Error: certificate signed by unknown authority

[sergey-morenets]

Description

Hi

I installed buildah on my Ubuntu virtual machine and while trying to create Fedora image as mentioned here: https://github.com/containers/buildah/blob/main/docs/tutorials/01-intro.md

I got an error:

Resolved "fedora" as an alias (/etc/containers/registries.conf.d/shortnames.conf)
Trying to pull registry.fedoraproject.org/fedora:latest...
initializing source docker://registry.fedoraproject.org/fedora:latest: pinging container registry registry.fedoraproject.org: Get "https://registry.fedoraproject.org/v2/": x509: certificate signed by unknown authority

Steps to reproduce the issue:

1. Install buildah
2. Run this command: container=$(buildah from fedora)

Describe the results you expected:

Successful execution

Output of rpm -q buildah or apt list buildah:

buildah/jammy,now 1.23.1+ds1-2 amd64 [installed]

Output of buildah version:

Version:         1.23.1
Go Version:      go1.17
Image Spec:      1.0.1
Runtime Spec:    1.0.2-dev
CNI Spec:        0.4.0
libcni Version:
image Version:   5.16.0
Git Commit:
Built:           Thu Jan  1 00:00:00 1970
OS/Arch:         linux/amd64
BuildPlatform:   linux/amd64

*Output of `cat /etc/release`:**

DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=22.04
DISTRIB_CODENAME=jammy
DISTRIB_DESCRIPTION="Ubuntu 22.04.3 LTS"
PRETTY_NAME="Ubuntu 22.04.3 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04.3 LTS (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu
ID_LIKE=debian

Output of uname -a:

Linux a6725b0efdcc 5.15.133.1-microsoft-standard-WSL2 #1 SMP Thu Oct 5 21:02:42 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux

Output of cat /etc/containers/storage.conf:

No such file or directory

[flouthoc]

This looks like issue with fedora registry, have you tried it again ? could be a temporary issue.

[github-actions[bot]]

A friendly reminder that this issue had no activity for 30 days.

[Topher-the-Geek]

I was following this tutorial, except that I was on Ubuntu, and hit the same issue. I could resolve it with

apt-get -y install ca-certificates

I suspect this should be in the installation guide. I'll leave that decision to more knowledgeable folks. I'm new here.