Details
-
Bug
-
Resolution: Done
-
Major
-
None
Description
Clair will not scan older Red Hat images that were not built by our own build system. Customers frequently use old RHEL images in order to check the validity of the scanning results. When such an image is encountered, Clair will break down and return a 500 result:
{"level":"debug","component":"internal/indexer/layerscannner/layerScanner.scan","kind":"package","layer":"sha256:483deaa3810375f7a69457bffe2700975f800d395f85723b28f17d05fec330ed","manifest":"sha256:2b0f2b1c5c08ebfcbb58391daeb3a795804361fef30f41cbdc188e2698dd76fe","scanner":"rpm","state":"ScanLayers","time":"2021-11-24T13:12:19Z","message":"scan done"}
{"level":"info","component":"internal/indexer/controller/Controller.Index","manifest":"sha256:2b0f2b1c5c08ebfcbb58391daeb3a795804361fef30f41cbdc188e2698dd76fe","state":"ScanLayers","time":"2021-11-24T13:12:19Z","message":"layers scan done"}
{"level":"error","component":"internal/indexer/controller/Controller.Index","manifest":"sha256:2b0f2b1c5c08ebfcbb58391daeb3a795804361fef30f41cbdc188e2698dd76fe","state":"ScanLayers","error":"failed to scan all layer contents: dockerfile missing expected label \"com.redhat.component\"","time":"2021-11-24T13:12:19Z","message":"error during scan"}
{"level":"info","component":"libindex/Libindex.Index","manifest":"sha256:2b0f2b1c5c08ebfcbb58391daeb3a795804361fef30f41cbdc188e2698dd76fe","time":"2021-11-24T13:12:19Z","message":"index request done"}
{"level":"info","component":"httptransport/New","remote_addr":"172.17.0.1:54598","method":"POST","request_uri":"/indexer/api/v1/index_report","status":500,"time":"2021-11-24T13:12:19Z","message":"handled HTTP request"}
As a result, the image will stay in a queued state forever in Quay and will constantly be enqueued over and over again. If these images are unsupported, we should mark them as unsupported and that's how they should be shown in the UI as well.
Example:
registry.redhat.io/rhscl/python-27-rhel7:2.7-8
