Hauler Store Add File

Overview

hauler store add file stores an arbitrary file - local or fetched from an HTTP(S) URL - as an OCI artifact in the content store.

Use this to carry the bits that aren't images or charts but are still needed inside the airgap: install scripts, binaries, tarballs, RPMs, configuration, manifests, and the like. On the far side of the airgap these files can be handed out over HTTP with hauler store serve fileserver or written back to disk with hauler store extract. Pass --name to store the file under a friendlier name than the one derived from its path or URL (handy for URLs that don't end in a filename). To add a local directory that extracts back as a directory, use hauler store add directory instead. For a repeatable set of files, list them in a Hauler manifest and run hauler store sync.

An example with available flags...

hauler store add file <file> --name <name>

Command Overview

Usage:
  hauler store add file [flags]

Examples:
  # fetch local file
  hauler store add file file.txt

  # fetch remote file
  hauler store add file https://get.rke2.io/install.sh

  # fetch remote file and assign new name
  hauler store add file https://get.hauler.dev --name hauler-install.sh

Flags:
      --ca-file string             (Optional) Location of CA Bundle to enable certification verification for remote files
  -h, --help                       help for file
      --insecure-skip-tls-verify   (Optional) Skip TLS certificate verification for remote files
  -n, --name string                (Optional) Rewrite the name of the file

Global Flags:
      --audit-level string     Set the audit logging level (none, standard, verbose) (defaults standard)
      --blob-concurrency int   (Optional) Override the maximum number of concurrent blob writes (0 auto-derives from --concurrency where set, otherwise defaults to 16)
  -d, --haulerdir string       Set the location of the hauler directory (default $HOME/.hauler)
      --ignore-errors          Warn and continue instead of failing on errors, including storing images that failed verification (defaults false)
  -l, --log-level string       Set the logging level (i.e. info, debug, warn) (defaults info)
  -r, --retries int            Set the number of retries for operations (0 uses HAULER_RETRIES, otherwise defaults to 3)
  -s, --store string           Set the directory to use for the content store
  -t, --tempdir string         (Optional) Override the default temporary directory determined by the OS
  -w, --work-dir string        (Optional) Set the directory for output that commands would otherwise write to the current directory (default: current directory)

Example Commands for Files

# fetch local file
hauler store add file file.txt

# fetch remote file
hauler store add file https://get.rke2.io/install.sh

# fetch remote file and assign new name
hauler store add file https://get.hauler.dev --name hauler-install.sh

# fetch remote file from a host with a private CA
hauler store add file https://internal.example.com/install.sh --ca-file /path/to/ca.pem

# fetch remote file from a host with a self-signed or otherwise unverifiable certificate
hauler store add file https://internal.example.com/install.sh --insecure-skip-tls-verify

Configuring TLS for Remote Files

--ca-file and --insecure-skip-tls-verify only affect files fetched over http:///https://; they're ignored for local paths. Unlike hauler store add image, this command does not fall back to the CA_FILE / INSECURE_SKIP_TLS_VERIFY environment variables - use the flags directly, or use hauler store sync, which does support the environment variables.

Note: Avoid setting --ca-file and --insecure-skip-tls-verify together - if both are set, --insecure-skip-tls-verify takes precedence and the CA file is not read. When neither is set, the system's default CA bundle is used.

Hauler Manifest for Files

Used with hauler store sync. CLI flags override per-file fields, which override manifest-level annotations.

hauler-file-manifest.yaml

apiVersion: content.hauler.cattle.io/v1
kind: Files
metadata:
  name: hauler-content-files-example
  annotations:
    # global TLS options for all remote files in the manifest (avoid setting both... insecure-skip-tls-verify wins if both are set)
    hauler.dev/ca-file: <path-to-ca-bundle>
    hauler.dev/insecure-skip-tls-verify: "true"
spec:
  files:
    - path: <file>
      name: <name>
      # TLS options for fetching this file, if remote (avoid setting both... insecure-skip-tls-verify wins if both are set)
      ca-file: <path-to-ca-bundle>
      insecure-skip-tls-verify: false

Example Manifest for Files

hauler-file-manifest.yaml

apiVersion: content.hauler.cattle.io/v1
kind: Files
metadata:
  name: hauler-content-files-example
spec:
  files:
    # fetch remote file
    - path: https://get.rke2.io
    # fetch remote file and assign new name
    - path: https://get.rke2.io
      name: install.sh
    # fetch local file
    - path: path/to/local/file.txt
    # fetch local file and assign new name
    - path: path/to/local/file.txt
      name: local-file.txt
    # fetch remote file from a host with a private CA
    - path: https://internal.example.com/install.sh
      ca-file: /path/to/ca.pem