tripleo-ansible-centos-8-molecule-tripleo_container_* jobs failing to pull containers

Bug #1867787 reported by Emilien Macchi
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Fix Released
High
Emilien Macchi

Bug Description

A few molecule jobs involving containers are failing to run:

podman run -itd --systemd --name podman_container1 fedora bash
Trying to pull registry.access.redhat.com/podman_container1...
  name unknown: Repo not found
Trying to pull registry.fedoraproject.org/podman_container1...
  manifest unknown: manifest unknown
Trying to pull registry.centos.org/podman_container1...
  manifest unknown: manifest unknown
Trying to pull docker.io/library/podman_container1...
  denied: requested access to the resource is denied
Error: unable to pull podman_container1: 4 errors occurred:
 * Error initializing source docker://registry.access.redhat.com/podman_container1:latest: Error reading manifest latest in registry.access.redhat.com/podman_container1: name unknown: Repo not found
 * Error initializing source docker://registry.fedoraproject.org/podman_container1:latest: Error reading manifest latest in registry.fedoraproject.org/podman_container1: manifest unknown: manifest unknown
 * Error initializing source docker://registry.centos.org/podman_container1:latest: Error reading manifest latest in registry.centos.org/podman_container1: manifest unknown: manifest unknown
 * Error initializing source docker://podman_container1:latest: Error reading manifest latest in docker.io/library/podman_container1: errors:
denied: requested access to the resource is denied
unauthorized: authentication required

It's probably the podman commands which changed since centos7; we need to handle it.

Changed in tripleo:
status: New → Triaged
importance: Undecided → High
milestone: none → ussuri-3
assignee: nobody → Emilien Macchi (emilienm)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-ansible (master)

Fix proposed to branch: master
Review: https://review.opendev.org/713464

Changed in tripleo:
assignee: Emilien Macchi (emilienm) → Kevin Carter (kevin-carter)
status: Triaged → In Progress
assignee: Kevin Carter (kevin-carter) → Emilien Macchi (emilienm)
Changed in tripleo:
assignee: Emilien Macchi (emilienm) → Kevin Carter (kevin-carter)
Changed in tripleo:
assignee: Kevin Carter (kevin-carter) → Emilien Macchi (emilienm)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on tripleo-ansible (master)

Change abandoned by Kevin Carter (cloudnull) (<email address hidden>) on branch: master
Review: https://review.opendev.org/713460
Reason: this should be resolved in https://review.opendev.org/#/c/713464/

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-ansible (master)

Reviewed: https://review.opendev.org/713464
Committed: https://git.openstack.org/cgit/openstack/tripleo-ansible/commit/?id=6af37d7a442c451f125e397313f446efa89bf3a0
Submitter: Zuul
Branch: master

commit 6af37d7a442c451f125e397313f446efa89bf3a0
Author: Emilien Macchi <email address hidden>
Date: Tue Mar 17 10:48:31 2020 -0400

    fix all tripleo_container_* molecule jobs on centos8

    - --systemd needs to be given with a string (default to true, so since
      we used that argument we want true).
    - Add fedora registry in the list of container registries to strip when
      figuring out what image is deployed in podman_container (for
      idempotency). This code should be improved in a future patch to stop
      hardcoding these registries and find another way to figure out the
      image name.

    Change-Id: If0d4cc6590105808a07569b60877eb440f1dd6d1
    Closes-Bug: #1867787

Changed in tripleo:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/tripleo-ansible 1.3.0

This issue was fixed in the openstack/tripleo-ansible 1.3.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.