Gitlab (docker image) Registry login fails from a docker client with v > 8.03

Summary

Trying to login from a host running docker > 8.03 fails.

I manage an Omnibus On Premise instance (v11.1.1 up-to-date)

Steps to reproduce

1. For example, download the latest Ubuntu 18.04 LTS on ubuntu.com and install it on a fresh VM
2. Install docker with PPA
3. You will get docker 8.06, the latest available in the PPA
4. Try docker login. It works (docker.com)
5. Try docker login docker.gitlab.my-org.com
6. You'll get a FORBIDDEN error

What is the current bug behavior?

docker login fails with denied: access forbidden

What is the expected correct behavior?

docker login success

Relevant logs and/or screenshots

Output of checks

Results of GitLab environment info

Expand for output related to GitLab environment info

$ sudo gitlab-rake gitlab:env:info
System information
System:         Ubuntu 16.04
Current User:   git
Using RVM:      no
Ruby Version:   2.4.4p296
Gem Version:    2.7.6
Bundler Version:1.16.2
Rake Version:   12.3.1
Redis Version:  3.2.11
Git Version:    2.17.1
Sidekiq Version:5.1.3
Go Version:     unknown
GitLab information
Version:        11.1.1

Revision:       94b9323

Directory:      /opt/gitlab/embedded/service/gitlab-rails

DB Adapter:     postgresql

URL:            http://gitlab.sirap.fr

HTTP Clone URL: http://gitlab.sirap.fr/some-group/some-project.git
SSH Clone URL:  git@gitlab.sirap.fr:some-group/some-project.git
Using LDAP:     no
Using Omniauth: yes
Omniauth Providers: github, Groupe_SIRAP
GitLab Shell
Version:        7.1.4
Repository storage paths:

