Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-2312

Disable storing signatures during repo mirroring

XMLWordPrintable

      What problem/issue/behavior are you having trouble with? What do you expect to see?
      I have setup mirroring of a repo and that has worked fine with 3.5.1. After the upgrade to 3.5.2 mirroring no longer works

      Logs from quay console:

      Mirror of 5-41 failure to repository redis/redis-5-rhel7 Source 'docker://

      registry.redhat.io/rhscl/redis-5-rhel7:5-41

      ' failed to sync
      Getting image list signatures
      Copying 3 of 3 images in list
      Copying image sha256:bb1470a0f87e053026e2fefb2583594d3821aea4ecce858e3db70f8a5e8cb9b7 (1/3)
      Getting image source signatures
      Checking if image destination supports signatures
      Copying blob sha256:70d8ae8bb48eb4313de66e13b93ab02b1f12073961a32e6e5b957228ac52ca44
      Copying blob sha256:608083cad0129a0f9240e5dcd4ceb087cc5ff025012277fc28bd77108e11a9bd
      Copying blob sha256:b77f42d650dc7d0d6fa21f8661f03957cfe70fcf92e48245d2a7cad7d795eb56
      Copying blob sha256:a858833a9239708c0c07c8fdf95218065c0605e14950051b009f9ad263f43511
      Copying config sha256:327ee2d8ff6817033d952540e054c419601dba151dff76c11b597cb89106d6f6
      Writing manifest to image destination
      Storing signatures
      time="2021-06-15T14:16:09Z" level=fatal msg="Error writing signatures: mkdir /var/lib/containers/sigstore/redis: permission denied"

      I also tested with registry.redhat.io/rhel8/redis-6:1-* and got the same error.

      Where are you experiencing the behavior? What environment?
      test, quay (and mirror) runs as a podman container on rhel8 according official docs

      When does the behavior occur? Frequency? Repeatedly? At certain times?
      always with 3.5.2
      never with 3.5.1

      What information can you provide around timeframes and the business impact?
      none, workaround is to no upgrade for now

              tomckay@redhat.com Thomas Mckay (Inactive)
              icherapa@redhat.com Ivan C (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: