Entering Quay Credentials in Linux CLI
There are occasions when entering your Quay.io user name and password is required in the Linux CLI. For instance, to allow Docker to download updates to a Telos Docker container product. Entering your user name and password in the CLI is NOT recommended as your credentials are stored unencrypted in a file in Linux. We strongly recommend that a Quay encrypted password be used for Docker authentication. This encrypted password cannot be used to log into your quay account. It is to allow Docker to authenticate with quay.io and pull from the repository.
Getting an Encrypted Password from Quay.io
Sign into your Quay.io account.
Once signed into quay you will see your login at the top right of the browser page. Left-Click on your login name and a window will appear with Account Settings.
Click Account Settings and on the page that opens you will see a selection to Create Encrypted Password.
Click Generate Encrypted Password.
Enter your Quay.io password and click Verify
Copy and paste this encrypted password into a document on your PC/laptop to use in a later step. This encrypted password can be used anytime you are asked to enter your Quay password. You can return to this page anytime to generate an encrypted password.
Using the Quay Encrypted Password with Docker
To manually log Docker into Quay.io using your user name and encrypted password:
admin@vip-appliance:~$ sudo docker login quay.io
Username: telos_ken_tankel
Password: (Your password will not be displayed. Click to the right of the prompt Password: and right click to enter the password or right click and select Paste from the dialogue box. It depends on the app you are using to access the CLI)
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store
Login Succeeded
admin@vip-appliance:~$
There are also Telos scripts that help when loading or updating Telos containers. Any of these scripts may stop and request a quay user name and password. The encrypted password should also be used in these cases.
You may go back into your quay account > Account Settings > Generate Encrypted Password as often as needed if you do not save the encrypted password.