DevelopmentUnreleased

This topic is not available in this guide. You're viewing its overview.

Development documentation may include features that are not in the latest release. Read the Lawn 0.8.1 guide.

CLI

lawn registry

Manage container registry accounts.

Registry

Manage registry accounts used by the connected Lawn host. Credentials are stored in the hosting Mac's Keychain.

Login

lawn registry login ghcr.io

Enter a username and password or access token when prompted. Lawn contacts the registry before saving the credentials. If the registry allows anonymous discovery, this check can succeed without exchanging credentials. A successful login does not confirm access to every private image.

For GitHub Container Registry (ghcr.io), use your GitHub username and a personal access token (classic) with read:packages. Your account must have read access to the package. If the organization requires SSO, authorize the token for that organization. See GitHub's authentication instructions.

OptionDescription
-u, --usernameSupply the username instead of prompting.
--password-stdinRead the password from standard input. Requires --username.

For scripts, pipe a password or token from your secret manager:

printf '%s' "$REGISTRY_TOKEN" | lawn registry login ghcr.io --username YOUR_USERNAME --password-stdin

Use the registry hostname and optional port, for example registry.example:5000. Login requires HTTPS. For an HTTPS image mirror, log in to the mirror hostname.

List

lawn registry list
lawn --output json registry list

List the hostnames and usernames of saved accounts.

Logout

lawn registry logout ghcr.io

Remove the saved account for that registry. Future image pulls use anonymous access until you log in again.