I got it.

User error.

Since my docker version is > 1.6 i need to give mesos the .docker/config.json 
in docker.tar.gz. I tried this before but i called the archive docker.tgz. That 
naming convention may not work.

Thanks for your help!


________________________________
Scott Kinney | DevOps
stem <http://www.stem.com/>   |   m  510.282.1299
100 Rollins Road, Millbrae, California 94030

This e-mail and/or any attachments contain Stem, Inc. confidential and 
proprietary information and material for the sole use of the intended 
recipient(s). Any review, use or distribution that has not been expressly 
authorized by Stem, Inc. is strictly prohibited. If you are not the intended 
recipient, please contact the sender and delete all copies. Thank you.
________________________________
From: Joseph Wu <[email protected]>
Sent: Wednesday, May 18, 2016 3:23 PM
To: user
Subject: Re: Cannot pull from private docker v1 registry

The stderr you posted suggests that Mesos successfully fetched your .dockercfg. 
 If the following docker pull fails, there should be additional logs printed 
either in the Mesos agent logs, or in the task stderr.

Can you check those as well?  (And post them here.)

On Wed, May 18, 2016 at 2:29 PM, Scott Kinney 
<[email protected]<mailto:[email protected]>> wrote:
I have a valid .dockercfg credential file on the slave that I pass as a uri in 
the marathon app definition like...

  "uris": [
      "file:///root/.dockercfg"

  ],

it fails.
Mesos sandbox stderr...

I0517 21:45:04.104918  5512 fetcher.cpp:424] Fetcher Info: 
{"cache_directory":"\/tmp\/mesos\/fetch\/slaves\/cf607b5a-b629-46f1-a053-0659b78c4231-S454","items":[{"action":"BYPASS_CACHE","uri":{"cache":false,"executable":false,"extract":false,"value":"file:\/\/\/root\/.dockercfg"}}],"sandbox_directory":"\/tmp\/mesos\/slaves\/cf607b5a-b629-46f1-a053-0659b78c4231-S454\/frameworks\/cf607b5a-b629-46f1-a053-0659b78c4231-0000\/executors\/gridservice.9d35ca3e-1c78-11e6-8664-0242472674ba\/runs\/9c650d01-127c-416b-a00b-5ad09409c76e"}
 I0517 21:45:04.106462  5512 fetcher.cpp:379] Fetching URI 
'file:///root/.dockercfg' I0517 21:45:04.106475  5512 fetcher.cpp:250] Fetching 
directly into the sandbox directory I0517 21:45:04.106487  5512 
fetcher.cpp:187] Fetching URI 'file:///root/.dockercfg' I0517 21:45:04.106499  
5512 fetcher.cpp:167] Copying resource with command:cp '/root/.dockercfg' 
'/tmp/mesos/slaves/cf607b5a-b629-46f1-a053-0659b78c4231-S454/frameworks/cf607b5a-b629-46f1-a053-0659b78c4231-0000/executors/gridservice.9d35ca3e-1c78-11e6-8664-0242472674ba/runs/9c650d01-127c-416b-a00b-5ad09409c76e/.dockercfg'
 I0517 21:45:04.107993  5512 fetcher.cpp:456] Fetched 'file:///root/.dockercfg' 
to 
'/tmp/mesos/slaves/cf607b5a-b629-46f1-a053-0659b78c4231-S454/frameworks/cf607b5a-b629-46f1-a053-0659b78c4231-0000/executors/gridservice.9d35ca3e-1c78-11e6-8664-0242472674ba/runs/9c650d01-127c-416b-a00b-5ad09409c76e/.dockercfg


Marathon debug says it can't authenticate. I can pull manually on the slave 
with this credential file.
Any idea what i'm doing wrong?


Scott Kinney | DevOps
stem   |   m  510.282.1299
100 Rollins Road, Millbrae, California 94030

 This e-mail and/or any attachments contain Stem, Inc. confidential and 
proprietary information and material for the sole use of the intended 
recipient(s). Any review, use or distribution that has not been expressly 
authorized by Stem, Inc. is strictly prohibited.  If you are not the intended 
recipient, please contact the sender and delete all copies. Thank you.

Reply via email to