1.0 Setting Multiple Docker Registries
Fortanix Confidential Computing Manager allows you to add and save multiple docker registries in the Applications menu item.
To add multiple docker registries:
- Click the Applications menu item in Fortanix CCM UI left navigation bar, and then click the Registries menu item. Figure 1: Settings Page
- On the Registries page, click ADD REGISTRY to add a new registry as shown in Figure 1. The Registry Credentials are the credentials to access the private docker registry from which an image is going to be pulled or pushed.
- Fill out the form for adding a registry to your account. After you save this, it is not required to provide the credentials for the docker image while creating an image.
Name: The name of the docker registry. The credentials will be used for every image with the same prefix. For ex:
- Credentials: The username and password of the private docker registry. Figure 2: Enter Registry Credentials for Output Image
- Name: The name of the docker registry. The credentials will be used for every image with the same prefix. For ex:
- Click ADD REGISTRY to add the docker registry credentials.
- The newly created registry credentials will appear in the Registries page table view. Figure 3: Registry Credential Table
2.0 Setting Multiple Azure Container Registries
In some cases, you might need to authenticate using the Azure container registry with
az acr login in Azure CLI when the Docker daemon is not running in your environment. For example, you might need to run
az acr login in a script in Azure Cloud Shell, which provides the Docker CLI but does not run the Docker daemon.
For this scenario:
az acr loginfirst with the
--expose-tokenparameter. This option exposes an access token instead of logging in through the Docker CLI.
The output displays the access token, abbreviated here:
az acr login -name <acrName> --expose-token
- Then, run docker login, passing
00000000-0000-0000-0000-000000000000as the username and using the access token as the password:
Docker login myregistry.azurecr.io --username 00000000-0000-0000-0000-000000000000 --password eyjhbGci0iJSUzI1NiIs[...]24V7wA
- Now use the Username ‘
00000000-0000-0000-0000-000000000000’ and access token as Password to configure the registry on Fortanix CCM. Figure 4: Configure Registry Credentials
- When creating an image of an application in Fortanix CCM, we can use the Azure credentials saved in the Fortanix CCM Settings page. Figure 6: Use Saved Credentials for EOS Image Creation