The stderr you posted suggests that Mesos successfully fetched your .dockercfg. If the following docker pull fails, there should be additional logs printed either in the Mesos agent logs, or in the task stderr.
Can you check those as well? (And post them here.) On Wed, May 18, 2016 at 2:29 PM, Scott Kinney <[email protected]> wrote: > I have a valid .dockercfg credential file on the slave that I pass as a > uri in the marathon app definition like... > > "uris": [ > "file:///root/.dockercfg" > > ], > > it fails. > Mesos sandbox stderr... > > I0517 21:45:04.104918 5512 fetcher.cpp:424] Fetcher Info: > {"cache_directory":"\/tmp\/mesos\/fetch\/slaves\/cf607b5a-b629-46f1-a053-0659b78c4231-S454","items":[{"action":"BYPASS_CACHE","uri":{"cache":false,"executable":false,"extract":false,"value":"file:\/\/\/root\/.dockercfg"}}],"sandbox_directory":"\/tmp\/mesos\/slaves\/cf607b5a-b629-46f1-a053-0659b78c4231-S454\/frameworks\/cf607b5a-b629-46f1-a053-0659b78c4231-0000\/executors\/gridservice.9d35ca3e-1c78-11e6-8664-0242472674ba\/runs\/9c650d01-127c-416b-a00b-5ad09409c76e"} > I0517 21:45:04.106462 5512 fetcher.cpp:379] Fetching URI > 'file:///root/.dockercfg' I0517 21:45:04.106475 5512 fetcher.cpp:250] > Fetching directly into the sandbox directory I0517 21:45:04.106487 5512 > fetcher.cpp:187] Fetching URI 'file:///root/.dockercfg' I0517 > 21:45:04.106499 5512 fetcher.cpp:167] Copying resource with command:cp > '/root/.dockercfg' > '/tmp/mesos/slaves/cf607b5a-b629-46f1-a053-0659b78c4231-S454/frameworks/cf607b5a-b629-46f1-a053-0659b78c4231-0000/executors/gridservice.9d35ca3e-1c78-11e6-8664-0242472674ba/runs/9c650d01-127c-416b-a00b-5ad09409c76e/.dockercfg' > I0517 21:45:04.107993 5512 fetcher.cpp:456] Fetched > 'file:///root/.dockercfg' to > '/tmp/mesos/slaves/cf607b5a-b629-46f1-a053-0659b78c4231-S454/frameworks/cf607b5a-b629-46f1-a053-0659b78c4231-0000/executors/gridservice.9d35ca3e-1c78-11e6-8664-0242472674ba/runs/9c650d01-127c-416b-a00b-5ad09409c76e/.dockercfg > > > Marathon debug says it can't authenticate. I can pull manually on the > slave with this credential file. > Any idea what i'm doing wrong? > > > Scott Kinney | DevOps > stem | m 510.282.1299 > 100 Rollins Road, Millbrae, California 94030 > > This e-mail and/or any attachments contain Stem, Inc. confidential and > proprietary information and material for the sole use of the intended > recipient(s). Any review, use or distribution that has not been expressly > authorized by Stem, Inc. is strictly prohibited. If you are not the > intended recipient, please contact the sender and delete all copies. Thank > you.

