Docker authentication without certificates and DNS2019 Community Moderator ElectionThe definitive guide to form-based website authenticationHow is Docker different from a virtual machine?Should I use Vagrant or Docker for creating an isolated environment?How to list containers in DockerHow to get a Docker container's IP address from the host?How to remove old Docker containersHow to deal with persistent storage (e.g. databases) in DockerCopying files from Docker container to hostCopying files from host to Docker containerHow to copy Docker images from one host to another without using a repository
Why are the outputs of printf and std::cout different
Meaning of "SEVERA INDEOVI VAS" from 3rd Century slab
Bash: What does "masking return values" mean?
Why is "das Weib" grammatically neuter?
What has been your most complicated TikZ drawing?
Schematic conventions for different supply rails
Is a lawful good "antagonist" effective?
My adviser wants to be the first author
In-house repeater?
The use of "touch" and "touch on" in context
Is it true that real estate prices mainly go up?
Why do Australian milk farmers need to protest supermarkets' milk price?
Rules about breaking the rules. How do I do it well?
What options are left, if Britain cannot decide?
How to make healing in an exploration game interesting
Why does Deadpool say "You're welcome, Canada," after shooting Ryan Reynolds in the end credits?
Co-worker team leader wants to inject his friend's awful software into our development. What should I say to our common boss?
How could a scammer know the apps on my phone / iTunes account?
Sword in the Stone story where the sword was held in place by electromagnets
Possible Leak In Concrete
Why are there 40 737 Max planes in flight when they have been grounded as not airworthy?
RegionDifference for Cylinder and Cuboid
Russian cases: A few examples, I'm really confused
Is it possible that AIC = BIC?
Docker authentication without certificates and DNS
2019 Community Moderator ElectionThe definitive guide to form-based website authenticationHow is Docker different from a virtual machine?Should I use Vagrant or Docker for creating an isolated environment?How to list containers in DockerHow to get a Docker container's IP address from the host?How to remove old Docker containersHow to deal with persistent storage (e.g. databases) in DockerCopying files from Docker container to hostCopying files from host to Docker containerHow to copy Docker images from one host to another without using a repository
My goal is to require a password from user who is trying docker pull from my local Docker registry. I guess he has to login first via docker login.
Our network does not have DNS server and only port 5000 (used for Docker registry) is available. According to Deploy a registry server it seems there is no other possibility of authentication than via DNS and a certificate authority. Is that true? Isn't it possible to have a basic (plaintext and unencrypted) authentication?
docker authentication
asked Mar 7 at 12:12
Michal ŠpondrMichal Špondr
188216
add a comment |
My goal is to require a password from user who is trying docker pull from my local Docker registry. I guess he has to login first via docker login.
Our network does not have DNS server and only port 5000 (used for Docker registry) is available. According to Deploy a registry server it seems there is no other possibility of authentication than via DNS and a certificate authority. Is that true? Isn't it possible to have a basic (plaintext and unencrypted) authentication?
docker authentication
asked Mar 7 at 12:12
Michal ŠpondrMichal Špondr
188216
add a comment |
My goal is to require a password from user who is trying docker pull from my local Docker registry. I guess he has to login first via docker login.
Our network does not have DNS server and only port 5000 (used for Docker registry) is available. According to Deploy a registry server it seems there is no other possibility of authentication than via DNS and a certificate authority. Is that true? Isn't it possible to have a basic (plaintext and unencrypted) authentication?
docker authentication
asked Mar 7 at 12:12
Michal ŠpondrMichal Špondr
188216
My goal is to require a password from user who is trying docker pull from my local Docker registry. I guess he has to login first via docker login.
Our network does not have DNS server and only port 5000 (used for Docker registry) is available. According to Deploy a registry server it seems there is no other possibility of authentication than via DNS and a certificate authority. Is that true? Isn't it possible to have a basic (plaintext and unencrypted) authentication?
docker authentication
docker authentication
asked Mar 7 at 12:12
Michal ŠpondrMichal Špondr
188216
asked Mar 7 at 12:12
Michal ŠpondrMichal Špondr
188216
asked Mar 7 at 12:12
Michal ŠpondrMichal Špondr
188216
asked Mar 7 at 12:12
Michal ŠpondrMichal Špondr
188216
asked Mar 7 at 12:12
Michal ŠpondrMichal Špondr
188216
188216
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
Use nginx as reverse proxy and turn on basic auth on in.
upstream registry
server registry:5000 fail_timeout=0;
server
listen 80;
server_name registry.example.com;
server_tokens off;
auth_basic "Authentication Required";
auth_basic_user_file htpasswd/file/here;
client_max_body_size 2G;
proxy_send_timeout 300;
proxy_read_timeout 300;
location /
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass http://registry;
answered Mar 7 at 12:38
YarimadamYarimadam
753411
add a comment |
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55043504%2fdocker-authentication-without-certificates-and-dns%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Use nginx as reverse proxy and turn on basic auth on in.
upstream registry
server registry:5000 fail_timeout=0;
server
listen 80;
server_name registry.example.com;
server_tokens off;
auth_basic "Authentication Required";
auth_basic_user_file htpasswd/file/here;
client_max_body_size 2G;
proxy_send_timeout 300;
proxy_read_timeout 300;
location /
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass http://registry;
answered Mar 7 at 12:38
YarimadamYarimadam
753411
add a comment |
Use nginx as reverse proxy and turn on basic auth on in.
upstream registry
server registry:5000 fail_timeout=0;
server
listen 80;
server_name registry.example.com;
server_tokens off;
auth_basic "Authentication Required";
auth_basic_user_file htpasswd/file/here;
client_max_body_size 2G;
proxy_send_timeout 300;
proxy_read_timeout 300;
location /
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass http://registry;
answered Mar 7 at 12:38
YarimadamYarimadam
753411
add a comment |
Use nginx as reverse proxy and turn on basic auth on in.
upstream registry
server registry:5000 fail_timeout=0;
server
listen 80;
server_name registry.example.com;
server_tokens off;
auth_basic "Authentication Required";
auth_basic_user_file htpasswd/file/here;
client_max_body_size 2G;
proxy_send_timeout 300;
proxy_read_timeout 300;
location /
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass http://registry;
answered Mar 7 at 12:38
YarimadamYarimadam
753411
Use nginx as reverse proxy and turn on basic auth on in.
upstream registry
server registry:5000 fail_timeout=0;
server
listen 80;
server_name registry.example.com;
server_tokens off;
auth_basic "Authentication Required";
auth_basic_user_file htpasswd/file/here;
client_max_body_size 2G;
proxy_send_timeout 300;
proxy_read_timeout 300;
location /
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass http://registry;
answered Mar 7 at 12:38
YarimadamYarimadam
753411
answered Mar 7 at 12:38
YarimadamYarimadam
753411
answered Mar 7 at 12:38
YarimadamYarimadam
753411
answered Mar 7 at 12:38
YarimadamYarimadam
753411
753411
add a comment |
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55043504%2fdocker-authentication-without-certificates-and-dns%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
