Downloading images

Learn how to download Cloudera Data Warehouse container images from the registry. You can run a security scan and approve (or block) each image before copying the image into your repository.

Obtain the following entitlements:

Salesforce entitlement
CDP_CUSTOM_REPO entitlement

Login to Cloudera container registry (https://container.repo.cloudera.com) using your Salesforce entitlement token and password.
For example:
```
$ docker login container.repo.cloudera.com -u 634ae2db-f926-4530-842c-95d3401f37e5
```

Download container images using the docker pull command. For example:

docker pull container.repo.cloudera.com/cloudera/hive:2025.0.19.0-123

For example:

Pulling from cloudera/hive
Digest:sha256:29c635b8612c770c8089d4ab134c10e599dcf61553dfa4147975d6af33c835a9
Status: Downloaded newer image for container.repo.cloudera.com/cloudera/hive:2025.0.19.0-123

It is recommended that you set up a script that periodically pulls all the images from the registry. Use the following example script to automate this process:

for CDW_IMAGE in $(curl -L -s -u ${PAYWALL_USER}:${PAYWALL_PASSWORD} https://archive.cloudera.com/p/dwx/1/release_manifest.json | jq -r '.images[].paths[] | "\(.path),\(.version)"')
do
    BASE_DIR=$(dirname $(echo ${CDW_IMAGE} | sed 's|,| |' | awk '{print $1}'))
    IMAGE_NAME=$(basename $(echo ${CDW_IMAGE} | sed 's|,| |' | awk '{print $1}'))
    IMAGE_VERSION=$(echo ${CDW_IMAGE} | sed 's|,| |' | awk '{print $NF}')
    skopeo copy –all container.repo.cloudera.com/${BASE_DIR}/${IMAGE_NAME}:${IMAGE_VERSION} 
    ${DESTINATION_REGISTRY}/${BASE_DIR}/${IMAGE_NAME}:${IMAGE_VERSION}
done