Skip to main content
Your builds get direct access to your private container registry at nscr.io. This seamless integration eliminates the complexity of registry authentication while providing enterprise-grade performance and global availability.

​
From Namespace instances

No configuration changes required When running your CI on Namespace, access to nscr.io is already configured. Each Namespace workload embeds short-lived credentials that grant direct access to the container registry.
Your workspace identifier can be found in the Dashboard.

​
Local Docker integration

Using the CLI, you can also configure your local Docker to access nscr.io.
1

Configure your Docker

The command above will update your local Docker configuration and print your container registry address (e.g. nscr.io/8enum0hp1l5ii). If you want to obtain the address without updating your Docker configuration, run nsc workspace describe.
2

Build and push

​
Observability

Our Dashboard provides a holistic overview over the images that you have pushed to nscr.io. You can understand access patterns per tag, and the evolution of image sizes over time. When looking at a single image tag, you can see the historic versions, and which are still being pulled today. For multi-platform images, you can also understand how much each platform contributes to the combined image size.

​
Build and Push in One Command

When doing quick image iterations, our CLI offers a simple command to build and push an image without reconfiguring your local Docker client.
1

Build and push

That’s it! With a single command, you’ve built an image using a high-performance, remote builder and pushed it to nscr.io.

​
Access Controls

Images pushed to nscr.io are shared with your workspace by default, allowing for frictionless collaboration. More information on Workspace access

​
Public Access

In order to share an image publicly, the following command can be used:
The image is then available publicly at public.nscr.io/<id>:latest. Alternatively, one can provide a custom suffix:
which makes the image available publicly at public.nscr.io/<id>/test:latest.

​
Expiration

By default, images pushed to the Namespace container registry do not expire and are kept indefinitely.

​
Single image expiration

Single images can be set to expire at a certain point in time. Once the image expires, it will no longer be served and does not consume any storage.
For instance, to expire the image nscr.io/8enum0hp1l5ii/nginx@sha256:b493d48364afe44d11c0165cf470a4164d1e2609911ef998be868d46ade3de4e on the 24th of December of 2024 the command would look like this:
To ensure a minimum lifetime of an image use the ensure-minimum flag.
For programmatic access to the image expiration API check out our public container registry API.

​
Default image expiration

The default expiration policy for newly created images can be adjusted as follows:
To query the current default expiration use:

​
Repository-specific expiration

You can also set an expiration policy for a specific repository, overriding the default:
To query the current policy for a specific repository:
To expire container images retroactively reach out to our customer support. For programmatic access to the image expiration API check out our public container registry API.
Last modified on August 19, 2026