Results of GitLab application Check

Expand for output related to the GitLab application check

$ sudo gitlab-rake gitlab:check SANITIZE=true
Checking GitLab Shell ...
GitLab Shell version >= 7.1.4 ? ... OK (7.1.4)
Repo base directory exists?
default... yes
Repo storage directories are symlinks?
default... no
Repo paths owned by git:root, or git:git?
default... yes
Repo paths access is drwxrws---?
default... yes
hooks directories in repos are links: ...
4/2 ... ok
8/7 ... ok
2/8 ... ok
13/11 ... ok
23/12 ... ok
23/13 ... ok
9/15 ... ok
39/16 ... ok
8/18 ... ok
8/20 ... ok
8/22 ... ok
4/28 ... ok
8/29 ... ok
8/30 ... ok
8/31 ... ok
8/35 ... ok
5/39 ... ok
5/40 ... ok
33/41 ... ok
33/42 ... ok
23/43 ... ok
39/44 ... ok
33/45 ... ok
22/47 ... ok
22/48 ... ok
13/49 ... ok
5/52 ... ok
14/53 ... ok
13/54 ... ok
14/55 ... ok
33/56 ... ok
8/58 ... ok
33/59 ... ok
5/60 ... ok
5/61 ... ok
5/63 ... ok
5/64 ... ok
33/65 ... ok
33/67 ... ok
5/68 ... ok
5/69 ... ok
33/70 ... ok
5/71 ... ok
2/72 ... ok
4/73 ... ok
4/74 ... ok
5/76 ... ok
33/77 ... ok
33/78 ... ok
33/79 ... ok
8/80 ... ok
8/82 ... ok
8/83 ... repository is empty
8/84 ... ok
33/85 ... ok
8/86 ... ok
33/87 ... ok
22/88 ... ok
33/89 ... repository is empty
2/90 ... ok
5/91 ... ok
5/92 ... ok
5/93 ... repository is empty
5/94 ... ok
5/95 ... ok
8/97 ... ok
2/98 ... ok
4/99 ... ok
8/100 ... ok
8/102 ... repository is empty
8/103 ... repository is empty
5/104 ... ok
5/105 ... ok
5/106 ... ok
5/107 ... ok
5/108 ... ok
33/109 ... ok
5/110 ... ok
5/111 ... ok
8/113 ... ok
34/114 ... ok
33/115 ... repository is empty
33/116 ... ok
23/117 ... ok
8/118 ... ok
33/119 ... ok
5/120 ... ok
5/121 ... ok
33/123 ... repository is empty
5/124 ... ok
8/125 ... ok
2/126 ... ok
8/127 ... ok
5/128 ... ok
5/129 ... ok
5/130 ... ok
5/131 ... ok
5/132 ... ok
8/133 ... repository is empty
8/134 ... repository is empty
37/135 ... ok
37/136 ... ok
37/137 ... ok
37/138 ... ok
33/142 ... ok
33/143 ... ok
8/144 ... repository is empty
39/145 ... repository is empty
8/146 ... repository is empty
33/147 ... repository is empty
8/148 ... repository is empty
2/149 ... repository is empty
8/150 ... repository is empty
8/151 ... ok
39/152 ... repository is empty
33/153 ... ok
33/154 ... repository is empty
5/155 ... ok
37/156 ... repository is empty
8/157 ... ok
8/158 ... ok
5/159 ... ok
5/160 ... ok
8/161 ... repository is empty
5/162 ... ok
33/163 ... repository is empty
33/165 ... repository is empty
8/166 ... ok
36/167 ... ok
33/170 ... ok
44/171 ... repository is empty
13/173 ... ok
33/174 ... ok
5/175 ... ok
5/176 ... ok
8/177 ... ok
8/178 ... repository is empty
1/179 ... repository is empty
33/180 ... repository is empty
33/181 ... ok
36/182 ... ok
34/183 ... ok
35/186 ... ok
35/187 ... ok
38/188 ... ok
5/189 ... ok
5/190 ... ok
35/191 ... ok
2/192 ... ok
8/193 ... ok
33/194 ... ok
23/195 ... ok
22/196 ... ok
43/197 ... ok
26/198 ... ok
3/199 ... ok
13/200 ... ok
14/201 ... ok
2/202 ... ok
27/203 ... ok
18/204 ... ok
8/205 ... ok
13/206 ... ok
8/207 ... repository is empty
8/209 ... ok
8/210 ... ok
34/213 ... ok
33/215 ... ok
39/216 ... ok
33/217 ... repository is empty
47/218 ... repository is empty
33/219 ... ok
35/222 ... ok
8/224 ... ok
35/225 ... ok
5/226 ... ok
5/227 ... ok
35/228 ... ok
33/229 ... ok
33/230 ... ok
33/231 ... repository is empty
8/233 ... ok
22/234 ... ok
5/235 ... ok
33/238 ... ok
8/239 ... ok
34/240 ... ok
33/241 ... repository is empty
50/242 ... ok
33/243 ... repository is empty
33/244 ... ok
5/245 ... ok
8/246 ... ok
22/247 ... ok
22/249 ... ok
8/250 ... ok
8/251 ... ok
33/252 ... ok
33/253 ... ok
35/254 ... repository is empty
33/255 ... ok
2/256 ... ok
52/257 ... ok
35/260 ... ok
5/261 ... ok
23/262 ... ok
33/263 ... ok
8/264 ... ok
23/265 ... ok
8/266 ... repository is empty
50/267 ... repository is empty
8/268 ... repository is empty
8/269 ... ok
8/270 ... ok
33/271 ... ok
35/272 ... ok
23/275 ... ok
50/276 ... repository is empty
8/279 ... ok
2/280 ... ok
115/281 ... ok
39/283 ... ok
33/284 ... ok
8/285 ... ok
2/286 ... ok
2/287 ... ok
33/288 ... ok
55/290 ... repository is empty
33/291 ... ok
33/292 ... repository is empty
36/293 ... ok
115/294 ... ok
115/295 ... ok
8/296 ... ok
36/297 ... ok
50/298 ... repository is empty
8/299 ... ok
8/300 ... ok
119/301 ... ok
8/302 ... repository is empty
Running /opt/gitlab/embedded/service/gitlab-shell/bin/check
Check GitLab API access: OK
Redis available via internal API: OK
Access to /var/opt/gitlab/.ssh/authorized_keys: OK
gitlab-shell self-check successful
Checking GitLab Shell ... Finished
Checking Sidekiq ...
Running? ... yes
Number of Sidekiq processes ... 1
Checking Sidekiq ... Finished
Reply by email is disabled in config/gitlab.yml
Checking LDAP ...
LDAP is disabled in config/gitlab.yml
