Docker Registry - Private Container Registry

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

Docker Registry is the reference open source container image registry, built on the CNCF Distribution project that Docker Hub and most private registries are built on. It is a stateless, highly scalable server-side application that stores and distributes OCI and Docker container images. This image delivers it fully installed and running under systemd, so a working private registry endpoint is serving over HTTPS within minutes of launch, with no manual setup required to start pushing and pulling images.

Unlike a bare deployment, this image is configured to be secure by default and is deliberately not an open push or pull target. The registry process itself binds to loopback only and is never exposed to the network; an nginx front end terminates TLS on port 443 and enforces HTTP Basic authentication on the registry API. There is no default password baked into the image: a unique admin credential is generated on this instance's first boot, stored as a bcrypt htpasswd entry and in a root-only credentials file, and never shipped inside the image. Anonymous requests to the registry API receive HTTP 401 and carry no images, so only the per-instance credential can push or pull. A self-signed TLS certificate covering the instance's public IP is regenerated on first boot, and the operating system ships fully patched with unattended security updates enabled.

Image blobs are written to a dedicated, independently resizable data volume mounted separately from the operating system disk, so pushed images survive and scale independently of the root volume, and the storage backend can later be switched to an object store such as Amazon S3 for larger deployments. Use this registry to host private application images for your CI/CD pipelines, to keep a controlled internal cache of base and release images, to run an air-gapped or on-network registry close to your workloads, or to mirror and distribute images across a private fleet. The current release available is version 3.1.1.

This is a repackaged open source software product with additional charges for cloudimg support services. The CNCF Distribution registry is distributed under the Apache License 2.0. cloudimg is not affiliated with or endorsed by Docker, Inc. or the Cloud Native Computing Foundation. All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.