Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

failed to authorize: failed to fetch oauth token: Post "https://auth.docker.io/token": read: connection reset by peer #5839

Open
adoyle-h opened this issue Mar 14, 2025 · 0 comments
Open

failed to authorize: failed to fetch oauth token: Post "https://auth.docker.io/token": read: connection reset by peer #5839

adoyle-h opened this issue Mar 14, 2025 · 0 comments

Comments

@adoyle-h
Copy link

Description

I'm in China and the docker registry is blocked by China GFW. So I have to use "http_proxy" to redirect request to the proxy out of China.

I have tried docker logout and docker login on host. It shows "Login Succeeded".

I can pull/push image from/to my repository of docker hub on host. While it not works on buildx container which with "--driver=docker-container".
The docker daemon on host and buildx container both export same environment variables "http_proxy" and "https_proxy".

Run docker buildx build --push and it failed with "failed to resolve source metadata for docker.io/library/alpine:3.21.3: failed to authorize: failed to fetch oauth token: Post "https://auth.docker.io/token": read tcp 192.168.1.40:65061->44.208.254.194:443: read: connection reset by peer".

 => [internal] load build definition from meta.Dockerfile                                                                         0.0s
 => => transferring dockerfile: 994B                                                                                              0.0s
 => CANCELED [linux/amd64 internal] load metadata for docker.io/library/alpine:3.21.3                                             1.2s
 => CANCELED [linux/arm64 internal] load metadata for docker.io/library/alpine:3.21.3                                             1.2s
 => CANCELED [linux/arm/v7 internal] load metadata for docker.io/library/alpine:3.21.3                                            1.2s
 => ERROR [linux/arm/v6 internal] load metadata for docker.io/library/alpine:3.21.3                                               1.2s
 => [auth] library/alpine:pull token for registry-1.docker.io                                                                     0.0s
 => [auth] library/alpine:pull token for registry-1.docker.io                                                                     0.0s
------
 > [linux/arm/v6 internal] load metadata for docker.io/library/alpine:3.21.3:
------
meta.Dockerfile:1
--------------------
   1 | >>> FROM alpine:3.21.3
   2 |
   3 |     WORKDIR /root
--------------------
ERROR: failed to solve: alpine:3.21.3: failed to resolve source metadata for docker.io/library/alpine:3.21.3: failed to authorize: failed to fetch oauth token: Post "https://auth.docker.io/token": read tcp 192.168.1.40:65061->44.208.254.194:443: read: connection reset by peer
7 v0.20.1 buildkitd --allow-insecure-entitlement=network.host
google.golang.org/grpc.(*ClientConn).Invoke
        /src/vendor/google.golang.org/grpc/call.go:35
github.com/moby/buildkit/session/auth.(*authClient).FetchToken
        /src/session/auth/auth_grpc.pb.go:59
github.com/moby/buildkit/session/auth.FetchToken.func1
        /src/session/auth/auth.go:59
github.com/moby/buildkit/session.(*Manager).Any
        /src/session/group.go:83
github.com/moby/buildkit/session/auth.FetchToken
        /src/session/auth/auth.go:56
github.com/moby/buildkit/util/resolver.(*authHandler).fetchToken
        /src/util/resolver/authorizer.go:337
github.com/moby/buildkit/util/resolver.(*authHandler).doBearerAuth.func1
        /src/util/resolver/authorizer.go:303
github.com/moby/buildkit/util/flightcontrol.(*call[...]).run
        /src/util/flightcontrol/flightcontrol.go:122
sync.(*Once).doSlow
        /usr/local/go/src/sync/once.go:76
sync.(*Once).Do
        /usr/local/go/src/sync/once.go:67
runtime.goexit
        /usr/local/go/src/runtime/asm_arm64.s:1223

7 v0.20.1 buildkitd --allow-insecure-entitlement=network.host
github.com/moby/buildkit/frontend/gateway.(*llbBridgeForwarder).Return
        /src/frontend/gateway/gateway.go:1029
github.com/moby/buildkit/control/gateway.(*GatewayForwarder).Return
        /src/control/gateway/gateway.go:146
github.com/moby/buildkit/frontend/gateway/pb._LLBBridge_Return_Handler.func1
        /src/frontend/gateway/pb/gateway_grpc.pb.go:473
google.golang.org/grpc.getChainUnaryHandler.func1
        /src/vendor/google.golang.org/grpc/server.go:1212
main.unaryInterceptor
        /src/cmd/buildkitd/main.go:724
google.golang.org/grpc.NewServer.chainUnaryServerInterceptors.chainUnaryInterceptors.func1
        /src/vendor/google.golang.org/grpc/server.go:1203
github.com/moby/buildkit/frontend/gateway/pb._LLBBridge_Return_Handler
        /src/frontend/gateway/pb/gateway_grpc.pb.go:475
google.golang.org/grpc.(*Server).processUnaryRPC
        /src/vendor/google.golang.org/grpc/server.go:1392
google.golang.org/grpc.(*Server).handleStream
        /src/vendor/google.golang.org/grpc/server.go:1802
google.golang.org/grpc.(*Server).serveStreams.func2.1
        /src/vendor/google.golang.org/grpc/server.go:1030
runtime.goexit
        /usr/local/go/src/runtime/asm_arm64.s:1223

