Skip to content

Instantly share code, notes, and snippets.

@mrunalp
Created February 2, 2023 22:16
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save mrunalp/4e3f62ffcba944eb90c4a4f664b99863 to your computer and use it in GitHub Desktop.
Save mrunalp/4e3f62ffcba944eb90c4a4f664b99863 to your computer and use it in GitHub Desktop.
[root@fedora sigstore]# podman --log-level=debug pull ttl.sh/myalpine:1h
INFO[0000] podman filtering at log level debug
DEBU[0000] Called pull.PersistentPreRunE(podman --log-level=debug pull ttl.sh/myalpine:1h)
DEBU[0000] Merged system config "/usr/share/containers/containers.conf"
DEBU[0000] Using conmon: "/usr/bin/conmon"
DEBU[0000] Initializing boltdb state at /var/lib/containers/storage/libpod/bolt_state.db
DEBU[0000] Using graph driver overlay
DEBU[0000] Using graph root /var/lib/containers/storage
DEBU[0000] Using run root /run/containers/storage
DEBU[0000] Using static dir /var/lib/containers/storage/libpod
DEBU[0000] Using tmp dir /run/libpod
DEBU[0000] Using volume path /var/lib/containers/storage/volumes
DEBU[0000] Set libpod namespace to ""
DEBU[0000] [graphdriver] trying provided driver "overlay"
DEBU[0000] Cached value indicated that overlay is supported
DEBU[0000] Cached value indicated that overlay is supported
DEBU[0000] Cached value indicated that metacopy is being used
DEBU[0000] Cached value indicated that native-diff is not being used
INFO[0000] Not using native diff for overlay, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled
DEBU[0000] backingFs=xfs, projectQuotaSupported=false, useNativeDiff=false, usingMetacopy=true
DEBU[0000] Initializing event backend journald
DEBU[0000] Configured OCI runtime runj initialization failed: no valid executable found for OCI runtime runj: invalid argument
DEBU[0000] Configured OCI runtime kata initialization failed: no valid executable found for OCI runtime kata: invalid argument
DEBU[0000] Configured OCI runtime runsc initialization failed: no valid executable found for OCI runtime runsc: invalid argument
DEBU[0000] Configured OCI runtime krun initialization failed: no valid executable found for OCI runtime krun: invalid argument
DEBU[0000] Using OCI runtime "/usr/bin/crun"
INFO[0000] Setting parallel job count to 19
DEBU[0000] Pulling image ttl.sh/myalpine:1h (policy: always)
DEBU[0000] Looking up image "ttl.sh/myalpine:1h" in local containers storage
DEBU[0000] Normalized platform linux/amd64 to {amd64 linux [] }
DEBU[0000] Trying "ttl.sh/myalpine:1h" ...
DEBU[0000] Trying "ttl.sh/myalpine:1h" ...
DEBU[0000] Trying "ttl.sh/myalpine:1h" ...
DEBU[0000] Loading registries configuration "/etc/containers/registries.conf"
DEBU[0000] Loading registries configuration "/etc/containers/registries.conf.d/000-shortnames.conf"
DEBU[0000] Normalized platform linux/amd64 to {amd64 linux [] }
DEBU[0000] Attempting to pull candidate ttl.sh/myalpine:1h for ttl.sh/myalpine:1h
DEBU[0000] parsed reference into "[overlay@/var/lib/containers/storage+/run/containers/storage:overlay.mountopt=nodev,metacopy=on]ttl.sh/myalpine:1h"
Trying to pull ttl.sh/myalpine:1h...
DEBU[0000] Copying source image //ttl.sh/myalpine:1h to destination image [overlay@/var/lib/containers/storage+/run/containers/storage:overlay.mountopt=nodev,metacopy=on]ttl.sh/myalpine:1h
DEBU[0000] Using registries.d directory /etc/containers/registries.d
DEBU[0000] Trying to access "ttl.sh/myalpine:1h"
DEBU[0000] No credentials matching ttl.sh/myalpine found in /run/containers/0/auth.json
DEBU[0000] No credentials matching ttl.sh/myalpine found in /root/.config/containers/auth.json
DEBU[0000] No credentials matching ttl.sh/myalpine found in /root/.docker/config.json
DEBU[0000] No credentials matching ttl.sh/myalpine found in /root/.dockercfg
DEBU[0000] No credentials for ttl.sh/myalpine found
DEBU[0000] No signature storage configuration found for ttl.sh/myalpine:1h, using built-in default file:///var/lib/containers/sigstore
DEBU[0000] Looking for TLS certificates and private keys in /etc/docker/certs.d/ttl.sh
DEBU[0000] GET https://ttl.sh/v2/
DEBU[0000] Ping https://ttl.sh/v2/ status 200
DEBU[0000] GET https://ttl.sh/v2/myalpine/manifests/1h
DEBU[0001] Content-Type from manifest GET is "application/vnd.docker.distribution.manifest.v2+json"
DEBU[0001] Using blob info cache at /var/lib/containers/cache/blob-info-cache-v1.boltdb
DEBU[0001] IsRunningImageAllowed for image docker:ttl.sh/myalpine:1h
DEBU[0001] Using transport "docker" policy section ttl.sh/myalpine:1h
DEBU[0001] Reading /var/lib/containers/sigstore/myalpine@sha256=0c34998cba935ece16936c3bf93c27f7a7637714c813232e0a811720c5637d95/signature-1
DEBU[0001] Not looking for sigstore attachments: disabled by configuration
DEBU[0001] Requirement 0: denied, done
DEBU[0001] Error pulling candidate ttl.sh/myalpine:1h: Source image rejected: A signature was required, but no signature exists
Error: Source image rejected: A signature was required, but no signature exists
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment