GitHub Container Registry Integration

GitHub Container Registry (GHCR) Credentials

Step 1: Create Personal Access Token

1. Go to GitHub Settings → Developer settings → Personal access tokens.

2. Click Generate new token.

3. Give your token a description.

4. Select the required permissions:

   • read:packages to download container images
   • write:packages to upload container images
   • delete:packages to delete container images

5. Click Generate token.

6. Copy your token immediately.

💡 Tip: Save your access token in a secure location. You won't be able to see it again!

Step 2: Add GHCR Credentials to Cokpit

1. Open Cokpit and go to Integrations → Container Registry → GitHub Container Registry.
2. Click Add secret.

3. Fill in the required fields:
   • Enter a unique Secret Name
   • Enter the Registry URL (usually ghcr.io)
   • Enter your GitHub Username
   • Paste your Personal Access Token
4. Click Submit.

Security Best Practices

• Create tokens with minimal required permissions
• Use different tokens for different applications
• Regularly rotate access tokens
• Enable two-factor authentication on GitHub
• Monitor token usage in security logs