Image from private registry - a

[logopk]

Maybe only a config problem:

my docker provider returns an image from my private registry. (first time I have used my registry ;-) )

diun_1  | Wed, 03 Jun 2020 12:21:54 CEST ERR Cannot run job error="Error reading manifest v0.36.0-arm in registry.<xxx>:5000/logopk/cadvisor: unauthorized: authentication required" provider=docker-remote-pi


diun_1  | Wed, 03 Jun 2020 12:22:31 CEST DBG [containers/image] reference rewritten from 'registry.<xxx>:5000/logopk/cadvisor:v0.36.0-arm' to 'registry.<xxx>:5000/logopk/cadvisor:v0.36.0-arm'
diun_1  | Wed, 03 Jun 2020 12:22:31 CEST DBG [containers/image] Trying to access "registry.<xxx>:5000/logopk/cadvisor:v0.36.0-arm"
diun_1  | Wed, 03 Jun 2020 12:22:31 CEST DBG [containers/image] Returning credentials from DockerAuthConfig
diun_1  | Wed, 03 Jun 2020 12:22:31 CEST DBG [containers/image] Using registries.d directory /etc/containers/registries.d for sigstore configuration
diun_1  | Wed, 03 Jun 2020 12:22:31 CEST DBG [containers/image]  No signature storage configuration found for registry.<xxx>:5000/logopk/cadvisor:v0.36.0-arm
diun_1  | Wed, 03 Jun 2020 12:22:31 CEST DBG [containers/image] Looking for TLS certificates and private keys in /etc/docker/certs.d/registry.<xxx>:5000
diun_1  | Wed, 03 Jun 2020 12:22:31 CEST DBG [containers/image] GET https://registry.<xxx>:5000/v2/

I see that one can add regopts to static images, but how can I handle registry-entries in providers.

I have tied to mount my .docker/config.json to diun container as the debug-output DockerAuthConfig points to, but that will not work.

services:
  diun:
    image: crazymax/diun:2.6.1
    volumes:
      - "./userfile:/userfile"
      - "./pwfile:/pwfile"
      - "./data:/data"
      - "./certs:/certs"
      - "./certs-pi:/certs-pi"
      - ./certs.pem:/etc/ssl/certs/ca-certificates.crt:ro
      - "./diun.yml:/diun.yml:ro"
      - "/var/run/docker.sock:/var/run/docker.sock"
      - "./config.json:/.docker/config.json"
    environment:
      - "TZ=Europe/Paris"
      - "LOG_LEVEL=debug"
      - "LOG_JSON=false"
    restart: always

Any suggestion?

[crazy-max]

@logopk What your diun.yml looks like?

[logopk]

watch:
  workers: 20
  schedule: "*/30 * * * *"
  first_check_notif: false

providers:
  docker:
    mydocker:
      watch_stopped: true
      watch_by_default: true
    remote:
      endpoint: tcp://<#1 redacted>:2376
      tls_certs_path: /certs
      tls_verify: true
      watch_stopped: true
      watch_by_default: true
# this does not work
    remote-pi:
      endpoint: tcp://<#2 redacted>:2376
      tls_certs_path: /certs-pi
      tls_verify: true
      watch_stopped: true
      watch_by_default: true
  
  static:
    - name: debian:buster-slim
      watch_repo: false
      os: linux
      max_tags: 1
    - name: nextcloud:apache
      watch_repo: false
      os: linux
      max_tags: 1
    - name: php:7.2-apache
      watch_repo: false
      os: linux
      max_tags: 1
    - name: golang:alpine
      watch_repo: false
      os: linux
      max_tags: 1
...
# this works
    - name: registry.<xxx>:5000/logopk/cadvisor:v0.36.0-arm
      watch_repo: true
      os: linux
      max_tags: 1
      regopts_id: myregistry

notif:
  mail:
    enable: true
...

regopts:
  myregistry:
    username: xxx
    password: yyy

[crazy-max]

@logopk

# this works
    - name: registry.<xxx>:5000/logopk/cadvisor:v0.36.0-arm

So it works?

[crazy-max]

@logopk I think I get it. If you want to set regopts_id for a Docker container, you have to use labels:

# ./docker-compose.yml
version: "3.5"

services:
  diun:
    image: crazymax/diun:2.6.1
    volumes:
      - "./userfile:/userfile"
      - "./pwfile:/pwfile"
      - "./diun.yml:/diun.yml:ro"
      - "/var/run/docker.sock:/var/run/docker.sock"
    environment:
      - "TZ=Europe/Paris"
      - "LOG_LEVEL=debug"
      - "LOG_JSON=false"
    restart: always

  cadvisor:
    image: registry.<xxx>:5000/logopk/cadvisor:v0.36.0-arm
    labels:
      - "diun.regopts_id=myregistry"
      - "diun.watch_repo=true"
      - "diun.max_tags=1"
    restart: always

# ./diun.yml
watch:
  workers: 20
  schedule: 0 0 * * * *

regopts:
  myregistry:
    username_file: ./userfile
    password_file: ./pwfile

providers:
  docker:
    mydocker:
      watch_stopped: true
      watch_by_default: true

[logopk]

Hey that works! Thank you.
Nevertheless that should be documented here. Or is it already?

[crazy-max]

@logopk This is already documented here: https://github.com/crazy-max/diun/blob/master/doc/providers/docker.md

[logopk]

. I see. Thank you! I promise to RTFM.