Docker Registry

Learn about configurations >

• apt-key-server | string

  Default: hkp://keyserver.ubuntu.com:80

  APT Key Server

• auth-basic-password | string

  Password for basic (htpasswd) authentication. Set this to something other than an empty string to configure basic auth for the registry.

• auth-basic-user | string

  Default: admin

  Username for basic (htpasswd) authentication.

• auth-token-issuer | string

  The name on the certificate that authentication tokens must me signed by.

• auth-token-realm | string

  The location from which clients should fetch authentication tokens.

• auth-token-root-certs | string

  The root certificate bundle (base64 encoded) for the authentication tokens.

• auth-token-service | string

  The name of the server which authentication tokens will be addressed to.

• cache-password | string

  Password for the remote registry when configured as a pull-through cache.

• cache-remoteurl | string

  Configures the registry as a pull through cache of the registry at the given url. See https://docs.docker.com/registry/recipes/mirror/ for more information the limitations of this mode.

• cache-username | string

  Username for the remote registry when configured as a pull-through cache.

• cuda_repo | string

  Default: 10.0.130-1

  The cuda-repo package version to install.

• daemon-opts | string

  Default: { "log-driver": "json-file", "log-opts": { "max-size": "10m", "max-file": "100" } }

  Docker daemon configuration options, in json format, which are written directly to `/etc/docker/daemon.json`. Prefer to use this instead of `docker-opts`. While the two can be used together, care should be taken to not specify the same option in both places. Doing so will cause the Docker daemon to exit with an error. More info about available options can be found at https://docs.docker.com/engine/reference/commandline/dockerd/#daemon-configuration-file

• debug-port | int

  Default: 5001

  The external port on which the docker registry debug server listens.

• docker-ce-package | string

  Default: docker-ce=5:18.09.1~3-0~ubuntu-bionic

  The pinned version of docker-ce package installed with nvidia-docker.

• docker-opts | string

  Docker daemon command line arguments that are passed to `dockerd` when it starts, e.g. `--insecure-registry`. Prefer to use `daemon-opts` instead of this. See the `daemon-opts` description for more info.

• docker_runtime | string

  Default: auto

  Docker runtime to install valid values are "upstream" (Docker PPA), "nvidia" (Nvidia PPA), "apt" (Ubuntu archive), "auto" (Nvidia PPA or Ubuntu archive, based on your hardware), or "custom" (must have set `docker_runtime_repo` URL, `docker_runtime_key_url` URL and `docker_runtime_package` name).

• docker_runtime_key_url | string

  Custom Docker repository validation key URL.

• docker_runtime_package | string

  Custom Docker repository package name.

• docker_runtime_repo | string

  Custom Docker repository, given in deb format. Use `{ARCH}` to determine architecture at runtime. Use `{CODE}` to set release codename. E.g. `deb [arch={ARCH}] https://download.docker.com/linux/ubuntu {CODE} stable`.

• enable-cgroups | boolean

  Enable GRUB cgroup overrides cgroup_enable=memory swapaccount=1. WARNING changing this option will reboot the host - use with caution on production services.

• extra_packages | string

  Space separated list of extra deb packages to install.

• http-host | string

  The external URL where the docker registry is hosted. This URL will be prepended to all locations generated by the docker registry to ensure that those URLs are reachable by the client. For example "https://example.com/docker-registry/";. Any path component must include a trailing "/". If this is not configured then the docker registry will derive its location from the incoming requests.

• http_proxy | string

  URL to use for HTTP_PROXY to be used by Docker. Useful in egress-filtered environments where a proxy is the only option for accessing the registry to pull images.

• https_proxy | string

  URL to use for HTTPS_PROXY to be used by Docker. Useful in egress-filtered environments where a proxy is the only option for accessing the registry to pull images.

• install_from_upstream | boolean

  Toggle installation from Ubuntu archive vs the Docker PPA (DEPRECATED; please use docker_runtime instead).

• install_keys | string

  List of signing keys for install_sources package sources, per charmhelpers standard format (a yaml list of strings encoded as a string). The keys should be the full ASCII armoured GPG public keys. While GPG key ids are also supported and looked up on a keyserver, operators should be aware that this mechanism is insecure. null can be used if a standard package signing key is used that will already be installed on the machine, and for PPA sources where the package signing key is securely retrieved from Launchpad.

• install_sources | string

  List of extra apt sources, per charm-helpers standard format (a yaml list of strings encoded as a string). Each source may be either a line that can be added directly to sources.list(5), or in the form ppa:<user>/<ppa-name> for adding Personal Package Archives, or a distribution component to enable.

• log-level | string

  Default: info

  Logging output level ('error', 'warn', 'info', or 'debug').

• nagios_context | string

  Default: juju

  Used by the nrpe subordinate charms. A string that will be prepended to instance name to set the host name in nagios. So for instance the hostname would be something like: juju-myservice-0 If you're running multiple environments with the same services in them this allows you to differentiate between them.

• nagios_servicegroups | string

  A comma-separated list of nagios servicegroups. If left empty, the nagios_context will be used as the servicegroup

• no_proxy | string

  Comma-separated list of destinations (either domain names or IP addresses) which should be accessed directly, rather than through the proxy defined in http_proxy or https_proxy. Must be less than 2023 characters long.

• nvidia-container-runtime-package | string

  Default: nvidia-container-runtime=2.0.0+docker18.09.1-1

  The pinned version of nvidia-container-runtime package.

• nvidia-docker-package | string

  Default: nvidia-docker2=2.0.3+docker18.09.1-1

  The pinned version of nvidia-docker2 package.

• package_status | string

  Default: install

  The status of service-affecting packages will be set to this value in the dpkg database. Valid values are "install" and "hold".

• prometheus-metrics | boolean

  Enable/disable prometheus metrics.

• registry-http-proxy | string

  The HTTP proxy the registry server should use to access the upstream registry.

• registry-https-proxy | string

  The HTTPS proxy the registry server should use to access the upstream registry.

• registry-image | string

  Default: registry:2

  Registry image.

• registry-name | string

  Default: registry

  Name of the registry container.

• registry-port | int

  Default: 5000

  The external port on which the docker registry listens.

• storage-cache | string

  Default: inmemory

  Cache provider for image layer metadata. Valid options are "inmemory" or "disabled".

• storage-delete | boolean

  Enable/disable the "delete" storage option. False, the default, disables this option in the registry config file.

• storage-read-only | boolean

  Enable/disable the "readonly" storage maintenance option. False, the default, disables this option in the registry config file.

• storage-swift-authurl | string

  The URL of the keystone used to authenticate to swift.

• storage-swift-container | string

  Default: docker-registry

  The name of the swift container that will hold the images.

• storage-swift-domain | string

  OpenStack Identity v3 API domain.

• storage-swift-password | string

  The password to use to access swift.

• storage-swift-region | string

  The region containing the swift service.

• storage-swift-tenant | string

  The tenant containing the swift service.

• storage-swift-username | string

  The username to use to access swift.

• tls-ca-blob | string

  Base64 encoded TLS CA certificate (overwrites tls-cert-path file).

• tls-ca-path | string

  Default: /etc/docker/registry/ca.crt

  Path to the TLS CA certificate.

• tls-cert-blob | string

  Base64 encoded TLS certificate (overwrites tls-cert-path file).

• tls-cert-path | string

  Default: /etc/docker/registry/registry.crt

  Path to the TLS certificate.

• tls-key-blob | string

  Base64 encoded TLS certificate private key (overwrites tls-key-path file).

• tls-key-path | string

  Default: /etc/docker/registry/registry.key

  Path to the TLS certificate private key.