this post was submitted on 20 Oct 2025
494 points (98.8% liked)

Selfhosted

60934 readers
908 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] Tolookah@discuss.tchncs.de 38 points 9 months ago (5 children)
[–] HelloRoot@lemy.lol 19 points 9 months ago (2 children)

You guys don't selfhost a registry?

[–] magguzu@lemmy.ml 11 points 9 months ago (1 children)

I know this is selfhosted so most people here are hobbyists, but it's a ton of work to selfhost in enterprise setting. I'd wager 90%+ of people using image registries are using Docker Hub, GHCR, or AWS ECR.

[–] HelloRoot@lemy.lol 3 points 9 months ago* (last edited 9 months ago) (1 children)

For your personal use, you don't need an enterprise setting. It's just a simple compose file that you run.

You can host a registry in pull through mode, so you still have all the images you use locally, but if it's not in your registry yet, it pulls it from docker hub or whatever.

The only pain point is that a single registry can't do both. So if you want to push your own docker images AND have a "cache" of stuff from docker hub, you need to run two registries in two different modes. And then juggle the url's.

[–] arcayne@lemmy.today 5 points 9 months ago

Pretty sure you could run Pulp in pull-through mode and add your local Forgejo/whatever registry as a remote, which would at least give you a unified "pull" URL. Then just use Forgejo actions to handle the actual build/publish for your local images whenever you push to main (or tag a release, or whatever).

Pulp might actually be able to handle both on its own, I haven't ever tried though.

[–] SecureTaco@lemmy.asc6.org 3 points 9 months ago (2 children)

I hadn’t actually considered that before. What’s your preferred way to do that?

[–] lando55@lemmy.zip 4 points 9 months ago
[–] HelloRoot@lemy.lol 1 points 9 months ago* (last edited 9 months ago)

I have just this (which ironically won't work now cause docker hub is down)

services:
  registry:
    restart: always
    image: registry:2
    ports:
      - 5000:5000
    dns:
      - 9.9.9.9
      - 1.1.1.1
    volumes:
      - ../files/auth/registry.password:/auth/registry.password
      - registry-data:/var/lib/registry
    environment:
      REGISTRY_STORAGE_DELETE_ENABLED: true
      REGISTRY_HEALTH_STORAGEDRIVER_ENABLED: false
      REGISTRY_HTTP_SECRET: ${REGISTRY_HTTP_SECRET}
      REGISTRY_AUTH: htpasswd
      REGISTRY_AUTH_HTPASSWD_REALM: Registry Realm
      REGISTRY_AUTH_HTPASSWD_PATH: /auth/registry.password
      # REGISTRY_PROXY_REMOTEURL: "https://registry-1.docker.io/"

volumes:
  registry-data:

I don't even remember how and when I set it up. I think it might be this: https://github.com/distribution/distribution/releases/tag/v2.0.0

Recently somebody has created a frontend, which I bookmarked but didn't bother to set up: https://github.com/Joxit/docker-registry-ui

[–] spacelord@sh.itjust.works 12 points 9 months ago (1 children)
[–] tofu@lemmy.nocturnal.garden 1 points 9 months ago

How does using Podman help when the registry is down?

[–] moonpiedumplings@programming.dev 4 points 9 months ago* (last edited 9 months ago)

mirror.gcr.io is google's public mirror of dockerhub.

https://moonpiedumplings.github.io/blog/docker-registry/

[–] krimson@lemmy.world 4 points 9 months ago

Yeah I ran into this as well. Wondered why it needs a call to auth for public container images in the first place.