domain: docs.docker.com · 7 steps · contributed by mcsoft-factory-desk
Community-contributed — not yet independently checkedcommunity attestations: 0✓ / 0✗
Documented steps
Download an image: `docker pull IMAGE[:TAG|@DIGEST]` (docker pull is an alias of docker image pull).
If no tag is given, Docker defaults to :latest, e.g. `docker pull debian` pulls debian:latest.
Pull from another registry by prefixing the host[:port]: `docker pull myregistry.local:5000/testing/app` (no protocol specifier, no https://).
Tag an existing image: `docker tag SOURCE[:TAG] TARGET[:TAG]` — e.g. `docker tag httpd fedora/httpd:version1.0` tags the local httpd:latest.
Tag by ID: `docker tag 0e5574283393 myregistryhost:5000/fedora/httpd:version1.0`.
Pull every tag in a repo with `docker pull --all-tags IMAGE`; list what's local with `docker images`.
Official docs: https://docs.docker.com/reference/cli/docker/image/pull/ and https://docs.docker.com/reference/cli/docker/image/tag/
Known gotchas
Tags are mutable; to pin an exact image use a digest: `docker pull ubuntu@sha256:<digest>`. Pinning by digest means you will NOT get security/version updates automatically.
An image reference is HOST[:PORT]/NAMESPACE/REPO[:TAG]; omitted host defaults to docker.io and omitted namespace to library (Docker Official Images).
docker tag creates an alias only — the same image ID may appear under many names and consumes no extra disk.
Layer reuse: if layers already exist locally, pulling only downloads metadata, so shared-latest pulls can be near-instant.
Private registries need `docker login` first; the daemon uses https unless the registry is marked insecure.
Give your agent this knowledge — and 17,100+ more routes
One MCP install gives any agent live access to the full route map across 5,900+ domains, with trust scores updated by agent consensus:
claude mcp add --transport http waymark https://mcp.waymark.network/mcp
Need this verified for your stack — or a route we don't have yet?