SupportConsoleDevelopersStart a trialContact

Chapter 5. Deploying Red Hat Quay

Deploy the Red Hat Quay service on each node in your cluster by mounting the shared config.yaml bundle and starting the registry container.

For a basic setup, you can deploy on a single node. For high availability, deploy three or more nodes, for example quay01, quay02, and quay03.

Note

The resulting Red Hat Quay service listens on port 8080 for HTTP and port 8443 for HTTPS. This differs from earlier releases, which listened on ports 80 and 443 respectively. This guide maps 8080 and 8443 to standard ports 80 and 443 on the host.

Procedure

  1. On each Red Hat Quay node, confirm that /mnt/quay/config contains config.yaml and any required TLS certificate files from Configuring Red Hat Quay.

  2. Deploy Red Hat Quay on the node. After you authenticate to registry.redhat.io (see Accessing Red Hat Quay), run the following command:

    Note

    Add -e DEBUGLOG=true to the podman run command line for the Quay container to enable debug-level logging. Add -e IGNORE_VALIDATION=true to bypass validation during the startup process. 

    # sudo podman run --restart=always -p 443:8443 -p 80:8080 \
   --sysctl net.core.somaxconn=4096 \
   --privileged=true \
   -v /mnt/quay/config:/conf/stack:Z \
   -v /mnt/quay/storage:/datastorage:Z \
   -d registry.redhat.io/quay/quay-rhel8:v3.15.7
    Note

    Create /mnt/quay/storage on each node before running the registry container. Image blobs are stored in Ceph Object Gateway for this high availability example, but Red Hat Quay still uses /datastorage for the storage_path defined in config.yaml.

  3. Open a browser to the URL of the node running the Quay container.
  4. Log in to Red Hat Quay with the superuser account defined in config.yaml and confirm that the registry is working.
  5. Repeat the deployment on the remaining Red Hat Quay nodes in the cluster.
  6. Optional. To add Clair image scanning or repository mirroring, continue with the following sections.

5.1. Add Clair image scanning to Red Hat Quay
Copy link

Setting up and deploying Clair image scanning for your Red Hat Quay deployment is described in Clair Security Scanning.

5.2. Add repository mirroring to Red Hat Quay
Copy link

Enabling repository mirroring allows you to create container image repositories on your Red Hat Quay cluster that match the content of a selected external registry, then sync those repositories on a regular schedule and on demand.

Procedure

  1. Set FEATURE_REPO_MIRROR: true in your config.yaml file. For optional mirroring fields, see Enabling repository mirroring for Red Hat Quay.

  2. Start the repository mirroring worker on a Red Hat Quay node: 

    $ sudo podman run -d --name mirroring-worker \
  -v /mnt/quay/config:/conf/stack:Z \
  -v /root/ca.crt:/etc/pki/ca-trust/source/anchors/ca.crt \
  registry.redhat.io/quay/quay-rhel8:v3.15.7 repomirror

    If you do not use a custom CA certificate, omit the -v /root/ca.crt:…​ line.

  3. Restart the Red Hat Quay registry containers so they load the updated configuration.
  4. Create mirrored repositories in the Red Hat Quay web UI as described in Repository Mirroring in Red Hat Quay.
Red Hat logoGithubredditYoutubeTwitter

Learn

Try, buy, & sell

Communities

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust. Explore our recent updates.

Legal Notice

Theme

© 2026 Red HatBack to top