Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Support reading credential store from Buildah #836

Open
FeynmanZhou opened this issue Oct 8, 2024 · 1 comment
Open

Support reading credential store from Buildah #836

FeynmanZhou opened this issue Oct 8, 2024 · 1 comment
Labels
enhancement New feature or request v3 Things belongs to version 3.x
Milestone

Comments

@FeynmanZhou
Copy link
Member

FeynmanZhou commented Oct 8, 2024

The user would like to authenticate with a container registry after buildah login. Buildah generates an authentication file in ${XDG_RUNTIME_DIR}/containers/auth.json. ORAS doesn't support reading credential store from Buildah authentication file.

Buildah config file is similar to docker but it supports repo/namespace level auth.

Expected behavior:

If the user has Buildah installed on the system and used buildah login to authenticate with an OCI-compliant registry, the user's credentials are already stored and available to ORAS. In this case, the user doesn't need to run oras login again to authenticate with an OCI-compliant registry.

Related issue: notaryproject/notation#1058

@FeynmanZhou FeynmanZhou added the enhancement New feature or request label Oct 8, 2024
@shizhMSFT shizhMSFT added the v3 Things belongs to version 3.x label Oct 8, 2024
@shizhMSFT shizhMSFT added this to the future milestone Oct 8, 2024
@shizhMSFT
Copy link
Contributor

shizhMSFT commented Oct 8, 2024

This requires a redesign of the auth module, which further requires a design revisit.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
enhancement New feature or request v3 Things belongs to version 3.x
Projects
None yet
Development

No branches or pull requests

2 participants