Problems with GitLab runner pulling from the cl.net docker registry

Robert Goldman <[email protected]> Thu, 30 Apr 2026 12:10:33 -0500
Newsgroups	gmane.lisp.common-lisp-net.devel
Message-ID	<[email protected]>
--=_MailMate_09799BF6-72AD-4433-8B94-360E5B0C8A3E_=
Content-Type: text/plain; format=flowed; markup=markdown
Content-Transfer-Encoding: quoted-printable

I'm getting failures:

```
2026-04-29T23:23:23.935995Z 00O =1B[0KRunning with gitlab-runner 18.11.0 =

(249f0215)=1B[0;m
2026-04-29T23:23:23.936008Z 00O =1B[0K  on asdf-all cnwewr6cO, system ID:=
 =

s_73807f95a479=1B[0;m
2026-04-29T23:23:23.936028Z 00O =

section_start:1777505003:prepare_executor
2026-04-29T23:23:23.936028Z 00O+=1B[0K=1B[0K=1B[36;1mPreparing the "docke=
r" =

executor=1B[0;m=1B[0;m
2026-04-29T23:23:23.943801Z 00O =1B[0KUsing Docker executor with image =

containers.common-lisp.net/cl-docker-images/cmucl:latest ...=1B[0;m
2026-04-29T23:23:25.200808Z 00O =1B[0KUsing effective pull policy of =

[always] for container =

containers.common-lisp.net/cl-docker-images/cmucl:latest=1B[0;m
2026-04-29T23:23:25.201087Z 00O =1B[0KAuthenticating with credentials fro=
m =

job payload (GitLab Registry)=1B[0;m
2026-04-29T23:23:25.201093Z 00O =1B[0KPulling docker image =

containers.common-lisp.net/cl-docker-images/cmucl:latest ...=1B[0;m
2026-04-29T23:23:25.364069Z 00O =1B[0;33mWARNING: Failed to pull image =

with policy "always": Error response from daemon: pull access denied for =

containers.common-lisp.net/cl-docker-images/cmucl, repository does not =

exist or may require 'docker login': denied: requested access to the =

resource is denied (manager.go:238:0s)=1B[0;m
2026-04-29T23:23:25.364138Z 00O section_end:1777505005:prepare_executor
2026-04-29T23:23:25.364140Z 00O+=1B[0K
2026-04-29T23:23:25.364210Z 00O =1B[31;1mERROR: Job failed: failed to pul=
l =

image "containers.common-lisp.net/cl-docker-images/cmucl:latest" with =

specified policies [always]: Error response from daemon: pull access =

denied for containers.common-lisp.net/cl-docker-images/cmucl, repository =

does not exist or may require 'docker login': denied: requested access =

to the resource is denied (manager.go:238:0s)=1B[0;m

```

https://gitlab.common-lisp.net/asdf/asdf/-/jobs/115256

What's _really_ odd is that when _our_ GitLab runner runs the test, it =

has no trouble pulling that docker image:

```
Using Docker executor with image =

containers.common-lisp.net/cl-docker-images/cmucl:latest ...
Pulling docker image =

containers.common-lisp.net/cl-docker-images/cmucl:latest ...
Using docker image =

sha256:6916dbaf2e089d30e6ab50badbb8d42769f34f54824e2242df73483816145a0c =

for containers.common-lisp.net/cl-docker-images/cmucl:latest with digest =

containers.common-lisp.net/cl-docker-images/cmucl@sha256:6412045f7fae4aac=
b0cf644378d3f4c583931743c80f065d6bdd3c5a7581811b =

=2E..
```
--=_MailMate_09799BF6-72AD-4433-8B94-360E5B0C8A3E_=
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html>
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/xhtml; charset=3Dutf-8"=
>
</head>
<body><div style=3D"font-family: sans-serif;"><div class=3D"markdown" sty=
le=3D"white-space: normal;">
<p dir=3D"auto">I'm getting failures:</p>
<pre style=3D"margin-left: 15px; margin-right: 15px; padding: 5px; backgr=
ound-color: #F7F7F7; border-radius: 5px 5px 5px 5px; overflow-x: auto; ma=
x-width: 90vw;"><code style=3D"margin: 0 0; border-radius: 3px; backgroun=
d-color: #F7F7F7; padding: 0px;">2026-04-29T23:23:23.935995Z 00O =1B[0KRu=
nning with gitlab-runner 18.11.0 (249f0215)=1B[0;m
2026-04-29T23:23:23.936008Z 00O =1B[0K  on asdf-all cnwewr6cO, system ID:=
 s_73807f95a479=1B[0;m
2026-04-29T23:23:23.936028Z 00O section_start:1777505003:prepare_executor=

