Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bsf oci push authentication #42

Open
dr-housemd opened this issue Jun 29, 2024 · 2 comments
Open

bsf oci push authentication #42

dr-housemd opened this issue Jun 29, 2024 · 2 comments
Milestone

Comments

@dr-housemd
Copy link
Contributor

Currently, having a --push flag on bsf doesn't authenticate to OCI registry.
We're using skopeo for this, we should look into --authfile flag as described here.
We could have a similar flag in bsf . Also, in case the flag isn't passed- perhaps we should default to using ~/.docker/config.json as a lot of tooling relies/uses that.

@dr-housemd dr-housemd added the good first issue Good for newcomers label Jun 29, 2024
@dr-housemd dr-housemd removed the good first issue Good for newcomers label Jul 13, 2024
@dr-housemd
Copy link
Contributor Author

Currently, we found that Skopeo doesn't aim to respect docker's config file for authentication. Unfortunately, this implies that we cannot re-use existing creds user has containers/skopeo#1083 (comment) .

Right now, if a user wants to push an image with authentication, they've to load the image in their docker daemon/pod and then push it.

Short term, maybe we can accept an authfile argument that skopeo supports and use it to push image out. This does require user to be aware of skopeo and skopeo login, unfortunately.

Mid/long term, we could look into implementing skopeo login/logout as bsf subcommands. Alternatively, we could look into how we could push out a directory by utilising docker/config.json.

@dr-housemd dr-housemd added this to the v0.4.0 milestone Jul 13, 2024
@dr-housemd
Copy link
Contributor Author

Update- we've introduced a CLI flag called --dest-creds similar to skopeo. This allows to ad-hoc push images to registries, especially in CI.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants