| -@gerrit:opendev.org- Ian Wienand proposed: [zuul/zuul-jobs] 867063: [wip] zuul-jobs-test-registry-buildset-registry-k8s-microk8s https://review.opendev.org/c/zuul/zuul-jobs/+/867063 | 00:17 | |
| @iwienand:matrix.org | ``` | 01:57 |
|---|---|---|
| 2022-12-12 01:07:28,238 DEBUG registry.authz: Unauthorized read | ||
| 2022-12-12 01:07:28,239 INFO cherrypy.access.140519466688256: ::ffff:172.17.0.1 - - [12/Dec/2022:01:07:28] "HEAD /quay.io/v2/zuul/quay-testimage/manifests/latest?ns=quay.io HTTP/1.1" 401 735 "" "containerd/v1.6.9" | ||
| 2022-12-12 01:07:28,288 INFO registry.authz: Authenticate level read | ||
| 2022-12-12 01:07:28,289 DEBUG registry.authz: Generate read token | ||
| 2022-12-12 01:07:28,290 INFO cherrypy.access.140519466688256: ::ffff:172.17.0.1 - - [12/Dec/2022:01:07:28] "GET /auth/token?scope=read&scope=repository%3Azuul%2Fquay-testimage%3Apull HTTP/1.1" 200 239 "" "containerd/v1.6.9" | ||
| 2022-12-12 01:07:28,333 DEBUG registry.authz: Auth ok read | ||
| 2022-12-12 01:07:28,334 INFO cherrypy.access.140519466688256: ::ffff:172.17.0.1 - - [12/Dec/2022:01:07:28] "HEAD /quay.io/v2/zuul/quay-testimage/manifests/latest?ns=quay.io HTTP/1.1" 404 780 "" "containerd/v1.6.9" | ||
| 2022-12-12 01:07:28,349 DEBUG registry.authz: Unauthorized read | ||
| ``` | ||
| @iwienand:matrix.org | i am fairly sure that containerd can not pull from zuul-registry. has anyone had this working? | 01:57 |
| @iwienand:matrix.org | it looks like it gets a read token, but then either doesn't use it, or for some other reason the HEAD fails after getting | 01:58 |
| @iwienand:matrix.org | ``` | 02:33 |
| 2022-12-12 02:32:11,656 INFO cherrypy.access.140275119408656: ::ffff:172.17.0.1 - - [12/Dec/2022:02:32:11] "HEAD /quay.io/v2/zuul/quay-testimage/manifests/latest?ns=quay.io HTTP/1.1" 404 780 "" "containerd/v1.6.9" | ||
| 2022-12-12 02:32:11,666 DEBUG registry.authz: Auth Header: None | ||
| 2022-12-12 02:32:11,666 DEBUG registry.authz: Unauthorized read | ||
| 2022-12-12 02:32:11,666 DEBUG registry.authz: Send back: {'Content-Type': 'text/html', 'Server': 'CherryPy/18.8.0', 'Date': 'Mon, 12 Dec 2022 02:32:11 GMT', 'Docker-Distribution-Api-Version': 'registry/2.0', 'Www-Authenticate': 'Bearer realm="https://23.253.20.100:9000/auth/token",scope="read"'} | ||
| ``` | ||
| @iwienand:matrix.org | above we send back "Bearer realm=<ip>" ... I wonder if this confuses things? | 02:34 |
| @iwienand:matrix.org | ``` | 02:35 |
| 2022-12-12 02:32:11,656 INFO cherrypy.access.140275119408656: ::ffff:172.17.0.1 - - [12/Dec/2022:02:32:11] "HEAD /quay.io/v2/zuul/quay-testimage/manifests/latest?ns=quay.io HTTP/1.1" 404 780 "" "containerd/v1.6.9" | ||
| 2022-12-12 02:32:11,666 DEBUG registry.authz: Auth Header: None | ||
| 2022-12-12 02:32:11,666 DEBUG registry.authz: Unauthorized read | ||
| ``` | ||
| @iwienand:matrix.org | when containerd sends back the next HEAD query, it's not including the bearer token (or an auth header to be specific) | 02:35 |
