Pull private docker images from Google Container Registry w/o gcloud -

-

i'm using shippable push private docker images google container registry want pull either locally on laptop, or inside instance on google compute engine.

i know command gcloud preview docker pull gcr.io/projectid/image-name works, can't rely on gcloud being installed on every machine may need pull image from.

if run docker-compose -d on machine following error:

pulling image gcr.io/projectid/image-name... pulling repository gcr.io/projectid/image-name traceback (most recent call last):   file "<string>", line 3, in <module>   file "/compose/build/docker-compose/out00-pyz.pyz/compose.cli.main", line 31, in main   file "/compose/build/docker-compose/out00-pyz.pyz/compose.cli.docopt_command", line 21, in sys_dispatch   file "/compose/build/docker-compose/out00-pyz.pyz/compose.cli.command", line 27, in dispatch   file "/compose/build/docker-compose/out00-pyz.pyz/compose.cli.docopt_command", line 24, in dispatch   file "/compose/build/docker-compose/out00-pyz.pyz/compose.cli.command", line 59, in perform_command   file "/compose/build/docker-compose/out00-pyz.pyz/compose.cli.main", line 464, in   file "/compose/build/docker-compose/out00-pyz.pyz/compose.project", line 208, in   file "/compose/build/docker-compose/out00-pyz.pyz/compose.service", line 214, in recreate_containers   file "/compose/build/docker-compose/out00-pyz.pyz/compose.service", line 199, in create_container   file "/compose/build/docker-compose/out00-pyz.pyz/compose.progress_stream", line 37, in stream_output   file "/compose/build/docker-compose/out00-pyz.pyz/compose.progress_stream", line 50, in print_output_event compose.progress_stream.streamoutputerror: error: status 403 trying pull repository projectid/image-name: "access denied."

is there way authenticate or access image form of oauth or keys? want avoid having install gcloud on every machine ever need pull image, , images have remain private.

i have tried gcloud preview docker -a not solution i'm looking for.

thank in advance help.

if want work google container registry on machine not in google compute engine (i.e. local) using vanilla docker can follow google's instructions.

the 2 main methods using access token or json key file.

note _token , _json_key actual values provide username (-u)

access token

$ docker login -e 1234@5678.com -u _token -p "$(gcloud auth print-access-token)" https://gcr.io

json key file

$ docker login -e 1234@5678.com -u _json_key -p "$(cat keyfile.json)" https://gcr.io

to create key file can follow these instructions:

  1. open credentials page.
  2. to set new service account, following:
    • click add credentials > service account.
    • choose whether download service account's public/private key standard p12 file, or json file can loaded google api client library.
    • your new public/private key pair generated , downloaded machine; serves copy of key. responsible storing securely.

you can view google's documentation on generating key file here.


Comments

Post a Comment

Popular posts from this blog

PHP DOM loadHTML() method unusual warning -

-
i had following code works fine on localhost: $document = new domdocument(); $document->loadhtml($p_result); $form = $document->getelementsbytagname('form')->item(0); // code continues using $form variable after same code updated on outside server, loadhtml() failed , issued warning. warning: domdocument::loadhtml() expects parameter 1 valid path, string given in path/name/to/script.php returned null instead of object code pretty gets fatal error. note contents of $p_result absolutely same on outside server , on localhost. but why displays kind of warning , why not work? doesn't loadhtml() expects argument 1 string in first place? why method expects parameter 1 valid path ? just make clear i'm not calling loadhtmlfile() , i'm calling loadhtml() . thanks. you're affected one of php bugs . issue present in php 5.6.8 , 5.6.9. have affected php version on server, , bug-free version on localhost. the bug forbids null
Read more

python - How to create jsonb index using GIN on SQLAlchemy? -

-
here's current code creating index jsonb. index("mytable_data_idx_id_key", mytable.data['id'].astext, postgresql_using='gin') but got error. sqlalchemy.exc.programmingerror: (psycopg2.programmingerror) data type text has no default operator class access method "gin" hint: must specify operator class index or define default operator class data type. [sql: "create index event_data_idx_id_key on event using gin ((data ->> 'id'))"] is there way create index on sqlalchemy? the postgresql specific sqlalchemy docs @ http://docs.sqlalchemy.org/en/latest/dialects/postgresql.html#operator-classes mention postgresql_ops dictionary provide "operator class" used postgresql, , provide example illustrating use: index('my_index', my_table.c.id, my_table.c.data, postgresql_ops={ 'data': 'text_pattern_ops',
Read more

c# - TransactionScope not rolling back although no complete() is called -

-
i'm using transactionscope rollback transaction fail bool errorreported = false; action<importerrorlog> newerrorcallback = e => { errorreported = true; errorcallback(e); }; using (var transaction = new transactionscope()) { foreach (importtaskdefinition task in taskdefinition) { loader.load(streamfile, newerrorcallback, task.destinationtable, processingtaskid); } if (!errorreported) transaction.complete(); } i'm sure there no transactionscope started ahead or after code. i'm using entity framework insert in db. regardless state of errorreported transaction never rolled in case of error. what missing ? transactionscope sets transaction.current . that's does. wants transacted must @ property. i believe ef each time connection opened reason. probably, connection open when scope installed. open connection inside of scope or enlist manually. ef has nasty "design decision": default opens
Read more