Re: Diego Docker private repository not working


Tom Sherrod <tom.sherrod@...>
 

A 0.1441.0 install without the docker cache, pulled from a private registry, no auth, no problems.

I'm confused by this thread.

On Dec 16, 2015, at 1:56 PM, Anuj Jain <anuj17280(a)gmail.com> wrote:

Thanks for the quick reply - is there any workaround till the time long term solution will be in place.
On Dec 17, 2015 12:17 AM, "Ted Young" <tyoung(a)pivotal.io> wrote:
We don't currently support private docker registries, because as far as we are aware the only auth scheme currently supported by private docker registries is username/password. It is a violation of our security protocols to flow through and retain user credentials, such as passwords, in our system. We are waiting for an access token or similar scheme to be offered.

On Wed, Dec 16, 2015 at 7:13 AM, Anuj Jain <anuj17280(a)gmail.com> wrote:
Hi,

I could not able to run docker containers using docker's v2 private repository - I am using CF V226, Diego V0.1443.0 and Diego docker cache V0.1021.0 (with stemcell V3146 - across all components).

I also found on your site that private is not supported with V2 yet (https://docs.pivotal.io/pivotalcf/concepts/docker.html and/or https://github.com/cloudfoundry-incubator/docker_app_lifecycle/issues/5) - please confirm is that still the case or is there any workaround.

I can launch the docker app/container from Docker Hub public v2 registory - but while trying to use with private it is giving following error:

=============
ef797df93a34: Pull complete
af28fa31b54b: Pull complete
Digest: sha256:e45cc262f5d783ecbe07b7fe1a634342205d4a9eae209f9a9731a94b09493146
Status: Downloaded newer image for anuj17280/public:v1
Docker image pulled.
Docker image will be cached as docker-registry.service.cf.internal:8080/b0aad5a4-50e7-46d7-7085-b7e7fb0b2abf
Tagging docker image anuj17280/public:v1 as docker-registry.service.cf.internal:8080/b0aad5a4-50e7-46d7-7085-b7e7fb0b2abf ...
Docker image tagged.
Pushing docker image docker-registry.service.cf.internal:8080/b0aad5a4-50e7-46d7-7085-b7e7fb0b2abf
The push refers to a repository [docker-registry.service.cf.internal:8080/b0aad5a4-50e7-46d7-7085-b7e7fb0b2abf] (len: 1)
unable to ping registry endpoint https://docker-registry.service.cf.internal:8080/v0/
v2 ping attempt failed with error: Get https://docker-registry.service.cf.internal:8080/v2/: tls: oversized record received with length 20527
v1 ping attempt failed with error: Get https://docker-registry.service.cf.internal:8080/v1/_ping: tls: oversized record received with length 20527
failed to cache image anuj17280/public:v1 exit status 1
Staging process failed: Exit trace for group:
builder exited with error: exit status 1
docker_daemon exited with nil
Exit status 2
Staging Failed: Exited with status 2

FAILED
StagingError
============================



- Anuj

Join cf-dev@lists.cloudfoundry.org to automatically receive all group messages.