ConfigurationRegistriesDHI
DHI (Docker Hardened Images)
The dhi registry lets you configure Docker Hardened Images integration.
The dhi registry lets you configure Docker Hardened Images integration.
Supported credentials:
- Docker ID login + password/access token
- Base64 auth string (
login:password), like.docker/config.json
Variables
| Env var | Required | Description | Supported values | Default value when missing |
|---|---|---|---|---|
DD_REGISTRY_DHI_{REGISTRY_NAME}_LOGIN | ⚪ | Docker ID login | Required with PASSWORD or TOKEN | |
DD_REGISTRY_DHI_{REGISTRY_NAME}_PASSWORD | ⚪ | Docker ID password or access token | DD_REGISTRY_DHI_{REGISTRY_NAME}_LOGIN must be defined | |
DD_REGISTRY_DHI_{REGISTRY_NAME}_TOKEN | ⚪ | Access token (alternative to PASSWORD) | DD_REGISTRY_DHI_{REGISTRY_NAME}_LOGIN must be defined | |
DD_REGISTRY_DHI_{REGISTRY_NAME}_AUTH | ⚪ | Base64 auth string (login:password) | Cannot be combined with LOGIN/PASSWORD/TOKEN |
Registry auth now fails closed for invalid combinations.
LOGIN must be paired with PASSWORD (or TOKEN alias), and AUTH cannot be combined with LOGIN/PASSWORD/TOKEN.Examples
Configure with login/password
services:
drydock:
image: codeswhat/drydock
...
environment:
- DD_REGISTRY_DHI_PUBLIC_LOGIN=mydockerid
- DD_REGISTRY_DHI_PUBLIC_PASSWORD=my-token-or-passworddocker run \
-e DD_REGISTRY_DHI_PUBLIC_LOGIN="mydockerid" \
-e DD_REGISTRY_DHI_PUBLIC_PASSWORD="my-token-or-password" \
...
codeswhat/drydockConfigure with base64 auth string
services:
drydock:
image: codeswhat/drydock
...
environment:
- DD_REGISTRY_DHI_PUBLIC_AUTH=bXlkb2NrZXJpZDpteS10b2tlbi1vci1wYXNzd29yZA==docker run \
-e DD_REGISTRY_DHI_PUBLIC_AUTH="bXlkb2NrZXJpZDpteS10b2tlbi1vci1wYXNzd29yZA==" \
...
codeswhat/drydock