Registry Compatibility Quick Reference
Audience: operators integrating an OCI registry with Stella Ops.
Quick reference for OCI registry compatibility with Stella Ops. For the full diagnostic-check reference, see Registry Diagnostic Checks.
Quick Compatibility Check
# Run all registry diagnostics
stella doctor --tag registry
# Check specific capability
stella doctor --check check.integration.oci.referrers
# Export detailed report
stella doctor --tag registry --format json --output registry-report.json
Supported Registries
| Registry | Referrers API | Recommendation |
|---|---|---|
| ACR, ECR, GCR, Harbor 2.6+, Quay 3.12+, JFrog 7.x+, Zot | Native | Full support |
| GHCR, GitLab, Docker Hub, registry:2 | Fallback | Supported with automatic fallback |
Common Issues
| Symptom | Check | Likely Cause | Fix |
|---|---|---|---|
| “Invalid credentials” | oci.credentials | Wrong username/password | Verify credentials, check expiry |
| “No pull permission” | oci.pull | Missing reader role | Grant pull/read access |
| “No push permission” | oci.push | Missing writer role | Grant push/write access |
| “Referrers API not supported” | oci.referrers | Old registry version | Upgrade or use fallback |
| “Artifacts missing in bundle” | oci.referrers | Referrers not discovered | Check registry compatibility |
Registry-Specific Notes
GHCR (GitHub Container Registry)
- Referrers API not implemented
- Stella Ops uses tag-based fallback automatically
- No action required
Harbor
- Requires version 2.6+ for native referrers API
- Older versions work with fallback
Docker Hub
- Rate limits may affect probes
- Use authenticated requests for higher limits
Verification Commands
# Test registry connectivity
curl -I https://registry.example.com/v2/
# Test referrers API
curl -H "Accept: application/vnd.oci.image.index.v1+json" \
"https://registry.example.com/v2/repo/referrers/sha256:..."
# Test with docker CLI
docker login registry.example.com
docker pull registry.example.com/repo:tag