pullistFirewall openings needed to pull container images.

NVIDIA NGC (nvcr.io)

NVIDIA's registry for GPU Operator, CUDA, Triton, NIM and other GPU images.

HostPortsPurpose
nvcr.io443Registry API (manifests and blobs)required
authn.nvidia.com443Token authentication for nvcr.iorequired
api.ngc.nvidia.com443NGC catalog API (used by the ngc CLI, not by plain pulls)optional

Notes

For a working GPU node you typically also need the NVIDIA driver repositories (developer.download.nvidia.com) opened for the host OS or the driver container - that is a package repo, not a registry, but it fails in the same change window. Authenticated pulls (NIM, enterprise images) use an API key as password against authn.nvidia.com.

Copy-paste

Plain domain list: nvidia-ngc.txt · JSON: nvidia-ngc.json · connectivity test: check-nvidia-ngc.sh

nvcr.io
authn.nvidia.com
api.ngc.nvidia.com

Verify from inside the network

curl -fsSL https://pullist.d0t.se/check-nvidia-ngc.sh | sh

Sources

Last verified: 2026-06-12 · data file: data/nvidia-ngc.yaml