Overview

A disk image is a single computer file that represents the complete contents and structure of a storage device. Unlike an archive that collects files, a disk image reproduces raw data exactly as stored on media: file contents, directory structures, boot sectors, partition tables and filesystem metadata. Because it preserves low-level structures it can be used to recreate the original device precisely or to mount the image as a virtual drive for direct access.

Contents and characteristics

Disk images are typically created as sector-by-sector, binary copies of a source medium. They contain user files and also internal data such as boot code, volume labels and allocation maps. For example, an image may capture a hard drive or a tape drive or a floppy disk, and optical media such as a CD or DVD or BD, or a removable USB key drive. The file that holds this content is an exact binary copy, not merely a set of harvested files, and therefore records things like the file allocation table and other filesystem internals.

Common formats and variations

There are several well-known image formats used for different purposes. ISO and similar formats are common for optical media and are suitable for distribution of CD/DVD content. Virtual machine platforms use container formats such as VHD, VDI or QCOW that may include metadata, snapshots and sparse storage. Disk images can be raw, compressed, split, encrypted or accompanied by checksums and sidecar files for integrity and authentication. Forensic imaging formats preserve evidence and may add metadata or hashing to support chain-of-custody procedures.

How they are used

  • Backup and cloning: create an exact replica of a drive to restore a system or migrate to new hardware.
  • Virtualization: mount an image as a virtual disk for virtual machines or emulation.
  • Software distribution: deliver an operating system or program set as an image ready to burn or mount.
  • Digital forensics and recovery: analyze an image without altering the original media, preserving evidentiary data.
  • Testing and development: snapshotting known states for reproducible test environments.

Tools, mounting and verification

Images are created and manipulated by utilities that perform low-level reads and writes; common methods include dedicated imaging programs and command-line tools that perform raw copies. Many operating systems can mount image files directly or through loopback devices, allowing their contents to be accessed like a physical drive. It is common practice to store checksums (hashes) alongside images and to verify them after creation or transfer to detect corruption or tampering. Images may be compressed to save space or encrypted to protect sensitive information.

History and notable distinctions

The concept of copying a storage medium bit-for-bit dates to early personal computing and the need to distribute exact replicas of optical discs and system installations popularized image files. A key distinction is between logical and physical images: logical images capture files and directories through the filesystem, while physical (or raw) images duplicate every sector, including unused and system areas. Another important point is that image files facilitate both preservation and mobility of digital systems: they are widely used in deployment, archival storage, recovery and forensic investigations because they keep low-level details necessary to restore or examine a device faithfully.

For further technical reference see resources that describe imaging methods and format specifications, or consult software documentation for tools that create, mount and verify disk images (hard drive, tape drive, floppy disk, CD, DVD, BD, USB key drive, binary copy, file allocation table).