Balena deploy fails with error `unauthorized: authentication required` from the registry service

eeriksp · November 8, 2020, 6:31pm

I followed this official tutorial to set up openBalena.
The only thing I did differently was to include the -c flag to the ./scripts/quickstart command as it was suggested in the official screencast. Everything worked fine and I am able to add apps and devices to the system (this means that balena apps and balena devices commands work flawlessl.

However, when I try to push a new image to the app and execute balena deploy <appName>, I get the following error:

Retrying "registry.balena.mydomain.ee/v2/<token>:latest" after 2.00s (1 of 3) due to: Error: unauthorized: authentication required
Retrying "registry.balena.mydomain.ee/v2/<token>:latest" after 2.80s (2 of 3) due to: Error: unauthorized: authentication required
[Info]    Saving release...
[Error]   Deploy failed
unauthorized: authentication required

How can I fix this issue?
Are there any workarounds?

rahul-thakoor · November 9, 2020, 6:35am

Hello @eeriksp,

Welcome to the forums!

Can you please provide more details regarding the following:

Which openBalena and balenaCLI versions are you using?
Did you login using balena login after running the quickstart script?

Thanks

eeriksp · November 9, 2020, 1:48pm

Hello, @rahul-thakoor,

Thank you for your quick response!
I am using Balena CLI version 12.26.2 and openBalena version 3.1.0.
I logged in with balena login using the Credentials options.

Is there any other information I could provide?

JuanFRidano · November 9, 2020, 2:27pm

Hello @eeriksp ,

Something probably went wrong in one of these three steps:

(server) ./scripts/quickstart -U <email@address> -P <password> -d mydomain.com Here you insert the email and password that you later use for Login
(server) copy config/certs/root/ca.crt these are the self signed certificates that you need in your local machine. (link)[https://www.balena.io/open/docs/getting-started/#Install-self-signed-certificates-on-the-local-machine]
(local machine) adding the certificate into the local machine

Did you experience any troubles here or saw something out of the ordinary? Have you tried running them again to see if something improves?

Also, are you able to ping your server from your local machine? curl -k https://api.mydomain.com/ping

let us know if it helps, or if you need more info here

regards,

Juan

eeriksp · November 10, 2020, 1:59am

Juhhu! I finally got it working.
I started from the very beginning with a fresh machine and strictly followed the tutorial. In particular compared to the previous attempt:

I did not use the -c flag for ./scripts/quickstart
I installed docker.io a shown in the tutorial (previously I used a version of Docker CE which was automatically installed by DigitalOcean)

Thank you for your quick responses! I must say I really love the developer experience of working with Balena (both cloud and open versions). Also, your open-source friendly business model is very inspiring for us and we want to have a similar policy with our own solutions as well.

rahul-thakoor · November 10, 2020, 6:04am

Hey Eerik

Glad you got it working and thanks for the kind words.

Cheers

smita · February 12, 2021, 6:07pm

@JuanFRidano ,
Is possible to ping registry service as well ?
curl -k https://registry.mydomain.com/ping
I am able to ping api but not registry.

ab77 · February 12, 2021, 8:13pm

There is no /ping endpoint on the registry host, you can just try curl -k https://registry.mydomain.com/ instead.

smita · February 13, 2021, 11:20am

@ab77 , Thanks. For - curl -k https://registry.mydomain.com/ I can see 200 response in registry logs. Though I don’t see ‘OK’ on client side.

gelbal · February 15, 2021, 4:01pm

Cool. That’s expected. I see the same result when I query balena-cloud registry.