ARTIFACTORY: How to Set Up Docker Remote Repository to Proxy Iron Bank Registry


Iron Bank Registry

The Iron Bank Registry is a secure, centralized repository of hardened application containers maintained by the United States Department of Defense (DoD) under its Platform One initiative. These containers are used to accelerate secure software delivery across the DoD by providing pre-hardened, digitally-signed images that meet strict security standards. This repository is part of the broader DevSecOps effort within the DoD, which aims to streamline and enhance the security of software development and deployment processes.
 

Set Up Guide

1. Create a Docker Remote Repository

Option 1: Using Quick Repository Creation

Navigate to the top right dropdown menu.

Select Quick Repository Creation → Docker.

Option 2: Using the Administration Panel

Go to Administration → Repositories → Create a Repository → Docker.

2. Make Changes to the Remote Docker Settings

1. Change the URL:

Set the URL to https://registry1.dso.mil/

2. Enter Username and Password:

Use the username and CLI secret as your password from your User Profile.

3. Connect to Your Docker Remote Repository

1. Follow the Steps in the Set Me Up Page:

Navigate to the Set Me Up page for your Docker remote repository.

Follow the on-screen instructions to configure your Docker client.

2. Perform a Docker Login:

```
Open your terminal or command prompt.
```

Execute the following command to log in to the Artifactory server:

docker login <ART_SERVER>

3. Perform a Docker Pull:
For this guide, we will provide two examples:


Example 1: Pulling the JFrog Xray Server Image

Execute the following command to pull the JFrog Xray Server image:

docker pull <ART_SERVER>/ironbank-docker-remote/ironbank/jfrog/jfrog-xray/xray-server

Example output:

Using default tag: latest
latest: Pulling from ironbank-docker-remote/ironbank/jfrog/jfrog-xray/xray-server
3954349e4007: Pull complete
51cf2c609ca7: Pull complete
c53ab43c2bc7: Pull complete
Digest: sha256:577c3e515a6003e827289376420cb5aca4262f2a50ae955e504be1b5a2c1f4eb
Status: Downloaded newer image for <ART_SERVER>/ironbank-docker-remote/ironbank/jfrog/jfrog-xray/xray-server:latest
<ART_SERVER>/ironbank-docker-remote/ironbank/jfrog/jfrog-xray/xray-server:latest

What's Next?
View a summary of image vulnerabilities and recommendations:

docker scout quickview <ART_SERVER>/ironbank-docker-remote/ironbank/jfrog/jfrog-xray/xray-server


Example 2: Pulling the PDF to Text Image

Execute the following command to pull the PDF to Text image:

docker pull <ART_SERVER>/ironbank-docker-remote/ironbank/opensource/pdftotext/pdftotext:4.05-ubi9

Example output:

4.05-ubi9: Pulling from ironbank-docker-remote/ironbank/opensource/pdftotext/pdftotext
570d5d7d3a6a: Pull complete
d9b252ef4620: Pull complete
0916fd6bdb76: Pull complete
Digest: sha256:89e62daf12f60800aa6dfe8d453c4a908346c990df6b9ef387a580dfe858545d
Status: Downloaded newer image for <ART_SERVER>/ironbank-docker-remote/ironbank/opensource/pdftotext/pdftotext:4.05-ubi9
<ART_SERVER>/ironbank-docker-remote/ironbank/opensource/pdftotext/pdftotext:4.05-ubi9

What's Next?
View a summary of image vulnerabilities and recommendations:

docker scout quickview <ART_SERVER>/ironbank-docker-remote/ironbank/opensource/pdftotext/pdftotext:4.05-ubi9

By following these steps, you can successfully set up a Docker remote repository in JFrog Artifactory to proxy the Iron Bank registry, ensuring that your containers are secure and compliant with DoD standards.

Troubleshooting Tips

1. Cannot Access URL:

Ensure your network allows access to https://registry1.dso.mil/.

```
Verify the URL is correctly typed.
```

2. Authentication Issues:

Double-check your username and CLI secret.

Ensure there are no extra spaces or characters.

3. Connection Problems:

```
Restart Docker and try again.
```

Check for any firewall or proxy settings that might be blocking the connection.

 
JFrog and Ironbank Documentation 

JFrog Wins U.S. Defense Department Security Certification [link]
JFrog Hardened Images [link]
Iron Bank Hardened Image Catalog [link]
Iron Bank Repository [link]