Chapter 2. Creating container images in a network restricted environment

Procedure

1. Run the following command to mirror the images that buildah build strategy requires:

   $ oc image mirror --insecure -a <registry_authentication> registry.redhat.io/ubi8/buildah@sha256:1c89cc3cab0ac0fc7387c1fe5e63443468219aab6fd531c8dad6d22fd999819e <mirror_registry>/<repo>/ubi8_buildah

   Copy to Clipboard Toggle word wrap

   where:

   <registry_authentication>

   Specifies the authentication credentials used to access a container registry. This is required when pushing to or pulling from a private registry.

   <mirror_registry>

   Specifies the registry where the image you want to mirror is stored.

   <image_name>

   Specifies the name of the image.

   <tag>

   Specifies the tag of the image.

2. Perform the steps mentioned in the "Creating a buildah build" section.

Procedure

1. Run the following command to mirror the images that source-to-image build strategy requires:

   $ oc image mirror --insecure -a <registry_authentication> registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:d041c1bbe503d152d0759598f79802e257816d674b342670ef61c6f9e6d401c5 <mirror_registry>/<repo>/source-to-image-source-to-image-rhel8

   Copy to Clipboard Toggle word wrap

   where:

   <registry_authentication>

   Specifies the authentication credentials used to access a container registry. This is required when pushing to or pulling from a private registry.

   <mirror_registry>

   Specifies the registry where the image you want to mirror is stored.

   <image_name>

   Specifies the name of the mirror image.

   <tag>

   Specifies the tag of the image.

2. Perform the steps mentioned in the "Creating a source-to-image build" section.

Procedure

1. To verify the cluster-wide proxy settings, run the following command:

   $ oc describe proxy/cluster

   Copy to Clipboard Toggle word wrap

   Example output:

   Name:         cluster
   Namespace:
   Labels:       hypershift.openshift.io/managed=true
   Annotations:  hypershift.io/hosted-cluster-proxy-config: true
                 include.release.openshift.io/ibm-cloud-managed: true
                 include.release.openshift.io/self-managed-high-availability: true
                 release.openshift.io/create-only: true
   API Version:  config.openshift.io/v1
   Kind:         Proxy
   Metadata:
     Creation Timestamp:  2026-01-05T09:56:06Z
     Generation:          2
     Owner References:
       API Version:     config.openshift.io/v1
       Kind:            ClusterVersion
       Name:            version
       UID:             bfb9588f-106f-4e9f-965b-03daa0cd8c33
     Resource Version:  1451
     UID:               8bbf0aef-6d78-479d-abdf-ddbb34bf3ff1
   Spec:
     Trusted CA:
       Name:
   Events:    <none>

   Copy to Clipboard Toggle word wrap

2. To verify the environment variables, run the following command:

   $ oc set env deployment/openshift-builds-operator --list -n openshift-builds | grep PROXY

   Copy to Clipboard Toggle word wrap

   Example output:

   HTTP_PROXY=http://192.168.130.1:3128
   HTTPS_PROXY=https://192.168.130.1:3129
   NO_PROXY=.cluster.local,.svc,.testing,10.217.0.0/22,10.217.4.0/23,127.0.0.1,192.168.126.0/24,192.168.1
   30.11,api-int.crc.testing,localhost

   Copy to Clipboard Toggle word wrap