Skip to main content

Docker Hub

⚡ Active by Default

The hub registry module connects to Docker Hub to query container tags and manifest digests.

Zero-Config for Public Images

Public packages work out of the box with zero configuration. Configure this module to monitor private repositories or avoid anonymous rate limits.

⚙️ Configuration Variables​

WUD_REGISTRY_HUB_PUBLIC_AUTH
Optionalstring

Direct Base64-encoded username:password string (as found in ~/.docker/config.json)

Allowed values:Base64-encoded username:password (mutually exclusive with LOGIN/PASSWORD)
WUD_REGISTRY_HUB_PUBLIC_LOGIN
Optionalstring

Docker Hub account username

Allowed values:Required when password/token is provided
WUD_REGISTRY_HUB_PUBLIC_PASSWORD
Optionalstring

Docker Hub Personal Access Token (PAT) (recommended) or account password

Allowed values:Required when username is provided
WUD_REGISTRY_HUB_PUBLIC_SUPPRESSDIGESTWATCHWARNING
Optionalbooleandefault: false

Suppress warning logs when digest watching is enabled on unauthenticated connections

WUD_REGISTRY_HUB_PUBLIC_WATCHDIGEST
Optionalbooleandefault: false

Globally track image digests on Docker Hub to detect updates on mutable tags (e.g. latest)

🚀 Examples​

Authenticate with Username & Personal Access Token​

services:
  whatsupdocker:
    image: getwud/wud
    environment:
      - WUD_REGISTRY_HUB_PUBLIC_LOGIN=mylogin
      - WUD_REGISTRY_HUB_PUBLIC_PASSWORD=dckr_pat_xxxxxxxxxxxxxxxxxxxx

Enable Global Digest Watching​

services:
  whatsupdocker:
    image: getwud/wud
    environment:
      - WUD_REGISTRY_HUB_PUBLIC_WATCHDIGEST=true

📖 Setup Guide: Creating a Docker Hub Personal Access Token​

  1. Log in to Docker Hub.
  2. Open your account avatar > Account Settings > Security (or Personal Access Tokens).
  3. Click New Access Token, name it WUD, and set permissions to Read-only.
  4. Copy the generated token (dckr_pat_...) and set it as WUD_REGISTRY_HUB_PUBLIC_PASSWORD.

⏱️ Docker Hub Rate Limiting & Recommendations​

Docker Hub enforces rate limits on anonymous and authenticated image pulls:

  • Anonymous: 100 pulls / 6 hours per IP address.
  • Authenticated (Free Tier): 200 pulls / 6 hours.
  • Pro / Team: Unlimited.
Best Practices for Rate Limits
  • Authenticate: Adding a free Docker Hub PAT instantly doubles your rate limit quota.
  • Digest Watch Selectively: Rather than enabling global digest watching, apply the wud.watch.digest=true label only to containers that truly need it.