Container Registry:FAQ about basic operations of Container Registry

Why does pushing images from outside the Chinese mainland take a long time when using Personal Edition?

Slow push speeds are caused by cross-region network latency between servers outside the Chinese mainland and repositories in the Chinese mainland. Two options can resolve this:

• Build in the Chinese mainland: After the image layers are cached, switch to building on a server in the Chinese mainland. This eliminates the cross-region push entirely.

• Switch to Enterprise Edition: Enterprise Edition build servers are not affected by cross-region transmission, so you can continue building outside the Chinese mainland without the slowdown.

Can I use a base image from a private repository that requires authentication?

No. When building an image, you cannot use a base image from a private repository that requires authentication. Push the base image to an image repository in Container Registry instead.

Can the build system pull code from Git submodules?

Yes, with limitations. When the build system detects submodules in a Git code repository, it attempts to pull their code. If a submodule pull fails, the build continues with the remaining code.

Submodules must meet both of the following requirements:

• HTTP or HTTPS URLs only: SSH URLs are not supported. Convert any SSH URLs in your .gitmodules file to HTTPS. SSH URL (not supported):

  [submodule "test/java"]
   path = /test/java
   url = git@github.com:zlseu-edu/simple-java-maven-app.git

  HTTPS URL (supported):

  [submodule "test/java"]
   path = /test/java
   url = https://github.com/zlseu-edu/simple-java-maven-app.git

• Sufficient permissions: By default, the build system uses the Git code repository secret to pull from submodules. If a submodule requires additional permissions, obtain them before starting the build.

What are the requirements for the base image in a Dockerfile?

When building images with a Container Registry Personal Edition instance, the base image in your Dockerfile must meet one of the following conditions:

• A publicly accessible image that does not require authorization

• A private image that is accessible over the Internet, belongs to the same account, and is in the same region as the Personal Edition instance

The following base images are not supported, regardless of region:

• Private images of the Container Registry Personal Edition instance itself

• Images that can only be pulled over a VPC

• Images provided by a third party

Does Personal Edition provide fixed IP addresses for image repositories or build servers?

No. IP addresses and ports for Personal Edition instances and build servers can change due to system architecture updates, so they are not published. If your workflow requires fixed IP addresses, use a Container Registry Enterprise Edition instance.

Why can't I use my Personal Edition account to log in to an Enterprise Edition image repository?

Personal Edition and Enterprise Edition are isolated from each other. To log in to an Enterprise Edition image repository, use access credentials. For details, see Configure access credentials for a Container Registry Enterprise Edition instance.

How do I change the VPC of an Enterprise Edition instance?

Delete the virtual private cloud (VPC) that you no longer need, then add the desired VPC. For steps to add a VPC, see Configure a VPC ACL.

How do I change the GitLab account bound to a Container Registry instance?

1. On the Code Source page, unbind the existing GitLab account.

2. Log in to GitLab and create a code repository.

3. On the Code Source page, bind the new GitLab account.

For detailed steps, see Bind a source code hosting platform.

Why can't I push images to an Enterprise Edition image repository over the classic network?

Enterprise Edition does not support image pushes over the classic network. Personal Edition does support this.

Can I push and pull images from a Personal Edition instance in Alibaba Finance Cloud over the Internet?

No. Internet access is not supported for Personal Edition instances in Alibaba Finance Cloud. Enterprise Edition instances in Alibaba Finance Cloud support Internet-based pushes.

Can I push and pull images from a Personal Edition instance in Alibaba Gov Cloud over the Internet?

No. Internet access is not supported for Personal Edition instances in Alibaba Gov Cloud. Enterprise Edition instances in Alibaba Gov Cloud support both Internet-based pushes and pulls.

How are retention policies applied when multiple policies are configured for the same image repository?

Each retention policy is applied independently. When multiple policies apply, the most recent retention policy runs first.

Can I push multi-architecture images to Enterprise Edition instances?

Yes. Enterprise Edition supports multi-architecture images. The architecture of each image is shown in the image list.

Can I recover a deleted namespace in Personal Edition?

No. Deleting a namespace in Container Registry Personal Edition is permanent and cannot be undone.

Error: unknown command "chart" for "helm"

This error appears when the Helm 3 experimental OCI feature is not enabled. Run the following command before using Helm chart commands:

export HELM_EXPERIMENTAL_OCI=1

For more information, see Push and pull Helm charts.

Does Alibaba Finance Cloud support new Container Registry Personal Edition instances?

No. Alibaba Finance Cloud does not allow new users to activate Container Registry Personal Edition.

Existing users can continue using their Personal Edition instances under the following conditions:

• Alibaba Cloud account holders who previously created Personal Edition instances in Alibaba Finance Cloud

• Resource Access Management (RAM) users who have been granted the required permissions and have already activated Personal Edition

Other users cannot use Personal Edition instances.