MinIO对象存储使用指南：S3兼容存储桶管理、文件上传下载与预签名URL生成

minio by vm0-ai/vm0-skills

103 周安装量

52 GitHub Stars

GitHub

安装命令

npx skills add https://github.com/vm0-ai/vm0-skills --skill minio

云服务文件管理开发运维

🇨🇳中文介绍

MinIO 对象存储

通过 mc（MinIO 客户端）或 curl 使用 MinIO API 来管理 S3 兼容的对象存储，以实现文件上传、下载和存储桶操作。

官方文档：https://min.io/docs/minio/linux/reference/minio-mc.html

使用场景

在以下场景中使用此技能：

向 S3 兼容的存储服务上传/下载文件
管理存储桶（创建、列出、删除）
生成预签名 URL 以临时访问文件
列出和搜索存储中的对象
在本地和远程之间镜像/同步目录

先决条件

部署 MinIO 服务器或使用 MinIO Play（公共测试服务器）
获取访问凭证（访问密钥和秘密密钥）
安装 MinIO 客户端 (mc)

安装 MinIO 客户端

广告位招租

在这里展示您的产品或服务

触达数万 AI 开发者，精准高效

联系我们

5. 列出存储桶中的对象

# 列出所有对象
mc ls myminio/my-bucket

# 递归列出并显示详细信息
mc ls --recursive --summarize myminio/my-bucket

# 删除单个文件
mc rm myminio/my-bucket/file.txt

# 删除存储桶中的所有对象
mc rm --recursive --force myminio/my-bucket/

# 删除存储桶（必须为空）
mc rb myminio/my-bucket

7. 生成预签名 URL

创建临时的可共享链接：

# 下载 URL（默认 7 天后过期）
mc share download myminio/my-bucket/file.txt

# 自定义过期时间的下载 URL（最长 7 天）
mc share download --expire 2h myminio/my-bucket/file.txt

# 上传 URL（用于外部上传）
mc share upload myminio/my-bucket/uploads/

8. 镜像/同步目录

# 从本地到远程单向同步
mc mirror /local/folder/ myminio/my-bucket/folder/

# 从远程到本地单向同步
mc mirror myminio/my-bucket/folder/ /local/folder/

# 持续监视并同步更改
mc mirror --watch /local/folder/ myminio/my-bucket/folder/

9. 获取对象信息

# 获取文件元数据
mc stat myminio/my-bucket/file.txt

# 获取存储桶信息
mc stat myminio/my-bucket

# 按名称模式查找
mc find myminio/my-bucket --name "*.txt"

# 查找大于 10MB 的文件
mc find myminio/my-bucket --larger 10MB

# 查找最近 7 天内修改的文件
mc find myminio/my-bucket --newer-than 7d

使用 curl 与预签名 URL

对于没有 mc 的环境，可以使用预签名 URL 配合 curl：

使用预签名 URL 上传

# 首先，使用 mc 生成上传 URL
UPLOAD_URL=$(mc share upload --json myminio/my-bucket/file.txt | jq -r '.share')

# 然后使用 curl 上传
curl -X PUT --upload-file /path/to/file.txt "$UPLOAD_URL"

使用预签名 URL 下载

# 生成下载 URL
DOWNLOAD_URL=$(mc share download --json myminio/my-bucket/file.txt | jq -r '.share')

# 使用 curl 下载
curl -o /local/path/file.txt "$DOWNLOAD_URL"

使用 curl 与 AWS Signature V2

用于无需 mc 的直接 API 访问（简单身份验证）：

#!/bin/bash
# minio-upload.sh - 上传文件到 MinIO

bucket="$1"
file="$2"
host="${MINIO_ENDPOINT}"
s3_key="${MINIO_ACCESS_KEY}"
s3_secret="${MINIO_SECRET_KEY}"

resource="/${bucket}/${file}"
content_type="application/octet-stream"
date=$(date -R)
signature_string="PUT\n\n${content_type}\n${date}\n${resource}"
signature=$(echo -en "${signature_string}" | openssl sha1 -hmac "${s3_secret}" -binary | base64)

curl -X PUT -T "${file}" --header "Host: ${host}" --header "Date: ${date}" --header "Content-Type: ${content_type}" --header "Authorization: AWS ${s3_key}:${signature}" "https://${host}${resource}"

chmod +x minio-upload.sh
./minio-upload.sh my-bucket myfile.txt

MinIO 完全兼容 AWS CLI：

# 为 MinIO 配置 AWS CLI
aws configure set aws_access_key_id "${MINIO_ACCESS_KEY}"
aws configure set aws_secret_access_key "${MINIO_SECRET_KEY}"
aws configure set default.s3.signature_version s3v4

