4 ms·

Does anyone recommend some pull-through registry to use? Docker Docs has some recommendations [0], but I wonder how feature complete it is. I'd like to find so

Does anyone recommend some pull-through registry to use? Docker Docs has some recommendations [0], but I wonder how feature complete it is. I'd like to find something that: - Can pull and serve private images - Has UI to show a list of downloaded images, and some statistics on how much storage and bandwidth they use - Can run periodic GC to delete unused images - (maybe) Can be set up to pre-download new tags IIRC Artifactory has some support for Docker images, but that seems like a big hammer for this problem. [1] [0] https://docs.docker.com/docker-hub/image-library/mirror/ https://docs.docker.com/docker-hub/image-library/mirror/ [1] https://jfrog.com/artifactory/ https://jfrog.com/artifactory/

bdsa 2y ago
You could have a look at Harbor: https://goharbor.io/ https://goharbor.io/
Palomides 2y ago
also interested, everything I could find for this seemed very heavy and/or integrated into some large piece of infrastructure
horsawlarway 2y ago
Depending on your use-case, the default registry mirroring you've linked works well. It... does not have a UI or the GC/pre-download stuff, but it absolutely works for private images (see: https://distribution.github.io/distribution/recipes/mirror/#configure-the-cache https://distribution.github.io/distribution/recipes/mirror/#...) I've been using it as a cache for a while locally and it's a solid choice. --- I guess an edit - it does also have basic TTL, which might cover your GC case, but it's not very configurable or customizable. It's literally just a TTL flag on the proxied image.
folmar 2y ago
harbor should have enough features and is popular/rising, otherwise Artifactory will do everything you imagine but is quite heavy both on resources and configuration.
sc68cal 2y ago
I use Harbor at work at $LARGE_COMPANY and it works well. I don't run and maintain it however, I'm just a consumer of it from another team that manages it. They already set up a URL in harbor that mirrors docker.io containers.

bdsa 2y ago

You could have a look at Harbor: https://goharbor.io/ https://goharbor.io/

Palomides 2y ago

also interested, everything I could find for this seemed very heavy and/or integrated into some large piece of infrastructure

horsawlarway 2y ago

Depending on your use-case, the default registry mirroring you've linked works well. It... does not have a UI or the GC/pre-download stuff, but it absolutely works for private images (see: https://distribution.github.io/distribution/recipes/mirror/#configure-the-cache https://distribution.github.io/distribution/recipes/mirror/#...) I've been using it as a cache for a while locally and it's a solid choice. --- I guess an edit - it does also have basic TTL, which might cover your GC case, but it's not very configurable or customizable. It's literally just a TTL flag on the proxied image.

folmar 2y ago

harbor should have enough features and is popular/rising, otherwise Artifactory will do everything you imagine but is quite heavy both on resources and configuration.

sc68cal 2y ago

I use Harbor at work at $LARGE_COMPANY and it works well. I don't run and maintain it however, I'm just a consumer of it from another team that manages it. They already set up a URL in harbor that mirrors docker.io containers.