BUG: 10.88.0.1:5000: connect: connection refused breaking airgap deployment

[usrbinkat]

Nginx unable to pull from cloudctl registry:

TASK [nginx :   TPDK | CloudCtl | RedHat | nginx | cmd:shell.podman.pull | Podman pull image nginx] *******************************************************************************************************************
Friday 19 March 2021  21:37:42 +0000 (0:00:01.903)       0:02:41.642 ********** 
fatal: [pod]: FAILED! => {"changed": true, "cmd": "podman pull quay.io/cloudctl/nginx:latest", "delta": "0:01:00.089388", "end": "2021-03-19 21:38:44.504461", "msg": "non-zero return code", "rc": 125, "start": "2021-03-19 21:37:44.415073", "stderr": "Trying to pull quay.io/cloudctl/nginx:latest...\n  Get \"https://quay.io/v2/\": dial tcp 54.156.10.58:443: i/o timeout\nError: error pulling image \"quay.io/cloudctl/nginx:latest\": unable to pull quay.io/cloudctl/nginx:latest: unable to pull image: Error initializing source docker://quay.io/cloudctl/nginx:latest: (Mirrors also failed: [10.88.0.1:5000/cloudctl/nginx:latest: error pinging docker registry 10.88.0.1:5000: Get \"http://10.88.0.1:5000/v2/\": dial tcp 10.88.0.1:5000: connect: connection refused]): quay.io/cloudctl/nginx:latest: error pinging docker registry quay.io: Get \"https://quay.io/v2/\": dial tcp 54.156.10.58:443: i/o timeout", "stderr_lines": ["Trying to pull quay.io/cloudctl/nginx:latest...", "  Get \"https://quay.io/v2/\": dial tcp 54.156.10.58:443: i/o timeout", "Error: error pulling image \"quay.io/cloudctl/nginx:latest\": unable to pull quay.io/cloudctl/nginx:latest: unable to pull image: Error initializing source docker://quay.io/cloudctl/nginx:latest: (Mirrors also failed: [10.88.0.1:5000/cloudctl/nginx:latest: error pinging docker registry 10.88.0.1:5000: Get \"http://10.88.0.1:5000/v2/\": dial tcp 10.88.0.1:5000: connect: connection refused]): quay.io/cloudctl/nginx:latest: error pinging docker registry quay.io: Get \"https://quay.io/v2/\": dial tcp 54.156.10.58:443: i/o timeout"], "stdout": "", "stdout_lines": []}

workaround:

podman login -u cloudctl -p cloudctl --tls-verify=false 10.0.1.73:5000
podman pull 10.0.1.73:5000/cloudctl/nginx:latest --tls-verify=false

[jlgrock]

Just to clarify, in case others come across this "10.0.1.73" should be replaced with your registry IP address

[jlgrock]

As a note, I also had some issues with SSL certs. I had to update the registries to be insecure. I did the following in the offer container:
vi /etc/containers/registries.conf

Then, I did the commands you mentioned, then I re-executed the
cd /root/platform/iac/sparta && ./site.yml

The downside is that the process of running site.yml logs me out and it will fail on a pull again.

[usrbinkat]

@jlgrock join the codectl.slack.com cloudctl channel and we'll polish any remaining rough edges. The issue should have been cleaned up to be zero touch functional with the patch 8c3562a