DIY Private Container Registry
Talkat Open Source Summit Europe 2023 · on Thursday, 2023-09-21· at 15:00· Room 0A (Floor 0), Abandoibarra Etorb., 4, 48011 Bilbao, Bizkaia, Spain·
summary
Evaluates hosted registries but finds customers resist new cloud accounts, so moves to open-source choices and picks Harbor for project scoping and robot accounts but hits limits: no group robot accounts and admin‑only APIs for some actions. Implements the OCI token flow with a custom authorization service (library + runnable demo on GitHub), integrates Cerbos for fine‑grained policies, and runs either Docker distribution or zot as the registry back end. Demo works but OCI/distribution quirks and chartmuseum incompatibilities cause interoperability pain.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 1:22Need for private registry
- 3:09CNCF registry options
- 4:12Cloud registry limits
- 6:44All-in-one registry solutions
- 8:30Harbor features and issues
- 10:37Self-serve portal need
- 10:58OCI registry specs
- 13:05Docker registry auth flow
- 16:15Plain registry choice
- 17:59Zot and limits
- 19:04Custom auth service
- 20:02Custom registry demo
- 26:18Registry spec gaps
- 27:44OCI future specs
- 28:48Q&A
related talks
36mContainer Registries, No Longer Just for Containers!
28mHarbor - Enterprise Cloud Native Artifact Registry
28mRegistries After Dark
43mDeep Dive: Harbor - Enterprise Cloud-native Artifact Registry
28mFrom ChartMuseum to Harbor
33mHarbor - Enterprise Cloud Native Artifact Registry
08mYou Can Store That in a Container Registry?!
55mSecuring Container Supply Chain in CI/CD with Notary Project, ORAS and Harbor