Questions tagged [amazon-ecr]

Amazon Web Services Elastic Container Registry is a software-as-a-service hosted private Docker registry that can be used to store private Docker container images in AWS data centers.

Filter by
Sorted by
Tagged with
0 votes
1 answer
13 views

How to pass arguments into scheduled task on AWS Fargate?

I have a docker container (derived from PHP-CLI) that may be launched like this locally: docker run php-cli-container php public/index.php argument1 argument2 I uploaded the container to Amazon AWS ...
  • 221
0 votes
1 answer
70 views

Podman fails pushing image to AWS ECR repository with: Error: writing blob: Post

I have issues trying to push an image I created with podman to an ECR container I have. The issue doesn't seem to be related to permissions or authentication and I am struggling to find similar issues ...
0 votes
0 answers
117 views

Will AWS Lambda deployed from image pull the ECR image on each new instances get initialised

Because of Lambda’s ZIP deployment size limitation I’m changing the way I deploy my Lambda functions to use container image. The deployed function is located within a VPC, so I have a NAT gateway ...
0 votes
0 answers
1k views

Kubernetes pods failing with ImagePullBackOff when trying to pull image from AWS ECR

I are trying to run some Kubernetes pods in my Windows machine by using Docker-Desktop. I am trying to install them using HELM. I have created my Docker images and have pushed them into AWS ECR ...
2 votes
0 answers
143 views

Why can't I use AWS EC2 ImageBuilder to create a RHEL based container?

In the AWS console for EC2 ImageBuilder the option to create a Container Recipe using RHEL as the base image seems to be disabled. From EC2 Image Builder console -> Container Recipes -> Create ...
  • 121
0 votes
1 answer
61 views

Remove external Docker container registry dependencies / only store container images on Amazon ECR

So I am using Amazon Elastic Container Registry (ECR) to store our containers. I have a container that is built using a Microsoft base image: mcr.microsoft.com/dotnet/framework/aspnet:4.8-...
  • 431
0 votes
1 answer
647 views

Why does my container not contain DB data after I commit it?

I'm trying to create a PostgreSQL container that already contains development data. I can see the data I have created, but when I commit, push, and pull the image, the data is not there. Below is my ...
  • 365
12 votes
6 answers
23k views

Docker login to AWS ECR from GitLab CI fails with "dial tcp: lookup docker on x.x.x.x:53: no such host" when pulling docker:dind from ECR

I'm working on porting a collection of Docker images used for GitLab CI/CD building and deployment from Dockerhub to AWS public ECR. Everything works as it should except for the standard Docker image ...
  • 121
2 votes
0 answers
1k views

ECR Lifecycle Policy to exclude certain tags

Is there a way to exclude certain tags/images from a cleanup policy? E.g. say I have a repository with images and the related SHAs for the Pull Request which triggered their creation. When these are ...
  • 1,172
0 votes
1 answer
339 views

AWS - Accessing cross account and cross region resources in a secured manner

I'm trying to secure an ec2 instance using security groups to do the following VPC A (Account - A, Region - A) VPC B (Account - B, Region - B) I want an ec2 instance in VPC A to be able to access ecr ...
1 vote
0 answers
465 views

Environment variables aren't availiable during SSH session to AWS ECS container

I have configured ECS containers. Everything works, however when I'm connecting to a container through SSH, there are no environment variables that are defined in a task definition. Is there a way to ...
  • 93
2 votes
1 answer
2k views

Is it possible to have a failover/backup docker registry?

Since the failure of quay.io last week everyone in the company recognized how important is the service. And this raised this question on my head: If this happens again, how can my infrastructure be ...
5 votes
2 answers
388 views

How to choose between Elastic Container Service (ECS) or Elastic Container Registry (ECR), Elastic Beanstalk, and Lambda?

Background: I've worked with EC2 and RDS. Recently I received a query from a client in which he wants to develop both mobile and web applications using Amazon Web Services, and need advice on which ...
4 votes
4 answers
12k views

What is the proper way to log in to ECR?

Currently, I have this command in my bash script for building & pushing an image to Amazon ECR docker login -u AWS -p "$(aws ecr get-login-password)" "https://$(aws sts get-caller-identity --...
  • 654
5 votes
1 answer
3k views

Configuring "auth" and "credsStore" for different Docker registry

I'm trying to configure Docker for two different registries. (One ECR and docker.io) I need to configure ECR one with ecr-login and docker.io with simple auth but I'm failing to configure these at the ...
9 votes
2 answers
7k views

Amazon ECS Task fails with STOPPED (CannotPullContainerError: Error response from daem)

I have set up an AWS VPC and am trying to deploy a functional container in ECS on a Fargate launch type but the task always fails with: STOPPED (CannotPullContainerError: Error response from daem) ...
1 vote
0 answers
36 views

AWS Elastic Container Registry login blocked

We are trying to log in to AWS Elastic Container Registry (ECR) to pull down docker containers from our private registry. The login is failing with this error: Error response from Daemon: Get https:/...
  • 431
0 votes
2 answers
3k views

Command Execution Error while executing ecr login command

I am getting error in PRE_BUILD section of Code Pipeline while deploying ECS. While executing commmand for ecr login, i am getting exit status with error code 255. please see below image. Command : - ...
2 votes
0 answers
1k views

How to deploy SSL certificates on Amazon Elastic Container Service?