# 列出存储桶
aws --endpoint-url "https://${MINIO_ENDPOINT}" s3 ls

# 上传文件
aws --endpoint-url "https://${MINIO_ENDPOINT}" s3 cp file.txt s3://my-bucket/

# 下载文件
aws --endpoint-url "https://${MINIO_ENDPOINT}" s3 cp s3://my-bucket/file.txt ./

# 列出对象
aws --endpoint-url "https://${MINIO_ENDPOINT}" s3 ls s3://my-bucket/

设置存储桶为公开读取

mc anonymous set download myminio/my-bucket

设置存储桶为私有

mc anonymous set none myminio/my-bucket

应用自定义策略

# 创建 policy.json
cat > /tmp/policy.json << 'EOF'
{
  "Version": "2012-10-17",
  "Statement": [
  {
  "Effect": "Allow",
  "Principal": {"AWS": ["*"]},
  "Action": ["s3:GetObject"],
  "Resource": ["arn:aws:s3:::my-bucket/public/*"]
  }
  ]
}
EOF

mc anonymous set-json /tmp/policy.json myminio/my-bucket

大多数操作使用 mc - 它会自动处理身份验证和签名
外部访问使用预签名 URL - 共享文件而无需暴露凭证
API 使用端口 9000 - 端口 9001 通常是 Web 控制台
设置适当的过期时间 - 预签名 URL 应在可行范围内尽快过期（最长 7 天）
备份使用镜像功能 - mc mirror --watch 用于持续同步
存储桶命名规则 - 小写，3-63 个字符，不能有下划线或连续的点

2026 年 1 月 24 日

🇺🇸English

MinIO Object Storage

Use the MinIO API via mc (MinIO Client) or curl to manage S3-compatible object storage for file uploads, downloads, and bucket operations.

Official docs: https://min.io/docs/minio/linux/reference/minio-mc.html

When to Use

Use this skill when you need to:

Upload/download files to S3-compatible storage
Manage buckets (create, list, delete)
Generate pre-signed URLs for temporary file access
List and search objects in storage
Mirror/sync directories between local and remote

Prerequisites

Deploy MinIO server or use MinIO Play (public test server)
Get access credentials (Access Key and Secret Key)
Install MinIO Client (mc)

Install MinIO Client

# macOS
brew install minio/stable/mc

# Linux (amd64)
curl -O https://dl.min.io/client/mc/release/linux-amd64/mc
chmod +x mc && sudo mv mc /usr/local/bin/

# Verify installation
mc --version

Set Environment Variables

export MINIO_ENDPOINT="play.min.io"
export MINIO_ACCESS_KEY="your-access-key"
export MINIO_SECRET_KEY="your-secret-key"

For testing, use MinIO Play (public sandbox):

export MINIO_ENDPOINT="play.min.io"
export MINIO_ACCESS_KEY="Q3AM3UQ867SPQQA43P2F"
export MINIO_SECRET_KEY="zuf+tfteSlswRu7BJ86wekitnifILbZam1KYY3TG"

Configure mc Alias

mc alias set myminio https://${MINIO_ENDPOINT} ${MINIO_ACCESS_KEY} ${MINIO_SECRET_KEY}

How to Use

1. List Buckets

mc ls myminio

2. Create a Bucket

mc mb myminio/my-bucket

3. Upload a File

# Upload single file
mc cp /path/to/file.txt myminio/my-bucket/

# Upload with custom name
mc cp /path/to/file.txt myminio/my-bucket/custom-name.txt

# Upload directory recursively
mc cp --recursive /path/to/folder/ myminio/my-bucket/folder/

4. Download a File

# Download single file
mc cp myminio/my-bucket/file.txt /local/path/

# Download entire bucket
mc cp --recursive myminio/my-bucket/ /local/path/

5. List Objects in Bucket

# List all objects
mc ls myminio/my-bucket

# List recursively with details
mc ls --recursive --summarize myminio/my-bucket

6. Delete Objects

# Delete single file
mc rm myminio/my-bucket/file.txt

# Delete all objects in bucket
mc rm --recursive --force myminio/my-bucket/

# Delete bucket (must be empty)
mc rb myminio/my-bucket

7. Generate Pre-signed URL

Create temporary shareable links:

