【Docker】docker pushしたら denied: requested access to the resource is denied となった
https://qiita.com/mihooo24/items/97791dde453529287770?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items
#qiita #Docker #DockerHub

Hey, #dockerhub, are you OK?

docker manifest create --amend clickhouse/stress-test:54086 clickhouse/stress-test:54086-amd64 clickhouse/stress-test:54086-aarch64
received unexpected HTTP status: 503 Service Unavailable

Looks bad 😒

Docker Hub Registry IPv6 Support Now Generally Available
#Docker #Products #DockerHub

https://www.docker.com/blog/docker-hub-registry-ipv6-support-now-generally-available/

Memgraph Docker Extension: Empowering Real-Time Analytics with High Performance
#Docker #Products #DockerExtensions #DockerHub

https://www.docker.com/blog/memgraph-docker-extension-empowering-real-time-analytics-with-high-performance/

Protecting Secrets with Docker
#Docker #Products #DockerHub #DockerScout #DockerSubscription #Security

https://www.docker.com/blog/protecting-secrets-with-docker/

Why Are There More Than 100 Million Pull Requests for AI/ML Images on Docker Hub?
#Docker #Products #AIML #DockerHub

https://www.docker.com/blog/100-million-pull-requests-for-ai-ml-images-docker-hub/

Wow, thousands of Docker images contain sensitive data on Docker Hub 😬

https://www.bleepingcomputer.com/news/security/thousands-of-images-on-docker-hub-leak-auth-secrets-private-keys/

#Docker #DockerHub #Security #ITNews

Received an email from Azure ACR team yesterday that included this line:

"If you use Docker Hub, you may be affected by Docker rate limiting beginning 30 September 2023."

I can't find any information about changes to rate limiting of Docker Hub coming in September. 😕

Does anyone know what this is refering to?

#Azure #Docker #DockerHub #Containers #ACR #Microsoft

Erst dachte ich, dass ich einen Fehler im #debian #bookworm basierten #wordpress Image auf #dockerhub entdeckt habe. Sieht aber sogar nach einem Fehler im #php 8.1 und 8.2 Image aus, dass aktuell in allen darauf basierten Images steckt.

Es sind also sehr, sehr, sehr viele Images betroffen!

https://github.com/docker-library/wordpress/issues/833

Das ging wirklich schnell! Das #wordpress Image auf #dockerhub gibts seit heute Mittag auf Basis von #debian12 #bookworm.

Allerdings gab es in den letzten drei Stunden schon drei erneuerte Versionen und beim Start des Image kommt die Warnung „Unable to load dynamic library 'imagick‘“.

Die Maintainer scheinen an der Stabilität also noch ein bisschen zu tunen …

https://hub.docker.com/_/wordpress

Bien sûr l'image #Docker est disponible sur #DockerHub : https://hub.docker.com/_/debian

#Hurra.

https://github.com/yuzutech/kroki/issues/1084#issuecomment-1500115331

Nach drei Tagen Herumgefrickel konnte ich #Kroki (https://kroki.io) erfolgreich als #Multi-Arch-Container bauen. Hehe, jetzt habe ich sogar einen Container auf #DockerHub.

Jetzt habe ich einen eigenen Diagrammserver im Keller.
Warum?
Weil ich es kann!

#BecauseICan

🎯 Release speed-run

#Flux CD, docker-compose, #DockerHub tier changes, OpenSearch, Zabbix, Hurl, PyTorch, TypeScript

https://opsindev.news/archive/2023-03-20/#release-speed-run

New opsindev.news #newsletter, feat. Polar Signals Let's Profile, learning eBPF and AI/ML cont., @gitpod signing commits, #DockerHub changes, #Observability in practice, #OpenTelemetry in use, otel-desktop-viewer

https://opsindev.news/archive/2023-03-20/

At least for 10 days there's a manual way to remove it.

