

# If true, unencrypted HTTP as well as TLS connections with untrusted # If the prefix field is missing, it defaults to be the same as the "location" field. # The prefix can also be of the form: *. for wildcard subdomain # (taking into account namespace/repo/tag/digest separators) is used. # (only) the TOML table with the longest match for the input image name # The "prefix" field is used to choose the relevant ] TOML table # An array of host registries to try when pulling an unqualified image, in order. # of these registries, it should be added at the end of the list. # spoofed, squatted or otherwise made insecure. # trusted (i.e., registries which don't allow unknown or anonymous users to We recommend only adding registries which are completely # would accidentally pull and run the attacker's image and code rather than the # different `foobar` image at a registry earlier in the search list. # is not first in the search list, an attacker could place a # `foobar` from a registry and expects it to come from. For example, a user wants to pull an image named # When using short names, there is always an inherent risk that the image being # further eliminates the ambiguity of tags.

# server (full dns name), namespace, image name, and tag # We recommend always using fully qualified image names including the registry # NOTE: RISK OF USING UNQUALIFIED IMAGE NAMES I was configuring my podman to search in a many registries, but when I try to search only use docker.io, in the nf specifies 4 registries to search (is V2): # For more information on this configuration file, see nf(5).
