Docker to rate limit image pulls

Re:Docker to rate limit image pulls by jpalomaki on Monday August 24, 2020 @02:00PM (#24263409)

I guess CI services like Github Actions could be easily hitting these limits (100 pulls per IP per 6 hours).

[ Parent | on HN ]

Re:Docker to rate limit image pulls by jacques_chester on Monday August 24, 2020 @07:48PM (#24266773)

I am anecdotally aware of large Concourse installations that have caused individual companies to be blocked entirely from Dockerhub (and which caused "face melting" of Github Enterprise instances).

Badly-behaved CI is a serious issue at scale.

[ Parent | on HN ]

Re:Docker to rate limit image pulls by eblanshey on Monday August 24, 2020 @05:42PM (#24265887)

I'm thinking the same thing. GitLab has shared CI runners that probably do a lot of image pulling. Hopefully they have plans to implement their own docker registry cache.

[ Parent | on HN ]

Re:Docker to rate limit image pulls by tr-gitlab on Monday August 24, 2020 @05:55PM (#24265999)

GitLab PM here - we have a feature called the [Dependency Proxy](https://docs.gitlab.com/ee/user/packages/dependency_proxy/) that allows you to cache images from DockerHub. Currently this only works for public projects, but we are working on adding support for private projects now: https://gitlab.com/gitlab-org/gitlab/-/issues/11582.

[ Parent | on HN ]

Re:Docker to rate limit image pulls by lights0123 on Monday August 24, 2020 @05:43PM (#24265893)

I would imagine that GitHub would work out something with Docker to either pay themselves or have some way of caching images themselves.

They could just inject their own TLS certificates into their VMs and then intercept Docker requests for images with their own cache.

[ Parent | on HN ]