Use docker private warehouse, encounter 401

[impactCn]

My docker private warehouse is harbor.

This is my yaml configuration:

version: "3"
services:
  watchtower:
    image: containrrr/watchtower
    container_name: watchtower
    restart: always
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - /root/.docker/config.json:/config.json
    command: batch-system  --interval 10 --trace

My config.json:

{
        "auths": {
                "devops.com": {
                        "auth": "****"
                }
        }
}

debug log:

watchtower    | time="2021-06-22T08:22:30Z" level=debug
watchtower    | time="2021-06-22T08:22:30Z" level=debug msg="Sleeping for a second to ensure the docker api client has been properly initialized."
watchtower    | time="2021-06-22T08:22:31Z" level=debug msg="Making sure everything is sane before starting"
watchtower    | time="2021-06-22T08:22:31Z" level=debug msg="Retrieving running containers"
watchtower    | time="2021-06-22T08:22:31Z" level=debug msg="There are no additional watchtower containers"
watchtower    | time="2021-06-22T08:22:31Z" level=debug msg="Watchtower HTTP API skipped."
watchtower    | time="2021-06-22T08:22:31Z" level=info msg="Watchtower 1.3.0\nUsing no notifications\nOnly checking containers with name \"batch-system\"\nScheduling first run: 2021-06-22 08:22:41 +0000 UTC\nNote that the first check will be performed in 9 seconds"
watchtower    | time="2021-06-22T08:22:31Z" level=warning msg="trace level enabled: log will include sensitive information as credentials and tokens"
watchtower    | time="2021-06-22T08:22:41Z" level=debug msg="Checking containers for updated images"
watchtower    | time="2021-06-22T08:22:41Z" level=debug msg="Retrieving running containers"
watchtower    | time="2021-06-22T08:22:41Z" level=debug msg="Trying to load authentication credentials." container=/batch-system image="*:v21.06.17.1701"
watchtower    | time="2021-06-22T08:22:41Z" level=debug msg="Loaded auth credentials for user admin, on registry *:v21.06.17.1701, from file /config.json"
watchtower    | time="2021-06-22T08:22:41Z" level=trace msg="Using auth password *"
watchtower    | time="2021-06-22T08:22:41Z" level=debug msg="Got image name: *batch/batch-system:v21.06.17.1701"
watchtower    | time="2021-06-22T08:22:41Z" level=trace msg="Got auth value:  *"
watchtower    | time="2021-06-22T08:22:41Z" level=debug msg="Credentials loaded"
watchtower    | time="2021-06-22T08:22:41Z" level=debug msg="Checking if pull is needed" container=/batch-system image="*:v21.06.17.1701"
watchtower    | time="2021-06-22T08:22:41Z" level=debug msg="Building challenge URL" URL="https://*/v2/"
watchtower    | time="2021-06-22T08:22:41Z" level=debug msg="Got response to challenge request" header="Bearer realm=\"https://*/service/token\",service=\"harbor-registry\"" status="401 Unauthorized"
watchtower    | time="2021-06-22T08:22:41Z" level=debug msg="Checking challenge header content" realm="https://*/service/token" service=harbor-registry
watchtower    | time="2021-06-22T08:22:41Z" level=debug msg="Setting scope for auth token" image=* scope="*:pull"
watchtower    | time="2021-06-22T08:22:41Z" level=debug msg="Credentials found."
watchtower    | time="2021-06-22T08:22:41Z" level=trace msg="Credentials: *"
watchtower    | time="2021-06-22T08:22:41Z" level=debug msg="Parsing image ref" host=* image=batch/batch-system normalized="*:v21.06.17.1701" tag=v21.06.17.1701
watchtower    | time="2021-06-22T08:22:41Z" level=trace msg="Setting request token" token="Bearer  *"
watchtower    | time="2021-06-22T08:22:41Z" level=debug msg="Doing a HEAD request to fetch a digest" url="https:/*/v21.06.17.1701"
watchtower    | time="2021-06-22T08:22:41Z" level=debug msg="Could not do a head request for \"*/batch/batch-system:v21.06.17.1701\", falling back to regular pull." container=/batch-system image="*/batch/batch-system:v21.06.17.1701"
watchtower    | time="2021-06-22T08:22:41Z" level=debug msg="Reason: registry responded to head request with \"401 Unauthorized\", auth: \"Basic realm=\\\"harbor\\\"\"" container=/batch-system image="*:v21.06.17.1701"
watchtower    | time="2021-06-22T08:22:41Z" level=debug msg="Pulling image" container=/batch-system image="*:v21.06.17.1701"
watchtower    | time="2021-06-22T08:22:41Z" level=debug msg="No new images found for /batch-system"
watchtower    | time="2021-06-22T08:22:41Z" level=debug msg="Session done: 1 scanned, 0 updated, 0 failed"

[piksel]

That is just a debug message. Feel free to ignore it.

[impactCn]

But I tried it and there is no update.
And the private warehouse now has the latest mirror.

[piksel]

It looks like you are using an explicit tag:
batch/batch-system:v21.06.17.1701

If the newer versions use another tag it will not be treated as an update. Normally the tag :latest is used for this purpose.

[impactCn]

Got it, thank you very much.

[impactCn]

I tried it today, it's okay, I will write an article to help you publicize it. Tutorial article on this. Thanks again