Option to pull the unregistry image at local and send it to remote by save/load

[ouuan]

Sometimes the server may not have access to ghcr.io, so it would be nice to have an option to use save/load to send the unregistry image to the remote.

[psviderski]

Thank you for the heads up! I'm not sure what would be a reliably way to detect whether the internet access to ghcr.io is available or not. There could be proxy configured, external firewalls, maybe something else.

Do you have such a case when a server doesn't have access to ghcr.io? I guess it's blocked by the China's Great Firewall when you're in China, right? Can you please send an error message with which pussh fails in this case?

I also wonder, do you have any kind of a mirror for ghcr? So in this case maybe we can add a flag to pussh to specify an alternative image for the unregistry container.

At least, I added a section to the requirements in README and instructions on how to preload an image manually in case there is no access: https://github.com/psviderski/unregistry?tab=readme-ov-file#on-remote-server

[ouuan]

I'm not sure what would be a reliably way to detect whether the internet access to ghcr.io is available or not.

At least, I added a section to the requirements in README and instructions on how to preload an image manually in case there is no access: psviderski/unregistry#on-remote-server

We can add a command-line option to automate this. There is no need for auto detection.

I also wonder, do you have any kind of a mirror for ghcr? So in this case maybe we can add a flag to pussh to specify an alternative image for the unregistry container.

Yes we can add an option for that.

[psviderski]

What option and behaviour would you like to have?

[ouuan]

First option: Replace the docker pull on remote with save, send, load. Also check if the unregistry image is available at local and pull it at local if not available.

Second option: Specify UNREGISTRY_IMAGE to replace ghcr.io/psviderski/unregistry:latest.

[mklimuk]

Hi guys, I also have a use case for this scenario. We distribute our images over VPN tunnels to isolated infrastructure with no internet access (IoT devices). I was about to develop a similar tool myself as save/load workflow is really painful. Would you accept a PR for this feature? An option like --image-transfer-mode with possible values remote (or remote-pull), scp (or push, local-pull, tar?) feels right to me. We could also alias --image-transfer-mode=scp to --offline. What do you think?

[taylor-sb]

Possibly dumb question but why not have the remote pull from the local registry over an SSH tunnel? Then the remote doesn't need the unregistry image.

I asked on a Q&A thread here, not sure if right place: #33