# Docker Private Registries **URL:** \ **Category:** Ansible Project\ **Created:** [September 4, 2014, 8:10pm UTC](https://forum.ansible.com/t/docker-private-registries/16121 "2014-09-04T20:10:17Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![Matt\_Hughes](https://avatars.discourse-cdn.com/v4/letter/m/f04885/32.png) [@Matt\_Hughes](https://forum.ansible.com/u/Matt_Hughes)\ **Post date:** [September 4, 2014, 8:10pm UTC](https://forum.ansible.com/t/docker-private-registries/16121/1 "2014-09-04T20:10:17Z")
Trying to use the docker module to run images from a docker private registry. I’m using the current master branch of Ansible as that supports username/password. Playbook is: - name: run app docker: registry=[https://private-repo.com:443](https://private-repo.com:443) [image:443=private-repo.com/busycorp/app:1.0.0](http://image:443=private-repo.com/busycorp/app:1.0.0) username={{ docker\_registry\_username }} password={{ docker\_registry\_password }} [email=mhughes@busicorp.us](mailto:email=mhughes@busicorp.us) It appears to successfully log in, but can’t find that tag: ESTABLISH CONNECTION FOR USER: mhughes REMOTE\_MODULE docker registry=[https://private-repo.com:443](https://private-repo.com:443) [image:443=private-repo.com/busicorp/app:1.0.0](http://image:443=private-repo.com/busicorp/app:1.0.0) username=mhughes password=VALUE\_HIDDEN [email=mhughes@busicorp.us](mailto:email=mhughes@busicorp.us) EXEC ssh -C -tt -vvv -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=/Users/mhughes/.ansible/cp/ansible-ssh-%h-%p-%r -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 test /bin/sh -c ‘mkdir -p $HOME/.ansible/tmp/ansible-tmp-1409858894.29-223607362771114 && chmod a+rx $HOME/.ansible/tmp/ansible-tmp-1409858894.29-223607362771114 && echo $HOME/.ansible/tmp/ansible-tmp-1409858894.29-223607362771114’ PUT /var/folders/\_n/6r\_pnw9d1jg33\_chqmcpyvn00000gn/T/tmpm2Jl5K TO /home/clduser/.ansible/tmp/ansible-tmp-1409858894.29-223607362771114/docker EXEC ssh -C -tt -vvv -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=/Users/mhughes/.ansible/cp/ansible-ssh-%h-%p-%r -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 test /bin/sh -c ‘sudo -k && sudo -H -S -p “[sudo via ansible, key=mlompfrrydppecgwsjntwvxuyqknbxtf] password: " -u root /bin/sh -c '”’“‘echo SUDO-SUCCESS-mlompfrrydppecgwsjntwvxuyqknbxtf; LANG=en\_US.UTF-8 LC\_CTYPE=en\_US.UTF-8 /usr/bin/python /home/clduser/.ansible/tmp/ansible-tmp-1409858894.29-223607362771114/docker; rm -rf /home/clduser/.ansible/tmp/ansible-tmp-1409858894.29-223607362771114/ \>/dev/null 2\>&1’”‘"’’ failed: [test] =\> {“changed”: true, “failed”: true} msg: Docker API error: No such image: [private-repo.com:443/busicorp/app:1.0.0](http://private-repo.com:443/busicorp/app:1.0.0) (tag: 1.0.0) FATAL: all hosts have already failed – aborting I have tried with and without the registry name in the image. I can take the same image parameter above and successfully do a ‘docker pull’ on the machine. Is there some way to see the logs of ansible on the remote server so I can see exactly what commands it is calling? Or maybe there is just an issue with use of Docker namespaces? ---
**Author:** ![Michael\_DeHaan1](https://avatars.discourse-cdn.com/v4/letter/m/5e9695/32.png) [@Michael\_DeHaan1](https://forum.ansible.com/u/Michael_DeHaan1)\ **Post date:** [September 5, 2014, 1:31am UTC](https://forum.ansible.com/t/docker-private-registries/16121/2 "2014-09-05T01:31:10Z")
For starters, can you share the version of Ansible you are using? ---
**Author:** ![Matt\_Hughes](https://avatars.discourse-cdn.com/v4/letter/m/f04885/32.png) [@Matt\_Hughes](https://forum.ansible.com/u/Matt_Hughes)\ **Post date:** [September 5, 2014, 1:33am UTC](https://forum.ansible.com/t/docker-private-registries/16121/3 "2014-09-05T01:33:29Z")
I’m using master branch. To be specific, commit 4f55bcc298669f61ee11fb244ec447762b01edba. ---
**Author:** ![Michael\_DeHaan1](https://avatars.discourse-cdn.com/v4/letter/m/5e9695/32.png) [@Michael\_DeHaan1](https://forum.ansible.com/u/Michael_DeHaan1)\ **Post date:** [September 5, 2014, 1:53am UTC](https://forum.ansible.com/t/docker-private-registries/16121/4 "2014-09-05T01:53:03Z")
Hmmm… I don’t have a private registry running/available at the moment, is this something you might like to help work on/debug? We can definitely private some pointers. –Michael ---
**Author:** ![Matt\_Hughes](https://avatars.discourse-cdn.com/v4/letter/m/f04885/32.png) [@Matt\_Hughes](https://forum.ansible.com/u/Matt_Hughes)\ **Post date:** [September 5, 2014, 2:45am UTC](https://forum.ansible.com/t/docker-private-registries/16121/5 "2014-09-05T02:45:24Z")
Done a bit more digging. I can see the calls being made on the server via /var/log/docker and they all look right. It does the auth and then tries to pull, but the pull fails with: 2014/09/05 02:18:04 POST /v1.12/auth [3d312112] +job auth() [3d312112] -job auth() = OK (0) 2014/09/05 02:18:05 POST /v1.12/images/create?tag=1.0.0&[fromImage=private-repo.com](http://fromImage=private-repo.com)%3A443%2Fbusicorp%2Fapp [3d312112] +job pull([private-repo.com:443/busicorp/app](http://private-repo.com:443/busicorp/app), 1.0.0) Authentication is required. [3d312112] -job pull([private-repo.com:443/busicorp/app](http://private-repo.com:443/busicorp/app), 1.0.0) = ERR (1) If I use the exact same credentials and do a ‘docker login’ on the server, everything works. And a ‘docker pull’ from the server looks exactly like the POST command above, just that it succeeds. I found this issue referencing a similar problem on the docker-py group: [https://github.com/docker/docker-py/issues/241](https://github.com/docker/docker-py/issues/241) By adding /v1/ to the end of my repository parameter, the login and basic auth worked on the pull. Not really sure what to make of this, but it’s a workaround at least. ---
**Author:** ![Michael\_DeHaan1](https://avatars.discourse-cdn.com/v4/letter/m/5e9695/32.png) [@Michael\_DeHaan1](https://forum.ansible.com/u/Michael_DeHaan1)\ **Post date:** [September 5, 2014, 7:04pm UTC](https://forum.ansible.com/t/docker-private-registries/16121/6 "2014-09-05T19:04:43Z")
Urg. Might be worth contacting Docker to see if they can light a fire under the python bindings? ---
**Author:** ![Eli\_Finkelshteyn](https://avatars.discourse-cdn.com/v4/letter/e/f4b2a3/32.png) [@Eli\_Finkelshteyn](https://forum.ansible.com/u/Eli_Finkelshteyn)\ **Post date:** [November 20, 2014, 10:10pm UTC](https://forum.ansible.com/t/docker-private-registries/16121/7 "2014-11-20T22:10:39Z")
Any updates here? I’m running into the same issue. Also, as of Ansible 1.7.2, the username and registry commands still haven’t been merged, so as far as I can tell you have to be using the master branch of Ansible to run Docker images from private repos (which I still haven’t gotten to actually work). ---
**Author:** ![Michael\_DeHaan1](https://avatars.discourse-cdn.com/v4/letter/m/5e9695/32.png) [@Michael\_DeHaan1](https://forum.ansible.com/u/Michael_DeHaan1)\ **Post date:** [November 21, 2014, 1:55pm UTC](https://forum.ansible.com/t/docker-private-registries/16121/8 "2014-11-21T13:55:52Z")
Not sure what problems you are having with 1.8 - would need more info - but it will release next week. ---
**Author:** ![Eli\_Finkelshteyn](https://avatars.discourse-cdn.com/v4/letter/e/f4b2a3/32.png) [@Eli\_Finkelshteyn](https://forum.ansible.com/u/Eli_Finkelshteyn)\ **Post date:** [November 23, 2014, 11:59pm UTC](https://forum.ansible.com/t/docker-private-registries/16121/9 "2014-11-23T23:59:38Z")
I was still having issues-- specifically that I could pull and authenticate with an owner account, but not with a collaborator account, so I just used my .dockercfg as a workaround. Just do: - name: move docker cfg over so we don’t have to log in each time copy: src=.dockercfg dest=/root/.dockercfg - name: now download the image shell: docker pull {{ docker\_image }} - name: now run the docker image (no more need for authentication because it’s already been pulled) docker: image={{ docker\_image }} ports={{ docker\_ports }}