Comments (15)
I can confirm that this bug was introduced in v0.61.0
v0.60.0 workes as normal
New version of grype is available: 0.61.1 (currently running: 0.61.0)
⠼ Pulling image
1 error occurred:
* failed to catalog: could not fetch image "
New version of grype is available: 0.61.1 (currently running: 0.60.0)
✔ Loaded image
✔ Parsed image
✔ Cataloged packages [214 packages]
✔ Scanning image... [10 vulnerabilities]
from stereoscope.
Nevermind, apparently if you have Docker Desktop and docker service on UNIX and you have your images on Docker Desktop, it's not looking for them on docker desktop. I've turned off Docker Desktop and moved my images to docker service and now it's ok. You can close it or maybe investigate how to look up for Docker Desktop images also
from stereoscope.
Hey @tgerla, it's working for me now. I'm on v0.66.0.
from stereoscope.
I have tried it with v0.60.0 and it still gives me the same error.
╰─ grype custom-rabbit
✔ Vulnerability DB [no update available]
New version of grype is available: 0.61.1 (currently running: 0.60.0)
⠴ Pulling image
1 error occurred:
* failed to catalog: could not fetch image "custom-rabbit": unable to use DockerDaemon source: pull failed: Error response from daemon: pull access denied for custom-rabbit, repository does not exist or may require 'docker login': denied: requested access to the resource is denied
I have restarted my machine and docker as well, same thing :(
from stereoscope.
Hi @Nicu-Ducal, thanks for the report and the updates. We think it has to do with a new feature in Docker Desktop: specifically, being able to change which socket file is used to communicate with Docker Desktop. We will need to do some investigation to figure out what exactly is going on.
As a possible workaround can you go to your Docker Desktop settings and select Advanced, and select "Enable default Docker socket"?
from stereoscope.
Facing the same issue. Upgraded to v0.61.0 from v0.59.0 and started having this issue.
@tgerla the workaround is not working as well.
from stereoscope.
As a possible workaround can you go to your Docker Desktop settings and select Advanced, and select "Enable default Docker socket"?
I think I have an older version of Docker Desktop, which doesn't even have this specific setting :( I can Update if you desire
from stereoscope.
Possibly related to: anchore/grype#1314
from stereoscope.
If there is an issue with Desktop Vs Service then it might have to do with how they treat the socket in the latest release:
https://github.com/anchore/syft/blob/main/DEVELOPING.md#docker-settings-for-getting-started
Check out these docs we just added which show how to setup the context and allow the default docker socket to be used - If there is anything different on linux as far as the desktop settings let me know and I can update the docs!
from stereoscope.
HI @purujitgoyal and @Nicu-Ducal, we have made some updates to the way that we communicate with Docker Desktop in Syft 0.86 (included in the latest version of Grype) -- can you upgrade and see if you are still seeing problems?
from stereoscope.
Hi @tgerla! I'll give it a try maybe this weekend or on Tuesday, thanks for the notice!
from stereoscope.
Hi @Nicu-Ducal, just checking to see if you are still having problems with this...happy to help out if you are still seeing issues!
from stereoscope.
Hey @tgerla! Sorry for ghosting you, just had a lot of work lately and didn't really had time to check it. I've tried now and it still seems to now see the images that were created by Docker Desktop Daemon :( It's okay though, because I've stopped using it and I'm just using the CLI daemon now and it works fine with it.
P.S. It raises the same error as previously
from stereoscope.
Thanks @purujitgoyal and @Nicu-Ducal for your responses. Nicu, I'll go ahead and close this issue but if you would ever like us to revisit it with you, please re-open this or find us on Slack and we will be happy to help!
from stereoscope.
Sure thing, thank you @tgerla for your help and input!
from stereoscope.
Related Issues (20)
- It should be possible to specify image platform when pulling from the registry
- Wrong source when ":" character in path
- Cleanup temp directories across image providers HOT 5
- SquashFS Iteration Fails when FIFO Present
- SquashFS iteration fails with "unexpected EOF" HOT 1
- Unable to read image using Docker daemon provider when architecture has variant
- Stereoscope pulls different images when using ``docker:`` vs ``registry:`` from multi-platform images
- Symlink not being recognized HOT 4
- Embed fs.FileInfo in Metadata Struct?
- Support for image indexes with multiple manifests HOT 4
- Odd error message when docker.socket in home dir is used
- Goroutine Leak in Long-Running Services with Stereoscope HOT 3
- Data Race in Image.Read
- Platform selection in docker client has unnecessary error HOT 2
- NewTarIndex race condition when run in a goroutine HOT 6
- Add support for containers-storage backend for container images
- Cycle during symlink resolution prevents syft/grype scans from enumerating vulnerabilities
- Add release process
- Concurrently analyzing containers can lead to race condition causing error HOT 9
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from stereoscope.