News for hackers. Stuff that matters.
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by lolinder on Friday February 21, 2025 @10:36AM (#43128675)
I like Podman's solution: all images must be fully qualified, with even Docker Hub images requiring a docker.io/ prefix.
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by raesene9 on Friday February 21, 2025 @10:41AM (#43128757)
Fully qualified is indeed the way to go. Unfortunately a lot of tutorials manifests and other materials have short names, and changing the default registry just opens up a load of typo squatting attacks.
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by ffsm8 on Friday February 21, 2025 @10:44AM (#43128796)
That's a very good argument, but people have down used to dropping the domain prefix because it's always been optional.

Giving people the option to configure a default repository via the daemon.json would alleviate that issue, but I'm not sure if that's really enough to fork.

Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by hedora on Friday February 21, 2025 @11:16AM (#43129265)
They’ve been betting it’s not for about ten years.

With these changes, I can imagine “intro to docker” tutorials breaking.

I suspect that’ll be enough to let a fork/competitor gain significant market share.

Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by theamk on Friday February 21, 2025 @12:58PM (#43130696)
hm.. switch to fork just to avoid trivial, mechanical, 10-character change in docs and scripts? (image/name -> my-repo.com/image/name)

I doubt it.

Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by DangitBobby on Saturday February 22, 2025 @02:22AM (#43136895)
The web is absolutely littered with docker tutorials and a huge proportion of them (not operated or maintained by docker themselves) would no longer be valid, I'm sure.
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by jjfanboy on Friday February 21, 2025 @12:38PM (#43130442)
Oh great, so now it's a hidden default that might be different system-to-system. Disjoint from the actual deployment config. Please, dear god, no. I'm sorry, this is a bad idea.

It's just not that hard to go fully qualified.

Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by sodality2 on Friday February 21, 2025 @02:26PM (#43131791)
If you specify the fully qualified image location then it's irrelevant. It's only when you decide to use short hand that it comes into concern
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by bArray on Friday February 21, 2025 @11:03AM (#43129071)
I agree it's the better proposal, but it does slightly break the "drop-in"-ness of Podman.
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by jchw on Friday February 21, 2025 @11:24AM (#43129381)
When using Podman as an alias for Docker, it does automatically resolve from Dockerhub when not specified. This is configurable, though.
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by Arnavion on Friday February 21, 2025 @09:23PM (#43135473)
That said, they also maintain a list of aliases for a bunch of container images. https://github.com/containers/shortnames . My distro's podman package then drops in that file into /etc/containers/registries.conf.d/ via one of the package's dependencies.