From e954c553ece901d098906be7489eff3b497cf324 Mon Sep 17 00:00:00 2001 From: Craig Osterhout Date: Thu, 17 Sep 2026 11:26:20 -0700 Subject: [PATCH] dhi: clarify token for cli Signed-off-by: Craig Osterhout --- content/manuals/dhi/tools/cli.md | 16 +++++++++++++++- 1 file changed, 15 insertions(+), 1 deletion(-) diff --git a/content/manuals/dhi/tools/cli.md b/content/manuals/dhi/tools/cli.md index 3350ee587355..083e4045dcb3 100644 --- a/content/manuals/dhi/tools/cli.md +++ b/content/manuals/dhi/tools/cli.md @@ -272,6 +272,20 @@ Available configuration options: | Option | Environment Variable | Description | |-------------|----------------------|---------------------------------------------------------------------------------------------------------------------------| | `org` | `DHI_ORG` | Default Docker Hub organization for mirror and customization commands. | -| `api_token` | `DHI_API_TOKEN` | Docker token for authentication. You can generate a token in your [Docker Hub account settings](https://hub.docker.com/). | +| `api_token` | `DHI_API_TOKEN` | Access token for authentication, obtained by exchanging a personal access token (PAT) or organization access token (OAT) for an access token. | Environment variables take precedence over configuration file values. + +To get an access token, exchange a [personal access token +(PAT)](/manuals/security/access-tokens/personal-access-tokens.md) or +[organization access token +(OAT)](/manuals/security/access-tokens/organization-access-tokens.md): + +```console +$ export DHI_API_TOKEN=$(curl -s -X POST https://hub.docker.com/v2/auth/token \ + -H "Content-Type: application/json" \ + -d '{"identifier": "", "secret": ""}' \ + | jq -r .access_token) +``` + +Use your Docker Hub username as `identifier` for a PAT, or your organization name for an OAT.