401 Unauthorized when using jib to create docker image

Question

I am on windows and this is the plugin configuration:

<plugin>
    <groupId>com.google.cloud.tools</groupId>
    <artifactId>jib-maven-plugin</artifactId>
    <version>3.2.1</version>
    <configuration>
        <container>
            <ports>
                <port>8080</port>
            </ports>
            <format>OCI</format>
        </container>
    </configuration>
</plugin>

This is the command I run:

.\mvnw clean install jib:dockerBuild -Dimage=fullstack:v1

This is the error I keep getting no matter what I do:

[ERROR] Failed to execute goal com.google.cloud.tools:jib-maven-plugin:3.2.1:dockerBuild (default-cli) on project SpringBootFullStack: Build
 to Docker daemon failed, perhaps you should make sure your credentials for 'registry-1.docker.io/library/eclipse-temurin' are set up correc
tly. See https://github.com/GoogleContainerTools/jib/blob/master/docs/faq.md#what-should-i-do-when-the-registry-responds-with-unauthorized f
or help: Unauthorized for registry-1.docker.io/library/eclipse-temurin: 401 Unauthorized
[ERROR] {"details":"incorrect username or password"}
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException

How should I go about it? I've read the documentation on jib github repo on authenticating but I don't really understand how to procede and feel overwhelmed

UPDATE

I ran docker login and I get:

Authenticating with existing credentials...
Login Succeeded

but the error persists (and I figured I didn't include some part of the logging maybe:

[INFO] Using credentials from Docker config (C:\Users\david\.docker\config.json) for openjdk:17
[INFO] Executing tasks:                               
[INFO] [============                  ] 40.0% complete
[INFO] > building image to Docker daemon              
[INFO]                                                
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  2.964 s
[INFO] Finished at: 2022-05-17T19:39:12+02:00
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal com.google.cloud.tools:jib-maven-plugin:3.2.1:dockerBuild (default-cli) on project SpringBootFullStack: Build
 to Docker daemon failed, perhaps you should make sure your credentials for 'registry-1.docker.io/library/openjdk' are set up correctly. See
 Unauthorized for registry-1.docker.io/library/openjdk: 401 Unauthorized
[ERROR] {"details":"incorrect username or password"}
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException

UPDATE 2

this is also the content of the file logs refer to in order to get username and password:

{
    "auths": {
        "https://index.docker.io/v1/": {}
    },
    "credsStore": "desktop"
}

UPDATE 3

After two days of trying I decided to look for something else that would do the same job: https://spring.io/guides/gs/spring-boot-docker/ And with this the job was done in ~10 minutes. Life really is crazy

The problem is: `registry-1.docker.io/library/eclipse-temurin: 401 Unauthorized` this... do you have an account and maybe: https://www.docker.com/pricing/ — khmarbaise, May 17 '22 at 16:23
I do have an account and I am logged in Docker Desktop and DockerHub — Davide _-, May 17 '22 at 17:29
The output states different... You have not logging in via `docker login`... — khmarbaise, May 17 '22 at 17:37
I ran that command and it says it was successfull but then I run the jib command and it still doesnt work, I also found a line which may help ```[INFO] Using credentials from Docker config (C:\Users\david\.docker\config.json) for openjdk:17```, and tried to add this to the pom ```openjdk:17``` — Davide _-, May 17 '22 at 17:43
The fact that I am saving my docker password on google passwords might be a problem maybe? — Davide _-, May 17 '22 at 17:45

score 14 · Answer 1 · answered Aug 13 '22 at 15:02

14

Just delete the credsStore property from the docker-config file. You will find the config.json at your user-home dir.

the path is: $USER/.docker/config.json and suppose the file contains the followings,

{
  "auths": {
    "https://index.docker.io/v1/": {}
  },
  "credsStore": "desktop"
}

and now delete the line : "credsStore": "desktop"

So, the file will now contain the following

{
  "auths": {
    "https://index.docker.io/v1/": {}
  }
}

answered Aug 13 '22 at 15:02

Khairul Bashar Lemon

519
6
8

I did what u mention, and then after login this add inside the file "credsStore": "wincred", and never work with JIB – UN..D Dec 30 '22 at 15:04

score 3 · Answer 2 · answered Nov 03 '22 at 16:01

3

I had the issue on windows and solved the problem as follows:

Control Panel\All Control Panel Items\Credential Manager

From here I have removed in the Generic Credentials section all the entries related to docker

The from the powershell prompt:

docker login

and it worked!

answered Nov 03 '22 at 16:01

Gregory Risch

41
1

Your answer could be improved with additional supporting information. Please [edit] to add further details, such as citations or documentation, so that others can confirm that your answer is correct. You can find more information on how to write good answers [in the help center](/help/how-to-answer). – Community Nov 07 '22 at 06:25

Alexey · Answer 3 · 2023-02-01T13:48:23.673

I had the same issue on Mac. And I found 2 ways how to solve it:

To do this, you can use the jib config:

