[Starlingx-discuss] error access docker registry.. TLS handshake issue

Lin, Shuicheng shuicheng.lin at intel.com
Fri Mar 27 07:49:28 UTC 2020


Hi Saul,
If possible, please ask the user to help provide the whole ansible.log and /var/log/daemon.log.
From the log it seems docker fail to login to registry.local.
Here is some debug method:
1. Try to login with docker cmd, username is "admin", password is "admin_password" defined in localhost.yml:
controller-0:~$ sudo docker login registry.local:9001
Username: admin
Password:
......
Login Succeeded
2. If cannot login success, have a check with docker proxy setting in /etc/systemd/system/docker.service.d/http-proxy.conf
"registry.local" should be at NO_PROXY line like below:
controller-0:/home/sysadmin# cat /etc/systemd/system/docker.service.d/http-proxy.conf
[Service]
Environment="HTTP_PROXY=PROXY_XXX"
Environment="HTTPS_PROXY=PROXY_XXX "
Environment="NO_PROXY=localhost,127.0.0.1,registry.local,10.96.0.1,192.188.204.2,192.188.204.3,192.192.192.2,192.192.192.3,192.188.204.4,192.192.192.4,registry.dcp-dev.intel.com"

Best Regards
Shuicheng

-----Original Message-----
From: Saul Wold <sgw at linux.intel.com> 
Sent: Friday, March 27, 2020 2:51 AM
To: starlingx-discuss at lists.starlingx.io
Subject: Re: [Starlingx-discuss] error access docker registry.. TLS handshake issue

Folks,

Can anyone help with moving this question forward?

I understand from the user that they are adding additional certificates in order to enable their proxy connections. I am not sure if this is part of the problem with the TLS Handshake or not.

Thanks
    Sau!


On 3/20/20 8:05 AM, Jones, Bruce E wrote:
> We have a user who is hitting this error.  Any idea what might be going on?
> 
> TASK [common/push-docker-images : Log in to local registry]
> **********************************************************************
> **********************************************************************
> ************
> 
> fatal: [localhost]: FAILED! => {"changed": false, "msg": "Logging into
> registry.local:9001 for user admin failed - 500 Server Error: Internal 
> Server Error (\"Get https://registry.local:9001/v2/: Get
> https://192.168.204.1:9002/token/?account=admin&client_id=docker&offline_token=true&service=192.168.204.1%3A9001: 
> net/http: TLS handshake timeout\")"}
> 
> Thanks!
> 
>               brucej
> 
> 
> _______________________________________________
> Starlingx-discuss mailing list
> Starlingx-discuss at lists.starlingx.io
> http://lists.starlingx.io/cgi-bin/mailman/listinfo/starlingx-discuss
> 

_______________________________________________
Starlingx-discuss mailing list
Starlingx-discuss at lists.starlingx.io
http://lists.starlingx.io/cgi-bin/mailman/listinfo/starlingx-discuss


More information about the Starlingx-discuss mailing list