🔐 Docker Hub CLI Authentication

In this section, we will:

  • ✅ Authenticate with Docker Hub via CLI.
  • ✅ Securely store credentials in AWS Secrets Manager for use in AWS CodePipeline.

1️⃣ Docker Hub Login via CLI

🔹 Prompting for Docker Credentials

Run the following command to prompt the user for Docker Hub credentials and store them in variables:

echo '
# Docker Hub Credentials
export DOCKER_USERNAME="'$(read -p "Enter Docker Hub username: " username; echo $username)'"
export DOCKER_TOKEN="'$(read -s -p "Enter Docker Hub token: " token; echo $token)'"' >> ~/.bashrc

source ~/.bashrc

:::alert{header=“Important” type=“warning”} When entering your Docker Hub token, the input will be hidden for security reasons. This is normal behavior - your token is being captured correctly even though you don’t see any characters on screen. Please type your token carefully and only press Enter once when complete to avoid multiple entries. :::

🔹 Verify Your Credentials Before Login

Let’s verify your credentials were captured correctly before attempting to log in:

# This will show only the first 4 characters of your token followed by asterisks
echo "Username: $DOCKER_USERNAME"
echo "Token: ${DOCKER_TOKEN:0:4}$(printf '%*s' $((${#DOCKER_TOKEN}-4)) | tr ' ' '*')"

:::alert{header=“Troubleshooting” type=“info”} If the username is incorrect or the token appears empty, you can reset them with these commands:

# Only run this if you need to reset your credentials
export DOCKER_USERNAME=$(read -p "Enter Docker Hub username: " username; echo $username)
export DOCKER_TOKEN=$(read -s -p "Enter Docker Hub token: " token; echo $token)

:::

Now, let’s log in to Docker Hub:

docker login -u $DOCKER_USERNAME -p $DOCKER_TOKEN

Docker Login

2️⃣ Secure Credential Storage in AWS Secrets Manager

Instead of hardcoding credentials, we will store them securely in AWS Secrets Manager.

Create a secure AWS secret using the entered credentials:

aws secretsmanager create-secret --name dockerhub-credentials \
  --description "Docker Hub credentials for AWS CodePipeline" \
  --secret-string "{\"DOCKER_USERNAME\":\"$DOCKER_USERNAME\", \"DOCKER_TOKEN\":\"$DOCKER_TOKEN\"}"

✅ This command securely stores DOCKER_USERNAME and DOCKER_TOKEN in AWS Secrets Manager.

3️⃣ Verify Secret Creation

Run the following to confirm the secret exists:

aws secretsmanager list-secrets | grep dockerhub-credentials

To view the stored values (for debugging purposes only):

aws secretsmanager get-secret-value --secret-id dockerhub-credentials --query SecretString --output json

4️⃣ Next Steps

Now that credentials are securely stored:

  1. AWS CodePipeline will retrieve them during builds.
  2. No need to manually enter Docker credentials again!
  3. Choose your Docker build method in the next section. 🚀