Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Confusing 401 Unauthorized error when using multi-level repository name on Docker Hub #2650

Open
uthircloud opened this issue Jul 31, 2020 · 7 comments
Open

Confusing 401 Unauthorized error when using multi-level repository name on Docker Hub #2650

uthircloud opened this issue Jul 31, 2020 · 7 comments
Labels
area/jib-cli area/jib-core area/jib-gradle-plugin area/jib-maven-plugin enhancement priority:p3

Comments

@uthircloud
Copy link

uthircloud commented Jul 31, 2020 •
edited by chanseokoh
Loading

I have simple Spring Boot app. I tried to create an docker image of it using jib-maven plugin. But when I build this app its failing with 401 Unauthorized exception. But I am giving all the configurations correctly in logs I can see its been read correctly but while pushing its failing with I/O error for image..

<plugin>
    <groupId>com.google.cloud.tools</groupId>
    <artifactId>jib-maven-plugin</artifactId>
    <version>2.4.0</version>
    <configuration>
         <from>
            <image>openjdk:latest</image>
            <auth>
              <username>userName</username>
              <password>password</password>
            </auth>
        </from> 
         <to>
            <image><userName>/java-spring/${project.artifactId}:latest</image>
            <auth>
              <username>userName</username>
              <password>password</password>
            </auth>
        </to> 
        <container>
            <jvmFlags>
                <jvmFlag>-Xms512m</jvmFlag>
                <jvmFlag>-Xmx512m</jvmFlag>
            </jvmFlags>
        </container>
    </configuration> 
   <executions>
    <execution>
      <phase>package</phase>
      <goals>
        <goal>build</goal>
      </goals>
    </execution>
  </executions>
</plugin>

I am using mvn clean install -Djib.httpTimeout=0 -X while building

[DEBUG] bearer auth succeeded for registry-1.docker.io/userName/java-spring/singin
[DEBUG] TIMED   Authenticating push to registry-1.docker.io : 3433.0 ms
[DEBUG] TIMING  Preparing layer pushers
[DEBUG] TIMED   Preparing layer pushers : 2.0 ms
[DEBUG] TIMING  Pushing BLOB digest: sha256:6a1d32d7f6ff4a41815f4be581691138a588a3e8b4faa839e1e80f7e51b2cd6f, size: 1544
[DEBUG] TIMING  Pushing BLOB digest: sha256:fe3d76ed81f8e2c7419641c7accf6a0f1c4d15a5b5e344d5848422d7e481edd2, size: 314
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] TIMED   Pulling base image manifest : 4079.0 ms
[DEBUG] TIMING  Preparing base image layer pullers
[DEBUG] TIMED   Preparing base image layer pullers : 0.0 ms
[DEBUG] TIMING  Preparing layer pushers
[DEBUG] TIMED   Preparing layer pushers : 1.0 ms
[DEBUG] TIMING  Pulling base image layer sha256:69e2f037cdb30c8d329b17dad42cd9d92a45d93c17e6699650b23c55eceacb5f
[DEBUG] TIMING  Pulling base image layer sha256:42196c7f3671dd040a08f3515d758e322ed3276abedebd86072bb966f068a783
[DEBUG] TIMING  Pulling base image layer sha256:3e010093287c245d72a774033b4cddd6451a820bfbb1948c97798e1838858dd2
[DEBUG] TIMING  Pulling base image layer sha256:d0e5d6aa3b5285b5d96315f094cdf61ee0c54fbbf9c2e559a09a85afcdc65336
[DEBUG] TIMING  Pulling base image layer sha256:423773833537fe0e40fa349a4bc0a2001340dac0c77d7a9fcf693df3068d4a3d
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] TIMED   Pushing BLOB digest: sha256:6a1d32d7f6ff4a41815f4be581691138a588a3e8b4faa839e1e80f7e51b2cd6f, size: 1544 : 2713.0 ms
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] TIMED   Pushing BLOB digest: sha256:fe3d76ed81f8e2c7419641c7accf6a0f1c4d15a5b5e344d5848422d7e481edd2, size: 314 : 2853.0 ms
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] Building dependencies layer built sha256:e33c10e34799462008afa4ef873291b337878a958002e7567db5bbefa9602633
[DEBUG] TIMED   Building dependencies layer : 6513.0 ms
[DEBUG] TIMING  Pushing BLOB digest: sha256:e33c10e34799462008afa4ef873291b337878a958002e7567db5bbefa9602633, size: 16212760
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] TIMED   Pulling base image layer sha256:69e2f037cdb30c8d329b17dad42cd9d92a45d93c17e6699650b23c55eceacb5f : 2622.0 ms
[DEBUG] refreshing bearer auth token for registry-1.docker.io/userName/java-spring/singin...
[DEBUG] TIMED   Pulling base image layer sha256:42196c7f3671dd040a08f3515d758e322ed3276abedebd86072bb966f068a783 : 2660.0 ms
[DEBUG] TIMED   Building and pushing image : 7058.0 ms
[ERROR] I/O error for image [registry-1.docker.io/userName/java-spring/singin]:
[DEBUG] TIMED   Pulling base image layer sha256:423773833537fe0e40fa349a4bc0a2001340dac0c77d7a9fcf693df3068d4a3d : 2707.0 ms
[ERROR]     java.net.SocketException
[ERROR]     Socket closed
[DEBUG] TIMED   Pulling base image layer sha256:3e010093287c245d72a774033b4cddd6451a820bfbb1948c97798e1838858dd2 : 2726.0 ms
[DEBUG] TIMED   Pushing BLOB digest: sha256:e33c10e34799462008afa4ef873291b337878a958002e7567db5bbefa9602633, size: 16212760 : 390.0 ms
[INFO] 
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
@chanseokoh
Copy link
Member

