Questions tagged [amazon-ecr]
Amazon Web Services Elastic Container Registry is a software-as-a-service hosted private Docker registry that can be used to store private Docker container images in AWS data centers.
41
questions
30
votes
1
answer
23k
views
Can I use AWS ECR image directly in my Dockerfile?
In a typical dockerfile, there is usually this line From ubuntu:16.04 which enables pulling an image from docker repository.
Now I have built my own image repository:
The repositiory URI is: ...
- 3,518
19
votes
6
answers
51k
views
Docker login to AWS ECR from GitLab CI fails with "dial tcp: lookup docker on x.x.x.x:53: no such host" when pulling docker:dind from ECR
I'm working on porting a collection of Docker images used for GitLab CI/CD building and deployment from Dockerhub to AWS public ECR.
Everything works as it should except for the standard Docker image ...
- 191
14
votes
5
answers
15k
views
How to connect to AWS ECR using python docker-py
When running from the command line, to pull from a specific registry I can run these commands:
dockerCommand=$("aws ecr get-login --profile profileName --region us-west-2")
$dockerCommand (which ...
- 381
11
votes
4
answers
29k
views
What is the proper way to log in to ECR?
Currently, I have this command in my bash script for building & pushing an image to Amazon ECR
docker login -u AWS -p "$(aws ecr get-login-password)" "https://$(aws sts get-caller-identity --...
- 802
10
votes
4
answers
7k
views
Integrate Amazon Elastic Container Registry with Jenkins
I'm trying to integrate Amazon's new Elastic Container Registry (ECR) with my Jenkins build service. I'm using the Cloudbees Docker Build & Publish plugin to build container images and publish ...
- 2,840
9
votes
2
answers
8k
views
Amazon ECS Task fails with STOPPED (CannotPullContainerError: Error response from daem)
I have set up an AWS VPC and am trying to deploy a functional container in ECS on a Fargate launch type but the task always fails with:
STOPPED (CannotPullContainerError: Error response from daem)
...
- 537
8
votes
3
answers
18k
views
What is the permission for a IAM user to create a ECR repository?
My IAM user is getting this error
User: arn:aws:iam::123456789:user/admin is not authorized to perform:
ecr:CreateRepository on resource: *
when I try to create a repository.
I have already grant ...
- 3,518
7
votes
1
answer
5k
views
Configuring "auth" and "credsStore" for different Docker registry
I'm trying to configure Docker for two different registries. (One ECR and docker.io) I need to configure ECR one with ecr-login and docker.io with simple auth but I'm failing to configure these at the ...
- 71
7
votes
0
answers
2k
views
How to estimate storage and traffic used for docker images in AWS ECR?
I'm trying to esimate monthly cost of using AWS ECR. It will consist of: outgoing traffic cost (downloading images) and storage cost (storing images in ECR).
Let's assume, that:
We are building some ...
- 81
6
votes
1
answer
5k
views
AWS ECR - Push Successful, Image Does Not Appear in Repo
We're using AWS ECR to host our docker images. We've noticed in a few rare instances that the docker push command can complete successfully, but the resulting image does not appear in the ECR ...
- 71
5
votes
3
answers
650
views
How to choose between Elastic Container Service (ECS) or Elastic Container Registry (ECR), Elastic Beanstalk, and Lambda?
Background:
I've worked with EC2 and RDS. Recently I received a query from a client in which he wants to develop both mobile and web applications using Amazon Web Services, and need advice on which ...
- 53
3
votes
1
answer
14k
views
How to add amazon-ecr-credential-helper to path
I'm trying to set up amazon-ecr-credential-helper so that I can have an ansible script automatically push / pull to my aws ecr docker repository, but the instructions for installing it seem very vague....
- 130
3
votes
0
answers
1k
views
Use an ECR image as an agent in Jenkins
What I'd like to do is use an ECR image as an agent in Jenkins when using declarative pipeline
Current top of pipeline script looks like so:
pipeline {
agent {
docker {
image ...
- 31
3
votes
0
answers
1k
views
How to get Docker to retry image pull?
Our Nomad agents sometimes fails jobs because they cannot pull images from ECR. /var/log/docker will contain messages like:
Not continuing with pull after error: error pulling image
configuration:...
- 3,130
2
votes
1
answer
3k
views
ECR Lifecycle Policy to exclude certain tags
Is there a way to exclude certain tags/images from a cleanup policy?
E.g. say I have a repository with images and the related SHAs for the Pull Request which triggered their creation. When these are ...
- 1,344
2
votes
1
answer
2k
views
Is it possible to have a failover/backup docker registry?
Since the failure of quay.io last week everyone in the company recognized how important is the service. And this raised this question on my head:
If this happens again, how can my infrastructure be ...
- 133
2
votes
2
answers
3k
views
Automatically login on Amazon ECR with Docker Swarm
We have Docker images hosted on Amazon ECR and the goal is to run them on EC2 instances using Docker Swarm. The services are configured in global mode so that they are automatically replicated on new ...
- 291
2
votes
0
answers
270
views
Why can't I use AWS EC2 ImageBuilder to create a RHEL based container?
In the AWS console for EC2 ImageBuilder the option to create a Container Recipe using RHEL as the base image seems to be disabled.
From EC2 Image Builder console -> Container Recipes -> Create ...
- 121
2
votes
0
answers
728
views
Environment variables aren't availiable during SSH session to AWS ECS container
I have configured ECS containers. Everything works, however when I'm connecting to a container through SSH, there are no environment variables that are defined in a task definition.
Is there a way to ...
- 103
2
votes
0
answers
2k
views
How to deploy SSL certificates on Amazon Elastic Container Service?
I have a proxy server (nginx) which has the following responsibilities:
proxies to different backends depending on resource requested
enforces rate limiting and IP blacklisting
handles rewrites and ...
- 291
2
votes
0
answers
637
views
ECR IAM policy document for EKS node access
What is the correct way to manage EKS node access to ECR via the IAM policy documents when I want to limit who can start jobs using different images?
In a simplified example, I have users A and B and ...
- 21
2
votes
1
answer
2k
views
"unknown shorthand flag: 'e' in -e" from 'aws ecr get-login'
I am trying to push a docker image to the aws ecr
When i try to login to ect,
aws ecr get-login
It expands to something like this
docker login -u AWS -p eyJwYXlsbXXXXXXVZIn0= -e none
https:...
- 3,518
1
vote
1
answer
5k
views
Give one user read-only access to ECR repo
How can I give a_user read-only access (i.e. no permission to Push) and b_user is not banned?
What I have done so far:
Added my AWS access + secret key with aws configure
Made an ECR repo and did ...
- 121
1
vote
1
answer
2k
views
How to pass arguments into scheduled task on AWS Fargate?
I have a docker container (derived from PHP-CLI) that may be launched like this locally:
docker run php-cli-container php public/index.php argument1 argument2
I uploaded the container to Amazon AWS ...
- 231
1
vote
0
answers
42
views
AWS Elastic Container Registry login blocked
We are trying to log in to AWS Elastic Container Registry (ECR) to pull down docker containers from our private registry. The login is failing with this error:
Error response from Daemon: Get https:/...
- 529
1
vote
1
answer
2k
views
Why does a custom CodeBuild image require aws configure, but not a managed one?
I have an AWS CodePipeline with the build step using CodeBuild. I was previously using a managed image for this build job and I was able to use the follow command without issue:
aws ecr get-login --...
- 111
1
vote
0
answers
437
views
Best strategy for deploying Docker to Elastic Beanstalk
I'm not sure if this is the best place to put this question.
But for a few days I'm struggling to find a good deploying process to Elastic Beanstalk and I want to know the opinion of people with more ...
