Pull-through guides on

How to set up pull through from Chainguard's registry to Amazon ECR

Tue, 31 Mar 2026 00:00:00 +0000

In March 2026, AWS announced support for using Amazon Elastic Container Registry (ECR) as a pull through cache for Chainguard’s registry. By configuring a pull through cache rule, you can pull Chainguard Containers through your own ECR private registry. ECR caches each image on the first pull and checks the upstream registry for a newer version at most once every 24 hours, which reduces your workloads’ direct dependency on Chainguard’s registry.

How to set up pull-through from Chainguard's container registry to Artifactory

Tue, 13 Feb 2024 15:56:52 -0700

Organizations can route container image pulls through Artifactory to centralize artifact management, enforce policy, and integrate Chainguard Containers into existing CI/CD workflows. You can configure Artifactory as a pull-through cache by setting up a remote repository pointed at Chainguard’s container registry.

This tutorial outlines how to set up remote repositories with JFrog Artifactory. Specifically, it goes over how to set up one repository you can use as a pull-through cache for Chainguard’s public Free containers and another you can use for Production containers originating from a private Chainguard repository. It also outlines how you can use one of Artifactory’s virtual repositories as a pull-through cache to access resources from multiple remote repositories in a single location.

How to pull packages from Chainguard package repositories through Artifactory

Thu, 14 Nov 2024 15:56:52 -0700

This tutorial details how to set up remote Alpine package (apk) repositories with JFrog Artifactory, which can provide pull-through caches for Chainguard package repositories. Specifically, this guide walks you through how to set up remote Artifactory repositories to serve as pull-through caches for a Chainguard private APK repository as well as Chainguard’s public package repositories. The guide also outlines how to configure a container image build to pull APK packages from these remote repositories using tokens generated by Artifactory.

How to set up pull through from Chainguard's registry to Cloudsmith

Tue, 16 Jul 2024 15:56:52 -0700

Organizations often have their own internal software repositories and registries integrated into their systems. This guide explains how to set up the Cloudsmith artifact repository to ingest Chainguard Containers by acting as a pull-through cache.

This tutorial outlines how to set up a remote repository with Cloudsmith. It will walk you through how to set up a Cloudsmith repository you can use as a pull through cache for Chainguard’s Free containers or for Production containers originating from a private Chainguard repository.

How to set up pull through from Chainguard's registry to Google Artifact Registry

Mon, 08 Jul 2024 15:56:52 -0700

Organizations can use Chainguard Containers along with third-party software repositories in order to integrate with current workflows as the single source of truth for software artifacts. In this situation, you can set up a proxy repository to function as a mirror of Chainguard’s registry. This mirror can then serve as a pull through cache for your Chainguard Containers.

This tutorial outlines how to set up a remote repository with Google Artifact Registry. It will walk you through how to set up an Artifact Registry Repository you can use as a pull through cache for Chainguard’s Free containers or Production containers originating from a private Chainguard repository.

How to sync images from Chainguard's registry to Harbor

Tue, 19 Aug 2025 12:00:00 +0000

Harbor is an open-source artifact registry. It’s designed to securely store, manage, and distribute OCI artifacts, including container images and Helm charts by enforcing policies like vulnerability scanning, image signing, and role-based access control. Harbor delivers enterprise-grade compliance, performance, and interoperability across platforms like Kubernetes and Docker, all accessible via a web UI or RESTful API.

This tutorial outlines how to sync images from Chainguard’s registry to a Harbor instance. It describes two approaches:

How to set up pull through from Chainguard's registry to Nexus

Thu, 28 Mar 2024 15:56:52 -0700

This tutorial outlines how to set up a repository with Sonatype Nexus. Specifically, it will walk you through how to set up one repository you can use as a pull through cache for Chainguard’s Free containers or for Production containers originating from a private Chainguard repository.

How to pull packages from Chainguard package repositories through Nexus

Thu, 17 Sep 2026 00:00:00 +0000

Note: As of Nexus 3.96, the native Alpine repository type doesn’t support Chainguard’s package repositories. This guide describes a setup that uses raw proxy repositories instead.

This tutorial demonstrates how to set up Alpine package (apk) pull-through caches with Sonatype Nexus Repository that front a Chainguard private APK repository or the public Chainguard repositories. It also covers how to build a container image that installs packages through the resulting proxy.

Prerequisites

To complete this tutorial, you need the following: