Issues executing docker login on newly deployed FCOS VM running locally on VMWareFusion with statically defined networking and no corporate proxies/firewalls. (Note same issue also observed when deployed to vSphere although this latter implementation takes into account a corporate proxy).
Docker login to private or public repos fails with the same behavior:
docker login
Login with your Docker ID to push and pull images from Docker Hub. If you don't have a Docker ID, head over to https://hub.docker.com to create one.
Username: fifofonix
Password:
Error response from daemon: Get https://registry-1.docker.io/v2/: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
Slightly more detailed error from journal:
Feb 13 14:45:52 kamino dockerd[2694]: time="2020-02-13T14:45:52.617424407Z" level=error msg="Handler for POST /v1.39/auth returned error: Get https://registry-1.docker.io/v2/: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)"
Note that docker login with incorrect credentials fails as expected with an appropriate error.
Docker pull on public images works (although slow), e.g:
- docker pull alpine
- docker pull Quay
- docker pull my-internal-repo/my-public-image
Curl to https sites including docker repos works without cert exceptions returning unauthorized (no login creds provided) as expected:
Openssl TLS handshakes look good (to be expected given curl results).
Have not previously had to declare all repos explicitly with my docker implementations. And would expect a better error message if this was
Really very confused and at my wits’ end. Any words of wisdom appreciated. Not super confident on my NetworkManager set up because I am having to reboot to recognize DNS properly.
ifconfig:
docker0: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500
inet 172.17.0.1 netmask 255.255.0.0 broadcast 172.17.255.255
ether 02:42:b5:7c:69:33 txqueuelen 0 (Ethernet)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
docker_gwbridge: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 172.18.0.1 netmask 255.255.0.0 broadcast 172.18.255.255
inet6 fe80::42:67ff:fe16:8732 prefixlen 64 scopeid 0x20<link>
ether 02:42:67:16:87:32 txqueuelen 0 (Ethernet)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 172.16.135.101 netmask 255.255.255.0 broadcast 172.16.135.255
inet6 fe80::243:1ec9:84d8:504c prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:f9:f7:a1 txqueuelen 1000 (Ethernet)
RX packets 16339 bytes 15334773 (14.6 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 3049 bytes 356015 (347.6 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1000 (Local Loopback)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0