使用 Azure DevOps 管道和 docker-compose 构建 docker 图像并将其推送到 ACR 时出现身份验证错误

Question

我正在尝试使用 Azure DevOps 管道构建 docker 映像并将其推送到 ACR。我必须使用 docker-compose.yml 文件构建它才能在容器中使用 openvpn。

当我运行管道时，出现以下错误。有人知道如何解决这个问题吗？

Starting: DockerCompose
==============================================================================
Task         : Docker Compose
Description  : Build, push or run multi-container Docker applications. Task can be used with Docker or Azure Container registry.
Version      : 0.183.0
Author       : Microsoft Corporation
Help         : https://aka.ms/azpipes-docker-compose-tsg
==============================================================================
/usr/local/bin/docker-compose -f /home/vsts/work/1/s/src/docker-compose.yml -f /home/vsts/agents/2.188.2/.docker-compose.1624362077551.yml -p Compose up -d
Creating network "composeproject_default" with the default driver
Pulling getstatus (***/getstatus:)...
Head https://***/v2/getstatus/manifests/latest: unauthorized: authentication required, visit https://aka.ms/acr/authorization for more information.
##[error]Creating network "composeproject_default" with the default driver
##[error]Pulling getstatus (***/getstatus:)...
##[error]Head https://***/v2/getstatus/manifests/latest: unauthorized: authentication required, visit https://aka.ms/acr/authorization for more information.
##[error]The process '/usr/local/bin/docker-compose' failed with exit code 1
Finishing: DockerCompose

我的 azure-pipelines.yml 看起来像这样：

# Docker
# Build and push an image to Azure Container Registry
# https://docs.microsoft.com/azure/devops/pipelines/languages/docker

trigger:
- main

resources:
- repo: self

variables:
  # Container registry service connection established during pipeline creation
  dockerRegistryServiceConnection: '*****************************'
  imageRepository: 'getstatus'
  containerRegistry: 'composeproject.azurecr.io'
  dockerfilePath: '$(Build.SourcesDirectory)/Dockerfile'
  tag: '$(Build.BuildId)'

  # Agent VM image name
  vmImageName: 'ubuntu-latest'


stages:
- stage: Build
  displayName: Build and push stage
  jobs:
  - job: Build
    displayName: Build
    pool:
      vmImage: $(vmImageName)
    steps:

    - task: Docker@2
      displayName: Build and push an image to container registry
      inputs:
        command: buildAndPush
        repository: $(imageRepository)
        dockerfile: $(dockerfilePath)
        containerRegistry: $(dockerRegistryServiceConnection)
        tags: |
          $(tag)

    - task: DockerCompose@0
      inputs:
        containerregistrytype: 'Azure Container Registry'
        dockerComposeFile: '**/docker-compose.yml'
        action: 'Run a Docker Compose command'
        dockerComposeCommand: 'up -d'

而 docker-compose.yml 是这样的：

version: "3.3"
services: 
  getstatus:
    image: composeproject.azurecr.io/getstatus
    restart: always
    sysctls:
      - net.ipv6.conf.all.disable_ipv6=0
    cap_add: 
      - NET_ADMIN
    devices:
      - /dev/net/tun
    volumes:
      - /etc/timezone:/etc/timezone:ro

Answer 1

我认为你的 docker 撰写任务是 missing a couple of parameters

尝试添加 azureContainerRegistry: composeproject.azurecr.io 和 azureSubscriptionEndpoint: $(dockerRegistryServiceConnection)

不确定为什么 Docker@2 任务中提供的凭据不能持续存在，因为它们处于同一阶段，但我可以用我不确定的内容填充百科全书来到 Azure 管道

使用 Azure DevOps 管道和 docker-compose 构建 docker 图像并将其推送到 ACR 时出现身份验证错误

Authentication Error when Building and Pushing docker image to ACR using Azure DevOps Pipelines and docker-compose

docker

docker-compose

azure-devops

azure-container-registry

azure-devops-pipelines