Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-823

Unable to scan vulnerability for image via clair v4 when swift as the backend storage for Quay

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Won't Do
    • Icon: Major Major
    • None
    • quay-v3.3.1
    • -area/secscan, quay
    • Quay Enterprise
    • 0

      Description of problem:

      Unable to scan vulnerability for image via clair v4

      Version-Release number of selected component (if applicable):

      • quay.io/quay/quay:v3.3.1-2
      • quay.io/quay/clair:v3.3.1-3

      How reproducible:

      Always

      Steps to Reproduce:
      1. Configure clair v4 aas the scanner for quay
      2. Push image to quay

      1. skopeo copy --dest-creds=quay:password --dest-tls-verify=false docker://docker.io/debian docker://quay331-quay-quay-app.apps.preserve-dyanj.0622-1n3.qe.rhcloud.com/quay/debian
        3. Check image vulnerability in Quay UI

      Actual results:

      Unable to scan vulnerablity

      Expected results:

      Show vulnerability in UI

      Additional info:

      logs in clairv4

      {"level":"warn","component":"init/NewHttpTransport","component":"libindex/Libindex.Index","manifest":"sha256:0577d32514319ffd10530dd830b4c572392268581a3306a607d80232e89920ee","component":"libindex/Libindex.index","component":"internal/indexer/controller/Controller.Index","manifest":"sha256:0577d32514319ffd10530dd830b4c572392268581a3306a607d80232e89920ee","state":"CheckManifest","state":"FetchLayers","error":"encountered error while fetching a layer: empty uri for layer sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4","time":"2020-07-01T13:06:56Z","time":"2020-07-01T13:06:56Z","message":"layers fetch failure"}
      {"level":"error","component":"init/NewHttpTransport","component":"libindex/Libindex.Index","manifest":"sha256:0577d32514319ffd10530dd830b4c572392268581a3306a607d80232e89920ee","component":"libindex/Libindex.index","component":"internal/indexer/controller/Controller.Index","manifest":"sha256:0577d32514319ffd10530dd830b4c572392268581a3306a607d80232e89920ee","state":"CheckManifest","error":"failed to fetch layers: encountered error while fetching a layer: empty uri for layer sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4","time":"2020-07-01T13:06:56Z","time":"2020-07-01T13:06:56Z","message":"error during scan"}
      {"level":"warn","component":"init/NewHttpTransport","component":"libindex/Libindex.Index","manifest":"sha256:ccc1a6320f5f0c79d48c1461438dd167c33b7c3b93713adb5f28bdb8b3cda827","component":"libindex/Libindex.index","component":"internal/indexer/controller/Controller.Index","manifest":"sha256:ccc1a6320f5f0c79d48c1461438dd167c33b7c3b93713adb5f28bdb8b3cda827","state":"CheckManifest","state":"FetchLayers","error":"encountered error while fetching a layer: empty uri for layer sha256:e9afc4f90ab09248d75c8081b6dfba749a7f7efdac704ced7e0ceb506e02fa4a","time":"2020-07-01T13:06:56Z","time":"2020-07-01T13:06:56Z","message":"layers fetch failure"}
      {"level":"error","component":"init/NewHttpTransport","component":"libindex/Libindex.Index","manifest":"sha256:ccc1a6320f5f0c79d48c1461438dd167c33b7c3b93713adb5f28bdb8b3cda827","component":"libindex/Libindex.index","component":"internal/indexer/controller/Controller.Index","manifest":"sha256:ccc1a6320f5f0c79d48c1461438dd167c33b7c3b93713adb5f28bdb8b3cda827","state":"CheckManifest","error":"failed to fetch layers: encountered error while fetching a layer: empty uri for layer sha256:e9afc4f90ab09248d75c8081b6dfba749a7f7efdac704ced7e0ceb506e02fa4a","time":"2020-07-01T13:06:56Z","time":"2020-07-01T13:06:56Z","message":"error during scan"}https://issues.redhat.com/browse/PROJQUAY-823

            Unassigned Unassigned
            rhn-support-dyan Dongbo Yan
            Dongbo Yan Dongbo Yan
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: