# Private registry
**URL:** https://discourse.julialang.org/t/private-registry/68291
**Category:** General Usage
**Tags:** registry
**Created:** [September 17, 2021, 12:24am UTC](https://discourse.julialang.org/t/private-registry/68291 "2021-09-17T00:24:26Z")
**Posts on this page:** 12
**Page:** 1
### Author:  [@rvignolo](https://discourse.julialang.org/u/rvignolo)
#### Post date: [September 17, 2021, 12:24am UTC](https://discourse.julialang.org/t/private-registry/68291/1 "2021-09-17T00:24:26Z")
Hi,
I would like to be able to run CI/CD using GitHub Actions in private packages.
Let’s say I have two private packages, PkgA and PkgB, with PkgB depending on PkgA.
I would like to be able to set up a private registry so when I run the `ci.yml` file in PkgB as a GitHub action, it does not fail saying something like: `ERROR: Build path for PkgA does not exist:`
Has anyone built a private registry and would like to provide the steps to cope with a situation like this one?
Thanks you!
---
### Author:  [@c42f](https://discourse.julialang.org/u/c42f)
#### Post date: [September 17, 2021, 2:38am UTC](https://discourse.julialang.org/t/private-registry/68291/2 "2021-09-17T02:38:38Z")
For a small number of private repos, it’s probably easier just to skip the registry and refer to the package dependencies by git ssh URLs (`git@github.com:user/Package.jl`). You’ll need a manifest for your CI run to make sure those URLs are downloaded, or use `Pkg.add(url=..., rev=...)` as part of a CI setup step. As part of the setup you’ll also need to make sure your CI has ssh credentials to download the private packages.
---
### Author:  [@Sukera](https://discourse.julialang.org/u/Sukera)
#### Post date: [September 17, 2021, 4:07am UTC](https://discourse.julialang.org/t/private-registry/68291/3 "2021-09-17T04:07:27Z")
I think people usually use [LocalRegistry.jl](https://juliahub.com/ui/Packages/LocalRegistry/X3nV9/0.4.0) for these kinds of purposes once there are too many packages to do it manually. You’ll have to make that registry available to the CI jobs and make sure only CI and you can authenticate themselves to it, which may be a little challenging (unless your private packages are private repos on github).
---
### Author:  [@aplavin](https://discourse.julialang.org/u/aplavin)
#### Post date: [September 17, 2021, 6:21am UTC](https://discourse.julialang.org/t/private-registry/68291/4 "2021-09-17T06:21:37Z")
Seconding the LocalRegistry.jl recommendation. I use a private registry for all my packages, and LocalRegistry.jl makes it effortless to maintain. Just call its `register` function from the REPL, and the new package/version is registered and immediately available for `add`ìng. That’s even less friction compared to using `General`, and there are no waiting periods - especially important for new versions.
Of course, the registry repo need to be accessible to CI, which means creating a token in the case of GitHub private repos.
---
### Author:  [@rvignolo](https://discourse.julialang.org/u/rvignolo)
#### Post date: [September 17, 2021, 1:02pm UTC](https://discourse.julialang.org/t/private-registry/68291/5 "2021-09-17T13:02:57Z")
great answers everybody!
I will check out LocalRegistry.jl.
If anyone considers that it is worth sharing a code snippet for any step of this kind of setup, please do share it.
Thanks!!
---
### Author:  [@e3c6](https://discourse.julialang.org/u/e3c6)
#### Post date: [September 6, 2022, 6:59pm UTC](https://discourse.julialang.org/t/private-registry/68291/6 "2022-09-06T18:59:13Z")
But how many tokens do you need? Note that GitHub deploy keys can grant access to a single repository only. If PkgA depends on PkgB, which in turn depends on PkgC, it seems that with this approach, PkgA would need a token to access PkgC repo (assuming they are all private). This does not scale well and I think will get quickly out of hand even for a small number of packages, since intermediate dependencies can vary with time.
Is there a better way?
---
### Author:  [@aplavin](https://discourse.julialang.org/u/aplavin)
#### Post date: [September 7, 2022, 8:46am UTC](https://discourse.julialang.org/t/private-registry/68291/7 "2022-09-07T08:46:09Z")
I personally went with the simple solution of creating a separate github SSH key for my account and using it in CI of my packages-that-depend-on-other-my-package. This key lets CI clone any of my repos and doesn’t require any complex setup - CI just does the same as I do on my computer to clone them. Don’t see any security issues with this as long as I control CI scripts that run with these keys.
Not saying that this solution is always optimal, of course. I’m not familiar with per-repo keys that you discuss at all.
---
### Author:  [@e3c6](https://discourse.julialang.org/u/e3c6)
#### Post date: [September 7, 2022, 4:26pm UTC](https://discourse.julialang.org/t/private-registry/68291/8 "2022-09-07T16:26:41Z")
I see. So you give your account key to each of your private repos that needs to use other private repos as a secret?
---
### Author:  [@aplavin](https://discourse.julialang.org/u/aplavin)
#### Post date: [September 7, 2022, 5:34pm UTC](https://discourse.julialang.org/t/private-registry/68291/9 "2022-09-07T17:34:12Z")
Exactly!
---
### Author:  [@e3c6](https://discourse.julialang.org/u/e3c6)
#### Post date: [August 4, 2023, 2:51am UTC](https://discourse.julialang.org/t/private-registry/68291/10 "2023-08-04T02:51:03Z")
> [@e3c6](#):
>
> I see. So you give your account key to each of your private repos that needs to use other private repos as a secret?
Coming back to this. If I understand correctly your account key is gives read and write access to all your repos, so this seems a bit insecure.
Also, you have to manually add your key to all repos, correct? There is no way to have one secret be accessible to all your repos?
---
### Author:  [@aplavin](https://discourse.julialang.org/u/aplavin)
#### Post date: [August 4, 2023, 5:43am UTC](https://discourse.julialang.org/t/private-registry/68291/11 "2023-08-04T05:43:55Z")
I add the same key to all repos that need it, yes.
With this command:
```julia
cat your_julia_id_rsa_file | gh secret set SSH_PRIVATE_KEY
```
And use this step on CI:
```julia
- run: |
mkdir -p ~/.ssh
ssh-keyscan github.com >> ~/.ssh/known_hosts
ssh-agent -a /tmp/ssh_agent.sock > /dev/null
ssh-add - <<< "${{ secrets.SSH_PRIVATE_KEY }}"
```
Not sure if all commands are really required here, I found this snippet somewhere and it works.
---
### Author:  [@e3c6](https://discourse.julialang.org/u/e3c6)
#### Post date: [August 4, 2023, 11:51am UTC](https://discourse.julialang.org/t/private-registry/68291/12 "2023-08-04T11:51:59Z")
Ok thanks for the snippet!