Open /etc/docker/certs.d/ghcr.io: permission denied #26880

alexellis · 2020-09-04T19:38:49Z

alexellis
Sep 4, 2020

When building a multi-arch image, the CI job for inlets is pushing each individual image, but failing on the manifest push.

This does work on the Docker Hub, but seems to fail for GHCR:

docker manifest create --amend ghcr.io/inlets/inlets:2.7.5-2-g9d88c2b ghcr.io/inlets/inlets:2.7.5-2-g9d88c2b-amd64 ghcr.io/inlets/inlets:2.7.5-2-g9d88c2b-arm64 ghcr.io/inlets/inlets:2.7.5-2-g9d88c2b-armhf
open /etc/docker/certs.d/ghcr.io: permission denied
Makefile:61: recipe for target 'manifest-ghcr' failed

https://travis-ci.com/github/inlets/inlets/builds/182828844#L939

Sources:

https://github.com/inlets/inlets - see Makefile and .travis.yml (I can’t include the links, the forum won’t let me)

There was an old issue back in Moby with a similar error with Docker 18.x, so I’ve upgraded to the latest 19.x in Travis, and it still had no effect.

Are manifests supported with GHCR?

Answered by alexellis

Sep 20, 2020

It seems like we both have the same version of Docker, however the Travis build fails on every build, without fail.

 Version:           19.03.12

I don’t know if I could push from my local machine (I probably can, given your output)

I wasn’t about to find much information on Google or the issue tracker on the error:

ghcr.io/inlets/inlets:2.7.5-2-g9d88c2b-armhf
open /etc/docker/certs.d/ghcr.io: permission denied
Makefile:61: recipe for target 'manifest-ghcr' failed
make: *** [manifest-ghcr] Error 1

The message about certs.d smells like Docker may not think that ghcr.io is a valid TLS certificate, and that it needs to dig up some self-signed cert.

I’m trying to isolate the issue here:

tra…

View full answer

alexellis · 2020-09-04T19:42:18Z

alexellis
Sep 4, 2020
Author

Here are two screenshots to show the differences between the Docker Hub and GHCR with regards to the manifests

Screenshot 2020-09-04 at 20.41.031972×318 34.2 KB

0 replies

alexellis · 2020-09-04T19:42:53Z

alexellis
Sep 4, 2020
Author

The erroring example (again, I can’t upload two screenshots)

Screenshot 2020-09-04 at 20.40.541986×250 25.6 KB

0 replies

clarkbw · 2020-09-04T21:55:39Z

clarkbw
Sep 4, 2020

I’m using buildx in Actions and I’m not seeing this error. I’ll give it a try to use the same manifest create as you have here.

0 replies

clarkbw · 2020-09-09T21:17:33Z

clarkbw
Sep 9, 2020

This worked for me on my machine… I’m not sure what’s going on with the error you’re seeing unless this is one of those things where the docker daemon needs to be restarted.

export Version=2.7.5
for Arch in arm64 amd64 armhf; do 
  docker pull inlets/inlets:${Version}-${Arch} 
  docker tag inlets/inlets:${Version}-${Arch} ghcr.io/$USER/inlets:${Version}-${Arch}
  docker push ghcr.io/$USER/inlets:${Version}-${Arch}
done
docker pull inlets/inlets:${Version}

docker tag inlets/inlets:${Version} ghcr.io/$USER/inlets:${Version}

docker push ghcr.io/$USER/inlets:${Version}
docker manifest create --amend ghcr.io/$USER/inlets:${Version} ghcr.io/$USER/inlets:${Version}-amd64 ghcr.io/$USER/inlets:${Version}-arm64 ghcr.io/$USER/inlets:${Version}-armhf
Created manifest list ghcr.io/clarkbw/inlets:2.7.5

Which created this:

GitHub

Build software better, together

GitHub is where people build software. More than 50 million people use GitHub to discover, fork, and contribute to over 100 million projects.

0 replies

clarkbw · 2020-09-09T22:41:08Z

clarkbw
Sep 9, 2020

docker --version
Docker version 19.03.12, build 48a66213fe

0 replies

alexellis · 2020-09-20T09:05:12Z

alexellis
Sep 20, 2020
Author

It seems like we both have the same version of Docker, however the Travis build fails on every build, without fail.

 Version:           19.03.12

I don’t know if I could push from my local machine (I probably can, given your output)

I wasn’t about to find much information on Google or the issue tracker on the error:

ghcr.io/inlets/inlets:2.7.5-2-g9d88c2b-armhf
open /etc/docker/certs.d/ghcr.io: permission denied
Makefile:61: recipe for target 'manifest-ghcr' failed
make: *** [manifest-ghcr] Error 1

The message about certs.d smells like Docker may not think that ghcr.io is a valid TLS certificate, and that it needs to dig up some self-signed cert.

I’m trying to isolate the issue here:

travis-ci.com

Travis CI - Test and Deploy with Confidence

0 replies

alexellis · 2020-09-20T09:11:24Z

alexellis
Sep 20, 2020
Author

GitHub

alexellis/inlets-ghcr

inlets-ghcr. Contribute to alexellis/inlets-ghcr development by creating an account on GitHub.

0 replies

alexellis · 2020-09-20T09:24:32Z

alexellis
Sep 20, 2020
Author

Seems related - docker/for-linux#396

0 replies

alexellis · 2020-09-20T09:28:59Z

alexellis
Sep 20, 2020
Author

Screenshot 2020-09-20 at 10.24.581968×170 44.1 KB

🤦‍♂️ <- this wasn’t required for the Docker Hub.

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

GitHub Community

Open /etc/docker/certs.d/ghcr.io: permission denied #26880

{{title}}

Replies: 9 comments

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

Open /etc/docker/certs.d/ghcr.io: permission denied #26880

Replies: 9 comments

alexellis Sep 4, 2020 Author

alexellis Sep 4, 2020 Author

alexellis Sep 20, 2020 Author

alexellis Sep 20, 2020 Author

alexellis Sep 20, 2020 Author

alexellis Sep 20, 2020 Author

alexellis
Sep 4, 2020
Author

alexellis
Sep 4, 2020
Author

alexellis
Sep 20, 2020
Author

alexellis
Sep 20, 2020
Author

alexellis
Sep 20, 2020
Author

alexellis
Sep 20, 2020
Author