| -@gerrit:opendev.org- Ian Wienand proposed: [zuul/zuul-jobs] 867063: [wip] zuul-jobs-test-registry-buildset-registry-k8s-microk8s https://review.opendev.org/c/zuul/zuul-jobs/+/867063 | 02:57 | |
| -@gerrit:opendev.org- Ian Wienand proposed: [zuul/zuul-jobs] 867063: [wip] zuul-jobs-test-registry-buildset-registry-k8s-microk8s https://review.opendev.org/c/zuul/zuul-jobs/+/867063 | 03:20 | |
| -@gerrit:opendev.org- Ian Wienand proposed: [zuul/zuul-jobs] 867063: [wip] zuul-jobs-test-registry-buildset-registry-k8s-microk8s https://review.opendev.org/c/zuul/zuul-jobs/+/867063 | 03:36 | |
| @iwienand:matrix.org | > <@iwienand:matrix.org> ``` | 04:15 |
| > 2022-12-12 01:07:28,238 DEBUG registry.authz: Unauthorized read | ||
| > 2022-12-12 01:07:28,239 INFO cherrypy.access.140519466688256: ::ffff:172.17.0.1 - - [12/Dec/2022:01:07:28] "HEAD /quay.io/v2/zuul/quay-testimage/manifests/latest?ns=quay.io HTTP/1.1" 401 735 "" "containerd/v1.6.9" | ||
| > 2022-12-12 01:07:28,288 INFO registry.authz: Authenticate level read | ||
| > 2022-12-12 01:07:28,289 DEBUG registry.authz: Generate read token | ||
| > 2022-12-12 01:07:28,290 INFO cherrypy.access.140519466688256: ::ffff:172.17.0.1 - - [12/Dec/2022:01:07:28] "GET /auth/token?scope=read&scope=repository%3Azuul%2Fquay-testimage%3Apull HTTP/1.1" 200 239 "" "containerd/v1.6.9" | ||
| > 2022-12-12 01:07:28,333 DEBUG registry.authz: Auth ok read | ||
| > 2022-12-12 01:07:28,334 INFO cherrypy.access.140519466688256: ::ffff:172.17.0.1 - - [12/Dec/2022:01:07:28] "HEAD /quay.io/v2/zuul/quay-testimage/manifests/latest?ns=quay.io HTTP/1.1" 404 780 "" "containerd/v1.6.9" | ||
| > 2022-12-12 01:07:28,349 DEBUG registry.authz: Unauthorized read | ||
| > ``` | ||
| ok, i think i figured it out. ```/quay.io/v2/...```. containerd wants to add ```/v2``` for you to remote registry you point it at. this isn't right for zuul-registry | ||
| -@gerrit:opendev.org- Ian Wienand proposed: [zuul/zuul-jobs] 867063: [wip] zuul-jobs-test-registry-buildset-registry-k8s-microk8s https://review.opendev.org/c/zuul/zuul-jobs/+/867063 | 07:00 | |
| -@gerrit:opendev.org- Ian Wienand proposed: [zuul/zuul-jobs] 867063: [wip] zuul-jobs-test-registry-buildset-registry-k8s-microk8s https://review.opendev.org/c/zuul/zuul-jobs/+/867063 | 08:15 | |
| -@gerrit:opendev.org- Ian Wienand proposed: [zuul/zuul-jobs] 867063: [wip] zuul-jobs-test-registry-buildset-registry-k8s-microk8s https://review.opendev.org/c/zuul/zuul-jobs/+/867063 | 08:36 | |
| -@gerrit:opendev.org- Tim Beermann proposed: [zuul/zuul-jobs] 866679: Add yamllint job. https://review.opendev.org/c/zuul/zuul-jobs/+/866679 | 10:24 | |
| -@gerrit:opendev.org- Felix Edel proposed: [zuul/zuul] 866863: Store pause and resume events on the build and report them https://review.opendev.org/c/zuul/zuul/+/866863 | 11:16 | |
| -@gerrit:opendev.org- Felix Edel proposed: [zuul/zuul] 867220: Abort job if cleanup playbook timed out https://review.opendev.org/c/zuul/zuul/+/867220 | 12:52 | |
