Setup Container Registry

[mikemhenry]

We should setup out beanstalk instance to also spin up a docker registry so we can maintain a copy of the image for reproducibility purposes.

Something like this should do the trick https://docs.docker.com/registry/recipes/mirror/

[mikemhenry]

To reduce sysadmin tasks we will use amazon's ECR https://aws.amazon.com/ecr/ We will provide credentials to users who want to push to the repository, this will only be needed if users have containers they do not want to be public. We will also mirror containers so that we can keep a copy of every container that we score. The ECR is set up with immutable tags which will prevent people from being able to overwrite their containers post submission. So the plan is to

for users with public images

• pull image
• score container
• if it completes without error, push image to ECR

for users that pushed to ECR for submission

• pull image
• score container

tasks

• [x] setup ECR
• [ ] create shared user account for pushing images (we could dynamically create credentials, feels like overkill?)
• [ ] create credentials for pulling from ECR that our EB web app will use
• [ ] test push and pull credentials
• [ ] add functionality to ever_given to push containers
• [ ] setup web app to push container to ECR post scoring using credentials (if needed)
• [ ] setup web app to pull from ECR using credentials
• [ ] add testing/CI to ECR to ensure we can push and pull to ECR