Hi Saul, If possible, please ask the user to help provide the whole ansible.log and /var/log/daemon.log. From the log it seems docker fail to login to registry.local. Here is some debug method: 1. Try to login with docker cmd, username is "admin", password is "admin_password" defined in localhost.yml: controller-0:~$ sudo docker login registry.local:9001 Username: admin Password: ...... Login Succeeded 2. If cannot login success, have a check with docker proxy setting in /etc/systemd/system/docker.service.d/http-proxy.conf "registry.local" should be at NO_PROXY line like below: controller-0:/home/sysadmin# cat /etc/systemd/system/docker.service.d/http-proxy.conf [Service] Environment="HTTP_PROXY=PROXY_XXX" Environment="HTTPS_PROXY=PROXY_XXX " Environment="NO_PROXY=localhost,127.0.0.1,registry.local,10.96.0.1,192.188.204.2,192.188.204.3,192.192.192.2,192.192.192.3,192.188.204.4,192.192.192.4,registry.dcp-dev.intel.com" Best Regards Shuicheng -----Original Message----- From: Saul Wold <sgw@linux.intel.com> Sent: Friday, March 27, 2020 2:51 AM To: starlingx-discuss@lists.starlingx.io Subject: Re: [Starlingx-discuss] error access docker registry.. TLS handshake issue Folks, Can anyone help with moving this question forward? I understand from the user that they are adding additional certificates in order to enable their proxy connections. I am not sure if this is part of the problem with the TLS Handshake or not. Thanks Sau! On 3/20/20 8:05 AM, Jones, Bruce E wrote:
We have a user who is hitting this error. Any idea what might be going on?
TASK [common/push-docker-images : Log in to local registry] ********************************************************************** ********************************************************************** ************
fatal: [localhost]: FAILED! => {"changed": false, "msg": "Logging into registry.local:9001 for user admin failed - 500 Server Error: Internal Server Error (\"Get https://registry.local:9001/v2/: Get https://192.168.204.1:9002/token/?account=admin&client_id=docker&offline_token=true&service=192.168.204.1%3A9001: net/http: TLS handshake timeout\")"}
Thanks!
brucej
_______________________________________________ Starlingx-discuss mailing list Starlingx-discuss@lists.starlingx.io http://lists.starlingx.io/cgi-bin/mailman/listinfo/starlingx-discuss
_______________________________________________ Starlingx-discuss mailing list Starlingx-discuss@lists.starlingx.io http://lists.starlingx.io/cgi-bin/mailman/listinfo/starlingx-discuss