I stumbled up on this issue recently while setting up GHA and switched to AWS ECR Gallery which doesn't have limits.
My blog post on the same at https://avilpage.com/2025/02/free-dockerhub-alternative-ecr-...
My blog post on the same at https://avilpage.com/2025/02/free-dockerhub-alternative-ecr-...
Edit: Not exactly, it looks like ECR mirrors docker-library (a.k.a. images on docker hub no preceded by a namespace), not all of Docker Hub.
Edit 2: I think the example you give there is misleading, as Ubuntu has its own namespace in ECR. If you want to highlight that ECR mirrors docker-library, a more appropriate example might be `docker pull public.ecr.aws/docker/library/ubuntu`.
The rate limit for unauthenticated pulls is 1/second/IP, source: https://docs.aws.amazon.com/general/latest/gr/ecr-public.htm...
Not something we'd encountered before but seems earlier than these changes are meant to come into effect.
We've cloned the base image into ECR now and are deriving from there. This is all for internal authenticated stuff though.