2026-04-29T23:23:23.936028Z 00O+=1B[0K=1B[0K=1B[36;1mPreparing the &quot;=
docker&quot; executor=1B[0;m=1B[0;m
2026-04-29T23:23:23.943801Z 00O =1B[0KUsing Docker executor with image co=
ntainers.common-lisp.net/cl-docker-images/cmucl:latest ...=1B[0;m
2026-04-29T23:23:25.200808Z 00O =1B[0KUsing effective pull policy of [alw=
ays] for container containers.common-lisp.net/cl-docker-images/cmucl:late=
st=1B[0;m
2026-04-29T23:23:25.201087Z 00O =1B[0KAuthenticating with credentials fro=
m job payload (GitLab Registry)=1B[0;m
2026-04-29T23:23:25.201093Z 00O =1B[0KPulling docker image containers.com=
mon-lisp.net/cl-docker-images/cmucl:latest ...=1B[0;m
2026-04-29T23:23:25.364069Z 00O =1B[0;33mWARNING: Failed to pull image wi=
th policy &quot;always&quot;: Error response from daemon: pull access den=
ied for containers.common-lisp.net/cl-docker-images/cmucl, repository doe=
s not exist or may require 'docker login': denied: requested access to th=
e resource is denied (manager.go:238:0s)=1B[0;m
2026-04-29T23:23:25.364138Z 00O section_end:1777505005:prepare_executor
2026-04-29T23:23:25.364140Z 00O+=1B[0K
2026-04-29T23:23:25.364210Z 00O =1B[31;1mERROR: Job failed: failed to pul=
l image &quot;containers.common-lisp.net/cl-docker-images/cmucl:latest&qu=
ot; with specified policies [always]: Error response from daemon: pull ac=
cess denied for containers.common-lisp.net/cl-docker-images/cmucl, reposi=
tory does not exist or may require 'docker login': denied: requested acce=
ss to the resource is denied (manager.go:238:0s)=1B[0;m

</code></pre>
<p dir=3D"auto"><a href=3D"https://gitlab.common-lisp.net/asdf/asdf/-/job=
s/115256" style=3D"color: #3983C4;">https://gitlab.common-lisp.net/asdf/a=
sdf/-/jobs/115256</a></p>
<p dir=3D"auto">What's <em>really</em> odd is that when <em>our</em> GitL=
ab runner runs the test, it has no trouble pulling that docker image:</p>=

<pre style=3D"margin-left: 15px; margin-right: 15px; padding: 5px; backgr=
ound-color: #F7F7F7; border-radius: 5px 5px 5px 5px; overflow-x: auto; ma=
x-width: 90vw;"><code style=3D"margin: 0 0; border-radius: 3px; backgroun=
d-color: #F7F7F7; padding: 0px;">Using Docker executor with image contain=
ers.common-lisp.net/cl-docker-images/cmucl:latest ...
Pulling docker image containers.common-lisp.net/cl-docker-images/cmucl:la=
test ...
Using docker image sha256:6916dbaf2e089d30e6ab50badbb8d42769f34f54824e224=
2df73483816145a0c for containers.common-lisp.net/cl-docker-images/cmucl:l=
atest with digest containers.common-lisp.net/cl-docker-images/cmucl@sha25=
6:6412045f7fae4aacb0cf644378d3f4c583931743c80f065d6bdd3c5a7581811b ...
</code></pre>

</div>
</div>
</body>

</html>

--=_MailMate_09799BF6-72AD-4433-8B94-360E5B0C8A3E_=--