI registry

Synopsis

Fetches the policy bundle artifact for the given OCI reference and writes the tarball to –out (default: bundle.tar).

The parent directory of –out is created automatically if it does not already exist. After pulling, run ‘autonomy bundle verify’ to confirm supply-chain integrity before activating on an edge node.

Strategy selection (automatic, cached per registry host):

  1. OCI Referrers API (preferred, OCI 1.1 registries)

  2. Sidecar tag: -policy (fallback for registry:2 and similar)

Usage

autonomy bundle pull <ref> [flags]

Examples

# Pull the stable release of a bundle
  autonomy bundle pull robot-behavior:stable --out ./bundles/robot.tar

  # Pull from a local insecure registry (e.g. during development)
  autonomy bundle pull localhost:5000/demo-bundle:v0.1.0 \
      --out ./demo.tar --allow-insecure-registry

Options

      --allow-insecure-registry   allow plain HTTP registry (auto-detected for localhost)
      --out string                output path for the pulled bundle tarball (default "bundle.tar")

See also

  • autonomy bundle — Manage AutonomyOps bundles (pull, push, inspect, verify)