Super confusing GitHub Container Registry (need pullable public image) #26861
-
So my goal is to have a public image pullable without authentication/authorization. The first (successfull) attempt with Now with combo of Here are those that should be pullable:
Those were pushed a few minutes ago, but I can’t find them anywhere in UI and can’t pull anonymously. Here is what my action file looks like:
|
Beta Was this translation helpful? Give feedback.
Replies: 7 comments
-
Images on GHCR are private by default, after creating a new image (not tag!) you need to set it to public before it can be pulled without authentication. Configuring visibility of container images for an organization should describe what you need. 🙂 |
Beta Was this translation helpful? Give feedback.
-
I wish docs matched my UI. There is no “Package Settings” button in my UI. There is only “Edit package” dropdown that doesn’t contain anything like that. This is why it is super confusing. |
Beta Was this translation helpful? Give feedback.
-
That’s odd, the equivalent for personal accounts worked perfectly for me on the weekend.
nazar-pc:
Is that user who has admin access someone other than you, and they just provided the PAT? In that case you may need to ask them to make the package public. |
Beta Was this translation helpful? Give feedback.
-
OK, that helped, thanks! Also I can now see “Package Settings” on these new images, but not on old that is on |
Beta Was this translation helpful? Give feedback.
-
nazar-pc:
We’ll be improving the defaults on this so you don’t see it as much without trying but we wanted to enable systems to have packages that aren’t visible to owners by default. Many larger organizations have owners who are the IT managers for the system and not necessarily the ones who should have access to all resources. And people are using containers (generic storage) for things like PII (Personally Identifiable Information) with controlled access. Owners will still be able to directly access the container but that will be logged in the audit log.
nazar-pc:
Yes, these settings will only be available to GHCR. The |
Beta Was this translation helpful? Give feedback.
-
Looks like confusion is by design, this is even more sad. I was able to get rid of the |
Beta Was this translation helpful? Give feedback.
-
nazar-pc:
We’ll be adding support for deleting those images soon so you won’t have to contact support. |
Beta Was this translation helpful? Give feedback.
That’s odd, the equivalent for personal accounts worked perfectly for me on the weekend.
Is that user who has admin access someone other than you, and they just provided the PAT? In that case you may need to ask them to make the package public.