Skip to content

client side manifest list merging does not use insecure config passed in buildx create #354

@SHenry07

Description

@SHenry07

ENV

private registry with http

harbor v2.0.2-e91b4ff1

multi-node context

# node-amd64
$ docker info
Client:
 Debug Mode: false
 Plugins:
  app: Docker Application (Docker Inc., v0.8.0)
  buildx: Build with BuildKit (Docker Inc., v0.3.1-tp-docker)

Server:
 Containers: 4
  Running: 2
  Paused: 0
  Stopped: 2
 Images: 13
 Server Version: 19.03.12

# node-arm64
$ docker info 
Client:
 Debug Mode: false
 Plugins:
  app: Docker Application (Docker Inc., v0.8.0)
  buildx: Build with BuildKit (Docker Inc., v0.3.1-tp-docker)

Server:
 Containers: 39
  Running: 33
  Paused: 0
  Stopped: 6
 Images: 38
 Server Version: 19.03.12

docker context

$ docker context ls
NAME                DESCRIPTION                       DOCKER ENDPOINT               KUBERNETES ENDPOINT                 ORCHESTRATOR

node-amd64                                                    unix:///var/run/docker.sock                                         
node-arm64-2                                                  tcp://10.13.30.109:2375   

buildx

docker buildx create --name mybuild2 --use --config ./config.toml --driver-opt network=host node-amd64
docker buildx create --append --name mybuild2 --config ./config.toml --driver-opt network=host node-arm64-2 
docker buildx inspect --bootstrap

config.toml

debug = true

[registry."10.13.30.108"]
  http = true
  insecure = true

Error

$ docker buildx build  --progress=plain -t 10.13.30.108/jenkins/jenkins:v11 --platform linux/arm64,linux/amd64 --push .
#1 [internal] load .dockerignore
#1 transferring context: 2B done
#1 DONE 0.0s

#2 [internal] load build definition from Dockerfile
#2 transferring dockerfile: 32B done
#2 DONE 0.0s

#4 [internal] load build definition from Dockerfile
#4 transferring dockerfile: 32B 0.0s done
#4 DONE 0.0s

#3 [internal] load .dockerignore
#3 transferring context: 2B done
#3 DONE 0.0s

#6 [linux/arm64 internal] load metadata for docker.io/library/alpine:3.12.0
#6 ...

#5 [linux/amd64 internal] load metadata for docker.io/library/alpine:3.12.0
#5 DONE 5.7s

#8 [linux/amd64 1/2] FROM docker.io/library/alpine:3.12.0@sha256:1855180708...
#8 resolve docker.io/library/alpine:3.12.0@sha256:185518070891758909c9f839cf4ca393ee977ac378609f700f60a771a2dfe321 done
#8 DONE 0.0s

#7 [linux/amd64 2/2] RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.ustc.edu....
#7 CACHED

#9 exporting to image
#9 exporting layers done
#9 exporting manifest sha256:6670f5256bd8816bc4bcc7e80ac6983df8245ab769327ccecc2329d89c15f63e done
#9 exporting config sha256:561f79c2438372998c3252cbe73f282680578aa6eb32693361b997424b9d4bba done
#9 exporting manifest list sha256:95cdcb91015829408c652756f5dc550bdd849c0ae36cd9b9a3de7f10faba9e50 done
#9 pushing layers 0.1s done
#9 pushing manifest for 10.13.30.108/jenkins/jenkins
#9 pushing manifest for 10.13.30.108/jenkins/jenkins 0.1s done
#9 DONE 0.2s

#6 [linux/arm64 internal] load metadata for docker.io/library/alpine:3.12.0
#6 DONE 8.6s

#10 [linux/arm64 1/2] FROM docker.io/library/alpine:3.12.0@sha256:1855180708...
#10 resolve docker.io/library/alpine:3.12.0@sha256:185518070891758909c9f839cf4ca393ee977ac378609f700f60a771a2dfe321 done
#10 DONE 0.0s

#11 [linux/arm64 2/2] RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.ustc.edu....
#11 CACHED

#9 exporting to image
#9 exporting layers done
#9 pushing layers 0.1s done
#9 exporting manifest sha256:b49694fd977fcd25d58ce44ac903a0ec1278f193e77a9184626c20a6622d6c9b done
#9 exporting config sha256:f50913863b6ea99b7d9247eb5f035f55b9cb84db4088caedd87bc0858206a20c done
#9 exporting manifest list sha256:f438ee70add2e3bcdf3e119fa5eb97526aa1291c8a5d6e6bd6c12d63716f79d9 done
#9 pushing manifest for 10.13.30.108/jenkins/jenkins 0.2s done
#9 DONE 0.3s

#12 merging manifest list 10.13.30.108/jenkins/jenkins:v11
#12 ERROR: httpReaderSeeker: failed open: failed to do request: Get https://10.13.30.108/v2/jenkins/jenkins/manifests/sha256:95cdcb91015829408c652756f5dc550bdd849c0ae36cd9b9a3de7f10faba9e50: dial tcp 10.13.30.108:443: connect: connection refused
------
 > merging manifest list 10.13.30.108/jenkins/jenkins:v11:
------

other same issue

#311

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions