Page MenuHomePhabricator

Publish official docker images on ghcr.io
Open, Needs TriagePublic

Description

Starting April 1 2025, Docker Hub will limit pulls from unauthenticated users to 10 per hour.[0] This restrictive rate limit creates challenges for users who rely on the official mediawiki images for CI/CD pipelines, local dev environments, etc.

We should consider publishing the official images to GitHub container registry (ghcr.io) as well, which does not have such limits. We can use the name ghcr.io/wikimedia/mediawiki perhaps.

[0]: https://docs.docker.com/docker-hub/usage/

Event Timeline

It seems Docker Hub has somewhat changed its pull limit policy to for each ... unauthenticated user ... 100 per IPv4 address or IPv6 /64 subnet per 6 hours. In contrast, authenticated users get 200 per hour, not magnitudes more.

Does anyone know how to enable caching for people with higher CI/CD usage? For reasons of green/perma-computing and speed, this would be the better approach to solving issues relating to the rate limit.

@SD0001 Reading through the wiki and finding T318977 shows there are no official docker images for third party production to begin with. There are official images in https://docker-registry.wikimedia.org/ but I believe these are only intended for WMF use. I think this task should be clarified, merged, etc.

Depends on how you define official. The release process stewarded by Release Engineering indeed doesn’t recognise any docker images as official. However, the Docker-Hub-MediaWiki images are official as far as Docker Hub is concerned.