diff --git a/docs/src/registries-and-offline.md b/docs/src/registries-and-offline.md
index b1d789ebc..880fcf8e2 100644
--- a/docs/src/registries-and-offline.md
+++ b/docs/src/registries-and-offline.md
@@ -21,6 +21,14 @@ insecure=true
 
 For more, see [containers-registries.conf](https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md).
 
+## Private registries
+
+It's common to use a private repository when deploying a fleet of bootc instances.
+
+In addition to registry configuration, private registries require authentication. This is configured by placing an `auth.json` file at `/etc/ostree/auth.json`.
+
+For more, see [auth.json](https://man.archlinux.org/man/containers-auth.json.5)
+
 ## Disconnected and offline updates
 
 It is common (a best practice even) to maintain systems which default