INSTANCE_URL: Harbor 인스턴스의 URL입니다. 예를 들어 harbor-1.org-1.zone1.google.gdc.test.GDC 콘솔 또는 gdcloud CLI를 사용하여 Harbor 인스턴스의 URL을 가져올 수 있습니다.
HARBOR_PROJECT_NAME: Harbor 프로젝트의 이름입니다. 예를 들면 my-project입니다.
IMAGE: 이미지의 이름입니다. 예를 들면 nginx입니다.
TAG: 가져올 이미지 버전의 태그입니다. 예를 들면 staging입니다.
IMAGE_DIGEST: 이미지 콘텐츠의 sha256 해시 값입니다. 각 이미지 버전에는 고유한 이미지 다이제스트가 포함됩니다. Harbor 인스턴스 UI에서 특정 이미지를 클릭하여 다이제스트를 확인합니다. 자세한 내용은 Harbor 레지스트리 인스턴스 보기를 참고하세요.
[[["이해하기 쉬움","easyToUnderstand","thumb-up"],["문제가 해결됨","solvedMyProblem","thumb-up"],["기타","otherUp","thumb-up"]],[["이해하기 어려움","hardToUnderstand","thumb-down"],["잘못된 정보 또는 샘플 코드","incorrectInformationOrSampleCode","thumb-down"],["필요한 정보/샘플이 없음","missingTheInformationSamplesINeed","thumb-down"],["번역 문제","translationIssue","thumb-down"],["기타","otherDown","thumb-down"]],["최종 업데이트: 2025-09-04(UTC)"],[],[],null,["# Pull an image with Docker\n\nPull an image from a Harbor project in the Docker client to download the\nspecified container image from your Harbor registry to your local machine. This\nlets you run the containerized application locally or use it as a base\nimage for building other images.\n\nBefore you begin\n----------------\n\nTo pull an image with Docker, you must have access to the following:\n\n- The necessary identity and access role. Ask your Organization IAM Admin to grant you the Harbor Instance Viewer (`harbor-instance-viewer`) role.\n- An account with the `Limited Guest` role from Harbor's role-based access controls. For more information, see [Configure access for APIs and within a Harbor instance](/distributed-cloud/hosted/docs/latest/appliance/platform-application/pa-ao-operations/configure-access-control#configure-access-within-harbor-instance).\n- An existing Harbor project. For more information, see [Create Harbor projects](/distributed-cloud/hosted/docs/latest/appliance/platform-application/pa-ao-operations/create-harbor-projects).\n- An existing container image in the existing Harbor project.\n\nPull an image\n-------------\n\nFollow these steps to pull an image from a\nHarbor project in the Docker client:\n\n1. Make sure that you are [authenticated](/distributed-cloud/hosted/docs/latest/appliance/platform-application/pa-ao-operations/configure-docker-authentication) to the Harbor instance.\n2. Pull the image from a Harbor project:\n\n docker pull \u003cvar translate=\"no\"\u003eINSTANCE_URL\u003c/var\u003e/\u003cvar translate=\"no\"\u003eHARBOR_PROJECT_NAME\u003c/var\u003e/\u003cvar translate=\"no\"\u003eIMAGE\u003c/var\u003e:\u003cvar translate=\"no\"\u003eTAG\u003c/var\u003e\n\n or \n\n docker pull \u003cvar translate=\"no\"\u003eINSTANCE_URL\u003c/var\u003e/\u003cvar translate=\"no\"\u003eHARBOR_PROJECT_NAME\u003c/var\u003e/\u003cvar translate=\"no\"\u003eIMAGE\u003c/var\u003e@\u003cvar translate=\"no\"\u003eIMAGE_DIGEST\u003c/var\u003e\n\nReplace the following values:\n\n- \u003cvar translate=\"no\"\u003eINSTANCE_URL\u003c/var\u003e: the URL of the Harbor instance. For example, `harbor-1.org-1.zone1.google.gdc.test.` You can get the URL of the Harbor instance using the [GDC console or gdcloud CLI](/distributed-cloud/hosted/docs/latest/appliance/platform-application/pa-ao-operations/manage-harbor-instances#view-harbor-registry-instances).\n- \u003cvar translate=\"no\"\u003eHARBOR_PROJECT_NAME\u003c/var\u003e: the name of the Harbor project. For example, `my-project`.\n- \u003cvar translate=\"no\"\u003eIMAGE\u003c/var\u003e: the image's name. For example, `nginx`.\n- \u003cvar translate=\"no\"\u003eTAG\u003c/var\u003e: the tag for the image version that you want to pull. For example, `staging`.\n- \u003cvar translate=\"no\"\u003eIMAGE_DIGEST\u003c/var\u003e: the sha256 hash value of the image contents. Each version of an image has a unique image digest. In the Harbor instance UI, click the specific image to see its digest. For more information, see [View Harbor registry instances](/distributed-cloud/hosted/docs/latest/appliance/platform-application/pa-ao-operations/manage-harbor-instances#view-harbor-registry-instances)."]]
