Docker's deleting Open Source images and here's what you need to know

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

Our great sponsors
  • WorkOS - The modern identity platform for B2B SaaS
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • SaaSHub - Software Alternatives and Reviews
  • podman

    Podman: A tool for managing OCI containers and pods.

  • > And since podman doesn't have an official repo like docker,

    Hmm... https://github.com/containers/podman

    I found that on: https://podman.io/ so, I'm pretty sure it's official.

  • nerdctl

    contaiNERD CTL - Docker-compatible CLI for containerd, with support for Compose, Rootless, eStargz, OCIcrypt, IPFS, ...

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo
  • kubevirt

    Kubernetes Virtualization API and runtime in order to define and manage virtual machines.

  • We are even using Docker Hub to store and distribute VM images...

    https://github.com/kubevirt/kubevirt/blob/main/containerimag...

  • ipcs

    containerd meets ipfs to distribute content

  • We had a prototype Docker/BuildKit registry using IPFS at Netflix built by Edgar.

    https://github.com/hinshun/ipcs

  • spegel

    Stateless cluster local OCI registry mirror.

  • https://github.com/xenitAB/spegel

    I have avoided a couple of incidents caused by images being removed or momentarily not reachable with it. It would at least mitigate any immediate issues caused by images being removed from Docker Hub.

  • Moby

    The Moby Project - a collaborative project for the container ecosystem to assemble container-based systems

  • This was the proposed PR that is summarized in that article: https://github.com/moby/moby/pull/10411

    if you did `docker tag supersecret/app:latest && docker push` instead of `docker tag registry.corp.com/supersecret/app:latest` guess where your code just went?

    Same on the pull side, if you wanted your corp's ubuntu base rather than just `docker pull ubuntu`.

  • arion-compose

    Run docker-compose with help from Nix/NixOS

  • https://github.com/hercules-ci/arion which allow docker-compose

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • ipdr

    🐋 IPFS-backed Docker Registry

  • Probably. You still need to store and serve the data somewhere of course but for even moderately successful open source organizations they will likely find volunteer mirrors. The nice thing about IPFS is that new people can start mirroring content without any risk or involvement, new mirrors are auto-discovered, like bittorrent.

    It seems like the docker registry format isn't completely static so I don't think you can just use a regular HTTP gateway to access but there is https://github.com/ipdr/ipdr which seems to be a docker registry built on IPFS.

    > We'd still need a registry for mapping the image name to CID, along with users/teams/etc.

    IPNS is fairly good for this. You can use a signing key to get a stable ID for your images or if you want a short memorable URL you can publish a DNS record and get /ipns/docker.you.example/.

    Of course now you have pushed responsibility of access control to your DNS or by who has access to the signing key.

  • systemd

    systemd upstream (by fbuihuu)

  • Interestingly, https://www.freedesktop.org/wiki/Software/systemd/#spelling says...

    > But then again, if [calling it systemd] appears too simple to you, call it (but never spell it!) System Five Hundred since D is the roman numeral for 500 (this also clarifies the relation to System V, right?).

  • official-images

    Primary source of truth for the Docker "Official Images" program

  • Indeed. While I do maintain two of them, that maintenance is effectively equivalent to being an open source maintainer or open source contributor. I do not have any non-public knowledge about the Docker Official Images program. My interaction with the Docker Official Images program can be summed up as “my PRs to docker-library/official-images” (https://github.com/docker-library/official-images/pulls/TimW...) and the #docker-library IRC channel on Libera.Chat.

  • lmctfy

    Discontinued lmctfy is the open source version of Google’s container stack, which provides Linux application containers.

  • registry.k8s.io

    This project is the repo for registry.k8s.io, the production OCI registry service for Kubernetes' container image artifacts

  • One annoyance with how docker images are specified is they include the location where they are stored. So if you want to change where you store you image you break everyone.

    I wonder if what regsitry.k8s.io does could be generalized:

    https://github.com/kubernetes/registry.k8s.io/blob/main/cmd/...

    The idea is the depending on which cloud you are pulling the image from, they will use the closest blob store to service the request. This also has the effect that you could change the source of truth for the registry without breaking all Dockerfiles.

  • Harbor

    An open source trusted cloud native registry project that stores, signs, and scans content.

  • Does anybody know whether there could be something like an open/libre container registry?

    Maybe the cloud native foundation or the linux foundation could provide something like this to prevent vendor lock-ins?

    I was coincidentially trying out harbor again over the last days, and it seems nice as a managed or self-hosted alternative. [1] after some discussions we probably gonna go with that, because we want to prevent another potential lock-in with sonarpoint's nexus.

    Does anybody have similar migration plans?

    [1] https://goharbor.io

  • multipass

    Multipass orchestrates virtual Ubuntu instances

  • Switched to Multipass (https://multipass.run/) and run docker with portainer on my Mac there.

  • torrent

    Full-featured BitTorrent client package and utilities

  • Hit me up if you want to discuss using BitTorrent to back images. https://github.com/anacrolix/torrent

  • go-containerregistry

    Go library and CLIs for working with container registries

  • devenv

    Fast, Declarative, Reproducible, and Composable Developer Environments

  • > Base images will continue to be patched/updated, and you need those to keep your own images up to date. Unless the suggestion is to build all images, from the bottom up, from scratch.

    If docker pushes people to that, hopefully more reproducible solutions like nix and it's ux friendly "porcelains" such as https://devenv.sh/ gain market share.

  • devbox

    Instant, easy, and predictable development environments

  • You might be interested in Devbox (http://jetpack.io/devbox)! We built Devbox because we were frustrated with our Docker based dev environments, and our goal is to provide the power of Nix with a more accessible interface (similar to yarn or other package managers).

    We're open source and rapidly adding features, you can check us out on Github at https://github.com/jetpack-io/devbox

  • roadmap

    Welcome to the Public Roadmap for All Things Docker! We welcome your ideas. (by docker)

  • https://github.com/docker/roadmap/issues/44

    So, at the moment, any public organization images are doomed to be lost, if they won't pay.

  • containerd

    An open and reliable container runtime

  • If you are using containerd then you might find the "hosts" section of the configuration file useful: https://github.com/containerd/containerd/blob/main/docs/host...

  • nix-portable

    Nix - Static, Permissionless, Installation-free, Pre-configured

  • level (/nix/store/)

    Yes, for cache hits to happen it has to be this way as far as I remember.

    There is a project called nix-portable though that I've seen some HPC users report success with:

    https://github.com/DavHau/nix-portable

  • SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts