How to pull private actions docker from private registry

[peimanja]

I want to use private actions in form of docker from a private docker registry (we use Artifactory), something like:

jobs:
  my_first_job:
    steps:
      - name: My first step
        uses: docker://<my-private-registry>:<image>:<tag>

Github does not support passing the credentials yet (although it supports job containers) and since pulling images happens before any steps you cannot really authenticate with Artifactory.

Is there any chance we can support that in the runner startup script?

[rajbos]

Adding to this: our private registry has a self signed certificate installed without a full trust chain.

Any idea's on how to support this so we can still pull containers from it?

  /usr/local/bin/docker pull registry.artifactory.*****.com/node:lts
  Error response from daemon: Get https://registry.artifactory.******.com/v2/: x509: certificate signed by unknown authority

[rajbos]

For a writeup on how to fix this ☝️ , see here

[peimanja]

Ended up building our own image and doing something like this

ARG RUNNER_IMAGE_TAG

FROM docker summerwind/actions-runner-dind:${RUNNER_IMAGE_TAG}

ARG ARTIFACTORY_USERNAME
ARG ARTIFACTORY_PASSWORD


RUN mkdir -p ~/.docker
RUN echo "{\"auths\":{\n\
    \"<registry>\":{\"username\":\"${ARTIFACTORY_USERNAME}\" ,\"password\":\"${ARTIFACTORY_PASSWORD}\"}\n\
    }}" > ~/.docker/config.json