Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-26828

a remote docker registry returning a not found response will log WARN messages for manifest unknown and blob unknown to registry

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 3.29.2
    • Fix Version/s: None
    • Component/s: Docker, Logging
    • Labels:
    • Story Points:
      1
    • Notability:
      3

      Description

      1. Create a docker-hosted Docker hosted repository
      2. Create a docker-hosted-proxy proxy repository with remote URL of docker-hosted created in step 1
      3. Create a docker-group repo with docker-hosted-proxy as a member.

      docker pull an image from docker-group, that you know does not exist in the docker-hosted. In the nexus.log a WARN level message is logged:

      2021-02-25 09:51:46,928-0400 WARN  [qtp1902336944-284] admin org.sonatype.nexus.repository.docker.internal.V2Handlers - Is the remote url a valid docker endpoint? Remote host http://localhost:8081/repository/docker-hosted/ with path /v2/reallypoorlynamedprojectcalledblah/manifests/latest did not return the expected response. Error message: manifest unknown 
      

      The two types of WARN messages can include:

      • Error message: manifest unknown
      • Error message: blob unknown to registry

      In one case where there was a group repo with many proxy repo members, and the requested manifests and blobs were not at remote members, this resulted in over 1 million log messages in one day at WARN level in the nexus.log. This amounts to log spam.

      Expected

      When a remote indicates that something is "not found", a proxy repository should never log a WARN level message to nexus.log about this. Possibly TRACE level might be justified. No other format logs at WARN.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              plynch Peter Lynch
              Last Updated By:
              Dawid Sawa Dawid Sawa
              Team:
              NXRM - Mad Max
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Date of First Response:

                  tigCommentSecurity.panel-title