Access denied on public package pulled by docker

[korthout]

Select Topic Area

Bug

Body

The documentation on package visibility is quite clear:

A public package can be accessed anonymously without authentication.

I cannot access my public container package anonymously.

$ docker logout
Removing login credentials for https://index.docker.io/v1/

$ docker pull ghcr.io/korthout/camunda-platform-rest-api:latest
Error response from daemon: Head "https://ghcr.io/v2/korthout/camunda-platform-rest-api/manifests/latest": denied: denied

What am I missing?

• The package is set to public visibility
• The related repository (korthout/camunda-platform-rest-api) has public visibility as well
• I've tried to disable/enable the package's setting to Inherit access from source repository (recommended), but the result is the same

Any help is appreciated, but this appears like a bug to me.

[krystian-jedrzejowski-zazoon]

I have the same issue

[jibbolo]

The same is happening to me

~ ➤ docker logout
Removing login credentials for https://index.docker.io/v1/

~ ➤ docker pull ghcr.io/jibbolo/cwdash:latest
Error response from daemon: Head "https://ghcr.io/v2/jibbolo/cwdash/manifests/latest": denied: denied

[korthout]

I want to add that this is blocking some users from getting started, and I wonder if I should move the container image over to another registry. I prefer to leave it on ghcr.io, but we're nearing two weeks without an official reply. It would be nice to know if anyone from GitHub is looking into this.

[airtower-luna]

If you use docker logout without a domain it logs you out from Docker Hub, not GHCR. So if you have a credential for ghcr.io it'll stay. If you want to test anonymous access to your image, you need to use docker logout ghcr.io.

[korthout]

Thanks ❤️ This resolves the issue!

[itonyr]

+1 this helped me as well years later :)