9875 v0.20.1 /Users/adoyle/.docker/cli-plugins/docker-buildx buildx build --push -f ./meta.Dockerfile -D --build-arg CLASH_VERSION=1.19.3 --build-arg GITHUB_PROXY= --tag adoyle/clash-meta:latest --tag adoyle/clash-meta:1.19.3 --platform linux/amd64,linux/arm64,linux/arm/v7,linux/arm/v6 .
google.golang.org/grpc.(*ClientConn).Invoke
        google.golang.org/[email protected]/call.go:35
github.com/moby/buildkit/frontend/gateway/pb.(*lLBBridgeClient).Solve
        github.com/moby/[email protected]/frontend/gateway/pb/gateway_grpc.pb.go:98
github.com/moby/buildkit/client.(*gatewayClientForBuild).Solve
        github.com/moby/[email protected]/client/build.go:93
github.com/moby/buildkit/frontend/gateway/grpcclient.(*grpcClient).Solve
        github.com/moby/[email protected]/frontend/gateway/grpcclient/client.go:412
github.com/docker/buildx/build.BuildWithResultHandler.func3.4.2
        github.com/docker/buildx/build/build.go:456
github.com/moby/buildkit/frontend/gateway/grpcclient.(*grpcClient).Run
        github.com/moby/[email protected]/frontend/gateway/grpcclient/client.go:215
github.com/moby/buildkit/client.(*Client).Build.func2
        github.com/moby/[email protected]/client/build.go:58
github.com/moby/buildkit/client.(*Client).solve.func3
        github.com/moby/[email protected]/client/solve.go:295
golang.org/x/sync/errgroup.(*Group).Go.func1
        golang.org/x/[email protected]/errgroup/errgroup.go:78
runtime.goexit
        runtime/asm_arm64.s:1223

9875 v0.20.1 /Users/adoyle/.docker/cli-plugins/docker-buildx buildx build --push -f ./meta.Dockerfile -D --build-arg CLASH_VERSION=1.19.3 --build-arg GITHUB_PROXY= --tag adoyle/clash-meta:latest --tag adoyle/clash-meta:1.19.3 --platform linux/amd64,linux/arm64,linux/arm/v7,linux/arm/v6 .
github.com/moby/buildkit/session/auth/authprovider.(*authProvider).FetchToken.func2
        github.com/moby/[email protected]/session/auth/authprovider/authprovider.go:112
github.com/moby/buildkit/session/auth/authprovider.(*authProvider).FetchToken
        github.com/moby/[email protected]/session/auth/authprovider/authprovider.go:136
github.com/moby/buildkit/session/auth._Auth_FetchToken_Handler.func1
        github.com/moby/[email protected]/session/auth/auth_grpc.pb.go:166
github.com/moby/buildkit/session/auth._Auth_FetchToken_Handler
        github.com/moby/[email protected]/session/auth/auth_grpc.pb.go:168
google.golang.org/grpc.(*Server).processUnaryRPC
        google.golang.org/[email protected]/server.go:1394
google.golang.org/grpc.(*Server).handleStream
        google.golang.org/[email protected]/server.go:1805
google.golang.org/grpc.(*Server).serveStreams.func2.1
        google.golang.org/[email protected]/server.go:1029
runtime.goexit
        runtime/asm_arm64.s:1223

7 v0.20.1 buildkitd --allow-insecure-entitlement=network.host
github.com/moby/buildkit/client/llb/sourceresolver.(*imageMetaResolver).ResolveImageConfig
        /src/client/llb/sourceresolver/imageresolver.go:51
github.com/moby/buildkit/frontend/gateway/forwarder.(*BridgeClient).ResolveImageConfig
        /src/frontend/gateway/forwarder/forward.go:101
github.com/moby/buildkit/frontend/dockerfile/builder.(*withResolveCache).ResolveImageConfig.func1
        /src/frontend/dockerfile/builder/resolvecache.go:37
github.com/moby/buildkit/util/flightcontrol.(*CachedGroup[...]).Do.func1
        /src/util/flightcontrol/cached.go:43
github.com/moby/buildkit/util/flightcontrol.(*call[...]).run
        /src/util/flightcontrol/flightcontrol.go:122