But I wonder, how #dockerhub managed to avoid #GDPR cases.

whaaaaaaat the hell, #dockerhub? https://github.com/docker/hub-feedback/issues/2128

Hello All,

With DockerHub removing its free tier and potential for future shenanigans, people are looking to move away from them for free and personal use.

To me, there seems to be a couple straight forward solutions:

* quay.io: open source but still centralized and ran by single for profit
* Gitlab.com registry: open source but still centralized and ran by single for profit
* GitHub.com registry: Same boat as DockerHub but larger corporation
* Running your own personal registry: Additional work for each party involved, low discovery options.

Now with the boring, straightforward solutions mentioned, and the bar set, I am going to suggest that we take this opportunity to push for a better long term solution.
Push for decentralized storage of OCI images and federated metadata support. The only urgency I see is that, because of the bone headiness of the latest Docker decision, frogs are actually jumping out of the pot, and I fear they might turn down the temp to a slower boil, or people might just jump into a slower cooker like github. Either way, the status quo looks to be a slow boiling away of the common infrastructure we are used today.

Here some decentralized options and strategies I've found so far:

## nerdctl ipfs support

[nerdctl](https://github.com/containerd/nerdctl/blob/main/docs/ipfs.md) supports IPFS for both image pulling and pushing, including encrypted images and eStargz lazy pulling. For building, the current method is a locally hosted translator so that the traditional pulls can be converted to work over IPFS. They even have docs on running it on k8s node, though if my reading is correct this isn't exactly a cloud native approach (running systemd services on each node...).

## IPDR: InterPlanetary Docker Registry

[IPDR](https://github.com/ipdr/ipdr) is a service to allow for images stored on IPFS to be accessible over Docker Registry HTTP API V2 Spec

## ociipfs OCI layer to IPFS content translation

[ociipfs](https://github.com/mkmik/ocipfs) this is tool to be able to translate to IPFS stored layers as the expected OCI layers and pulls found in the Docker build system.

## My thoughts
If you notice, the same thing I noticed in this list is that most of these are workarounds to support the web2 api on IPFS. There is a pull in draft for [BuildKit](https://github.com/moby/buildkit/pull/3510) that may make native IPFS image support better on the image build side. With the work on the nerdctl side being the most direct support for images for pushing and pulling images with IPFS hashes.

The last piece I hope you noticed is that none of these answer the discoverability question, and with none human friendly name spacing on the hashes do not serve well for code readability on either the ops or build side of the house. IPNS could serve to help the latter, but I think that something like an ActivityPub/Fediverse enabled site may better serve as a hosting point for images, allowing for multiple actors to better curate images, tags, Cosign, ipfs links, and other metadata for end users to select from.

Lastly, this is just some last minute research on my part and would love to hear more people's thoughts!

Edit 1 some points made in discussion:

Having a hard requirement on running a full IPFS daemon and node would be barriar to entry for a lot of people, and so if IPFS is used it should more ideally be used in a totally contained way.

[Gitea](https://nlnet.nl/project/Gitea/) and it's fork [Forgejo](https://forgejo.org/) both have federation via ForgePub in work and registry support, and thus maybe solid points targets for a federated/decentralized platform.

[Reddit post](https://www.reddit.com/r/ipfs/comments/11tjca7/dockerhub_replacement_stratagy_and_options/?utm_source=share&utm_medium=web2x&context=3)

#Docker #DockerHub #kubernetes #k8s #selfhosted #decentralized #ipfs #ActivityPub #containers #OCI #opensource #DevOps

Hey #community it looks like we are also affected by the latest policy changes at #DockerHub .

So what #registry for our #containers do you suggest?

#WoodpeckerCI #cicd #OpenSource

https://blog.alexellis.io/docker-is-deleting-open-source-images/

Gros débat suite au journal qui aborde le passage payant des offres "team" du #dockerhub publié par @bortzmeyer sur #linuxfr - https://linuxfr.org/users/bortzmeyer/journaux/docker-supprime-l-acces-gratuit-aux-groupes-et-organisations#comment-1918452

@to3k @Codeberg

#DockerHub free teams plan is no more