Search code examples
securitydockerrhel7

Securing local docker registry


We are maintaining our own local docker registry using docker distribution services

$ ps -ef | grep 1035
 root      1035     1  0 Apr04 ?        00:00:10 /usr/bin/registry serve /etc/docker-distribution/registry/config.yml

What are the ways to secure the local registry . Is it possible to implement the below

1) Authentication based download from local registry 2) SSL based docker pull Any other suggestions. We are using Redhat 7


Solution

  • I have a similar situation, you can use ssl certificate for your registry as the docker documentation here:

    https://docs.docker.com/registry/deploying/#get-a-certificate

    and for the authentication you can use Restricted access like this:

    https://docs.docker.com/registry/deploying/#restricting-access

    for more control and a good UI I will recommmend using Portus