pushing docker.compose.yml with image from private repository fails.

[Ravil]

Hi,
I have docker.compose.yml with one of the imnages hosted in private Azure container registry. I created secrets.yml file, with creadentials, which succeed when used from docker login… command.
But deploying this file to the device fails, with error: unauthorized: authentication required, visit Registry roles and permissions - Azure Container Registry | Microsoft Learn for more information.
Also tried to use secrets yml file with different name, passing it with optoin --registry-options. Tried to use option --nocache too. Still balena is failing to pull the image.
How this can be resolved?

[mpous]

Hello @Ravil

Could you please share more details how what does not work for you?

In the meantime, find here some examples that maybe can give you ideas

Secrets file format Azure Container Registry

I would like to pull an image from a private Azure Container Registry I followed the documentation but it doesn’t seem to work. Can someone confirm if this is the correct format for ACR? 'company.azurecr.io': username: <Enterprise Application App ID> password: <Secret created for the application> When I use the username an password with docker login it just works. When I pass it with a secret.yml to balena push it doesn’t. So my guess is some formatting of the file.

Or this repo, however for Google Container Registry insted of Azure.

GitHub - balena-io-examples/sample-gcr-registry-secrets: Sample balena...

[Ravil]

Turns out the container registry URL or rather id should be formatted without https and /v2 parts, just host name.
Like:
‘company.azurecr.io’:
username: userName
password: generatedToken

But now have another issue - release is not applied on the device. Dashboard shows that there is a newer release, and it can be selected as a target release, but is not upgraded to this version.

[mpous]

Hello @Ravil could you please confirm if the new release got deployed into your device?

What update strategy do you have?

[Ravil]

No, althouth it is configured to deploy the latest release version, it does not change after successful balena push copmmand.

[mpous]

@Ravil do you think you can grant support access to this device so we can explore more?

you can share the UUID of the device over DM!

Thanks

[mpous]

Thanks for granting support access @Ravil let me check your device

[mpous]

@Ravil the error that I see that does not allow the device to deploy the latest release is this.

Device state apply error InvalidPortDefinition: Range for internal and external ports does not match: 53300-52309:30000-30009

Could you please check on your docker-compose if there is any issue with the ports?

Let us know if there is a problem there.

[Ravil]

Yes! After fixing my mistake on defining port range mapping, it did update to the latest release.
Thank you for support!

[mpous]

Happy to hear that this is fixed @Ravil

Let us know how we can help you more!