diff --git a/ansible/host_vars/ivyking.minhas.io/main.yml b/ansible/host_vars/ivyking.minhas.io/main.yml
new file mode 100644
index 0000000..1d23bc5
--- /dev/null
+++ b/ansible/host_vars/ivyking.minhas.io/main.yml
@@ -0,0 +1,3 @@
+---
+docker_registry_mnt: /mnt/raid/docker_registry
+...
diff --git a/ansible/requirements.txt b/ansible/requirements.txt
index 659e2db..50a0701 100644
--- a/ansible/requirements.txt
+++ b/ansible/requirements.txt
@@ -3,6 +3,7 @@ certifi==2020.6.20
 cffi==1.14.2
 chardet==3.0.4
 cryptography==3.0
+docker==4.3.1
 hvac==0.10.5
 idna==2.10
 Jinja2==2.11.2
@@ -12,3 +13,4 @@ PyYAML==5.3.1
 requests==2.24.0
 six==1.15.0
 urllib3==1.25.10
+websocket-client==0.57.0
diff --git a/ansible/roles/docker_registry/tasks/main.yml b/ansible/roles/docker_registry/tasks/main.yml
new file mode 100644
index 0000000..d9b67c9
--- /dev/null
+++ b/ansible/roles/docker_registry/tasks/main.yml
@@ -0,0 +1,28 @@
+---
+- name: debug
+  debug:
+    msg: "{{ lookup('hashi_vault', 'secret=pki_int/masked.name') }}"
+
+- name: ensure docker registry dir
+  file:
+    path: "{{ docker_registry_mnt }}"
+    state: directory
+    owner: root
+    group: root
+    mode: 0755
+
+- name: ensure python-docker is installed
+  apt:
+    name: python3-docker
+    state: present
+
+- name: run docker registry
+  docker_container:
+    name: registry
+    image: registry:2
+    ports:
+      - "5000:5000"
+    volumes:
+      - "{{ docker_registry_mnt }}:/var/lib/registry"
+    restart_policy: always
+...