should have json config support docker registry login

[hoatle]

This is considered a new feature, we should not introduce new feature after beta releases.

However, this is a really critical one so we break that rule with this.

The config should be something like:

{
  "provisioners": [{
    "_id": "0",
    "json": {
      "docker": {
        "registry": {
          // set true to force re-login with all the defined entries, default: false (login once)
          "force": false,
          "entries": [{
            "host": "registry.gitlab.com",
            "username": "hoatle",
            "password": "abhodihagoiege"
          }]
        }
      }
   }
}

add a Chef recipe like:

# Author:: Hoat Le <hoatle@teracy.com>
# Cookbook:: teracy-dev
# Recipe:: docker_registries
# Login into the Docker registries

registry = node['docker']['registry']

execute 'rm ~/.docker/config.json' do
    command "rm /home/vagrant/.docker/config.json || true"
    only_if { registry['force'] == true and File.exist?('/home/vagrant/.docker/config.json')}
end

registry['entries'].each do |entry|
    # private registry login
    execute 'docker login' do
        command "docker login #{entry['host']} -u #{entry['username']} -p #{entry['password']}"
        # becase we need root to execute docker-compose, not 'vagrant'
        only_if { registry['force'] == true or not File.exist?('/root/.docker/config.json') }
    end
end

execute 'copy /root/.docker/config.json to ~/.docker/config.json' do
    command "cp /root/.docker/config.json /home/vagrant/.docker/config.json"
    only_if { registry['force'] == true or not File.exist?('/home/vagrant/.docker/config.json') }
end

Anyone who needs this for v0.5.0-b2 and below, you can follow the instruction above to add this config and port this Chef recipe into your dev setup project.

[hoatle]

we should not put credentials into the config file, better to use prompt for username/password or at least use environment variable.

[hoatle]

update: no username/password prompt.

[hoatle]

environment variable: move out of this issue.

[phuonglm]

verified, close