Anonymous pull of the smartforms app container

[jgsuess]

I would like to reuse the smartforms app container for a docker compose that creates a small self-contained Smart-on-FHIR and SDC example. For this, I would like to pull the container from the project registry, but it is private. Since this is part of the aehrc organization, I cannot change this when I push.

Q: What is the best strategy to get a public instance? Options seem to be:

• Change visibility for the GHCR. Upside: Easiest way to publish, downside: Need to find the admin and convince
• Publish elsewhere: Target dockerhub for publication. Upside: Works around org red tape. Downside: Safe credential handling.
• Pump the image: Use my own build and a credential from GH to download and copy the image. Upside: Can implement directly. Downside: Need hooks and intricate sync handling.

Advice is welcome.

[fongsean]

@jgsuess I think let's publish this to https://hub.docker.com/u/aehrc. The rest of the Smart Forms SDC-related images are there so I will be a good central location.

Can you elaborate more on "Downside: Safe credential handling."?

[jgsuess]

Since the workflow is publishing to Dockerhub, I assume it requires credentials, which then need to be stored in the github context. The build to GHCR uses the Github token, so it does not have this issue. It's possible that there is an alternate authentication for Dockerhub that does not have this limitation for GH, but I have not looked.