9875 v0.20.1 /Users/adoyle/.docker/cli-plugins/docker-buildx buildx build --push -f ./meta.Dockerfile -D --build-arg CLASH_VERSION=1.19.3 --build-arg GITHUB_PROXY= --tag adoyle/clash-meta:latest --tag adoyle/clash-meta:1.19.3 --platform linux/amd64,linux/arm64,linux/arm/v7,linux/arm/v6 .
google.golang.org/grpc.(*ClientConn).Invoke
        google.golang.org/[email protected]/call.go:35
github.com/moby/buildkit/api/services/control.(*controlClient).Solve
        github.com/moby/[email protected]/api/services/control/control_grpc.pb.go:88
github.com/moby/buildkit/client.(*Client).solve.func2
        github.com/moby/[email protected]/client/solve.go:269
golang.org/x/sync/errgroup.(*Group).Go.func1
        golang.org/x/[email protected]/errgroup/errgroup.go:78

7 v0.20.1 buildkitd --allow-insecure-entitlement=network.host
github.com/moby/buildkit/frontend/dockerfile/dockerfile2llb.toDispatchState.func2.toDispatchState.func2.1.2
        /src/frontend/dockerfile/dockerfile2llb/convert.go:550
golang.org/x/sync/errgroup.(*Group).Go.func1
        /src/vendor/golang.org/x/sync/errgroup/errgroup.go:78
runtime.goexit
        /usr/local/go/src/runtime/asm_arm64.s:1223

9875 v0.20.1 /Users/adoyle/.docker/cli-plugins/docker-buildx buildx build --push -f ./meta.Dockerfile -D --build-arg CLASH_VERSION=1.19.3 --build-arg GITHUB_PROXY= --tag adoyle/clash-meta:latest --tag adoyle/clash-meta:1.19.3 --platform linux/amd64,linux/arm64,linux/arm/v7,linux/arm/v6 .
github.com/moby/buildkit/client.(*Client).solve.func2
        github.com/moby/[email protected]/client/solve.go:285
golang.org/x/sync/errgroup.(*Group).Go.func1
        golang.org/x/[email protected]/errgroup/errgroup.go:78

error: Recipe `build` failed with exit code 1

Environment

> docker buildx ls
NAME/NODE       DRIVER/ENDPOINT    STATUS    BUILDKIT   PLATFORMS
my*             docker-container
 \_ my0          \_ orbs

> docker buildx inspect my

Name:          my
Driver:        docker-container
Last Activity: 2025-03-14 07:39:52 +0000 UTC

Nodes:
Name:                  my0
Endpoint:              orbstack
Driver Options:        env.http_proxy="http://host.docker.internal:7890" env.https_proxy="http://host.docker.internal:7890"
Status:                running
BuildKit daemon flags: --allow-insecure-entitlement=network.host
BuildKit version:      v0.20.1
Platforms:             linux/arm64, linux/amd64, linux/riscv64, linux/ppc64le, linux/s390x, linux/386, linux/mips64le, linux/arm/v7, linux/arm/v6
Labels:
 org.mobyproject.buildkit.worker.executor:         oci
 org.mobyproject.buildkit.worker.hostname:         99262eb4e53e
 org.mobyproject.buildkit.worker.network:          host
 org.mobyproject.buildkit.worker.oci.process-mode: sandbox
 org.mobyproject.buildkit.worker.selinux.enabled:  false
 org.mobyproject.buildkit.worker.snapshotter:      overlayfs
GC Policy rule#0:
 All:            false
 Filters:        type==source.local,type==exec.cachemount,type==source.git.checkout
 Keep Duration:  48h0m0s
 Max Used Space: 488.3MiB
GC Policy rule#1:
 All:            false
 Keep Duration:  1440h0m0s
 Reserved Space: 3.725GiB
 Max Used Space: 23.28GiB
 Min Free Space: 6.519GiB
GC Policy rule#2:
 All:            false
 Reserved Space: 3.725GiB
 Max Used Space: 23.28GiB
 Min Free Space: 6.519GiB
GC Policy rule#3:
 All:            true
 Reserved Space: 3.725GiB
 Max Used Space: 23.28GiB
 Min Free Space: 6.519GiB
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@adoyle-h