Pulling a docker image hosted by Satellite throws 403 error or digest verification failed error

Solution Verified - Updated -

Issue

  • Trying to pull a docker image hosted by Satellite throws 403 permission error:

    [root@client ~]# docker pull satellite.example.com:5000/acmecorp-ocp37-openshift3_metrics-hawkular-metrics:v3.7
    Trying to pull repository satellite.example.com:5000/acmecorp-ocp37-openshift3_metrics-hawkular-metrics ...
    v3.7: Pulling from satellite.example.com:5000/acmecorp-ocp37-openshift3_metrics-hawkular-metrics
    
    381f45621c04: Downloading [==>                                                ] 3.785 MB/73.91 MB
    f81b872e5378: Download complete
    89bbbd535dc0: Downloading
    3ece8908f8ed: Downloading [=>                                                 ] 1.622 MB/69.06 MB
    2d36a0f107a4: Downloading
    73827b6ae407: Waiting
    8c2e7f2ae557: Waiting
    error parsing HTTP 403 response body: invalid character '<' looking for beginning of value: "\n\n\n\nForbidden\n
    
    You don't have permission to access /pulp/docker/v2/acmecorp-ocp37-openshift3_metrics-hawkular-metrics/blobs/sha256:2d36a0f107a4e56b82b2052f02896e58ccabca0d539bfef3f059ebe776c43443\non this server.
    \n\n"
    
  • Or a digest (checksum) error:

    [root@client ~]# docker pull satellite.example.com:5000/acmecorp-ocp37-openshift3_metrics-hawkular-metrics
    Using default tag: latest
    Trying to pull repository satellite.example.com:5000/acmecorp-ocp37-openshift3_metrics-hawkular-metrics ...
    latest: Pulling from satellite.example.com:5000/acmecorp-ocp37-openshift3_metrics-hawkular-metrics
    381f45621c04: Extracting [===============================================>   ] 70.75 MB/73.91 MB
    f81b872e5378: Download complete
    89bbbd535dc0: Downloading
    3ece8908f8ed: Download complete
    2d36a0f107a4: Download complete
    73827b6ae407: Verifying Checksum
    8c2e7f2ae557: Download complete
    filesystem layer verification failed for digest sha256:73827b6ae40726f52eef4ae769744829741a5c63e13b54179b21c3253833a652
    
  • Removing/adding/resyncing the repo in Satellite doesn't fix the problem.

Environment

  • Satellite 6.4.X
  • Docker images hosted by Satellite

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content