containerd / containerd/nerdctl

nerdctl login used against a basic auth server will error in confusing ways after hammering the server

Open
#3,068 0 comments 0 reactions 0 assignees View on GitHub
kind/unconfirmed-bug-claim
Dominant language
Go
Stars
10.4k
Forks
826
Avg merge
1d 23h
Merged PRs (30d)
44

Description

### Description

Passing wrong credentials against a basic auth registry will result in nerdctl trying repeatedly (ten times).

Then spit out:
`too many 401 (probably)`

Followed by a `failed to call rh.Client.Do: Get \"https://10.4.0.1:5000/v2/\": tls: failed to verify certificate: x509: certificate signed by unknown authority" i=1` which does not make sense here.

### Steps to reproduce the issue

1. Start a registry with basic auth
2. Login using nerdctl

### Describe the results you received and expected

Received:
- confusing error message
- repeated attempts with the same wrong credentials instead of bailing out

Should have received:
- more clear error message
- try once and stop

### What version of nerdctl are you using?

1.7.6

### Are you using a variant of nerdctl? (e.g., Rancher Desktop)

None

### Host information

_No response_

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.