I have a proxy server (nginx) which has the following responsibilities: proxies to different backends depending on resource requested enforces rate limiting and IP blacklisting handles rewrites and ...
  • 291
0 votes
0 answers
313 views

Setting environment variable in kubernetes before pulling an image

Is there a way to set the environment variables in kubernetes before it pulls the container image? For some context, I'm looking for alternatives to what I've asked in ECR IAM policy document for EKS ...
  • 21
2 votes
0 answers
417 views

ECR IAM policy document for EKS node access

What is the correct way to manage EKS node access to ECR via the IAM policy documents when I want to limit who can start jobs using different images? In a simplified example, I have users A and B and ...
  • 21
3 votes
0 answers
1k views

Use an ECR image as an agent in Jenkins

What I'd like to do is use an ECR image as an agent in Jenkins when using declarative pipeline Current top of pipeline script looks like so: pipeline { agent { docker { image ...
1 vote
1 answer
1k views

Why does a custom CodeBuild image require aws configure, but not a managed one?

I have an AWS CodePipeline with the build step using CodeBuild. I was previously using a managed image for this build job and I was able to use the follow command without issue: aws ecr get-login --...
3 votes
0 answers
894 views

How to get Docker to retry image pull?

Our Nomad agents sometimes fails jobs because they cannot pull images from ECR. /var/log/docker will contain messages like: Not continuing with pull after error: error pulling image configuration:...
  • 3,020
1 vote
1 answer
3k views

Give one user read-only access to ECR repo

How can I give a_user read-only access (i.e. no permission to Push) and b_user is not banned? What I have done so far: Added my AWS access + secret key with aws configure Made an ECR repo and did ...
0 votes
2 answers
5k views

Docker login to AWS ECR fails with "dial tcp xxxx:443: i/o timeout"

I'm stepping through a "Scaling Docker for AWS" course which specifies using "aws ecr get-login" to get a "docker login" command line. I'm running docker version 1.12.6. When I run the output ...
3 votes
1 answer
12k views

How to add amazon-ecr-credential-helper to path

I'm trying to set up amazon-ecr-credential-helper so that I can have an ansible script automatically push / pull to my aws ecr docker repository, but the instructions for installing it seem very vague....
  • 130
1 vote
0 answers
410 views

Best strategy for deploying Docker to Elastic Beanstalk

I'm not sure if this is the best place to put this question. But for a few days I'm struggling to find a good deploying process to Elastic Beanstalk and I want to know the opinion of people with more ...
  • 135
2 votes
2 answers
2k views

Automatically login on Amazon ECR with Docker Swarm

We have Docker images hosted on Amazon ECR and the goal is to run them on EC2 instances using Docker Swarm. The services are configured in global mode so that they are automatically replicated on new ...
  • 281
2 votes
1 answer
1k views

"unknown shorthand flag: 'e' in -e" from 'aws ecr get-login'

I am trying to push a docker image to the aws ecr When i try to login to ect, aws ecr get-login It expands to something like this docker login -u AWS -p eyJwYXlsbXXXXXXVZIn0= -e none https:...
  • 3,096
13 votes
5 answers
12k views

How to connect to AWS ECR using python docker-py

When running from the command line, to pull from a specific registry I can run these commands: dockerCommand=$("aws ecr get-login --profile profileName --region us-west-2") $dockerCommand (which ...
  • 371
7 votes
3 answers
12k views

What is the permission for a IAM user to create a ECR repository?

My IAM user is getting this error User: arn:aws:iam::123456789:user/admin is not authorized to perform: ecr:CreateRepository on resource: * when I try to create a repository. I have already grant ...
  • 3,096
28 votes
1 answer
17k views

Can I use AWS ECR image directly in my Dockerfile?

In a typical dockerfile, there is usually this line From ubuntu:16.04 which enables pulling an image from docker repository. Now I have built my own image repository: The repositiory URI is: ...
  • 3,096
0 votes
1 answer
332 views

AWS ECR - Getting an image's age

Is there a way to find the age of a Docker image pushed to AWS ECR? When I ask for the image manifest with aws ecr batch-get-image --repository some/repo --image-ids "imageDigest=sha256:abcdef..." ...
6 votes
0 answers
2k views

How to estimate storage and traffic used for docker images in AWS ECR?

I'm trying to esimate monthly cost of using AWS ECR. It will consist of: outgoing traffic cost (downloading images) and storage cost (storing images in ECR). Let's assume, that: We are building some ...
  • 71
6 votes
1 answer
4k views

AWS ECR - Push Successful, Image Does Not Appear in Repo

We're using AWS ECR to host our docker images. We've noticed in a few rare instances that the docker push command can complete successfully, but the resulting image does not appear in the ECR ...
0 votes
1 answer
895 views

Publish docker images to AWS ECR from Jenkins

Following this discussion- Integrate Amazon Elastic Container Registry with Jenkins, After publishing my image to ECR from Jenkins using a shell script, it works- but another image with empty tag ...
  • 1
0 votes
1 answer
179 views

AWS ECR allow pull for all?

I've uploaded a few docker containers to AWS ECR. I'm trying to Docker Pull without any authentication, which doesn't seem to work. I've read that there's a way to authenticate with a token for ...
  • 101
10 votes
4 answers
6k views

Integrate Amazon Elastic Container Registry with Jenkins

I'm trying to integrate Amazon's new Elastic Container Registry (ECR) with my Jenkins build service. I'm using the Cloudbees Docker Build & Publish plugin to build container images and publish ...
  • 2,582