Docker 27.2.0 breaks authentication (somehow)

Why are we doing this work

Docker 27.2.0 was released 2 days ago with these changes from 27.1.2.

Something in the changes has broken the release jobs in the Container Scanning analyzer project.

The error (example) is:

denied: requested access to the resource is denied

This was minimally reproduced in a test project:

  • Broken
  • Fixed

The fix was to downgrade the Docker image used.

To fix the CS project, I pinned the version of docker-latest_ruby in the build-images project.

This issue is to remove the pin once we work-out why docker 27.2.0 breaks our release.

Relevant links

Non-functional requirements

  • Documentation:
  • Feature flag:
  • Performance:
  • Testing:

Implementation plan

  • One of:
    • Option 1: rm -f ~/.docker/config.json before authenticating
    • Option 2: wait for an upstream fix
    • Option 3: stop appending the repository name to the registry host:port.
  • Unpin the version.
  • Take care of the undocumented use of registry name with image path https://github.com/docker/cli/issues/5382#issuecomment-2321110163. Done: gitlab-org/security-products/analyzers/container-scanning!3062 (merged)

Verification steps

Edited Sep 01, 2024 by Thiago Figueiró
Assignee Loading
Time tracking Loading