podman pull container-registry.oracle.com auth
Hello Podsters, Trying to pull from container-registry.oracle.com using podman instead of docker but auth does not seem to work right for container-registry.oracle.com from podman, while it does work as advertised from docker pull command. Have a look at this and LMK if this is a bug, will be fixed, etc. Note that I previously followed the step of logging in to container-registry.oracle.com at the URL as described here https://docs.oracle.com/cd/E37670_01/E75728/html/oracle-registry-server.html . Then I try to pull images using podman (does not authenticate properly - apparently - see below): --- ubuntu@ubuntu-ThinkPad-P72:~/Desktop$ podman pull container-registry.oracle.com/os/oraclelinux:7.6 Trying to pull container-registry.oracle.com/os/oraclelinux:7.6... unable to retrieve auth token: invalid username/password Error: error pulling image "container-registry.oracle.com/os/oraclelinux:7.6": unable to pull container-registry.oracle.com/os/oraclelinux:7.6: unable to pull image: Error initializing source docker://container-registry.oracle.com/os/oraclelinux:7.6: unable to retrieve auth token: invalid username/password --- now I've previously logged in to URL as instructed and tied an 8-hour auth to my oracle single sign-on --- ubuntu@ubuntu-ThinkPad-P72:~/Desktop$ podman login container-registry.oracle.com Username: gilbert@orabuntu-lxc.com Password: Error: error logging into "container-registry.oracle.com": invalid username/password ubuntu@ubuntu-ThinkPad-P72:~/Desktop$ podman login container-registry.oracle.com Username: gilbert@orabuntu-lxc.com Password: Error: error logging into "container-registry.oracle.com": invalid username/password --- I try a couple times using the password and also the password enclosed in " ". Neither authenticates successfully using podman --- --- Now I try same login using docker and authentication succeeds (note my pw has upper/lower case, numerals, and special character) --- ubuntu@ubuntu-ThinkPad-P72:~/Desktop$ sudo docker login container-registry.oracle.com Username: gilbert@orabuntu-lxc.com Password: Login Succeeded --- Trying a podman pull again after the successful docker login - no go does not auth --- ubuntu@ubuntu-ThinkPad-P72:~/Desktop$ podman pull container-registry.oracle.com/os/oraclelinux:7.6 Trying to pull container-registry.oracle.com/os/oraclelinux:7.6... open /home/ubuntu/.docker/config.json: permission denied Error: error pulling image "container-registry.oracle.com/os/oraclelinux:7.6": unable to pull container-registry.oracle.com/os/oraclelinux:7.6: unable to pull image: Error initializing source docker://container-registry.oracle.com/os/oraclelinux:7.6: error getting username and password: error reading JSON file "/home/ubuntu/.docker/config.json": open /home/ubuntu/.docker/config.json: permission denied --- Try a pull using docker auth that has been set and it works fine --- ubuntu@ubuntu-ThinkPad-P72:~/Desktop$ sudo docker pull container-registry.oracle.com/os/oraclelinux:7.6 7.6: Pulling from os/oraclelinux 04e172e76262: Pull complete Digest: sha256:a6ee3b4c6a52a529a6de77bb25c3d0a99e99e1ad81cd936cd14b100288ffe246 Status: Downloaded newer image for container-registry.oracle.com/os/oraclelinux:7.6 ubuntu@ubuntu-ThinkPad-P72:~/Desktop$ So is this an issue with podman that it is not able to handle the authentication to Oracle container registry, whereas docker can and does ? If yes can we file this as an enhancement request or bug fix ? Thanks Gilbert
This is now working ... not sure why it did not work before ... but here are the successful results below. [ubuntu@oracle81 anylinux]$ podman login container-registry.oracle.com Authenticating with existing credentials... Existing credentials are invalid, please enter valid username and password Username: gilbert@orabuntu-lxc.com Password: Login Succeeded! [ubuntu@oracle81 anylinux]$ podman login container-registry.oracle.com Authenticating with existing credentials... Existing credentials are valid. Already logged in to container-registry.oracle.com [ubuntu@oracle81 anylinux]$ podman pull container-registry.oracle.com/os/oraclelinux:7.6 Trying to pull container-registry.oracle.com/os/oraclelinux:7.6...Getting image source signatures Copying blob 04e172e76262: 82.61 MiB / 82.90 MiB [=============================] Copying blob 04e172e76262: 82.90 MiB / 82.90 MiB [=========================] 49s Copying config 5f993b1aafe5: 1.94 KiB / 1.94 KiB [==========================] 0s Writing manifest to image destination Storing signatures 5f993b1aafe52e8dfb3198b7cb3f405f36e5cf71a73452184cf70e8b59b5836e [ubuntu@oracle81 anylinux]$ podman run -d container-registry.oracle.com/os/oraclelinux:7.3 Trying to pull container-registry.oracle.com/os/oraclelinux:7.3...Getting image source signatures Copying blob f18876e2d1e9: 79.11 MiB / 79.45 MiB [=============================] Copying blob f18876e2d1e9: 79.45 MiB / 79.45 MiB [=========================] 57s Copying config 9161636948e8: 1.94 KiB / 1.94 KiB [==========================] 0s Writing manifest to image destination Storing signatures 2ec8606eccfdd76dc8005d339f57079dc7622a1f0519d12e0fc2aa2b7552a70e [ubuntu@oracle81 anylinux]$
Hi Gilbert, thanks for reaching out! I'm happy that it's working now. Please let us know if you experience similar issues in the future. Kind regards, Valentin On Mon, Oct 21, 2019 at 12:06 PM Gilbert Standen <gilbert@orabuntu-lxc.com> wrote:
This is now working ... not sure why it did not work before ... but here are the successful results below.
[ubuntu@oracle81 anylinux]$ podman login container-registry.oracle.com Authenticating with existing credentials... Existing credentials are invalid, please enter valid username and password Username: gilbert@orabuntu-lxc.com Password: Login Succeeded!
[ubuntu@oracle81 anylinux]$ podman login container-registry.oracle.com Authenticating with existing credentials... Existing credentials are valid. Already logged in to container-registry.oracle.com
[ubuntu@oracle81 anylinux]$ podman pull container-registry.oracle.com/os/oraclelinux:7.6
Trying to pull container-registry.oracle.com/os/oraclelinux:7.6...Getting image source signatures Copying blob 04e172e76262: 82.61 MiB / 82.90 MiB [=============================] Copying blob 04e172e76262: 82.90 MiB / 82.90 MiB [=========================] 49s Copying config 5f993b1aafe5: 1.94 KiB / 1.94 KiB [==========================] 0s Writing manifest to image destination Storing signatures 5f993b1aafe52e8dfb3198b7cb3f405f36e5cf71a73452184cf70e8b59b5836e
[ubuntu@oracle81 anylinux]$ podman run -d container-registry.oracle.com/os/oraclelinux:7.3
Trying to pull container-registry.oracle.com/os/oraclelinux:7.3...Getting image source signatures Copying blob f18876e2d1e9: 79.11 MiB / 79.45 MiB [=============================] Copying blob f18876e2d1e9: 79.45 MiB / 79.45 MiB [=========================] 57s Copying config 9161636948e8: 1.94 KiB / 1.94 KiB [==========================] 0s Writing manifest to image destination Storing signatures 2ec8606eccfdd76dc8005d339f57079dc7622a1f0519d12e0fc2aa2b7552a70e [ubuntu@oracle81 anylinux]$ _______________________________________________ Podman mailing list -- podman@lists.podman.io To unsubscribe send an email to podman-leave@lists.podman.io
participants (2)
-
Gilbert Standen -
Valentin Rothberg