Ref: https://stackoverflow.com/q/63166255/1701388

@chanseokoh
Copy link
Member

chanseokoh commented Jul 31, 2020 •
edited
Loading

Can you follow these instructions to capture detailed network traces and debug logs and upload it here?

Unrelated to the issue: you can remove <from><auth>, since openjdk is a public image.

           <from>
              <image>openjdk:latest</image>
-             <auth>
-               <username>userName</username>
-               <password>password</password>
-             </auth>
          </from>

@uthircloud
Copy link
Author

uthircloud commented Jul 31, 2020 via email •
edited by chanseokoh
Loading

@chanseokoh
Copy link
Member

If possible, can you upload the entire log file (including debug messages)?

@uthircloud
Copy link
Author

uthircloud commented Jul 31, 2020 via email •
edited by chanseokoh
Loading

@chanseokoh
Copy link
Member

chanseokoh commented Jul 31, 2020 •
edited
Loading

Ah, yes, I forget that Docker Hub does not support multi-level repository names. It doesn't support <account>/level-1/level-2/..., for example.

I see that jib-maven-plugin successfully ran without an error. The warning after jib-maven-plugin is coming from a different plugin and is unrelated to Jib.

[INFO] --- jib-maven-plugin:2.4.0:build (default) @ singin ---
[WARNING] 'mainClass' configured in 'maven-jar-plugin' is not a valid Java class: ${start-class}
[INFO]
[INFO] Containerizing application to .../singin...
[WARNING] Base image 'openjdk' does not use a specific image digest - build may not be reproducible
[INFO] Using credentials from <to><auth> for .../singin
[INFO] Getting manifest for base image openjdk...
[INFO] Building classes layer...
[INFO] Building resources layer...
[INFO] Building dependencies layer...
[INFO] The base image requires auth. Trying again for openjdk...
[INFO] Using credentials from Maven settings file for openjdk
[INFO] Using base image with digest: sha256:afe7bebffdc20fb992bd67dba0a15359db806a5c3ee5bb78e88ac3c9f20c684b
[INFO]
[INFO] Container entrypoint set to [java, -Xms512m, -Xmx512m, -cp, /app/resources:/app/classes:/app/libs/*, ....SinginApplication]
[INFO]
[INFO] Built and pushed image as .../singin

I believe your issue is resolved, but I will leave this issue open so that we show a better message when this happens.

@chanseokoh chanseokoh changed the title Can't push image from local machine to public Docker Hub Registry getting 401 error Confusing 401 Unauthorized error when using multi-level repository name on Docker Hub Jul 31, 2020
@uthircloud
Copy link
Author

uthircloud commented Jul 31, 2020 via email

@chanseokoh chanseokoh added this to the v2.5.0 milestone Jul 31, 2020
@chanseokoh chanseokoh mentioned this issue Aug 6, 2020
Merged
@chanseokoh chanseokoh modified the milestones: v2.5.0, v2.6.0 Aug 7, 2020
@chanseokoh chanseokoh modified the milestones: v2.6.0, v2.7.0 Oct 13, 2020
@chanseokoh chanseokoh added question User inquiries good first issue and removed question User inquiries labels Oct 13, 2020
@chanseokoh chanseokoh modified the milestones: v2.7.0, v2.8.0 Dec 7, 2020
@chanseokoh chanseokoh modified the milestones: v2.8.0, v2.9.0 Feb 24, 2021
@chanseokoh chanseokoh modified the milestones: v3.0.0, common next release Apr 9, 2021
@chanseokoh chanseokoh mentioned this issue Jun 14, 2021
Closed
@chanseokoh chanseokoh mentioned this issue Jun 22, 2021
Closed
@chanseokoh chanseokoh removed this from the common: v3.1.4 / v0.20.0-core milestone Aug 19, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
area/jib-cli area/jib-core area/jib-gradle-plugin area/jib-maven-plugin enhancement priority:p3
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@chanseokoh @emmileaf @uthircloud