poorman-registry's Introduction

Poor Man Registry

A poor man's registry that redirect to Chainguard's container registry.

Motivation

The public, free tier of Chainguard Images only serves latest tag. This could be of inconvenience so we build this to continously watching Chainguard registry for digest changes and extract the package version via SBOM. We then tag the image according with the packaged software version and serve via this proxy.

Usage

go run main.go server --config=config.yaml

How it works

sequenceDiagram
autonumber
actor U as User
participant RR as Proxy
participant DB as Local Digest Database
participant CG as Chainguard Images
U->>+RR: Pull command `nginx:1.0.0`
RR->>+DB: Check if digest existed for `nginx:1.0.0`
DB-->>-RR: Found digest for `nginx:1.0.0`
RR-->>-U: Return digest if found

loop Every x Minutes
RR->>CG: Periodically checking `latest` tag for digest change
RR->>DB: Save digest for this tag to local db
end


RR->>CG: Proxied every other APIs

poorman-registry's People

Contributors

Stargazers

Watchers

poorman-registry's Issues

Sweep: refactor mirror.go

Update expired record on readme

Handle chainguard alias for latest-dev

Unlike other registry, which alias latest tag to 0.x.y. Chainguard registry also have alias for latest-dev to 0.x.y-dev which version in sbom is 0.x.y. Eg: https://edu.chainguard.dev/chainguard/chainguard-images/reference/argocd-repo-server/image_specs/
Currently we only handle for latest tag.

ACTION REQUIRED: Changes to pulling Chainguard Images

Hey there Chainguard here.

We noticed that you are using Chainguard Images, thank you! We wanted to make you aware of an upcoming change that will impact your project.

Starting August 16, 2023 public users will no longer be able to pull images from our registry (cgr.dev/chainguard) by tags other than latest or latest-dev. Please see the announcement for more information.

You are currently using the following.

In https://github.com/nduyphuong/poorman-registry/blob/098bffbf72f194af8521062b8c3ca1ada869d9d3/services/container-registry/registry_test.go: