- Obtain a private access token (or a group deploy token) with
read_registry
rights. - Encode the username + token
$ echo -n 'USERNAME:TOKEN' | base64
- Configure containerd
[plugins."io.containerd.grpc.v1.cri".registry.configs."registry.gitlab.com".auth]
auth = "ENCODED_TOKEN"