15 comments

[ 3.1 ms ] story [ 42.6 ms ] thread
I run multiple registries using dokku. It's very easy and you can host whatever else you want on dokku.

  dokku apps:create registry
  dokku git:from-image registry
  dokku proxy:ports-remove http:5000:5000 
  dokku proxy:ports-add http:80:5000
  dokku nginx:set client-max-body-size 1000m
  dokku ps:restart
  dokku proxy:report
I made mine be public on one host and private with http htpasswd access. This requires changing the nginx file. But it works great.
If using AWS why not just use ECR? https://aws.amazon.com/ecr/
Which uses S3 on the backend anyway..
While ECR costs a lot less than DigitalOcean's container registry service, they still charge 5x more over AWS S3. I suppose if you need encryption? Seems like they provide some value-add that some users might need.

This project was mostly just a they said it couldn't be done kind of thing.

>using S3

He doesn't use AWS S3, but instead digital ocean spaces.

What registry features do you lose doing it this way? a normal registry isn't just serving dumb files is it? It is essentially an API that can find images by tags, sha256 etc against a backend. It manages lifecycling of things as they are replaced etc.

I imagine you could live without or substitute some of these features but are there any showstoppers?

You could probably bridge most or all of these with lambdas/workers
Perhaps container vulnerability scanning? That’s probably a showstopper for most large customers.
(comment deleted)
running a kubernetes cluster is what bloggers call "technology minimalism" these days? joking aside, i've been trying to find some time to mess around with nerdctl's ipfs functionality, seems like it may be a better fit for smaller teams and the self-hosters out there.
i just run mine on my raspberry pi, use ddns and allow specific servers to access it...thats a budget.
(comment deleted)
My poor-man’s container registry: Linux box + SSH + makefile
It sounds like you're just describing a build server and it's filesystem.