access to an existing SuSE container image is denied
Hello, I'm trying to use LTSS container from SuSE registry, this one https://registry.suse.com/repositories/suse-ltss-sle12-5-sles12sp5 The instructions in https://documentation.suse.com/container/all/single-html/Container-guide/#co... say how to login: $ cat /etc/zypp/credentials.d/SCCcredentials username=SCC_xxxxxxxxx password=85xxxxxxxxx ... $ echo '85xxxxxxxx' | podman login -u 'SCC_xxxxxxxx' --password-stdin registry.suse.com Login Succeeded! This login creates a file $ ls -l /run/user/1000/containers/auth.json -rw------- 1 cups root 133 27. Jan 07:41 /run/user/1000/containers/auth.json I copied this over to: $ cp -p /run/user/1000/containers/auth.json ~/.config/containers/auth.json and set: $ export REGISTRY_AUTH_FILE=/home/cups/.config/containers/auth.json but it does not works, at least not how I would expect it: $ podman build -t sles10-sp3-v41pl2 sles10-sp3-v41pl2 STEP 1/22: FROM registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest Trying to pull registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest... Error: creating build container: initializing source docker://registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest: reading manifest latest in registry.suse.com/suse/ltss/sle12.5/sles12sp5: requested access to the resource is denied also this doesn't work: $ podman build --creds=SCC_xxxxxxxx:85xxxxxxxx -t sles10-sp3-v41pl2 sles10-sp3-v41pl2 https://registry.suse.com/repositories/suse-ltss-sle12-5-sles12sp5 gives: registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest but inspect says: $ podman inspect registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest Error: no such object: "registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest" What I'm doing wrong here? Thanks matthias -- Matthias Apitz, ✉ guru@unixarea.de, http://www.unixarea.de/ +49-176-38902045 Public GnuPG key: http://www.unixarea.de/key.pub
Hi Matthias, Thanks for reaching out! On Mon, Jan 27, 2025 at 8:57 AM Matthias Apitz <guru@unixarea.de> wrote:
Hello,
I'm trying to use LTSS container from SuSE registry, this one https://registry.suse.com/repositories/suse-ltss-sle12-5-sles12sp5 The instructions in
https://documentation.suse.com/container/all/single-html/Container-guide/#co... say how to login:
$ cat /etc/zypp/credentials.d/SCCcredentials username=SCC_xxxxxxxxx password=85xxxxxxxxx ...
$ echo '85xxxxxxxx' | podman login -u 'SCC_xxxxxxxx' --password-stdin registry.suse.com Login Succeeded!
Maybe run it with `podman --log-level=debug login ...` and inspect the logs to see which files may be used. This login creates a file
$ ls -l /run/user/1000/containers/auth.json -rw------- 1 cups root 133 27. Jan 07:41 /run/user/1000/containers/auth.json
I copied this over to:
$ cp -p /run/user/1000/containers/auth.json ~/.config/containers/auth.json
and set:
$ export REGISTRY_AUTH_FILE=/home/cups/.config/containers/auth.json
Does it work without copying the file? I am not sure why you're copying it in the first place.
but it does not works, at least not how I would expect it:
$ podman build -t sles10-sp3-v41pl2 sles10-sp3-v41pl2 STEP 1/22: FROM registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest Trying to pull registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest... Error: creating build container: initializing source docker:// registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest: reading manifest latest in registry.suse.com/suse/ltss/sle12.5/sles12sp5: requested access to the resource is denied
also this doesn't work:
$ podman build --creds=SCC_xxxxxxxx:85xxxxxxxx -t sles10-sp3-v41pl2 sles10-sp3-v41pl2
https://registry.suse.com/repositories/suse-ltss-sle12-5-sles12sp5 gives: registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest
but inspect says:
$ podman inspect registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest Error: no such object: " registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest"
What I'm doing wrong here?
What does `podman images` show? Kind regards, Valentin
Thanks
matthias
-- Matthias Apitz, ✉ guru@unixarea.de, http://www.unixarea.de/ +49-176-38902045 Public GnuPG key: http://www.unixarea.de/key.pub _______________________________________________ Podman mailing list -- podman@lists.podman.io To unsubscribe send an email to podman-leave@lists.podman.io
Hi Valentin, Thanks for your reply. El día lunes, enero 27, 2025 a las 09:05:50 +0100, Valentin Rothberg escribió:
$ echo '85xxxxxxxx' | podman login -u 'SCC_xxxxxxxx' --password-stdin registry.suse.com Login Succeeded!
Maybe run it with `podman --log-level=debug login ...` and inspect the logs to see which files may be used.
