Skip to content

Latest commit

 

History

History
40 lines (28 loc) · 1.73 KB

README.md

File metadata and controls

40 lines (28 loc) · 1.73 KB

docker-credential-plaintext

A docker credential helper for plaintext storage of passwords. Use with caution.

Installation

  1. Clone the repository: git clone https://github.com/dougrday/docker-credential-plaintext.git

  2. Add the directory you just cloned to your system's PATH environment variable.

    Don't forget to close and re-open your command line so the new PATH takes effect.

  3. Update your Docker config, found at %USERPROFILE%/.docker/config.json in Windows, ~/.docker/config.json in Linux kernels:

    • Add a credHelpers section at the root of the json for the repository you're authenticating with:
    "credHelpers": {
        "url.of.repository.i.want.to.authenticate.with": "plaintext"
    }
    

    This ensures this authentication helper is only used with that particular repository. This is important, so you don't save credentials in plaintext for everything - you only save plaintext credentials with short-lived tokens from specific repositories.

    • Remove auths data for your registries in the .docker/config.json file:

    These values may interfere with the authentication process. Remove them for the registries you added to credHelpers:

    "auths": {
        // Delete the following value
        "url.of.repository.i.want.to.authenticate.with": {}
    },
    

Why?

For Windows in particular, there are currently bugs around the Windows secure credential store. docker/docker-credential-helpers#190

This is a temporary workaround, and perhaps a learning tool, for handling Docker credentials.

A Final Warning

Plaintext credential storage could expose your credentials to an attacker if access to the machine is compromised. USE AT YOUR OWN RISK!