World map

 

BM

World D5: Ship & Shield

The shop freezer: registries

You will learn: how a registry shares your image with anyone, anywhere.

Checked with Docker Engine 29 on 31 Oct 2026

The problem

Your laptop~

  • No open hatches

Lunchboxes (containers)

  • No containers yet

Frozen packs (images)

  • No images yet

Your API image works on your laptop. Mei types its name on hers: pull access denied. Plain words: no shop freezer has that pack yet.

Watch

A registry: The shop freezer where image packs are stored and shared, like Docker Hub. is a shop freezer for image packs. You push a pack in. Anyone allowed can pull it out. Which of these are freezers?

Drag a card into a box. Or tap the card, then tap the box.

      Watch

      A full image name is an address. Which freezer, whose shelf, which pack, which label? Put the parts in order.

      Left to right. Put these in order. Use the arrows, or drag.

      • ghcr.io
      • /kedai-api
      • /you
      • :1.0

      No freezer in front? Docker uses Docker Hub.

      Try it

      You are logged in to Docker Hub as you. docker tag gives the pack your name. docker push puts it in the freezer. Try both.

      Your laptop~/kedai-api

      • No open hatches

      Lunchboxes (containers)

      • No containers yet

      Frozen packs (images)

      • kedai-api:1.06 layers · 244MB
      • node:24-alpine4 layers · 244MB

      Shop freezer (registry)

      Logged in as you

        Predict

        You type docker pull nginx:1.30-alpine. There is no freezer name. Where does it come from?

        Check

        Your laptop~

        • No open hatches

        Lunchboxes (containers)

        • No containers yet

        Frozen packs (images)

        • No images yet

        Shop freezer (registry)

        • you/kedai-api:1.0

        Back on Mei’s laptop, after your push. Her docker pull finds your pack. Same image, new kitchen.

        You did it!

        You can now share an image through a registry.

        Go deeper (optional)

        Private packs need a login to pull, too. Clouds have freezers too: Amazon ECR, Google Artifact Registry, Azure Container Registry. The commands stay the same: docker tag, docker push, docker pull.

        Real rep (optional), with a free Docker Hub account. A new repository can be public, so never push secrets.

        Real mission

        2. docker login -u YOUR-NAME
        3. docker tag alpine:3.22 YOUR-NAME/first-pack:1.0
        4. docker push YOUR-NAME/first-pack:1.0

        0 of 4 steps done · Your ticks are saved.