Registry guide

Download Images from GHCR

Export public GHCR images without Docker. For private repos, use a read-only PAT on Light/Pro.

Base URL https://containerdl.com

GHCR ready

Public GHCR images

Use ghcr.io/org/image:tag references directly.

Private access (Light/Pro)

Use a PAT with read:packages for private images.

No local tooling

No docker login or daemon required.

How it works

  1. Sign in and paste your ghcr.io image reference.
  2. Export to TAR or bundle.
  3. Automate with:
    Bearer token Authorization: Bearer <key>

Example

Export a GHCR image

curl
curl -X POST https://containerdl.com/v1/exports \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer cdl_live_xxx" \
  -d '{"image":"ghcr.io/cli/cli:latest"}'
  • Private images require a PAT with read:packages scope.
  • Use read-only tokens with least privilege.

Common use cases

FAQs

Which token scopes are required?

Use a PAT with read:packages and repo if the image is private.

Do you store credentials?

No. Credentials are used only for the pull and never stored or logged.

Can I use GHCR without authentication?

Yes. Public images work without credentials.

Related guides