Docker limits unauthenticated pulls to 10/HR/IP from Docker Hub, from March 1

1. Moby

   1 237 69,598 10.0 Go

   The Moby Project - a collaborative project for the container ecosystem to assemble container-based systems

   

   Manifests are tacked on afterwards, and have a lot of complexity that I'm not sure most folks have actually thought through.

   Ex - lots of refs are to "multi-arch" images, Except... there's no such thing as a multi-arch image, the entire identifier is just a reference to a manifest that then points to a list of images (or other manifests) by arch, and the actual resolved artifact is a single entry in that list.

   But it means the manifest needs to be able to reference and resolve other names, and that means including... names.

   For a more concrete example, just check https://github.com/moby/moby/issues/44144#issuecomment-12578...

   Basically - the digests weren't intended to support image verification across repos, and the tool doesn't treat them that way. The digest was intended to allow tighter specification than a tag (precisely because a publisher might push a different container to the same tag later).

2. InfluxDB

   influxdata.com featured

   InfluxDB high-performance time series database. Collect, organize, and act on massive volumes of high-resolution data to power real-time intelligent systems.

   

3. gitlab

   2 462 - -

   In case someone from Gitlab is watching: there is a long-standing issue that Gitlab Dependency Proxy does not work with containerd rewriting (https://gitlab.com/gitlab-org/gitlab/-/issues/350485), making it impossible to use as a generic Docker Hub mirror.

4. orbstack

   3 52 6,617 2.8 Shell

   Fast, light, simple Docker containers & Linux machines

   

   If you're on Mac worth checking out the commercial https://orbstack.dev/

   Reasonable price for better dev efficiency. Free for personal use.

5. Harbor

   4 79 25,405 9.6 Go

   An open source trusted cloud native registry project that stores, signs, and scans content.

   

6. kraken

   5 15 6,326 7.2 Go

   P2P Docker registry capable of distributing TBs of data in seconds

   

7. runner-images

   6 67 11,004 9.8 PowerShell

   GitHub Actions runner images

   

   May not be true anymore but was in the past when Docker first introduced the limits.

   Very hard to find anything definitive still left on the web. This is all I could find...

   https://github.com/actions/runner-images/issues/1445#issueco...

8. cli

   7 71 133 8.8 Go

   🖥️ Depot CLI, build your Docker images in the cloud (by depot)

   

   As someone mentioned, GitHub has something to prevent this, but it's unclear (or at least undocumented) what.

   We at Depot [0] work around this by guaranteeing that a new runner brought online has a unique public IP address. Thus avoiding the need to login to Docker to pull anything.

   Subsequently, we also do the same unique public IP address for our Docker image build product as well. Which helps with doing image builds where you're pulling from base images, etc.

   [0] https://depot.dev

9. CodeRabbit

   coderabbit.ai featured

   CodeRabbit: AI Code Reviews for Developers. Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.

   

10. podman

    8 398 26,413 10.0 Go

    Podman: A tool for managing OCI containers and pods.

    

11. image

    9 5 909 9.7 Go

    Work with containers' images (by containers)

    

    To elaborate on this, podman allows specifying mirrors, as described in https://github.com/containers/image/blob/main/docs/container...

    So the source of the image can be decided on pull. Some more on this https://www.redhat.com/en/blog/manage-container-registries

12. spegel

    10 19 1,709 9.5 Go

    Stateless cluster local OCI registry mirror.

    

    Spegel shares images between your machines in a peer-to-peer fashion: https://github.com/spegel-org/spegel

13. shortnames

    11 2 78 4.7 Python

    Shortnames project is collecting registry alias names for shortnames to fully specified container image names.

    

    That said, they also maintain a list of aliases for a bunch of container images. https://github.com/containers/shortnames . My distro's podman package then drops in that file into /etc/containers/registries.conf.d/ via one of the package's dependencies.

14. k8s-mutate-image-and-policy-webhook

    12 1 25 0.0 Go

    Kubernetes mutating admission webhook to enforce image registry and pull policy.

    

    After I resd this my immediate reaction was: I need to setup ad Admission Webhook on my Kubernetes cluster to automatically rewrite all the Docker Hub images references to GCR's mirror.

    A quick Google search resulted in this [1]: then I realized that the author of this project is pretty much the company I work for. Wow.

    [1]: https://github.com/Sqooba/k8s-mutate-image-and-policy-webhoo...

15. colima

    13 126 22,342 8.9 Go

    Container runtimes on macOS (and Linux) with minimal setup

    

    Or Colima https://github.com/abiosoft/colima

    Free, open source, and has worked perfectly for me so far. (I think I briefly ran into issues with an Elastic Search container? so ymmv a bit)

Suggest a related project