Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-1745

Clairctl errors out when fetching vulnerabilities with a 403

XMLWordPrintable

      During manual download of updates clairctl errors out when downloading RHEl updates with a 403:

      /tmp# podman run -it --rm -v /opt/quay/clair/config:/cfg:Z -v /tmp:/updaters:Z --entrypoint /bin/clairctl registry.redhat.io/quay/clair-rhel8:v3.4.2 --config /cfg/config.yaml export-updaters /updaters/updaters.gz
      updating errors:
              RHEL8-jboss-ws-5-including-unpatched: ovalutil: fetcher got unexpected HTTP response: 403 (403 Forbidden)
              RHEL7-dotnet-2.1-including-unpatched: ovalutil: fetcher got unexpected HTTP response: 403 (403 Forbidden)
              RHEL8-openshift-4.4: ovalutil: fetcher got unexpected HTTP response: 403 (403 Forbidden)
              RHEL8-openstack-16-including-unpatched: ovalutil: fetcher got unexpected HTTP response: 403 (403 Forbidden)
              RHEL7-openstack-7-including-unpatched: ovalutil: fetcher got unexpected HTTP response: 403 (403 Forbidden)
              RHEL8-openshift-service-mesh-1.0: ovalutil: fetcher got unexpected HTTP response: 403 (403 Forbidden)
              RHEL8-openshift-4.2: ovalutil: fetcher got unexpected HTTP response: 403 (403 Forbidden)
              RHEL7-satellite-6-including-unpatched: ovalutil: fetcher got unexpected HTTP response: 403 (403 Forbidden)
              RHEL7-ansible-2: ovalutil: fetcher got unexpected HTTP response: 403 (403 Forbidden)
              RHEL8-openshift-service-mesh-1.0-including-unpatched: ovalutil: fetcher got unexpected HTTP response: 403 (403 Forbidden)
              RHEL7-ansible-2.8: ovalutil: fetcher got unexpected HTTP response: 403 (403 Forbidden)
              RHEL7-openshift-3.5-including-unpatched: ovalutil: fetcher got unexpected HTTP response: 403 (403 Forbidden)
              RHEL7-openstack-14-including-unpatched: ovalutil: fetcher got unexpected HTTP response: 403 (403 Forbidden)
              RHEL8-openstack-16.1-including-unpatched: ovalutil: fetcher got unexpected HTTP response: 403 (403 Forbidden)
      ... (another 50 or so lines)
      

      This severely hampers deployments in airgapped environments. How can this be addressed? Thanks!

              hdonnay Henry Donnay
              rhn-support-ibazulic Ivan Bazulic
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: