buildkite/oci-accelerator repository overview

⁠OCI Accelerator

OCI Accelerator is a specialized pull-through caching proxy for Docker and OCI image registries. It intercepts OCI Distribution API read requests to the registries you configure and caches their responses to speed up image pulls and reduce upstream bandwidth.

Use it to:

• Warm up autoscaled or ephemeral hosts that start with an empty Docker cache.
• Speed up CI builds that pull the same base and tool images on every job.
• Pull multi-gigabyte images, such as machine learning images, once per site instead of once per host.
• Reduce upstream requests and bandwidth, easing pressure on rate-limited registries and metered links.

⁠Highlights

• Works with any registry. It caches any registry that implements the OCI Distribution API, not only Docker Hub.
• No image renaming. Docker keeps its usual image names and docker login, so you don't rewrite references or configure registry mirrors.
• Private images stay private. The upstream registry must approve each client before it receives cached content.
• No shared credentials. Each client authenticates with its own credentials, and the proxy never stores or forwards them to other hosts.
• Plugs in as an HTTPS proxy. Docker Engine sends registry traffic through it using its standard proxy setting, once you trust the proxy's root CA.
• Optional peer sharing. Instances can share cached content with each other over mutually authenticated TLS, without sharing credentials.
• Single binary. It is one Go executable with no runtime dependencies.