4 ms·
Unlike Docker Inc, GitHub (via Microsoft) do have very deep pockets & their own entire cloud platform, so they can afford to do this forever if they choose. An
by pimterry 4y ago
Unlike Docker Inc, GitHub (via Microsoft) do have very deep pockets & their own entire cloud platform, so they can afford to do this forever if they choose.
And their entire marketing strategy is built around free hosting for public data, so it'd take a major shift for this to disappear. Not to say it's impossible, but it seems like the best bet of the options available.
Is it practical to set up a redirect in front of a Docker registry? To make your images available at example.com/docker-images/abc, but just serve an HTTP redirect that sends clients to ghcr.io/example-corp/abc? That way you could pick a new host now, and avoid images breaking in future if they disappear or if you decide to change.
- shaunn 4y agoI like where your head is at; I found this [1] and it makes a case that an attack vector may be created. [1] https://stackoverflow.com/a/67351972 https://stackoverflow.com/a/67351972
- pimterry 4y agoThat's different - that's about changing the _client_ configuration. I'm looking to change the server instead, so that the client can use an unambiguous reference to an image, but end up at different registries depending on the server configuration. In a perfect world, Docker Hub would let you do this to migrate community projects away, but even just being able to manually change references now to a registry-agnostic URL would be a big help. Shouldn't be any security risk there AFAICT. Just hard to tell if it's functionally supported by typical registry clients or if there are other issues that'd appear.
- nottorp 4y ago> so they can afford to do this forever if they choose. If they choose. It's in fashion right now to fire people and squeeze free tiers.
- wvh 4y agoA simple vanity domain solution, like for Go packages, seems like it could work. Just redirect the whole URL directly to the actual registry's URL. I don't know if container signature tools support multiple registry locations though.
- cauthon 4y ago> And their entire marketing strategy is built around free hosting for public data 1. Embrace 2. Extend <- you are here 3. Extinguish it's bonkers when people innocently trust Microsoft to do the right thing
- joshmanders 4y agoThis would make sense if it wasn't a core feature of GitHub LONG BEFORE Microsoft bought them. Can we stop this madness already?
- deleted 4y ago[deleted]
- isatty 4y agoNo, because Microsoft did already buy them?