reel list

List resources: containers, images, pods, files, checkpoints, layers, and frames.

List containers from the detected container runtime (Docker, Podman, containerd, or CRI-O).

reel list containers

reel list containers --all

Flag	Description	Default
-a, --all	Show all containers including stopped	false
-o, --output	Output format: table, json, yaml	table

List container images available in the runtime.

reel list images

reel list images --filter "nginx*"

Flag	Description	Default
--filter	Filter images by name pattern
-o, --output	Output format: table, json, yaml	table

Agent Mode

The following subcommands require the --agent flag.

List Kubernetes pods via the reel agent.

reel --agent list pods

reel --agent list pods -n production

reel --agent list pods -A

Flag	Description	Default
-n, --namespace	Kubernetes namespace	default
-A, --all-namespaces	List pods across all namespaces	false
--all-nodes	List pods across all nodes	false
-o, --output	Output format: table, json, yaml	table

List files in a running container with advanced filtering for forensic analysis.

reel --agent list files --pod nginx -n production --path /var/log -r

reel --agent list files --pod nginx --modified-since 24h --hash

reel --agent list files --pod nginx --suid -r

Flag	Description
--pod	Target pod (required)
--container	Container within pod
--path	Path to list (default: /)
-r, --recursive	List files recursively
--modified-since	Files modified after time (e.g., 1h, 24h, 7d)
--hash	Calculate file hashes (SHA-256 by default)
--suid	Filter for SUID bit
--show-hidden	Include hidden files
-o, --output	Output format: table, json, yaml, csv

List stored artifacts on the agent node. All three commands share the same flags.

reel --agent list checkpoints -n production

reel --agent list layers -A

reel --agent list frames

Flag	Description	Default
-n, --namespace	Kubernetes namespace	default
-A, --all-namespaces	List across all namespaces	false
-o, --output	Output format: table, json, yaml	table