Sold by: Perimattic ManageStacks
Deployed on AWS
Production-ready private Docker Registry with full root access, TLS security, and automated backups - a self-hosted alternative to ECR for teams needing complete control over container images on AWS.
Overview
This managed Docker Registry solution delivers a production-ready, private container registry on AWS, built on Ubuntu 24.04 LTS. Every instance is pre-configured with TLS encryption, access controls, and automated operations.
Why Choose This Over Amazon ECR?
Unlike Amazon ECR, this AMI gives you full root and OS-level access to your registry. Configure custom storage backends, authentication methods, garbage collection policies, and webhook integrations without per-image pricing or vendor restrictions. Ideal for air-gapped environments and custom CI/CD pipelines.
Key Features
Private Container Registry Docker Registry v2 pre-configured with TLS encryption, token-based authentication, and storage optimization. Push and pull container images securely within your VPC.
Automated Setup On first login, an interactive setup script configures TLS certificates, authentication, storage paths, and firewall rules - all within minutes.
Security Hardened TLS encryption for all registry traffic, UFW firewall pre-configured, token-based access control, and latest security patches applied.
Storage Management Configurable storage backends with garbage collection for unused image layers. Integrate with S3 for scalable image storage or use local EBS volumes.
Use Cases Private container image storage for CI/CD pipelines Air-gapped and regulated environments requiring on-premises registries Multi-team container image sharing and version management Development and staging image management Kubernetes cluster image sourcing Mirror for public Docker Hub images to avoid rate limits
Getting Started Launch the AMI from AWS Marketplace on your preferred instance type SSH into your instance and follow the interactive setup wizard Configure your Docker clients to push and pull from your private registry
Book a free setup consultation at https://cal.com/gaurav-pareek-perimattic/marketplace-setup-consultations or email us at aws-support@perimattic.com .
Support Managed and supported by Perimattic, a cloud infrastructure company with 13+ years of experience serving global clients. We offer free setup assistance, custom integrations, infrastructure consulting, and 24/7 support.
Highlights
- Self-Hosted Docker Registry: Full root access to configure storage backends, authentication, garbage collection, and webhooks without per-image pricing or vendor lock-in.
- TLS-Secured Private Registry: Pre-configured with TLS encryption, token-based authentication, and UFW firewall. Push and pull container images securely within your VPC.
- 24/7 Expert Support by Perimattic: 13+ years of cloud infrastructure expertise with free setup assistance, registry configuration, and dedicated support at aws-support@perimattic.com.
Details
Sold by
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t2.medium Recommended | $0.05 |
t2.large | $0.05 |
t2.xlarge | $0.05 |
t3.medium | $0.05 |
t3.large | $0.05 |
t3.xlarge | $0.05 |
m5.large | $0.05 |
m5.xlarge | $0.05 |
Dimensions summary
You pay by the hour based on the EC2 instance size you run. Eight instance options span three families: t2 (medium, large, xlarge), t3 (medium, large, xlarge), and m5 (large, xlarge). The t2 and t3 families offer burstable general-purpose capacity, while m5 provides steady general-purpose capacity. Within each family, larger sizes carry more compute and memory. Billing is usage-based, so your cost scales with the instance you choose and how many hours it runs. You select the size matching your registry workload.
Top-of-mind questions for buyers
Each option maps to an EC2 instance. The t2 and t3 families give burstable general-purpose capacity that handles occasional load spikes. The m5 family gives steady general-purpose capacity for constant demand. Larger sizes (large, xlarge) carry more CPU and memory than medium sizes. You pick the size matching your registry's traffic.
Software charges apply per instance-hour while the instance runs. A fully stopped instance does not accrue hourly software charges. Underlying AWS storage for stored container images may still incur separate AWS fees. The software meter counts running time only, so cost scales with the hours your registry stays active.
The vendor runs the registry as a managed service, so the hourly charge covers provisioning, monitoring, automated backups, security patches, and one-click updates. You do not need to configure servers or handle patching yourself. Your cost is driven by the instance size chosen and the hours it runs.
perimattic.com
Helpful?
Vendor refund policy
For any questions or concerns, please contact: Perimattic.com Email: aws-support@perimattic.com
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
- Added automated first-boot provisioning using failsafe.sh to ensure successful installation.
- Implemented secure Docker Registry setup with dual-layer authentication (Apache + htpasswd).
- Auto-generated strong admin credentials stored securely with bcrypt hashing.
- Added mandatory domain validation and HTTPS configuration for secure remote access.
- Fully automated SSL certificate issuing using Certbot + Apache integration.
- Provided Docker Compose-based deployment for consistent, reproducible runtime environments.
- Configured persistent data storage using mounted Docker volumes (/opt/app/data).
- Added auto-restart policy for Docker Registry container to improve reliability.
- Improved DNS validation logic to avoid SSL failures during domain mapping.
- Integrated self-healing setup that retries scripts on failure to guarantee successful provisioning.
Additional details
Usage instructions
- Launch an Instance
From AWS Marketplace, click Continue to Subscribe, then Continue to Configuration, and launch the AMI.
- Choose the Recommended Instance Type
Select t2.medium or higher for a smooth Docker Registry deployment. Container registry workloads benefit from adequate CPU/RAM - larger instance types improve image push/pull performance and concurrent operations.