I used strace(1) to see where the credentials were store. Into this file:
This login creates a file
$ ls -l /run/user/1000/containers/auth.json -rw------- 1 cups root 133 27. Jan 07:41 /run/user/1000/containers/auth.json
I copied this over to:
$ cp -p /run/user/1000/containers/auth.json ~/.config/containers/auth.json
and set:
$ export REGISTRY_AUTH_FILE=/home/cups/.config/containers/auth.json
Does it work without copying the file? I am not sure why you're copying it in the first place.
but it does not works, at least not how I would expect it:
$ podman build -t sles10-sp3-v41pl2 sles10-sp3-v41pl2 STEP 1/22: FROM registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest Trying to pull registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest... Error: creating build container: initializing source docker:// registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest: reading manifest latest in registry.suse.com/suse/ltss/sle12.5/sles12sp5: requested access to the resource is denied
also this doesn't work:
$ podman build --creds=SCC_xxxxxxxx:85xxxxxxxx -t sles10-sp3-v41pl2 sles10-sp3-v41pl2
https://registry.suse.com/repositories/suse-ltss-sle12-5-sles12sp5 gives: registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest
but inspect says:
$ podman inspect registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest Error: no such object: " registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest"
What I'm doing wrong here?
What does `podman images` show?
$ podman images REPOSITORY TAG IMAGE ID CREATED SIZE localhost/sles15-sp6-v73-sp1.002 latest cbf58b3e2c45 2 weeks ago 42.2 GB localhost/sles15-sp6-v73-sp1.001 latest f66f9be04330 2 weeks ago 42.1 GB localhost/sles15-sp6-v73-sp1.000 latest 06df11066fb5 8 weeks ago 34.8 GB localhost/sles15-sp6-v73 latest c19b8f9ad191 8 weeks ago 20.3 GB localhost/sles15-sp6-v72 latest 332752cfc986 2 months ago 7.22 GB <none> <none> 602584977b01 2 months ago 7.32 GB <none> <none> ca7ed1216f7d 2 months ago 470 MB <none> <none> 6515e293cd19 2 months ago 471 MB <none> <none> ad3b79f431f0 2 months ago 20.3 GB localhost/sles15-sp6-v73-sp1 latest 358421b00115 2 months ago 26 GB registry.suse.com/bci/bci-base 15.6 5131545336aa 2 months ago 125 MB Thanks matthias -- Matthias Apitz, ✉ guru@unixarea.de, http://www.unixarea.de/ +49-176-38902045 Public GnuPG key: http://www.unixarea.de/key.pub
Hello Matthias, Can you check if the registration key works for the product you're using? LTSS keys are specific to major/minor version and architecture. A minimal reproducer would be: echo 'REGCODE' | podman login -u 'regcode' --password-stdin registry.suse.com podman pull registry.suse.com/suse/ltss/sle12.5/sles12sp5 Replace REGCODE here with your registration code. Leave the user 'regcode' as it is (See https://documentation.suse.com/container/all/single-html/Container-guide/#co... and the section "Use a separate SUSE Customer Center registration code" therein). The "requested access to the resource is denied" implies that you have a valid registration code, but the code you're using doesn't allow access to the requested resource. Best, Felix On 1/27/25 08:56, Matthias Apitz wrote:
Hello,
I'm trying to use LTSS container from SuSE registry, this one https://registry.suse.com/repositories/suse-ltss-sle12-5-sles12sp5 The instructions in https://documentation.suse.com/container/all/single-html/Container-guide/#co... say how to login:
$ cat /etc/zypp/credentials.d/SCCcredentials username=SCC_xxxxxxxxx password=85xxxxxxxxx ...
$ echo '85xxxxxxxx' | podman login -u 'SCC_xxxxxxxx' --password-stdin registry.suse.com Login Succeeded!
This login creates a file
$ ls -l /run/user/1000/containers/auth.json -rw------- 1 cups root 133 27. Jan 07:41 /run/user/1000/containers/auth.json
I copied this over to:
$ cp -p /run/user/1000/containers/auth.json ~/.config/containers/auth.json
and set:
$ export REGISTRY_AUTH_FILE=/home/cups/.config/containers/auth.json
but it does not works, at least not how I would expect it:
$ podman build -t sles10-sp3-v41pl2 sles10-sp3-v41pl2 STEP 1/22: FROM registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest Trying to pull registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest... Error: creating build container: initializing source docker://registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest: reading manifest latest in registry.suse.com/suse/ltss/sle12.5/sles12sp5: requested access to the resource is denied
also this doesn't work:
$ podman build --creds=SCC_xxxxxxxx:85xxxxxxxx -t sles10-sp3-v41pl2 sles10-sp3-v41pl2
https://registry.suse.com/repositories/suse-ltss-sle12-5-sles12sp5 gives: registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest
but inspect says:
$ podman inspect registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest Error: no such object: "registry.suse.com/suse/ltss/sle12.5/sles12sp5:latest"
What I'm doing wrong here? Thanks
matthias
participants (3)
-
Felix Niederwanger -
Matthias Apitz -
Valentin Rothberg