Pushing a multi-architecture image - Amazon ECR

Pushing a multi-architecture image

Amazon ECR supports creating and pushing Docker manifest lists, which are used for multi-architecture images. A manifest list is a list of images that is created by specifying one or more image names. In most cases, the manifest list is created from images that serve the same function but for different operating systems or architectures. The manifest list isn't required. For more information, see docker manifest.

Important

Your Docker CLI must have experimental features turned on to use this feature. For more information, see Experimental features.

A manifest list can be pulled or referenced in an Amazon ECS task definition or Amazon EKS pod spec like other Amazon ECR images.

The following steps can be used to create and push a Docker manifest list to an Amazon ECR repository. You must already have the images pushed to your repository to reference in the Docker manifest. For information about how to push an image, see Pushing a Docker image.

To push a multi-architecture Docker image to an Amazon ECR repository

The Amazon ECR repository must exist before you push the image. For more information, see Creating a private repository.

  1. Authenticate your Docker client to the Amazon ECR registry to which you intend to push your image. Authentication tokens must be obtained for each registry used, and the tokens are valid for 12 hours. For more information, see Private registry authentication.

    To authenticate Docker to an Amazon ECR registry, run the aws ecr get-login-password command. When passing the authentication token to the docker login command, use the value AWS for the username and specify the Amazon ECR registry URI you want to authenticate to. If authenticating to multiple registries, you must repeat the command for each registry.

    Important

    If you receive an error, install or upgrade to the latest version of the AWS CLI. For more information, see Installing the AWS Command Line Interface in the AWS Command Line Interface User Guide.

    aws ecr get-login-password --region region | docker login --username AWS --password-stdin aws_account_id.dkr.ecr.region.amazonaws.com

  2. List the images in your repository, confirming the image tags.

    aws ecr describe-images --repository-name my-repository

  3. Create the Docker manifest list. The manifest create command verifies that the referenced images are already in your repository and creates the manifest locally.

    docker manifest create aws_account_id.dkr.ecr.us-west-2.amazonaws.com/my-repository aws_account_id.dkr.ecr.us-west-2.amazonaws.com/my-repository:image_one_tag aws_account_id.dkr.ecr.us-west-2.amazonaws.com/my-repository:image_two

  4. (Optional) Inspect the Docker manifest list. This enables you to confirm the size and digest for each image manifest referenced in the manifest list.

    docker manifest inspect aws_account_id.dkr.ecr.us-west-2.amazonaws.com/my-repository

  5. Push the Docker manifest list to your Amazon ECR repository.

    docker manifest push aws_account_id.dkr.ecr.us-west-2.amazonaws.com/my-repository