Even for public Docker Hub images, we recommend setting up image pull secrets
due to Docker Hub’s low rate limits for unauthenticated pulls.
Create a Docker Hub Access Token
- Log in to Docker Hub
- Go to Account Settings > Personal access tokens
- Click Generate new token
- Name it (e.g., “pipecat-cloud”) and set permissions to Read & Write
- Copy and save the generated token securely
Configure Image Pull Secrets
Create image credentials in Pipecat Cloud for your Docker Hub account:- Username: Your Docker Hub username
- Password: Your access token (not your account password)
--base64encode flag.
Image pull secrets are region-specific. If you’re deploying to a non-default region, specify it when creating the secret:
To update your credentials, re-run the
image-pull-secret command with the
same name. Image pull secrets must be in the same region as the agents that
use them.Configure Your Deployment
Create apcc-deploy.toml file with your Docker Hub image configuration:
Build and Push to Docker Hub
Build and push your agent image using the Pipecat Cloud CLI:linux/arm64) and pushes to your configured Docker Hub repository.
Deploy Your Agent
Deploy using your configuredpcc-deploy.toml:
Making Repositories Private
If you want to use a private Docker Hub repository:- Go to your repository on Docker Hub
- Click Settings
- Under Visibility, change from Public to Private
- Save changes
For multi-region deployments, create separate image pull secrets for each
region and deploy uniquely named agents to each target region.