- use the mkimage hashes that we had in LinuxKit as more up to date than tool. - update docs - move the code from moby under src/cmd/linuxkit Signed-off-by: Justin Cormack <justin@specialbusservice.com>
1018 B
Private Images
When building, linuxkit build downloads, and optionally checks the notary signature, on any OCI images referenced in any section.
As of this writing, it does not have the ability to download these images from registries that require credentials to access. This is equally true for private images on public registries, like https://hub.docker.com, as for private registries.
We are working on enabling private images with credentials. Until such time as that feature is added, you can follow these steps to build a moby image using OCI images that require credentials to access:
docker loginas relevant to authenticate against the desired registry.docker pullto download the images to your local machine where you will runmoby build.- Run
moby build(orlinuxkit build).
Additionally, ensure that you do not have trust enabled for those images. See the section on trust in this document. Alternately, you can run linuxkit build with --disable-trust.