- 135
0
votes
1
answer
3k
views
Podman fails pushing image to AWS ECR repository with: Error: writing blob: Post
I have issues trying to push an image I created with podman to an ECR container I have.
The issue doesn't seem to be related to permissions or authentication and I am struggling to find similar issues ...
0
votes
2
answers
8k
views
Docker login to AWS ECR fails with "dial tcp xxxx:443: i/o timeout"
I'm stepping through a "Scaling Docker for AWS" course which specifies using "aws ecr get-login" to get a "docker login" command line.
I'm running docker version 1.12.6.
When I run the output ...
- 121
0
votes
1
answer
130
views
Remove external Docker container registry dependencies / only store container images on Amazon ECR
So I am using Amazon Elastic Container Registry (ECR) to store our containers. I have a container that is built using a Microsoft base image:
mcr.microsoft.com/dotnet/framework/aspnet:4.8-...
- 529
0
votes
1
answer
1k
views
Why does my container not contain DB data after I commit it?
I'm trying to create a PostgreSQL container that already contains development data. I can see the data I have created, but when I commit, push, and pull the image, the data is not there.
Below is my ...
- 385
0
votes
2
answers
5k
views
Command Execution Error while executing ecr login command
I am getting error in PRE_BUILD section of Code Pipeline while deploying ECS. While executing commmand for ecr login, i am getting exit status with error code 255. please see below image.
Command : - ...
- 521
0
votes
1
answer
530
views
AWS ECR - Getting an image's age
Is there a way to find the age of a Docker image pushed to AWS ECR?
When I ask for the image manifest with aws ecr batch-get-image --repository some/repo --image-ids "imageDigest=sha256:abcdef..." ...
- 2,448
0
votes
0
answers
116
views
RDS is not connecting with ECS Fargate through secret manager
I am facing an issue with my Laravel application deployment on AWS ECS. The deployment process involves Jenkins, AWS ECR, and ECS. The new task is created, but there's an "Access Denied" ...
- 101
0
votes
0
answers
806
views
AWS ECR Login error
AWS ECR Login error:
command: aws ecr get-login-password --region ap-south-1 | docker login --username AWS --password-stdin {id}.dkr.ecr.{region}.amazonaws.com
An error occurred (...
0
votes
0
answers
586
views
Will AWS Lambda deployed from image pull the ECR image on each new instances get initialised
Because of Lambda’s ZIP deployment size limitation I’m changing the way I deploy my Lambda functions to use container image.
The deployed function is located within a VPC, so I have a NAT gateway ...
- 101
0
votes
0
answers
2k
views
Kubernetes pods failing with ImagePullBackOff when trying to pull image from AWS ECR
I are trying to run some Kubernetes pods in my Windows machine by using Docker-Desktop.
I am trying to install them using HELM. I have created my Docker images and have pushed them into AWS ECR ...
- 63
0
votes
1
answer
495
views
AWS - Accessing cross account and cross region resources in a secured manner
I'm trying to secure an ec2 instance using security groups to do the following
VPC A (Account - A, Region - A)
VPC B (Account - B, Region - B)
I want an ec2 instance in VPC A to be able to access ecr ...
0
votes
0
answers
483
views
Setting environment variable in kubernetes before pulling an image
Is there a way to set the environment variables in kubernetes before it pulls the container image?
For some context, I'm looking for alternatives to what I've asked in ECR IAM policy document for EKS ...
- 21
0
votes
1
answer
999
views
Publish docker images to AWS ECR from Jenkins
Following this discussion- Integrate Amazon Elastic Container Registry with Jenkins,
After publishing my image to ECR from Jenkins using a shell script, it works- but another image with empty tag ...
- 1
0
votes
1
answer
195
views
AWS ECR allow pull for all?
I've uploaded a few docker containers to AWS ECR.
I'm trying to Docker Pull without any authentication, which doesn't seem to work.
I've read that there's a way to authenticate with a token for ...
- 101