| -@gerrit:opendev.org- Felix Edel proposed: [zuul/zuul] 864903: Abort job if cleanup playbook timed out https://review.opendev.org/c/zuul/zuul/+/864903 | 12:54 | |
| -@gerrit:opendev.org- Felix Edel proposed: [zuul/zuul] 864903: Abort job if cleanup playbook timed out https://review.opendev.org/c/zuul/zuul/+/864903 | 13:23 | |
| -@gerrit:opendev.org- Felix Edel proposed: [zuul/zuul] 864903: Abort job if cleanup playbook timed out https://review.opendev.org/c/zuul/zuul/+/864903 | 13:24 | |
| -@gerrit:opendev.org- Felix Edel proposed: [zuul/zuul] 866863: Store pause and resume events on the build and report them https://review.opendev.org/c/zuul/zuul/+/866863 | 13:29 | |
| -@gerrit:opendev.org- Tim Beermann proposed: [zuul/zuul-jobs] 866679: Add yamllint job. https://review.opendev.org/c/zuul/zuul-jobs/+/866679 | 14:25 | |
| -@gerrit:opendev.org- Tim Beermann proposed: [zuul/zuul-jobs] 866679: Add yamllint job. https://review.opendev.org/c/zuul/zuul-jobs/+/866679 | 14:37 | |
| -@gerrit:opendev.org- Simon Westphahl proposed: [zuul/zuul] 867251: Avoid unnecessary change dependency updates https://review.opendev.org/c/zuul/zuul/+/867251 | 14:46 | |
| -@gerrit:opendev.org- Tim Beermann proposed: [zuul/zuul-jobs] 866679: Add yamllint job. https://review.opendev.org/c/zuul/zuul-jobs/+/866679 | 14:48 | |
| -@gerrit:opendev.org- Felix Edel proposed: [zuul/zuul] 864903: Abort job if cleanup playbook timed out https://review.opendev.org/c/zuul/zuul/+/864903 | 15:49 | |
| -@gerrit:opendev.org- Ian Wienand proposed: | 19:48 | |
| - [zuul/zuul-jobs] 866953: ensure-kubernetes: add microk8s support https://review.opendev.org/c/zuul/zuul-jobs/+/866953 | ||
| - [zuul/zuul-jobs] 867063: [wip] zuul-jobs-test-registry-buildset-registry-k8s-microk8s https://review.opendev.org/c/zuul/zuul-jobs/+/867063 | ||
| - [zuul/zuul-jobs] 867280: use-buildset-registry: add URL to buildset_registry_namespaces https://review.opendev.org/c/zuul/zuul-jobs/+/867280 | ||
| -@gerrit:opendev.org- Ian Wienand proposed: [zuul/zuul-jobs] 867063: [wip] zuul-jobs-test-registry-buildset-registry-k8s-microk8s https://review.opendev.org/c/zuul/zuul-jobs/+/867063 | 20:57 | |
| -@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed: [zuul/zuul] 867175: Reuse queue items after reconfiguration https://review.opendev.org/c/zuul/zuul/+/867175 | 21:07 | |
| -@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed: [zuul/zuul] 865923: Avoid acquiring pipeline locks in manager postConfig https://review.opendev.org/c/zuul/zuul/+/865923 | 21:24 | |
| -@gerrit:opendev.org- Ian Wienand proposed: | 23:57 | |
| - [zuul/zuul-jobs] 866953: ensure-kubernetes: add microk8s support https://review.opendev.org/c/zuul/zuul-jobs/+/866953 | ||
| - [zuul/zuul-jobs] 867063: [wip] zuul-jobs-test-registry-buildset-registry-k8s-microk8s https://review.opendev.org/c/zuul/zuul-jobs/+/867063 | ||
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!