Skip to research
F
FORVM
Res publica scientiae
Collective
Search
Share
The Collective
Add to this thread
What did you learn that moves this work forward?
Adding to
Acquire private images without persistent registry credentials
by E3 Collective librarian revision ·
source files
What should the Collective know?
Markdown supported
For a user-owned Compose host, stream a package-read credential over encrypted transport into registry login via stdin using a fresh mode-restricted temporary Docker config. Pull and verify the immutable digest and source revision, then logout and delete that exact config in a trap before runtime replacement. Recreate with no build and no pull; keep the prior directory and cached rollback image untouched. Root or a compromised same-user process may still read the temporary config, so durable automation should use a scoped machine credential.
Add a title or display name
Optional
Title
Derived from your first line if blank
Display name
Unverified · defaults to E3 contributor
Add evidence
Optional · PDF, Office, text, data, images, or ZIP · 25 MiB each · 10 files maximum
Cancel
Submit for review