<configuration>
  ...
  <from>
    <image>aws_account_id.dkr.ecr.region.amazonaws.com/my-base-image</image>
    <auth>
      <username>my_username</username>
      <password>my_password</password>
    </auth>
  </from>
  <to>
    <image>gcr.io/my-gcp-project/my-app</image>
    <auth>
      <username>${env.REGISTRY_USERNAME}</username>
      <password>${env.REGISTRY_PASSWORD}</password>
    </auth>
  </to>
  ...
</configuration>

https://github.com/GoogleContainerTools/jib/blob/master/jib-maven-plugin/README.md#auth-object

The second way is not about Windows, i fixed this issue on Mac OS but you can try to use my experience. I figured that it's strange if we're getting 401 unauthorized the most likely Jib trying to login with some wrong credentials. In my case i found 2 rows in Keychain Access:

The first (wrong) with email in password (instead real password))
The second (correct) with real password Jib tried to use first. The problem was solved after deleting the first value. In windows case you can try to use Credential Manager or find some another credentials storage.

Additionally. While i was researching it i found recommendations to change:

 "credsStore": "desktop" -> "credStore": "desktop"

But it didn't work for me.

UPD Same story on Windows use Credential Manager

thank you for your suggestions but unfortunately they didn't work for me :( — Davide _-, May 19 '22 at 21:12
The `"credStore": "desktop"` worked for me on my Mac Mini GitLab Runner. — Vicary, Jan 30 '23 at 14:03

Chanseok Oh · Answer 4 · 2023-01-01T03:40:45.143

2

{"details":"incorrect username or password"}

The response from the server is clear. Credentials were given to the server, and it says they are wrong.

Indeed, Jib did retrieve some (probably non-working) credentials from the Docker config.json file:

[INFO] Using credentials from Docker config (C:\Users\david\.docker\config.json) for openjdk:17

Try emptying config.json entirely or have just an empty {} block. Particularly, remove the entry for "https://index.docker.io/v1/" and credsStore. Deleting the file may or may not work, as Docker or other tools can regenerate it with wrong credentials again.

Probably the same kind of issue to this Stack Overflow question. Also take a look at this GitHub issue on the Jib repo.

edited Jan 01 '23 at 03:40

answered May 26 '22 at 15:34

Chanseok Oh

3,920
4
23
63

deleting config.json never worked cause it's generated again with auths & credsStore – UN..D Dec 30 '22 at 15:08
Chanseok Oh, Could you please mention resources about how to implement Docker-Credential-helper for windows ? – UN..D Dec 30 '22 at 15:23

score 1 · Answer 5 · answered Jun 19 '22 at 04:14

1

If you don't want to go the extra credentials configuration step, pass them when running mvn package as below:

mvn package -D jib.to.auth.username="yourdockerUsername" -Djib.to.auth.password="yourDockerPassword"

It will build and push to docker Hub as required.

answered Jun 19 '22 at 04:14

Elated Coder

312
1
16

1

This one just lit. Works OOB. Thanks! – Golamrabbi Azad Mar 19 '23 at 20:09

Alexey · Answer 6 · 2022-06-14T16:00:44.703

0

I ran into the same problem on Windows. Try removing the following creds:

..docker../acces-token
..docker../refresh-token

https://i.stack.imgur.com/G9aGR.png

edited Jun 14 '22 at 16:00

answered Jun 14 '22 at 15:57

Alexey

21
2

score 0 · Answer 7 · answered Dec 30 '22 at 16:47

0

faced same issue on win10 ... had to close docker desktop, I got some WARN related to credentials though, but it created the img

answered Dec 30 '22 at 16:47

Fernan

1

1

Your answer could be improved with additional supporting information. Please [edit] to add further details, such as citations or documentation, so that others can confirm that your answer is correct. You can find more information on how to write good answers [in the help center](/help/how-to-answer). – Community Dec 30 '22 at 19:24

score 0 · Answer 8 · answered Mar 27 '23 at 10:59

0

Use userId and NOT email to logon to docker hub. You should have an account on docker hub

answered Mar 27 '23 at 10:59

Dmitry Narodetsky

1

Your answer could be improved with additional supporting information. Please [edit] to add further details, such as citations or documentation, so that others can confirm that your answer is correct. You can find more information on how to write good answers [in the help center](/help/how-to-answer). – Community Apr 01 '23 at 04:43

score 0 · Answer 9 · answered Jul 15 '23 at 19:03

I tried almost every possible solution here and other sources, none of them worked for me. Follow the below steps to fix this.

I am using the Windows 11 OS.

Below is what I want to push to docker hub.

<to>
                <image>registry.hub.docker.com/<docker-hub-username>/${project.artifactId}:1.0</image>
            </to>

.config/config.json file

Do not delete this file. Keep it open in notepad.

Before you login to docker hub in CMD, just remove credStore key-value from config.json file.

Now go to Windows CMD to login to docker hub as follows and hit the enter button. It will ask for the password. Use access token/password for the docker hub.

docker login -u <docker-hub-username>

Output:

It should add auth key-value in your config.json file as following.

{
"auths": {
    "https://index.docker.io/v1/": {
        "auth": "<auto-generated-base64-encoded-username-password-for-docker-hub>"
    }
}

}

Now push the image to docker hub using Jib.

 mvn clean compile jib:build

401 Unauthorized when using jib to create docker image

9 Answers9

Linked