Skip to main content

Docker Hardened Images (DHI)

🔐 Dedicated Setup Required

The dhi registry module authenticates with Docker Hardened Images (dhi.io) to query container tags and manifest digests.

Authentication Required

Docker Hardened Images on dhi.io do not support anonymous access. You must configure your Docker Hub username and Personal Access Token (PAT) as shown below so WUD can query tags and manifests for dhi.io images.

⚙️ Configuration Variables​

WUD_REGISTRY_DHI_{registry_name}_PASSWORD
Requiredstring

Docker Hub Personal Access Token (PAT) (recommended) or account password

Allowed values:Required when username/login is provided (also accepts `TOKEN`)
WUD_REGISTRY_DHI_{registry_name}_USERNAME
Requiredstring

Docker Hub account username

Allowed values:Required when password/token is provided (also accepts `LOGIN`)
WUD_REGISTRY_DHI_{registry_name}_AUTH
Optionalstring

Direct Base64-encoded username:password string (as found in ~/.docker/config.json)

Allowed values:Base64-encoded username:password (mutually exclusive with USERNAME/PASSWORD)

🚀 Examples​

Authenticate with Username & Personal Access Token​

services:
  whatsupdocker:
    image: getwud/wud
    environment:
      - WUD_REGISTRY_DHI_PRIVATE_USERNAME=myusername
      - WUD_REGISTRY_DHI_PRIVATE_TOKEN=dckr_pat_xxxxxxxxxxxxxxxxxxxx

📖 Setup Guide: Creating a Docker Hub Personal Access Token​

  1. Log in to Docker Hub.
  2. Open your account avatar > Account Settings > Security (or Personal Access Tokens).
  3. Click New Access Token, name it WUD-DHI, and set permissions to Read-only.
  4. Copy the generated token (dckr_pat_...) and set it as WUD_REGISTRY_DHI_{registry_name}_TOKEN or WUD_REGISTRY_DHI_{registry_name}_PASSWORD.
  5. Ensure your Docker account has access to Docker Hardened Images.