31 lines
985 B
Markdown
31 lines
985 B
Markdown
# Ansible Role: Zot
|
|
|
|
Install and configure [Zot](https://zotregistry.dev/) - an OCI-native container image registry.
|
|
|
|
## Variables
|
|
|
|
| Variable | Required | Default | Description |
|
|
|----------|----------|---------|-------------|
|
|
| `zot_version` | No | `2.1.16` | Zot release version to install |
|
|
| `zot_cve_scanning` | No | `false` | Enable CVE scanning of images |
|
|
| `zot_sync_credentials` | No | undefined | List of sync registry credentials (name, registry, username, password) to avoid rate limits |
|
|
|
|
## Example
|
|
|
|
```yaml
|
|
zot_sync_credentials:
|
|
- name: "dockerhub"
|
|
registry: "registry-1.docker.io"
|
|
username: "your-dockerhub-username"
|
|
password: "your-dockerhub-password"
|
|
```
|
|
|
|
## Configuration
|
|
|
|
The role deploys Zot with the following defaults:
|
|
|
|
- **Bind address:** `127.0.0.1:5000`
|
|
- **Storage:** `/var/lib/zot`
|
|
- **Config:** `/etc/zot/config.json`
|
|
- **Extensions:** UI and search (with CVE updates every 24h) enabled
|
|
- **Service:** systemd unit on Debian-family systems
|