Pulling a binary artifact from a registry

Written by

Updated at January 20, 2026

Create the following environment variables depending on the authentication method:
IAM token

OAuth token

API key
1. Get an IAM token for the Yandex account or service account you are going to use for authentication.
2. Create the REGISTRY_USERNAME and REGISTRY_PASSWORD environment variables:
  export REGISTRY_USERNAME="iam" export REGISTRY_PASSWORD="<IAM_token>"
  Where:
  - REGISTRY_USERNAME: Authentication method.
  - REGISTRY_PASSWORD: Body of the previously obtained IAM token.
Note

The IAM token's lifetime is limited to 12 hours.
1. Get an OAuth token for the Yandex account you are going to use for authentication.
2. Create the REGISTRY_USERNAME and REGISTRY_PASSWORD environment variables:
  export REGISTRY_USERNAME="oauth" export REGISTRY_PASSWORD="<OAuth_token>"
  Where:
  - REGISTRY_USERNAME: Authentication method.
  - REGISTRY_PASSWORD: Body of the previously obtained OAuth token.
Note

The OAuth token is valid for one year.
1. Create an API key for the service account you are going to use for authentication.
2. Create the REGISTRY_USERNAME and REGISTRY_PASSWORD environment variables:
  export REGISTRY_USERNAME="api_key" export REGISTRY_PASSWORD="<API_key>"
  Where:
  - REGISTRY_USERNAME: Authentication method.
  - REGISTRY_PASSWORD: Body of the previously created API key.
Note

The API key maximum lifetime is set manually when you create the key.

To pull a binary artifact, use a GET HTTP request:

curl \
  --request GET \
  --user "$REGISTRY_USERNAME:$REGISTRY_PASSWORD" \
  --location \
  --output <local_path_to_file> \
  https://registry.yandexcloud.net/binaries/<registry_ID>/<artifact_name>/<artifact_version>

Where:

--request: Method.
--user: Authentication data.
--output: Local path and name of the file to pull the artifact to.
The request URL contains the registry URL as well as the artifact name and version. Here is an example:
```
https://registry.yandexcloud.net/binaries/cn15fqbr806r********/sample-package/3.5.4
```

Pulling a binary artifact from a registry

Was the article helpful?