Pulling OCI containers from own Registry

[ihr]

Hi,

In our lab, we run our own OCI Container Registry and pulling from it requires user authentication. I’ve been searching the documentation about new LXC from OCI and can’t find a way to indicate the registry from which a container has to be pulled and the authentication mechanism to that registry. Can anyone point me to the right place?

Regards
Ignacio

 

[fabian]

authentication is not (yet?) implemented. please file an enhancement request in our bugzilla!

 

[ihr]

authentication is not (yet?) implemented. please file an enhancement request in our bugzilla!

Done, enhancement request filed, thank you for your prompt response.

 

[fschauer]

As a workaround for now you can manually provide the credentials to skopeo directly via the host shell.

skopeo login <registry> -u <username> --authfile /run/containers/33/auth.json

This will ask for a password

Then grant the permissions to the www-data user

chown -R www-data /run/containers/33
chmod 755 /run/containers