Registry with the CLI

Early access. Registry is rolling out behind an organization flag.

The lbr CLI drives every Registry operation. Sub-resource commands take -r/--registry to name the registry.

Log in and out

lbr registry login                       # every registry, short-lived credentials
lbr registry login --registry acme-prod  # narrow to one registry
lbr registry login --pull                # read-only
lbr registry logout

Registries

lbr registry create acme-prod --display-name "Acme production"
lbr registry list
lbr registry get acme-prod            # region, usage, repository count
lbr registry delete acme-prod         # must be empty first

Keys

lbr registry key mint ci --mode readwrite -r acme-prod   # secret shown once
lbr registry key list -r acme-prod
lbr registry key revoke <key-id> -r acme-prod

Access rules (keyless CI)

lbr registry oidc-rule create -r acme-prod \
  --issuer https://token.actions.githubusercontent.com \
  --audience longbridge --subject "repo:acme/*" --mode readwrite
lbr registry oidc-rule list -r acme-prod
lbr registry oidc-rule delete <id> -r acme-prod

Pull-through cache

lbr registry upstream list                                   # the catalog
lbr registry upstream credential set docker.io \
  --username acme --password "$TOKEN" -r acme-prod
lbr registry upstream credential list -r acme-prod

Browse and clean up

lbr registry repo list -r acme-prod
lbr registry repo tags my-app -r acme-prod
lbr registry repo manifests my-app -r acme-prod
lbr registry repo delete-tag my-app old --purge -r acme-prod
lbr registry repo delete-image my-app sha256:… -r acme-prod
lbr registry repo delete my-app -r acme-prod

Every command takes -o json or -o yaml for scripting.

Where to next

• Registry with Terraform — the same, as code.
• CLI — installation, profiles, and authentication.