Open odockal opened 2 months ago
Most likely yhe image is signed and you have to add option to push command to remove signature. The criptic error is on docker-modem side, they don't capture the error property of the exception. I have issue opened there with pull request.
Try to push from cli and you will see actual error.
podman push default-route-openshift-image-registry.apps.sandbox-m3.1530.p1.openshiftapps.com/nivologd-dev/httpd-24
Getting image source signatures
Checking if image destination supports signatures
Error: Copying this image would require changing layer representation, which we cannot do: "Would invalidate signatures"
@dgolovin Ok, so we need to let user know and also offer a way how to do it?
This message is coming from docker-modem see (https://github.com/apocas/docker-modem/issues/171). Until it is fixed, we cannot even detect the error and let user know what to do.
@dgolovin ah, alright. thanks for explanation, let's keep the issue opened then until the fix is at place.
@dgolovin So I tried to override the signatures locally, to have a workaround, but I am missing an authentication:
podman push default-route-openshift-image-registry.apps.sandbox-m3.1530.p1.openshiftapps.com/odockal-dev/httpd-24 --remove-signatures
Error: trying to reuse blob sha256:ba181bba861a60bb8f268a6efe89e6421b78b3cfb8113585e2a4ebab6bc57f63 at destination: checking whether a blob sha256:ba181bba861a60bb8f268a6efe89e6421b78b3cfb8113585e2a4ebab6bc57f63 exists in default-route-openshift-image-registry.apps.sandbox-m3.1530.p1.openshiftapps.com/odockal-dev/httpd-24: authentication required
yes, to do it manually, you have to add registry default-route-openshift-image-registry.apps.sandbox-m3.1530.p1.openshiftapps.com/odockal-dev/httpd-24 using any user name and the same token used in sandbox connection.
@odockal another option is to use 'podman push' instead of dockerode when https://github.com/containers/podman-desktop/issues/5990 is fixed. Detect the error and request user confirmation to use --remove-signatures option when pushing.
If I try to push some of the images I have locally (some from registry.redhat.io, some other from publicly accessible sources like registry.access.redhat.com), there is an error from dev sandbox.
Some image can be pushed:
Others cannot:
See https://github.com/apocas/docker-modem/issues/171 issue about
[object Object]
in error message.