Question

Your company runs a private Azure Container Registry named contosoacr. A partner has published a required base image in a public Docker Hub repository. Corporate policy blocks running Docker Engine on any workstation or build agent, and outbound Docker pull/push operations are not permitted from those machines. You need to bring a copy of the public image into contosoacr using the least administrative effort. What should you do?

Accepted Answer

Run az acr import specifying the Docker Hub source image and the target contosoacr repository

Answer

Enable geo-replication on contosoacr and set Docker Hub as a replication region

Answer

Use docker pull to download the image locally, then docker push it to contosoacr

Answer

Create an ACR webhook that triggers when the public image is updated