docker/AwsEcr
- AWS Elastic container registry
- Get credentials
Get aws login password/token
> aws ecr --region "ap-southeast-2" --profile prod get-login-password
Login with docker, save creds to ~/.docker
> docker login --username AWS --password-stdin <awsSubscription>.dkr.ecr.ap-southeast-2.amazonaws.com
2021 login with AWS sso
$ aws ecr get-login-password --region ap-southeast-2 --profile sso | docker login --username AWS --password-stdin 123456789.dkr.ecr.ap-southeast-2.amazonaws.com
Pull container
$ docker pull 123456789.dkr.ecr.ap-southeast-2.amazonaws.com/mycontainer:release-77
Check size of a container
docker history --human --format "{{.CreatedBy}}: {{.Size}}" <container name>
Gotchas / error:
Error on docker login
** Message: 11:37:15.275: Remote error from secret service: org.freedesktop.Secret.Error.IsLocked: Cannot create an item in a locked collection Error saving credentials: error storing credentials - err: exit status 1, out: `Cannot create an item in a locked collection`
Solved by installing packages gnupg and pass.
not sure why.