search

genuinetools / img

Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder.
https://blog.jessfraz.com/post/building-container-images-securely-on-kubernetes/
MIT License
3.88k stars 230 forks source link

Can't push to google artifact registry #303

Open laferrieren opened 3 years ago

laferrieren commented 3 years ago

Google has starting posting messages saying gcr will eventually be deprecated in favor of their now artifact registry service. We started to test some of our workloads on it, and first issue that has come up has been our builds using img. It can pull images from it successfully but it can't push. What is strange is that its using the same credential helper as we use gcr, which still works fine for both pull/push, but it doesn't work for the new service. I verified it wasn't an auth issue as was able to push an image using same identity on a machine that has a full docker env.

In the below gist have the dockerfile used to test and the commands used to reproduce the issue locally. https://gist.github.com/laferrieren/5ab076d70c0a8febb4dfd779071e6d36

version info:

img version
img:
 version     : v0.5.10
 git hash    : 06f4c73d52
 go version  : go1.13.10
 go compiler : gc
 platform    : linux/amd64
runc:
 version     : 1.0.0-rc10
 commit      : dc9208a3303feef5b3839f4323d9beb36df0a9dd
 spec        : 1.0.1-dev
issue-label-bot[bot] commented 3 years ago

Issue-Label Bot is automatically applying the label bug to this issue, with a confidence of 0.62. Please mark this comment with :thumbsup: or :thumbsdown: to give our bot feedback!

Links: app homepage, dashboard and code for this bot.