I'm wondering why there is a type of containers called privates on docker and people can pull them as they were public ones. I think having real private repositories on docker should be great for people who want to create containers of private information and don't want to share it.
What do you think?
How about using public repo but encrypt them with strong password? Is it enough secure?
I don't think that anybody can pull from private image repositories.
You can actually use the following to have private images:
docker login command before pulling your imageLuis Pinto
Developer at Netbeast
Sébastien Portebois
Software architect at Ubisoft
Hmmm, unless it changed recently, images from private repos can only be pulled by authenticated users. At least it was the case with Tutum and Amazon ECR, and I'd be very surprised that it's not the case with Dockerhub (will give it a try later, removing my credentials and trying to pull an image, but I'm very confident that private images are private, and that's precisely why you have to correctly setup your credentials (or fill your
.dockercfgfile) to be able to get them.