search

sigstore / fulcio

Sigstore OIDC PKI
Apache License 2.0
651 stars 137 forks source link

Cosign failed to sing the image #1623

Closed insider89 closed 7 months ago

insider89 commented 7 months ago

Description

I have this issue periodically on the GHA runner. It hard to 100% reproduce, but sometime my cosign failed to sign image with following error:

cosign sign --yes ghcr.io/***/btp-api:${VERSION:-7.0.0-dev.$(date +%s)}
Generating ephemeral keys...
Retrieving signed certificate...
Error: signing [ghcr.io/***/btp-api:7.0.0-release.8525571639]: getting signer: getting key from Fulcio: getting CTFE public keys: creating cached local store: resource temporarily unavailable
main.go:74: error during command execution: signing [ghcr.io/***/btp-api:7.0.0-release.8525571639]: getting signer: getting key from Fulcio: getting CTFE public keys: creating cached local store: resource temporarily unavailable
 ELIFECYCLE  Command failed with exit code 1.
Error:  command finished with error: command (/home/runner/work/btp/btp/apps/api) /home/runner/setup-pnpm/node_modules/.bin/pnpm run cosign exited (1)

Is there some rate limit from the Fulcio side?

haydentherapper commented 7 months ago

This isn't an error with the server, it's the client when it tries to fetch TUF metadata from disk. This sounds more like temporary GitHub Action failures.