DIY Private Container Registry
Talkat ContainerCon @ OSS EU 2023 · on Thursday, 2023-09-21· at 15:00· Room 0A (Floor 0), Abandoibarra Etorb., 4, 48011 Bilbao, Bizkaia, Spain·
summary
Company moves from cloud-hosted registries to a self-run solution that uses Harbor + distribution for storage, adds a custom token-based authorization service wired to entitlement-based access, and demos pushing and pulling images per-role. It evaluates alternatives like zot lightweight registry and finds spec incompatibilities and a broken chartmuseum path, but the Harbor deployment with robot accounts and the custom auth layer actually works for design partners. Key risk is OCI distribution spec gaps and client/registry incompatibilities.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 1:22Need for private registry
- 3:09CNCF registry options
- 4:12Cloud registry limits
- 6:44All-in-one registry solutions
- 8:30Harbor features and issues
- 10:37Self-serve portal need
- 10:58OCI registry specs
- 13:05Docker registry auth flow
- 16:15Plain registry choice
- 17:59Zot and limits
- 19:04Custom auth service
- 20:02Custom registry demo
- 26:18Registry spec gaps
- 27:44OCI future specs
- 28:48Q&A
