Hacker News new | ask | show | jobs
by SEJeff 2416 days ago
Once of the nicer features is that they offer an "encrypted password" where you login to quay and click the "generate encrypted password" option in your user preferences. Then instead of hardcoding your plaintext password into your docker config json, it puts the encrypted password that is only applicable to quay.

For those that use LDAP authentication for this, it makes is a much smaller attack vector.

The per-team "organizations" is very nice and allows you to give teams their own flexibility while still running things within your own firewalls (on-prem or in a vpc). It is an alternative to docker hub with a lot of really nice features.

The ability to do scheduled mirroring of images from other registries (such as docker hub) and replication between different instances of quay is also really beneficial.

Disclaimer: commercial quay enterprise user for some time.

1 comments

Quay also integrates very well with OpenShift. It works fine stand-alone too, but if you're already using OpenShift it's worth looking into.
DISCLAIMER: I work for Red Hat Consulting focusing on OpenShift.

In fact, a version without the Container Scanning bits and some of the user management is the default internal registry in OpenShift 4.x.

Quay supports Podman & rkt, not just Docker images.