New Docker Pull Rates

[moritz-topp]

Hey,

I followed the issue about the pull rate limits and waited for the update to be pushed to release.
Now I wanted to try it out, but I don't work as I planned.

I am logged in on my Server (with my Docker Hub Premium), and I connected the config.json into the watchtower container.
Public Docker Images are working fine, but when I use any private Image like the Debug log always says:

Log

"Trying to load authentication credentials." container=/tbsa image="moritztopp/tannenbaumsammelaktion:anmeldung"
watchtower    | time="2020-12-23T13:52:49+01:00" level=debug msg="No credentials for moritztopp found" config_file=/config.json
watchtower    | time="2020-12-23T13:52:49+01:00" level=debug msg="Got image name: moritztopp/tannenbaumsammelaktion:anmeldung"
watchtower    | time="2020-12-23T13:52:49+01:00" level=debug msg="Checking if pull is needed" container=/tbsa image="moritztopp/tannenbaumsammelaktion:anmeldung"
watchtower    | time="2020-12-23T13:52:49+01:00" level=debug msg="Building challenge URL" URL="https://index.docker.io/v2/"
watchtower    | time="2020-12-23T13:52:49+01:00" level=debug msg="Got response to challenge request" header="Bearer realm=\"https://auth.docker.io/token\",service=\"registry.docker.io\"" status="401 Unauthorized"
watchtower    | time="2020-12-23T13:52:49+01:00" level=debug msg="Checking challenge header content" realm="https://auth.docker.io/token" service=registry.docker.io
watchtower    | time="2020-12-23T13:52:49+01:00" level=debug msg="Setting scope for auth token" image=moritztopp/tannenbaumsammelaktion scope="repository:moritztopp/tannenbaumsammelaktion:pull"
watchtower    | time="2020-12-23T13:52:49+01:00" level=debug msg="No credentials found."
watchtower    | time="2020-12-23T13:52:49+01:00" level=debug msg="Parsing image ref" host=index.docker.io image=moritztopp/tannenbaumsammelaktion normalized="docker.io/moritztopp/tannenbaumsammelaktion:anmeldung" tag=anmeldung
watchtower    | time="2020-12-23T13:52:49+01:00" level=debug msg="Doing a HEAD request to fetch a digest" url="https://index.docker.io/v2/moritztopp/tannenbaumsammelaktion/manifests/anmeldung"
watchtower    | time="2020-12-23T13:52:50+01:00" level=warning msg="Could not do a head request, falling back to regular pull." container=/tbsa image="moritztopp/tannenbaumsammelaktion:anmeldung"
watchtower    | time="2020-12-23T13:52:50+01:00" level=debug msg="Reason: registry responded to head request with &{401 Unauthorized 401 HTTP/1.1 1 1 map[Content-Length:[176] Content-Type:[application/json] Date:[Wed, 23 Dec 2020 12:52:50 GMT] Docker-Distribution-Api-Version:[registry/2.0] Strict-Transport-Security:[max-age=31536000] Www-Authenticate:[Bearer realm=\"https://auth.docker.io/token\",service=\"registry.docker.io\",scope=\"repository:moritztopp/tannenbaumsammelaktion:pull\",error=\"insufficient_scope\"]] {} 176 [] false false map[] 0xc000434200 0xc000452210}"
watchtower    | time="2020-12-23T13:52:50+01:00" level=debug msg="Pulling image" container=/tbsa image="moritztopp/tannenbaumsammelaktion:anmeldung"
watchtower    | time="2020-12-23T13:52:51+01:00" level=debug msg="Error pulling image moritztopp/tannenbaumsammelaktion:anmeldung, Error response from daemon: pull access denied for moritztopp/tannenbaumsammelaktion, repository does not exist or may require 'docker login': denied: requested access to the resource is denied"
watchtower    | time="2020-12-23T13:52:51+01:00" level=info msg="Unable to update container \"/tbsa\": Error response from daemon: pull access denied for moritztopp/tannenbaumsammelaktion, repository does not exist or may require 'docker login': denied: requested access to the resource is denied. Proceeding to next."

If I add index.docker.io/ before the Image it works.
Do I need to add index.docker.io/ before every Image? Or is this a bug?

Already thank you all!

[simskij]

Yes, you need to do that for the credentials to be picked up. However, if you only intend to use DockerHub images, you could also try out the following, which will add that credential to all calls:

$ docker run -d \
  --name watchtower \
  -e REPO_USER=username \
  -e REPO_PASS=password \
  -v /var/run/docker.sock:/var/run/docker.sock \
  containrrr/watchtower container_to_watch --debug

[moritz-topp]

Works like a charm, thank you! Have nice holidays :D