Checking LDAP ... Finished
Checking GitLab ...
Git configured correctly? ... yes
Database config exists? ... yes
All migrations up? ... yes
Database contains orphaned GroupMembers? ... no
GitLab config exists? ... yes
GitLab config up to date? ... yes
Log directory writable? ... yes
Tmp directory writable? ... yes
Uploads directory exists? ... yes
Uploads directory has correct permissions? ... yes
Uploads directory tmp has correct permissions? ... no
Try fixing it:
sudo chown -R git /var/opt/gitlab/gitlab-rails/uploads
sudo find /var/opt/gitlab/gitlab-rails/uploads -type f -exec chmod 0644 {} ;
sudo find /var/opt/gitlab/gitlab-rails/uploads -type d -not -path /var/opt/gitlab/gitlab-rails/uploads -exec chmod 0700 {} ;
For more information see:
doc/install/installation.md in section "GitLab"
Please fix the error above and rerun the checks.
Init script exists? ... skipped (omnibus-gitlab has no init script)
Init script up-to-date? ... skipped (omnibus-gitlab has no init script)
Projects have namespace: ...
4/2 ... yes
8/7 ... yes
2/8 ... yes
13/11 ... yes
23/12 ... yes
23/13 ... yes
9/15 ... yes
39/16 ... yes
8/18 ... yes
8/20 ... yes
8/22 ... yes
4/28 ... yes
8/29 ... yes
8/30 ... yes
8/31 ... yes
8/35 ... yes
5/39 ... yes
5/40 ... yes
33/41 ... yes
33/42 ... yes
23/43 ... yes
39/44 ... yes
33/45 ... yes
22/47 ... yes
22/48 ... yes
13/49 ... yes
5/52 ... yes
14/53 ... yes
13/54 ... yes
14/55 ... yes
33/56 ... yes
8/58 ... yes
33/59 ... yes
5/60 ... yes
5/61 ... yes
5/63 ... yes
5/64 ... yes
33/65 ... yes
33/67 ... yes
5/68 ... yes
5/69 ... yes
33/70 ... yes
5/71 ... yes
2/72 ... yes
4/73 ... yes
4/74 ... yes
5/76 ... yes
33/77 ... yes
33/78 ... yes
33/79 ... yes
8/80 ... yes
8/82 ... yes
8/83 ... yes
8/84 ... yes
33/85 ... yes
8/86 ... yes
33/87 ... yes
22/88 ... yes
33/89 ... yes
2/90 ... yes
5/91 ... yes
5/92 ... yes
5/93 ... yes
5/94 ... yes
5/95 ... yes
8/97 ... yes
2/98 ... yes
4/99 ... yes
8/100 ... yes
8/102 ... yes
8/103 ... yes
5/104 ... yes
5/105 ... yes
5/106 ... yes
5/107 ... yes
5/108 ... yes
33/109 ... yes
5/110 ... yes
5/111 ... yes
8/113 ... yes
34/114 ... yes
33/115 ... yes
33/116 ... yes
23/117 ... yes
8/118 ... yes
33/119 ... yes
5/120 ... yes
5/121 ... yes
33/123 ... yes
5/124 ... yes
8/125 ... yes
2/126 ... yes
8/127 ... yes
5/128 ... yes
5/129 ... yes
5/130 ... yes
5/131 ... yes
5/132 ... yes
8/133 ... yes
8/134 ... yes
37/135 ... yes
37/136 ... yes
37/137 ... yes
37/138 ... yes
33/142 ... yes
33/143 ... yes
8/144 ... yes
39/145 ... yes
8/146 ... yes
33/147 ... yes
8/148 ... yes
2/149 ... yes
8/150 ... yes
8/151 ... yes
39/152 ... yes
33/153 ... yes
33/154 ... yes
5/155 ... yes
37/156 ... yes
8/157 ... yes
8/158 ... yes
5/159 ... yes
5/160 ... yes
8/161 ... yes
5/162 ... yes
33/163 ... yes
33/165 ... yes
8/166 ... yes
36/167 ... yes
33/170 ... yes
44/171 ... yes
13/173 ... yes
33/174 ... yes
5/175 ... yes
5/176 ... yes
8/177 ... yes
8/178 ... yes
1/179 ... yes
33/180 ... yes
33/181 ... yes
36/182 ... yes
34/183 ... yes
35/186 ... yes
35/187 ... yes
38/188 ... yes
5/189 ... yes
5/190 ... yes
35/191 ... yes
2/192 ... yes
8/193 ... yes
33/194 ... yes
23/195 ... yes
22/196 ... yes
43/197 ... yes
26/198 ... yes
3/199 ... yes
13/200 ... yes
14/201 ... yes
2/202 ... yes
27/203 ... yes
18/204 ... yes
8/205 ... yes
13/206 ... yes
8/207 ... yes
8/209 ... yes
8/210 ... yes
34/213 ... yes
33/215 ... yes
39/216 ... yes
33/217 ... yes
47/218 ... yes
33/219 ... yes
35/222 ... yes
8/224 ... yes
35/225 ... yes
5/226 ... yes
5/227 ... yes
35/228 ... yes
33/229 ... yes
33/230 ... yes
33/231 ... yes
8/233 ... yes
22/234 ... yes
5/235 ... yes
33/238 ... yes
8/239 ... yes
34/240 ... yes
33/241 ... yes
50/242 ... yes
33/243 ... yes
33/244 ... yes
5/245 ... yes
8/246 ... yes
22/247 ... yes
22/249 ... yes
8/250 ... yes
8/251 ... yes
33/252 ... yes
33/253 ... yes
35/254 ... yes
33/255 ... yes
2/256 ... yes
52/257 ... yes
35/260 ... yes
5/261 ... yes
23/262 ... yes
33/263 ... yes
8/264 ... yes
23/265 ... yes
8/266 ... yes
50/267 ... yes
8/268 ... yes
8/269 ... yes
8/270 ... yes
33/271 ... yes
35/272 ... yes
23/275 ... yes
50/276 ... yes
8/279 ... yes
2/280 ... yes
115/281 ... yes
39/283 ... yes
33/284 ... yes
8/285 ... yes
2/286 ... yes
2/287 ... yes
33/288 ... yes
55/290 ... yes
33/291 ... yes
33/292 ... yes
36/293 ... yes
115/294 ... yes
115/295 ... yes
8/296 ... yes
36/297 ... yes
50/298 ... yes
8/299 ... yes
8/300 ... yes
119/301 ... yes
8/302 ... yes
Redis version >= 2.8.0? ... yes
Ruby version >= 2.3.5 ? ... yes (2.4.4)
Git version >= 2.9.5 ? ... yes (2.17.1)
Git user has default SSH configuration? ... yes
Active users: ... 37
Checking GitLab ... Finished

Possible fixes

Downgrading to docker v18.03 solve the login issue.

Of course, this is just a hack, not a solution.