Setting Multiple Docker Registries
Fortanix Enclave Manager allows you to add and save multiple docker registries in the Settings page.
To add multiple docker registries:
- Go to the Settings page in Fortanix Confidential Computing Manager (CCM). Figure 1: Settings page
- Click the ADD REGISTRY CREDENTIALS button as shown in Figure 1. The Registry Credentials are the credentials to access the private docker registry from which an image is going to be pulled or pushed.
- Fill the form for adding a registry to your account. Once you save this, it is not required to provide the credentials for the docker image while creating an image.
- Registry name: The name of the docker registry. The credentials will be used for every image with the same prefix. For ex: docker.io
- Username: The username of the private docker registry.
- Password: The password of the private docker registry. Figure 2: Enter registry credentials for input image
Figure 3: Enter registry credentials for the output image
- Click ADD to add the docker registry credentials.
- The newly created registry credentials will appear in the Registry Credentials table view. Figure 4: Registry Credential table
Setting Multiple Azure Container Registries
In some cases, you might need to authenticate using the Azure container registry with az acr login in Azure CLI when the Docker daemon is not running in your environment. For example, you might need to run az acr login in a script in Azure Cloud Shell, which provides the Docker CLI but does not run the Docker daemon.
For this scenario:
- run az acr login first with the --expose-token This option exposes an access token instead of logging in through the Docker CLI.
az acr login -name <acrName> --expose-tokenThe output displays the access token, abbreviated here:
- Then, run docker login, passing 00000000-0000-0000-0000-000000000000 as the username and using the access token as the password:
Docker login myregistry.azurecr.io --username 00000000-0000-0000-0000-000000000000 --password eyjhbGci0iJSUzI1NiIs[...]24V7wA
- Now use the Username ‘00000000-0000-0000-0000-000000000000’ and access token as Password to configure the registry on Fortanix CCM.
Figure 5: Configure registry credentials
When creating an image of an application in Fortanix CCM, we can use the Azure credentials saved in Fortanix CCM Settings.
Figure 6: Use saved credentials for EOS image creation