sigma
sigma copied to clipboard
使用ctr工具向仓库push镜像时认证存在问题
containerd cli:ctr v1.7.15-k3s1
localhost:~# ctr i push 192.168.1.20:31177/library/pause:3.6 --platform linux/amd64 --plain-http -u test:Test@123..
INFO[0000] host will try HTTPS first since it is configured for HTTP with a TLS configuration, consider changing host to HTTPS or removing unused TLS configuration host="192.168.1.20:31177"
manifest-sha256:c2280d2f5f56cf9c9a01bb64b2db4651e35efd6d62a54dcfc12049fe6449c5e4: waiting |--------------------------------------|
config-sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee: waiting |--------------------------------------|
elapsed: 0.1 s total: 0.0 B (0.0 B/s)
ctr: failed to authorize: failed to fetch oauth token: unexpected status from GET request to http://192.168.1.20:31177/api/v1/tokens?scope=repository%3Alibrary%2Fpause%3Apull%2Cpush&service=sigma: 401 Unauthorized
localhost:~# curl "http://192.168.1.20:31177/api/v1/tokens?scope=repository%3Alibrary%2Fpause%3Apull%2Cpush&service=sigma"
{"token":"eyJhbGciOiJSUzU.................","expires_in":3600,"issued_at":"2024-06-21T06:43:16Z"}
localhost:~#
localhost:~# ctr --debug i push 192.168.1.20:31177/library/pause:3.6 --platform linux/amd64 --plain-http -u test:Test@123..
DEBU[0000] pushing digest="sha256:c2280d2f5f56cf9c9a01bb64b2db4651e35efd6d62a54dcfc12049fe6449c5e4" image="192.168.1.20:31177/library/pause:3.6"
INFO[0000] host will try HTTPS first since it is configured for HTTP with a TLS configuration, consider changing host to HTTPS or removing unused TLS configuration host="192.168.1.20:31177"
DEBU[0000] push digest="sha256:fbe1a72f5dcd08ba4ca3ce3468c742786c1f6578c1f6bb401be1c4620d6ff705" mediatype=application/vnd.docker.image.rootfs.diff.tar.gzip size=296517
DEBU[0000] checking and pushing to digest="sha256:fbe1a72f5dcd08ba4ca3ce3468c742786c1f6578c1f6bb401be1c4620d6ff705" mediatype=application/vnd.docker.image.rootfs.diff.tar.gzip size=296517 url="https://192.168.1.20:31177/v2/library/pause/blobs/sha256:fbe1a72f5dcd08ba4ca3ce3468c742786c1f6578c1f6bb401be1c4620d6ff705"
DEBU[0000] push digest="sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee" mediatype=application/vnd.docker.container.image.v1+json size=901
DEBU[0000] checking and pushing to digest="sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee" mediatype=application/vnd.docker.container.image.v1+json size=901 url="https://192.168.1.20:31177/v2/library/pause/blobs/sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee"
DEBU[0000] do request digest="sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee" mediatype=application/vnd.docker.container.image.v1+json request.header.accept="application/vnd.docker.container.image.v1+json, */*" request.header.user-agent=containerd/v1.7.15-k3s1 request.method=HEAD size=901 url="https://192.168.1.20:31177/v2/library/pause/blobs/sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee"
DEBU[0000] do request digest="sha256:fbe1a72f5dcd08ba4ca3ce3468c742786c1f6578c1f6bb401be1c4620d6ff705" mediatype=application/vnd.docker.image.rootfs.diff.tar.gzip request.header.accept="application/vnd.docker.image.rootfs.diff.tar.gzip, */*" request.header.user-agent=containerd/v1.7.15-k3s1 request.method=HEAD size=296517 url="https://192.168.1.20:31177/v2/library/pause/blobs/sha256:fbe1a72f5dcd08ba4ca3ce3468c742786c1f6578c1f6bb401be1c4620d6ff705"
DEBU[0000] fetch response received digest="sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee" mediatype=application/vnd.docker.container.image.v1+json response.header.content-length=251 response.header.content-type=application/json response.header.date="Fri, 21 Jun 2024 06:45:48 GMT" response.header.vary=Origin response.header.www-authenticate="Bearer realm=\"http://192.168.1.20:31177/api/v1/tokens\",service=\"sigma\"" response.status="401 Unauthorized" size=901 url="https://192.168.1.20:31177/v2/library/pause/blobs/sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee"
DEBU[0000] Unauthorized digest="sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee" header="Bearer realm=\"http://192.168.1.20:31177/api/v1/tokens\",service=\"sigma\"" mediatype=application/vnd.docker.container.image.v1+json size=901
DEBU[0000] no scope specified for token auth challenge digest="sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee" host="192.168.1.20:31177" mediatype=application/vnd.docker.container.image.v1+json size=901
DEBU[0000] do request digest="sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee" mediatype=application/vnd.docker.container.image.v1+json request.header.accept="application/vnd.docker.container.image.v1+json, */*" request.header.user-agent=containerd/v1.7.15-k3s1 request.method=HEAD size=901 url="https://192.168.1.20:31177/v2/library/pause/blobs/sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee"
DEBU[0000] fetch response received digest="sha256:fbe1a72f5dcd08ba4ca3ce3468c742786c1f6578c1f6bb401be1c4620d6ff705" mediatype=application/vnd.docker.image.rootfs.diff.tar.gzip response.header.content-length=251 response.header.content-type=application/json response.header.date="Fri, 21 Jun 2024 06:45:48 GMT" response.header.vary=Origin response.header.www-authenticate="Bearer realm=\"http://192.168.1.20:31177/api/v1/tokens\",service=\"sigma\"" response.status="401 Unauthorized" size=296517 url="https://192.168.1.20:31177/v2/library/pause/blobs/sha256:fbe1a72f5dcd08ba4ca3ce3468c742786c1f6578c1f6bb401be1c4620d6ff705"
DEBU[0000] Unauthorized digest="sha256:fbe1a72f5dcd08ba4ca3ce3468c742786c1f6578c1f6bb401be1c4620d6ff705" header="Bearer realm=\"http://192.168.1.20:31177/api/v1/tokens\",service=\"sigma\"" mediatype=application/vnd.docker.image.rootfs.diff.tar.gzip size=296517
DEBU[0000] do request digest="sha256:fbe1a72f5dcd08ba4ca3ce3468c742786c1f6578c1f6bb401be1c4620d6ff705" mediatype=application/vnd.docker.image.rootfs.diff.tar.gzip request.header.accept="application/vnd.docker.image.rootfs.diff.tar.gzip, */*" request.header.user-agent=containerd/v1.7.15-k3s1 request.method=HEAD size=296517 url="https://192.168.1.20:31177/v2/library/pause/blobs/sha256:fbe1a72f5dcd08ba4ca3ce3468c742786c1f6578c1f6bb401be1c4620d6ff705"
ctr: failed to authorize: failed to fetch oauth token: unexpected status from GET request to http://192.168.1.20:31177/api/v1/tokens?scope=repository%3Alibrary%2Fpause%3Apull%2Cpush&service=sigma: 401 Unauthorized