Troubleshooting in Container Registry

Below is a list of common issues and their fixes:

• docker login is not supported with yc credential helper

  Why you got this error: If using a Docker credential helper, you cannot get authenticated in Container Registry with docker login. You may also get the same error in Container Optimized Image where a credential helper is used for authentication on behalf of a service account associated with the VM.

  How to fix it: Get authenticated in the registry using a Docker credential helper or disable the Docker credential helper.

• Got permission denied while trying to connect to the Docker daemon socket

  Why you got this error: By default, the Docker daemon requires root permissions to run commands.

  How to fix it: Run commands using sudo or configure permissions for other OS users.

• name unknown: Registry <...> not found

  Why you got this error: Registry ID is missing or invalid. When using Docker CLI commands, specify the full Docker image name, including the registry ID. For more information, see Repository in Container Registry.

  How to fix it: View the registry list to make sure your unique registry ID is valid.

• Error response from daemon: pull access denied for <cr.yandex/registry_ID/Docker_image_name>, repository does not exist or may require 'docker login': denied: Permission denied ; requestId = <request_ID>

  Why you got this error: IP address sending the pull Docker image request has no PULL permissions.

  How to fix it: Add allow rules for this IP address in the registry settings, or remove all rules and try again.

• InvalidImageName

  Why you got this error: Invalid Docker image name.

  How to fix it: Repository name must be a URI that includes the Docker image name. The Docker image name must follow a specific format. For more information, see the OCI Distribution Specification.

• invalid reference format

  Why you got this error: Invalid Docker image tag.

  How to fix it: Repository name must be a URI that includes the Docker image tag. The Docker image tag must follow a specific format. For more information, see the OCI Distribution Specification.

• Error response from daemon: unauthorized: Authentication problem ; requestId = <request_ID>

  unauthorized: Authentication problem ; requestId = <request_ID>

  Why you got this error:

  • You are trying to pull or push a Docker image to Container Registry, but you are not authenticated. To perform operations with images in Container Registry, you need to get authenticated first.
  • Docker cannot run docker-credential-yc, e.g., because the path to the executable is missing from the PATH environment variable.

  How to fix it:

  • Get authenticated in Container Registry.
  • Make sure the yc executable file path has been added to the PATH environment variable.

• Permission denied

  Why you got this error: Not enough permissions to perform the operation.

  How to fix it: Make sure the service account or user performing the operation has the required roles.