apple / apple/container

[Bug]: Pulling private images fails

Open
#816 17 comments 0 reactions 0 assignees View on GitHub
Dominant language
Swift
Stars
49.9k
Forks
1.8k
Avg merge
1d 20h
Merged PRs (30d)
22

Description

### I have done the following

- [x] I have searched the existing issues
- [ ] If possible, I've reproduced the issue using the 'main' branch of this project

### Steps to reproduce

Using the 0.6.0 release on MacOS 26.0.1 I'm trying to pull an image from a private registry on Azure which fails with a -25308 error. Looks very similar to https://github.com/apple/container/issues/532. I tried this with ssh and via terminal in the GUI. Both produce the same result (see below)

### Current behavior

Logging in now works (was previously also failing) :

```container registry login mycompreg.azurecr.io
Provide registry username mycompreg.azurecr.io: mycompreg-pull
Provide registry password:
Login succeeded
```

But trying to pull an image right after fails with :

```container image pull mycompreg.azurecr.io/my-comp/my-image:v1.16.0
Error: internalError: "error querying keychain for mycompreg.azurecr.io (cause: "queryError("query failure: unhandledError(status: -25308)")")"
```

Relevant logs :

```Filtering the log data using "composedMessage CONTAINS "25308""
Timestamp Thread Type Activity PID TTL
2025-10-28 14:54:17.694513-0700 0x6655 Default 0x0 2715 0 secd: [com.apple.securityd:SecError] SecDbKeychainItemV7: cannot decrypt metadata key because the keychain is locked (-25308)
2025-10-28 14:54:17.694530-0700 0x6657 Default 0x0 2715 0 secd: [com.apple.securityd:SecError] decode item failed, keychain is locked (-25308)
2025-10-28 14:54:17.772080-0700 0x6645 Error 0x0 2713 0 container-core-images: [com.apple.container:ImagesHelper] handler for imagePull threw error internalError: "error querying keychain for mycompreg.azurecr.io" (cause: "query Error("query failure: unhandledError(status: -25308)")")
2025-10-28 14:56:37.636240-0700 0x6750 Error 0x0 2713 0 container-core-images: [com.apple.container:ImagesHelper] handler for imagePull threw error internalError: "error querying keychain for mycompreg.azurecr.io" (cause: "queryError("query failure: unhandledError(status: -25308)")")
2025-10-28 14:56:46.535728-0700 0x68bd Error 0x0 2713 0 container-core-images: [com.apple.container:ImagesHelper] handler for imagePull threw error internalError: "error querying keychain for mycompreg.azurecr.io" (cause: "queryError("query failure: unhandledError(status: -25308)")")
2025-10-28 14:57:10.240262-0700 0x69ba Error 0x0 2713 0 container-core-images: [com.apple.container:ImagesHelper] handler for imagePull threw error internalError: "error querying keychain for mycompreg.azurecr.io" (cause: "queryError("query failure: unhandledError(status: -25308)")")
--------------------------------------------------------------------------------------------------------------------
Log - Default: 2, Info: 0, Debug: 0, Error: 4, Fault: 0
Activity - Create: 0, Transition: 0, Actions: 0
```

### Expected behavior

Pulling the image works

### Environment

```markdown
- OS: MacOS 26.0.1
- Container: 0.6.0
```

### Relevant log output

```shell
N/A
```

### Code of Conduct

- [x] I agree to follow this project's Code of Conduct

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.