containerd / nerdctl

contaiNERD CTL - Docker-compatible CLI for containerd, with support for Compose, Rootless, eStargz, OCIcrypt, IPFS, ...
Apache License 2.0
7.98k stars 594 forks source link

nerdctl login used against a basic auth server will error in confusing ways after hammering the server #3068

Open apostasie opened 3 months ago

apostasie commented 3 months ago

Description

Passing wrong credentials against a basic auth registry will result in nerdctl trying repeatedly (ten times).

Then spit out: too many 401 (probably)

Followed by a failed to call rh.Client.Do: Get \"https://10.4.0.1:5000/v2/\": tls: failed to verify certificate: x509: certificate signed by unknown authority" i=1 which does not make sense here.

Steps to reproduce the issue

  1. Start a registry with basic auth
  2. Login using nerdctl

Describe the results you received and expected

Received:

Should have received:

What version of nerdctl are you using?

1.7.6

Are you using a variant of nerdctl? (e.g., Rancher Desktop)

None

Host information

No response