docker registry

authorized_keys

no-pty,no-X11-forwarding,permitopen="127.0.0.1:5000",permitopen="127.0.0.1:8080",command="/bin/echo do-not-send-commands" ssh-rsa <key-string> <id>

docker-compose.yml

version: '2.1'
services:
  registry:
    image: registry:2
    ports:
     - "127.0.0.1:5000:5000"
    volumes:
     - ./data:/var/lib/registry
  ui:
    image: konradkleine/docker-registry-frontend:v2
    depends_on:
      - registry
    links:
      - registry:registry
    environment:
      - ENV_DOCKER_REGISTRY_HOST=registry
      - ENV_DOCKER_REGISTRY_PORT=5000
    ports:
     - "127.0.0.1:8080:80"

ssh tunnel registry

# doesn't work on mac os when exec "docker pull localhost:5000/foo/bar"
ssh -NL 5000:127.0.0.1:5000 <user>@<registry-host> -vv

ssh tunnel registry UI

ssh -NL 8080:127.0.0.1:8080 <user>@<registry-host> -vv