Skip to main content
If your spec references a private image, either as image: or as a base image in a Dockerfile, slipway needs credentials to pull it. Configure them once at the organization level. No per-service configuration is needed.

​
Adding a registry

Open Settings → Registries, select Add registry, and enter the host, username and password or token. slipway stores the credentials encrypted, alongside the organization’s other secrets.

​
How they are used

At deploy time slipway wires every registry you have configured into both the build and the running container, so private base images and prebuilt private images both pull. The deploy records a registries_resolved event listing the hosts wired up for that run. You do not reference a registry from the spec. Matching is by host.

​
Common registries

Amazon ECR tokens expire every 12 hours, so a stored get-login-password value needs rotating twice a day. GHCR and Docker Hub issue long-lived credentials instead.

​
Permissions

​
Troubleshooting

If a pull fails, check the host in the credential matches the host in the image reference exactly. docker.io/acme/api needs a credential for index.docker.io. See Troubleshooting a deploy.