Gitlab for container hosting?

phin · July 31, 2023, 5:25pm

Hello,

Has anyone had any success with using gitlab for private container hosting for mikrotik? I am constantly getting 401 errors and unable to retrieve manfiest and configuration errors.

I have tested credentials locally and on separate workstations and all seem to work. I also have noticed that the last access for the token i am using, seem to be working as it shows its being access when i attempt to fetch from the router.

Not sure where to go from here.

Amm0 · July 31, 2023, 6:46pm

Only used GitHub. But couple thoughts:

Attestation (and related manifest) has some issues in some V7’s, so I’d make sure to use try on 7.11
Are you building for one architecture (e.g ARM64) or multiple ones? A multiarch images might need a specific manifest available for the container registry to serve them correctly. Not studied GitLab docs, but https://docs.gitlab.com/ee/user/packages/container_registry/troubleshoot_container_registry.html#blob-unknown-to-registry-error-when-pushing-a-manifest-list suggest using some qualifier with the arch…

phin · August 1, 2023, 12:44pm

Could you better explain part 1? Are you suggesting i use a newer version of the routeros?

I am building only for arm/v7. The container is being deployed to a hapac2. When i tar up the container and upload it manually, i do not have an issue. I am curious if it is some sort of authentication issue. I am going to give another repository host a try, such as docker.io.

Amm0 · August 4, 2023, 5:41pm

Absolutely you should be running at least 7.10. Essentially there were bugs in processing metadata from images. I don’t think that’s your issue.

401 is unauthorized. So you need to make sure you’ve set the username and password and URL correct in /container/settings. That seems like the issue here…
Quick google turns up how to get these credentials:
https://docs.gitlab.com/ee/user/packages/container_registry/authenticate_with_container_registry.html .

Also, make sure you use the fully qualified package name, including the registry URL like “registry.gitlab.io/myrepo/myproject:latest” – even if you have registry set, I think RouterOS always want the “domain” to be there, otherwise it assumes library/myrepo/myproject I think.