how to build a docker image with private reigistry image ?

[zszen]

deal.sh

#!/usr/bin/env bash
TAG=test-`date +%y%m%d`
IMG=10.0.33.251:5001/nacos:${TAG}
docker build -f dockerfile.df -t ${IMG} .

run pipeline result:

[go] Job Started: 2024-03-06 15:12:54 CST

[go] Start to prepare pp-docker-build-test/17/st-docker-build-test/1/jb-docker-build-test on bjsasc [/var/lib/go-agent]

[go] Start to build pp-docker-build-test/17/st-docker-build-test/1/jb-docker-build-test on bjsasc [/var/lib/go-agent]

[go] Task: sh deal.shtook: 0.29sexited: 1
    DEPRECATED: The legacy builder is deprecated and will be removed in a future release.
                Install the buildx component to build images with BuildKit:
                https://docs.docker.com/go/buildx/

    Sending build context to Docker daemon  74.75kB

    Step 1/6 : FROM 10.0.33.251:5001/centos7_jdk8:v7.9_1.8.0_251
    Head "http://10.0.33.251:5001/v2/centos7_jdk8/manifests/v7.9_1.8.0_251": no basic auth credentials
    [go] Task status: failed, took: 0.29s, exited: 1

[go] Current job status: failed

[go] Start to upload pp-docker-build-test/17/st-docker-build-test/1/jb-docker-build-test on bjsasc [/var/lib/go-agent]

[go] Job completed pp-docker-build-test/17/st-docker-build-test/1/jb-docker-build-test on bjsasc [/var/lib/go-agent]

I don't known how to auth the docker private registry. ;(

here is the pipeline file:

{
  "group": "defaultGroup",
  "name": "pp-docker-build-test",
  "display_order_weight": -1.0,
  "label_template": "${COUNT}",
  "lock_behavior": "none",
  "environment_variables": [],
  "parameters": [],
  "materials": [
    {
      "url": "http://xx.xx.xx.xx/platform/deployment/zszen/cicd-test-docker",
      "branch": "master",
      "shallow_clone": true,
      "filter": {
        "ignore": [],
        "includes": []
      },
      "auto_update": true,
      "username": "",
      "encrypted_password": "",
      "type": "git"
    }
  ],
  "stages": [
    {
      "name": "st-docker-build-test",
      "fetch_materials": true,
      "never_cleanup_artifacts": false,
      "clean_working_directory": false,
      "approval": {
        "type": "success",
        "users": [],
        "roles": [],
        "allow_only_on_success": false
      },
      "environment_variables": [],
      "jobs": [
        {
          "name": "jb-docker-build-test",
          "environment_variables": [],
          "tabs": [],
          "resources": [
            "network"
          ],
          "artifacts": [],
          "timeout": 0.0,
          "tasks": [
            {
              "command": "sh",
              "timeout": -1.0,
              "arguments": [
                "deal.sh"
              ],
              "run_if": "passed",
              "type": "exec"
            }
          ]
        }
      ]
    }
  ]
}

[chadlwilson]

Please use https://github.com/gocd/gocd/discussions or https://groups.google.com/g/go-cd for general usage questions rather than creating "issues".

This is really a general Docker configuration question rather than specific to GoCD. You could change your agent to be pre-logged in to your registry before it runs any jobs, or alternatively if you want to keep it dynamic for each pipeline:

Change your deal.sh to something like this

#!/usr/bin/env bash
TAG=test-`date +%y%m%d`
REGISTRY=10.0.33.251:5001
IMG=${REGISTRY}/nacos:${TAG}
echo "${DOCKER_REGISTRY_PASSWORD}" | docker login ${REGISTRY} --username "${DOCKER_REGISTRY_USERNAME}" --password-stdin
docker build -f dockerfile.df -t ${IMG} .
docker logout ${REGISTRY}

Then configure your pipeline/stage/job to have these environment variables

{
  "environment_variables": [
    {
      "name": "DOCKER_REGISTRY_USERNAME",
      "encrypted_value": "BLAH"
    },
    {
      "name": "DOCKER_REGISTRY_PASSWORD",
      "encrypted_value": "BLAH"
    }
  ]
}

To encrypt the values, you can either

• use the GoCD API to do it: https://api.gocd.org/current/#encryption
• or create a manual pipeline from the UI with the value, and copy and paste the encrypted value out of the configuration and into your pipeline config

[zszen]

Thank you so much. It worked successfully.