Mirroring container images

Mirroring Seqera container images to your own registry is recommended for production deployments. This ensures your deployments are not impacted by external registry availability and supports air-gapped environments.

Registry-native replication

Use your container registry's built-in replication features to automatically sync images from cr.seqera.io:

• Amazon ECR replication
• Azure ACR artifact caching
• Harbor replication

Skopeo

Use Skopeo (v1.15+) when your registry doesn't support native replication.

Authenticate with the Seqera registry:

skopeo login --username 'robot$private+YOUR_ROBOT_USERNAME' -p 'YOUR_PASSWORD' cr.seqera.io

Create a YAML file (seqera-images.yaml) to specify which images to sync:

cr.seqera.io:
    images-by-semver:
        private/nf-tower-enterprise/backend: ">= v25.3.1"
        private/nf-tower-enterprise/frontend: ">= v25.3.1"
        private/nf-tower-enterprise/migrate-db: ">= v25.3.1"

Run the sync:

skopeo sync --scoped --src yaml --dest docker seqera-images.yaml YOUR_REGISTRY

Schedule periodic sync jobs to keep images current. See the Skopeo sync documentation for advanced usage.