Skip to content

Private registries ​

AgentBox can build a template from a private OCI image. Pass credentials through environment variables or your application's secret store. Do not commit them to the repository.

Username and password ​

Call Template().fromImage(image, { username, password }).

AWS ECR ​

Use fromAWSRegistry(image, { accessKeyId, secretAccessKey, region }).

Google Artifact Registry ​

fromGCPRegistry accepts serviceAccountJSON as an object or a path to a JSON file.

The credentials are used only to pull the base image. They do not become environment variables in the resulting sandbox.