Docker 27.2.0 breaks authentication (somehow)
Why are we doing this work
Docker 27.2.0 was released 2 days ago with these changes from 27.1.2.
Something in the changes has broken the release jobs in the Container Scanning analyzer project.
The error (example) is:
denied: requested access to the resource is denied
This was minimally reproduced in a test project:
The fix was to downgrade the Docker image used.
To fix the CS project, I pinned the version of docker-latest_ruby in the build-images project.
This issue is to remove the pin once we work-out why docker 27.2.0 breaks our release.
Relevant links
Non-functional requirements
-
Documentation: -
Feature flag: -
Performance: -
Testing:
Implementation plan
-
One of: - Option 1:
rm -f ~/.docker/config.jsonbefore authenticating - Option 2: wait for an upstream fix
- Option 3: stop appending the repository name to the registry host:port.
- Option 1:
-
Unpin the version. -
Take care of the undocumented use of registry name with image path https://github.com/docker/cli/issues/5382#issuecomment-2321110163. Done: gitlab-org/security-products/analyzers/container-scanning!3062 (merged)
Verification steps
Edited by Thiago Figueiró