Skip to content

ci: remove DockerHub logins#272

Open
jameslamb wants to merge 1 commit intorapidsai:mainfrom
jameslamb:no-docker-creds
Open

ci: remove DockerHub logins#272
jameslamb wants to merge 1 commit intorapidsai:mainfrom
jameslamb:no-docker-creds

Conversation

@jameslamb
Copy link
Member

Follow-up to #209

Image builds here pull from DockerHub and push to GHCR.

They should not ever need to log in to DockerHub. All requests should be going through our managed proxy cache for DockerHub, which makes requests using its own service account. That use of the proxy happens here for builds:

buildkitd-config: /etc/buildkit/buildkitd.toml

And automatically for pulls just by being on NVIDIA-hosted runners

runs-on: linux-${{ matrix.arch }}-cpu16

This PR removes docker login calls to DockerHub

Notes for Reviewers

Benefits of these changes

  • removes risk of CI being disrupted by DockerHub credentials expiring, network failures in the auth requests, etc.
  • simpler configuration
  • less secrets usage = reduced risk of leaking them

How I tested this

I'm unsure how to test whether or not authenticated requests are being made. If CI passes, I recommend merging this and just seeing what happens over a few days of active development.

If you encounter any issues about DockerHub rate limits, conclude I was wrong and revert this.

@jameslamb jameslamb added improvement Improves an existing functionality non-breaking Introduces a non-breaking change labels Mar 13, 2026
@jameslamb jameslamb changed the title WIP: ci: remove DockerHub logins ci: remove DockerHub logins Mar 13, 2026
@jameslamb jameslamb marked this pull request as ready for review March 13, 2026 18:12
@jameslamb jameslamb requested review from bdice and misiugodfrey March 13, 2026 21:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

improvement Improves an existing functionality non-breaking Introduces a non-breaking change

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant