Use SSH pub key in order to allow access to a repository

[zedtux]

Hello,

As I'm looking to mount a private Docker registry server, I'd like to limit the access not with user/password authentication system but with SSH key like Git does today.

Is there any plan to do this or am I the first one to request this ? 😄

[zedtux]

What I mean is to be able to do then:

docker push docker@docker.zedroot.org:zedtux/my-docker-image

This would then push to my private server as I would have imported my SSH key in the docker registry (updating then the .ssh/authorised file).

[dmp42]

@zedtux so, you suggestion would mean using ssh as a transport (instead of http) - which is an idea.
Though, this is largely irrelevant to this project (docker-registry) and something you should rather suggest on the main docker repo / discussions.

[zedtux]

@dmp42 yes that is exactly the idea, to add another transport protocol to docker.

I have opened the ticket in this repo as I guess this repo will need to implement the SSH key management, isn't it ?

Anyway, I'm going to open another issue on the docker project itself mentioning this issue.
Thank you in any cases.

[zedtux]

Done: docker issue #7650

[vitalyisaev2]

I guess I have just faced with a need of the same feature. +1.

[ph-One]

👍
Here's what I've done in the mean time...

# Server 1: Registry Server
docker run -d -p 127.0.0.1:5000:5000 registry:2

# Server 2: SSH Auth Server
ssh -f -N -L 5000:localhost:5000 user@registry_server_address -g

# Client: Test, should fail
curl http://registry_server_address:5000/v2/_catalog

# Client: Test, should pass
curl http://ssh_auth_server_address:5000/v2/_catalog

And now only those with SSH pub keys on Server 2 have access to the registry. Make sure to add --insecure-registry ssh_auth_server:5000 to your client's Docker daemon command.

[errordeveloper]

+1

[ra2637]

really need it +1

[matutter]

I agree, docker is becoming as essential to development as git.

[cypof]

+1

[antonin42]

+1

[sizeoftank]

+1

[tetherit]

+1

[EgorOmelyanenko]

+1

[boeboe]

+1

[aplut]

+1

[varadgunjal]

+1

[dvolosnykh]

+1

[av8ramit]

+1

[cfriedt]

+1

[jgh-]

+1

[bttscut]

+1

[Sadykh]

+1

[Natril]

+1

[cfriedt]

/me hears crickets chirping..

[boeboe]

D***** is dead soon anyway :)

https://www.youtube.com/watch?v=BeRr3aZbzqo&t=1940s

[philipianni]

+1

[SukiCZ]

+1

[3pns]

+1

[bwail]

+1

[temporafugiunt]

+1