Add flag for auth file

[jotak]

Hi,
I've seen that opm supports auth file through REGISTRY_AUTH_FILE env
For better discoverability, would it be possible to add that as a global flag, and document it in opm --help ?

[whatsacomputertho]

Agreed with OP. To add to this, is there any chance we could even default REGISTRY_AUTH_FILE to $HOME/.config/containers/auth.json (mac / win) / ${XDG_RUNTIME_DIR}/containers/auth.json (linux)? This way we could just podman login / skopeo login and inherit that auth file in opm

[joelanford]

To add to this, is there any chance we could even default REGISTRY_AUTH_FILE to $HOME/.config/containers/auth.json (mac / win) / ${XDG_RUNTIME_DIR}/containers/auth.json (linux)? This way we could just podman login / skopeo login and inherit that auth file in opm

This feature was implemented already and landed in 1.33.0. For backward compatibility reasons, it is a bit tricky though.

First we derive an auth file. Precedence for selecting an authfile is:

• REGISTRY_AUTH_FILE, if set.
• $DOCKER_CONFIG/config.json, if set.
• $HOME/.docker/config

Once we have chosen an auth file path we pick a credential, with the following precedence:

• A credential in the auth file, if the file is present and readable and it contains a matching credential.
• A credential based on the containers/image default file locations and lookup logic. (This is what will provide access to the .config/containers/auth.json entries).

Given the existing complexity of this logic, I'm hesitant to add yet another possible option. More likely, we are looking to revamp and cut out large portions of opm's legacy code, and either make a v2 or release an entire new tool (or tools). At that point, I have hope that the CLI will have a near identical UX as the rest of the containers/image ecosystem.

(Only concern there is containers/image lack of support for arbitrary OCI artifact hierarchies, last time I checked at least).

[github-actions]

Issues go stale after 90 days of inactivity. If there is no further activity, the issue will be closed in another 30 days.