- Configure Security Group
Allow inbound traffic on the following ports:
- 22 (SSH) - For secure terminal access
- 80 (HTTP) - Required temporarily for SSL validation
- 443 (HTTPS) - Secure access to Docker Registry via domain
- Connect to the Instance
Use SSH to connect: ssh -i <your-key.pem> ubuntu@<public-ip>
- First-Boot Setup (Guided)
On first login, an interactive guided setup will automatically start:
- Detects public IP
- Prompts for domain name mapping to Docker Registry
- Validates DNS A-record propagation
- Asks for admin email for SSL certificate registration
- Generates a strong secure admin password (bcrypt-hashed)
- Stores credentials in /opt/app/.env and /opt/app/admin_password.txt
- Creates Apache reverse proxy configuration with dual authentication
- Requests & installs a free Let's Encrypt SSL certificate
- Deploys Docker Registry using Docker Compose
- Displays access URL & login credentials after completion
- DNS Configuration Required
Before (or during) setup, add this DNS A-record:
registry.yourdomain.com <your-instance-public-IP>
Setup continues only when major resolvers confirm valid mapping.
- Automatic SSL Setup
After DNS validation:
- Enables HTTPS access to Docker Registry
- Auto-installs a valid TLS certificate
- Redirects HTTP to HTTPS for security
- Configures security headers (HSTS, X-Frame-Options, etc.)
- Verify Registry & Remove Port 5000
Test from your local machine: docker login https://registry.yourdomain.com Username: admin Password: <generated-password>
If login succeeds, your registry is working via your domain.
IMPORTANT SECURITY STEP: Once confirmed working properly on domain, remove port 5000 from your security group: AWS Console > EC2 > Security Groups > Edit Inbound Rules > Delete port 5000 (if present) > Save
The registry runs on localhost:5000 and is accessed through Apache on port 443. Removing port 5000 ensures secure HTTPS-only access.
- Access & Retrieve Credentials
Credentials saved in: sudo cat /opt/app/admin_password.txt sudo cat /opt/app/.env
Default user: Username: admin Password: <generated-password>
- Push an Image
docker tag myapp:latest registry.yourdomain.com/myapp:latest docker push registry.yourdomain.com/myapp:latest
- Pull an Image
docker pull registry.yourdomain.com/myapp:latest
- Managing the Registry
View containers: sudo docker ps View logs: sudo docker logs registry Restart: cd /opt/app && sudo docker-compose restart Stop: cd /opt/app && sudo docker-compose down Start: cd /opt/app && sudo docker-compose up -d
Persistent volumes preserve images across restarts.
- Authentication Details
This registry uses DUAL-LAYER authentication:
- Apache Basic Auth (first layer)
- Docker Registry htpasswd (second layer)
Both layers use the same admin credentials.
- Data Persistence
Images stored in: /opt/app/data Authentication files: /opt/app/auth/.htpasswd Mounted as Docker volumes ensuring persistence.
Thank you for subscribing. Your instance is ready to go!
Need Support or Customization? Whether you're facing setup issues or need custom features, Perimattic's expert team is here to help:
Email us: aws-support@perimattic.com WhatsApp: +91-92142 66896 Learn more: <www.perimattic.com >
We offer: Free setup assistance Custom development & integrations Infrastructure consulting Automation & AI solutions With 13+ years of experience serving global clients, we ensure your deployment runs smoothly and scales with your needs.
Let's build something great together!
Resources
Support
Vendor support
Support by Perimattic
Perimattic provides 24/7 support for all AWS Marketplace products. Our team has 13+ years of cloud infrastructure expertise serving global clients.
Contact Channels: Email: aws-support@perimattic.com WhatsApp: +91-92142 66896 Website: <www.perimattic.com >
What We Help With: Initial setup and configuration assistance (free) Troubleshooting connectivity, performance, and backup issues Custom development and integrations Infrastructure consulting and architecture review Migration planning from other solutions Automation solutions and scaling guidance
Instance Sizing Guidance: t2.medium or t3.medium: Development environments, small applications m5.large: Production workloads with moderate traffic m5.xlarge: High-traffic production deployments and larger datasets
For workload-specific sizing recommendations, contact our team for a free consultation.
Refunds and Issues: If you experience any issues or need to request a refund, contact us at aws-support@perimattic.com and we will respond promptly.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Production-ready private Docker Registry with full root access, TLS security, and automated backups - a self-hosted alternative to ECR for teams needing complete control over container images on AWS.
Production-ready ClickHouse with full root access, automated backups, and security hardening - a high-performance columnar database for real-time analytics on AWS.
Production-ready Neo4j with full root access, automated backups, and security hardening - a self-hosted graph database for knowledge graphs, recommendation engines, and network analysis on AWS.
Production-ready Neo4j with full root access, automated backups, and security hardening - a self-hosted graph database for knowledge graphs, recommendation engines, and network analysis on AWS.
Production-ready Neo4j with full root access, automated backups, and security hardening - a self-hosted graph database for knowledge graphs, recommendation engines, and network analysis on AWS.
Production-ready ClickHouse with full root access, automated backups, and security hardening - a high-performance columnar database for real-time analytics on AWS.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.