Chapter 14. Managing container images

Procedure

1. In the Satellite web UI, navigate to Content > Products and click Repo Discovery.
2. From the Repository Type list, select Container Images.
3. In the Registry to Discover field, enter the URL of the registry to import images from.
4. In the Registry Username field, enter the name that corresponds with your user name for the container image registry.
5. In the Registry Password field, enter the password that corresponds with the user name that you enter.
6. In the Registry Search Parameter field, enter any search criteria that you want to use to filter your search, and then click Discover.
7. Optional: To further refine the Discovered Repository list, in the Filter field, enter any additional search criteria that you want to use.
8. From the Discovered Repository list, select any repositories that you want to import, and then click Create Selected.
9. Optional: To change the download policy for this container repository to on demand, see Section 6.4, “Updating the download policy for a repository by using Satellite web UI”.
10. Optional: If you want to create a product, from the Product list, select New Product.
11. In the Name field, enter a product name.
12. Optional: In the Repository Name and Repository Label columns, you can edit the repository names and labels.
13. Click Run Repository Creation.
14. When repository creation is complete, you can click each new repository to view more information.
15. Optional: To filter the content you import to a repository, click a repository, and then navigate to Limit Sync Tags. Click to edit, and add any tags that you want to limit the content that synchronizes to Satellite.
16. In the Satellite web UI, navigate to Content > Products and select the name of your product.
17. Select the new repositories and then click Sync Now to start the synchronization process.

Procedure

1. In the Satellite web UI, navigate to Content > Products.
2. Click the name of the required product.
3. Click New repository.
4. From the Type list, select docker.
5. Enter the details for the repository, and click Save.
6. Select the new repository, and click Sync Now.

Procedure

1. Create the custom Red Hat Container Catalog product:

   $ hammer product create \
   --description "My_Description" \
   --name "Red Hat Container Catalog" \
   --organization "My_Organization" \
   --sync-plan "My_Sync_Plan"

2. Create the repository for the container images:

   $ hammer repository create \
   --content-type "docker" \
   --docker-upstream-name "rhel7" \
   --name "RHEL7" \
   --organization "My_Organization" \
   --product "Red Hat Container Catalog" \
   --url "http://registry.access.redhat.com/"

3. Synchronize the repository:

   $ hammer repository synchronize \
   --name "RHEL7" \
   --organization "My_Organization" \
   --product "Red Hat Container Catalog"

Procedure

1. In the Satellite web UI, navigate to Content > Lifecycle > Lifecycle Environments.
2. Create a lifecycle environment or select an existing lifecycle environment to edit.
3. In the Container Image Registry area, click the edit icon to the right of Registry Name Pattern area.
4. Use the list of variables and examples to determine which registry name pattern you require.

5. In the Registry Name Pattern field, enter the registry name pattern that you want to use. For example, to use the repository.docker_upstream_name:

   <%= repository.docker_upstream_name %>

6. Click Save.

Procedure

1. In the Satellite web UI, navigate to Content > Lifecycle > Lifecycle Environments.
2. Select the lifecycle environment that you want to manage authentication for.
3. To permit unauthenticated access to the containers in this lifecycle environment, select the Unauthenticated Pull checkbox. To restrict unauthenticated access, clear the Unauthenticated Pull checkbox.
4. Click Save.

Procedure

1. Create the relevant directory:

   # mkdir --parents /etc/containers/certs.d/hostname.example.com

2. Copy the CA file to the directory:

   # cp My_Root_CA.pem /etc/containers/certs.d/hostname.example.com/ca.crt

Procedure

1. Create the relevant directory:

   # mkdir --parents /etc/docker/certs.d/hostname.example.com

2. Copy the CA file to the directory:

   # cp My_Root_CA.pem /etc/docker/certs.d/hostname.example.com/ca.crt

Procedure

1. Log in to the container registry:

   $ podman login satellite.example.com

2. Push a container image to the Satellite container registry. To indicate which organization, product, and repository the container image belongs to, include the organization and product in the container image path.

   You can specify the container image destination by using one of the following schemas:

   • Push the container image by using the label-based schema:

     $ podman push My_Container_Image_ID satellite.example.com/My_Organization_Label/My_Product_Label/My_Repository_Name[:My_Tag]

   • Push the container image by using the ID-based schema:

     $ podman push My_Container_Image_ID satellite.example.com/id/My_Organization_ID/My_Product_ID/My_Repository_Name[:My_Tag]

   The image tag is optional.

3. After the content push has completed, Satellite creates the repository.

Procedure

1. Log in to the container registry:

   $ podman login satellite.example.com

2. List container images:

   $ podman search satellite.example.com/

3. Pull a container image:

   $ podman pull satellite.example.com/My_Image_Path[:My_Tag]

   Pull the image by using the same image path schema as the one used to push the image. The path schema can be either label-based or ID-based.

   The image tag is optional. If you do not specify a tag, podman pulls the latest tag.