Custom Runner Images (Beta)

In addition to the system runner images above, account administrators can register their own container images for Scalr-managed runs. This beta feature is off by default; contact Scalr support to enable it for your account.

Registering an image

From Account Settings → Container Images, register a public OCI Distribution-compatible repository. Docker Hub shorthand (namespace/image) and fully qualified references (registry.example.com/namespace/image) are both supported. The reference must not include a tag or digest, only the repository itself. Private registries aren't supported yet.

The same repository can only be registered once per account.

Version sync

After registration, Scalr fetches the repository's tags right away, then re-syncs daily. Scalr keeps only valid Semantic Versioning tags as selectable versions. A leading v is stripped, so v1.2.3 and 1.2.3 are treated as the same version, and non-SemVer tags (like latest) are ignored. The highest stable version is marked latest; if the repository has no stable release, the highest prerelease version is used instead.

Each image version is capped at 1 GiB compressed. A version over that limit is excluded, with an error shown on the image.

Selecting a version

A custom image version can be set as the account default, the same way system runner image versions are, or overridden per workspace in Workspace Settings → Pipeline. A workspace override takes precedence over the account default; clearing both falls back to the system image.

Custom images are only available to workspaces on Scalr-managed agent pools. Self-hosted and on-prem agent pools are unaffected.

Deleting an image

An image can't be deleted while any account or workspace has one of its versions selected. System images can't be deleted at all.

Permissions

• container-images:read — view registered images and their versions.
• container-images:create — register a new image (account scope).
• container-images:delete — delete a registered image (account scope).

Selecting an image as the account default or workspace override uses the existing account and workspace update permissions.