3 ms·
> As precedent, Docker allows Kubernetes and Podman to access its registry, for example. Don’t give them any ideas. Nothing would stop them, though it is proba
by sebazzz 3y ago
> As precedent, Docker allows Kubernetes and Podman to access its registry, for example.
Don’t give them any ideas. Nothing would stop them, though it is probably hard to actually enforce on a public repo.
- mdaniel 3y agoI haven't tried every single one, but the AWS public ECR has a bunch of the "library" images from Docker Hub (e.g. public.ecr.aws/docker/library/golang:1.21 ) and as the "public" part implies, no creds required to access it They do have a search interface, if one wanted to look for their favorite: https://gallery.ecr.aws/ https://gallery.ecr.aws/
- fhaldridge7 3y agoWe switched many images to use the ecr.aws registry because we were getting rate-limited on dockerhub. Our k8s cluster was on EKS and it worked out very well.
- tuananh 3y agoyou probably need mirroring anyway. Lots of stuff missing on public ecr. I haven't verified if those on public ecr are legit or not or at least, same as the dockerhub counterpart.
- johannes1234321 3y agoWell, in practice DockerHub isn't usable for many Kubernetes places anymore due to rate limiting. Anybody should be, as is sensible in any case, mirroring in a local registry as minimum. Probably it's even better to investing capabilities to be able to build all the images you rely on for being able to apply security patches etc