# Download URL (expires in 7 days by default)
mc share download myminio/my-bucket/file.txt

# Download URL with custom expiry (max 7 days)
mc share download --expire 2h myminio/my-bucket/file.txt

# Upload URL (for external uploads)
mc share upload myminio/my-bucket/uploads/

8. Mirror/Sync Directories

# One-way sync local to remote
mc mirror /local/folder/ myminio/my-bucket/folder/

# One-way sync remote to local
mc mirror myminio/my-bucket/folder/ /local/folder/

# Watch and sync changes continuously
mc mirror --watch /local/folder/ myminio/my-bucket/folder/

9. Get Object Info

# Get file metadata
mc stat myminio/my-bucket/file.txt

# Get bucket info
mc stat myminio/my-bucket

10. Search Objects

# Find by name pattern
mc find myminio/my-bucket --name "*.txt"

# Find files larger than 10MB
mc find myminio/my-bucket --larger 10MB

# Find files modified in last 7 days
mc find myminio/my-bucket --newer-than 7d

Using curl with Pre-signed URLs

For environments without mc, use pre-signed URLs with curl:

Upload with Pre-signed URL

# First, generate upload URL with mc
UPLOAD_URL=$(mc share upload --json myminio/my-bucket/file.txt | jq -r '.share')

# Then upload with curl
curl -X PUT --upload-file /path/to/file.txt "$UPLOAD_URL"

Download with Pre-signed URL

# Generate download URL
DOWNLOAD_URL=$(mc share download --json myminio/my-bucket/file.txt | jq -r '.share')

# Download with curl
curl -o /local/path/file.txt "$DOWNLOAD_URL"

Using curl with AWS Signature V2

For direct API access without mc (simple authentication):

#!/bin/bash
# minio-upload.sh - Upload file to MinIO

bucket="$1"
file="$2"
host="${MINIO_ENDPOINT}"
s3_key="${MINIO_ACCESS_KEY}"
s3_secret="${MINIO_SECRET_KEY}"

resource="/${bucket}/${file}"
content_type="application/octet-stream"
date=$(date -R)
signature_string="PUT\n\n${content_type}\n${date}\n${resource}"
signature=$(echo -en "${signature_string}" | openssl sha1 -hmac "${s3_secret}" -binary | base64)

curl -X PUT -T "${file}" --header "Host: ${host}" --header "Date: ${date}" --header "Content-Type: ${content_type}" --header "Authorization: AWS ${s3_key}:${signature}" "https://${host}${resource}"

Usage:

chmod +x minio-upload.sh
./minio-upload.sh my-bucket myfile.txt

Using AWS CLI

MinIO is fully compatible with AWS CLI:

# Configure AWS CLI for MinIO
aws configure set aws_access_key_id "${MINIO_ACCESS_KEY}"
aws configure set aws_secret_access_key "${MINIO_SECRET_KEY}"
aws configure set default.s3.signature_version s3v4

# List buckets
aws --endpoint-url "https://${MINIO_ENDPOINT}" s3 ls

# Upload file
aws --endpoint-url "https://${MINIO_ENDPOINT}" s3 cp file.txt s3://my-bucket/

# Download file
aws --endpoint-url "https://${MINIO_ENDPOINT}" s3 cp s3://my-bucket/file.txt ./

# List objects
aws --endpoint-url "https://${MINIO_ENDPOINT}" s3 ls s3://my-bucket/

Bucket Policies

Set Bucket to Public Read

mc anonymous set download myminio/my-bucket

Set Bucket to Private

mc anonymous set none myminio/my-bucket

Apply Custom Policy

# Create policy.json
cat > /tmp/policy.json << 'EOF'
{
  "Version": "2012-10-17",
  "Statement": [
  {
  "Effect": "Allow",
  "Principal": {"AWS": ["*"]},
  "Action": ["s3:GetObject"],
  "Resource": ["arn:aws:s3:::my-bucket/public/*"]
  }
  ]
}
EOF

mc anonymous set-json /tmp/policy.json myminio/my-bucket

Guidelines

Use mc for most operations - It handles authentication and signing automatically
Pre-signed URLs for external access - Share files without exposing credentials
Use port 9000 for API - Port 9001 is typically the web console
Set appropriate expiry - Pre-signed URLs should expire as soon as practical (max 7 days)
Use mirror for backups - mc mirror --watch for continuous sync
Bucket naming rules - Lowercase, 3-63 characters, no underscores or consecutive dots

Weekly Installs

Repository

vm0-ai/vm0-skills

GitHub Stars

First Seen

Jan 24, 2026

Security Audits

Gen Agent Trust HubWarn SocketPass SnykFail

Installed on

codex74

gemini-cli74

opencode74

github-copilot71

cursor65

kimi-cli63