Vilice is a proof of concept. Run it on a box you can afford to lose.

vilice registry-login

Log the box into a private image registry.

operate recorded before it runs

vilice registry-login --help
vilice registry-login — Log the box into a private image registry

Logs the box into a private registry so later pulls can reach it.

This is a box credential, not part of any app: one persistent rootless
login, shared by every app and surviving reboots. The password is read
on stdin and never appears on argv — only the registry and the
username reach the record.

A pull from a registry the box is not logged into fails loudly and
safely: the running app is untouched, and the error points back here.

Static credentials only — a token, a password, an htpasswd entry.
Registries that hand out short-lived tokens (ECR, GCP) want a
credential helper, which is not supported yet.

Usage:
  vilice registry-login <registry> --username <name>  (password on stdin)

Flags:
  --username <name>  The registry username. Recorded; the password is not.

Examples:
  Log in with a personal access token from a file.
    vilice registry-login ghcr.io --username me < token.txt

Scope:  operate — reachable by an operate or grant key
Record: written before the command runs