Docker Hub API¶

# Authentication
docker login                    # Interactive login
docker login -u $USER -p $TOKEN  # CI/CD login (use access token, not password)

# Search images
curl -s "https://hub.docker.com/v2/repositories/library/nginx/tags" | jq '.results[].name'
curl -s "https://hub.docker.com/v2/repositories/library/nginx/" | jq '.pull_count'

# Pull and push
docker pull nginx:latest
docker tag myapp:latest myuser/myapp:v1.0
docker push myuser/myapp:v1.0

# Registry API directly
TOKEN=$(curl -s "https://auth.docker.io/token?service=registry.docker.io&scope=repository:library/nginx:pull" | jq -r '.token')
curl -s -H "Authorization: Bearer $TOKEN" "https://registry-1.docker.io/v2/library/nginx/tags/list"

# CI/CD: Build and push with commit SHA tagging
IMAGE="myuser/myapp"
SHA=$(git rev-parse --short HEAD)
docker build -t $IMAGE:$SHA .
docker tag $IMAGE:$SHA $IMAGE:latest
docker push $IMAGE:$SHA
docker push $IMAGE:latest

# Multi-platform builds
docker buildx create --use
docker buildx build \
  --platform linux/amd64,linux/arm64 \
  -t $IMAGE:$SHA \
  --push .

# List all tags for an image (API pagination)
list_tags() {
    local repo=$1
    local url="https://hub.docker.com/v2/repositories/$repo/tags/?page_size=100"
    while [ -n "$url" ]; do
        response=$(curl -s "$url")
        echo "$response" | jq -r '.results[].name'
        url=$(echo "$response" | jq -r '.next // empty')
    done
}
list_tags library/nginx

# Delete old tags (requires token with delete scope)
delete_tag() {
    local repo=$1 tag=$2 token=$3
    curl -X DELETE \
      -H "Authorization: JWT $token" \
      "https://hub.docker.com/v2/repositories/$repo/tags/$tag/"
}