Docker Artifact Registry

About 464 wordsAbout 2 min

You can use CNB access token as login credentials. For how to get CNB_TOKEN, please refer to [Creating an Access Token] (./intro.md#creating-an-access-token). Login command:

docker login docker.cnb.build -u cnb -p <YOUR_TOKEN>

Docker Artifact Path Rules

When publishing artifacts to a repository, two naming rules are supported:

Same-name artifacts: Artifact path matches repository path, e.g.: docker.cnb.build/${CNB_REPO_SLUG_LOWERCASE}
Different-name artifacts: Repository path serves as namespace, artifact path = repository path/artifact name, e.g.: docker.cnb.build/${CNB_REPO_SLUG_LOWERCASE}/<IMAGE_NAME>

Pushing Artifacts

Push from Local Command Line

Same-name artifacts

docker build -t docker.cnb.build/${CNB_REPO_SLUG_LOWERCASE}:latest .
docker push docker.cnb.build/${CNB_REPO_SLUG_LOWERCASE}:latest

Different-name artifacts

docker build -t docker.cnb.build/${CNB_REPO_SLUG_LOWERCASE}/<IMAGE_NAME>:latest .
docker push docker.cnb.build/${CNB_REPO_SLUG_LOWERCASE}/<IMAGE_NAME>:latest

Push in Cloud Native Build

.cnb.yml
main:
  push:
    - services:
        - docker
      stages:
        - name: docker build
          script: docker build -t ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:latest .
        - name: docker push
          script: docker push ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:latest

Push in Workspaces

Same-name artifacts

docker build -t ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:latest .
docker push ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:latest

Different-name artifacts

docker build -t ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}/<IMAGE_NAME>:latest .
docker push ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}/<IMAGE_NAME>:latest

Using Artifacts

Use in Command Line

docker pull docker.cnb.build/<ARTIFACT_PATH>:latest

Customize Build/Dev Environment

Reference a Docker image from the CNB artifact registry as your build environment in .cnb.yml:

.cnb.yml
main:
  push:
    - docker:
        image: ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:latest
      stages:
        - name: hello world
          script: echo "Hello World"

Or as your cloud native dev environment:

.cnb.yml
$:
  vscode:
    - docker:
        image: ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:latest
      services:
        - vscode
        - docker

Limitations

Maximum quota per layer: 64 GB
Maximum number of layers per image: 64
Maximum size of artifact metadata: 64 KB
Docker Registry V1 API is not supported. Please use Docker 20.10+ client.
If you encounter the following errors, please upgrade Docker version:
```
Error: image <IMAGE_NAME> not found
```
```
Failed to pull image: rpc error: code = Unknown desc = missing signature key
```
If you must use an older version of Docker (below 17.12), you need to manually disable the V1 protocol:
- Disable V1 via startup parameter: dockerd --disable-legacy-registry (Linux platform, default false)
- Disable V1 via config file: set "disable-legacy-registry": true in daemon.json (All platforms, default Not set)
Note: Windows/macOS platforms automatically enforce V2 protocol, no additional configuration needed. This option was removed in Docker 17.12+ as V1 support was completely dropped.

More Information

For more Docker usage, please refer to the Docker official documentation.