Docker registries
=================

Docker registry
---------------

We're running a `Docker Registry <https://registry.confirm.ch>`_ for own Docker images.

The registry is deployed to ``registry.confirm.ch``.
To pull something from the registry you can run:

.. code-block:: bash

    docker pull registry.confirm.ch/{image}:{tag}

To push something, you've to tag the image properly before pushing it:

.. code-block:: bash
    
    docker tag {image} registry.confirm.ch/{image}:{tag}
    docker push registry.confirm.ch/{image}:{tag}

Also have a look at our existing images in the `Docker Images GitLab group <https://git.confirm.ch/confirm/docker-images>`_.

.. hint::

    To view or manage the registry, have a look at the `Registry UI <https://registry-ui.confirm.ch>`_.

Docker Hub mirror
-----------------

We're also running a `Docker Hub Mirror <https://registry-mirror.confirm.ch>`_ as `pull through cache <https://docs.docker.com/registry/recipes/mirror/>`_. The reasons why we're mirroring `Docker Hub <https://hub.docker.com/>`_ are:

1. We're making extensive use of Docker and this improves the performance
2. Docker Hub introduced a `Pull Rate Limit <https://www.docker.com/increase-rate-limits>`_

The registry is deployed to ``registry-mirror.confirm.ch``.

To use the pull through cache / mirror, you've to configure your Docker daemon via ``/etc/docker/dameon.json`` properly:

.. code-block:: json

    {
        "registry-mirrors": ["https://registry-mirror.confirm.ch"]
    }
 
.. hint::

    To view or manage the Docker Hub Mirror, have a look at the `Registry Mirror UI <https://registry-mirror-ui.confirm.ch>`_.

Registry deployments
--------------------

Both registries are deployed via GitLab CI from the `Docker Registry GitLab project <https://git.confirm.ch/confirm/registry>`_. 

.. important::

    The Docker registries are only available from within private networks.