Add-ons from password protected docker registries

Feature Requests
, ,
1

I’m playing with the automated build of add-ons using GitHub actions and publishing them to GitHub Packages Docker Registry. Basically my idea is to have a fully automated add-on repo that is only dependent on GH, so I don’t have to deal with storing secrets on the CI/CD server.

The GH Packages Docker Registry doesn’t allow me to pull container images anonymously, without logging in first. However, the hassio supervisor doesn’t support login, even if I’m logged in on the host machine using docker login docker.pkg.github.com. The SDK that the supervisor uses to talk to the docker daemon does have login method and it even supports logging in using the ~/.docker/config.json populated by using docker login.

My idea would be to populate the config.json from the host machine to the supervisor container, iterate through all the defined repos insite and one-by-one log in into each after the client gets initialised.

Would be something like this welcome as a PR?

2

I was a little impatient and created the PRs:


3

the GH Packages Docker Registry doesn’t allow me to pull container images anonymously,

This is not correct?

docker pull ghcr.io/OWNER/IMAGE_NAME:tag does not require authentication.

4

Well, ghcr.io would probably work but AFAIK that’s still beta and you cannot use GITHUB_TOKEN to push anything into it, so I have to deal with secrets. I can’t even access it from current my location, it just times out.

On the other hand the docker.pkg.github.com cannot be accessed without logging in :disappointed:

5

This is implemented
image