{"action":"opened","issue":{"url":"https://api.github.com/repos/coreos/bugs/issues/323","labels_url":"https://api.github.com/repos/coreos/bugs/issues/323/labels{/name}","comments_url":"https://api.github.com/repos/coreos/bugs/issues/323/comments","events_url":"https://api.github.com/repos/coreos/bugs/issues/323/events","html_url":"https://github.com/coreos/bugs/issues/323","id":67378387,"number":323,"title":"systemd fails to pull private repo from quay.io","user":{"login":"groob","id":1526945,"avatar_url":"https://avatars.githubusercontent.com/u/1526945?v=3","gravatar_id":"","url":"https://api.github.com/users/groob","html_url":"https://github.com/groob","followers_url":"https://api.github.com/users/groob/followers","following_url":"https://api.github.com/users/groob/following{/other_user}","gists_url":"https://api.github.com/users/groob/gists{/gist_id}","starred_url":"https://api.github.com/users/groob/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/groob/subscriptions","organizations_url":"https://api.github.com/users/groob/orgs","repos_url":"https://api.github.com/users/groob/repos","events_url":"https://api.github.com/users/groob/events{/privacy}","received_events_url":"https://api.github.com/users/groob/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-04-09T14:49:03Z","updated_at":"2015-04-09T14:49:03Z","closed_at":null,"body":"Unit file:\r\n```\r\n# /etc/systemd/system/proxy-pac.service\r\n[Unit]\r\nDescription=Serve proxy PAC file to redirect Google.com to squid.\r\nRequires=docker.service\r\n\r\n[Service]\r\nExecStartPre=-/usr/bin/bash -c whoami\r\nExecStartPre=-/usr/bin/docker kill proxy-pac\r\nExecStartPre=-/usr/bin/docker rm -f proxy-pac\r\nExecStartPre=/usr/bin/docker pull quay.io/whitby/proxy-pac:latest\r\nExecStart=/usr/bin/docker run --rm --name proxy-pac \\\r\n  -e VIRTUAL_HOST=od1.whitbyschool.net,proxy \\\r\n  -p 8082:80 quay.io/whitby/proxy-pac:latest\r\nExecStop=-/usr/bin/docker stop proxy-pac\r\n\r\n[Install]\r\nWantedBy=multi-user.target\r\n```\r\nThe service fails with 403 error\r\njournalctl output\r\n\r\n```\r\nApr 09 14:38:15 coreos1 systemd[1]: Starting Serve proxy PAC file to redirect Google.com to squid....\r\nApr 09 14:38:15 coreos1 bash[1390]: root\r\nApr 09 14:38:15 coreos1 docker[1392]: Error response from daemon: No such container: proxy-pac\r\nApr 09 14:38:15 coreos1 docker[1392]: time=\"2015-04-09T14:38:15Z\" level=\"fatal\" msg=\"Error: failed to kill one or more containers\"\r\nApr 09 14:38:15 coreos1 docker[1400]: Error response from daemon: No such container: proxy-pac\r\nApr 09 14:38:15 coreos1 docker[1400]: time=\"2015-04-09T14:38:15Z\" level=\"fatal\" msg=\"Error: failed to remove one or more containers\"\r\nApr 09 14:38:15 coreos1 docker[1408]: Pulling repository quay.io/whitby/proxy-pac\r\nApr 09 14:38:15 coreos1 systemd[1]: proxy-pac.service: control process exited, code=exited status=1\r\nApr 09 14:38:15 coreos1 systemd[1]: Failed to start Serve proxy PAC file to redirect Google.com to squid..\r\nApr 09 14:38:15 coreos1 systemd[1]: Unit proxy-pac.service entered failed state.\r\nApr 09 14:38:15 coreos1 systemd[1]: proxy-pac.service failed.\r\nApr 09 14:38:15 coreos1 docker[1408]: time=\"2015-04-09T14:38:15Z\" level=\"fatal\" msg=\"HTTP code: 403\"\r\n```\r\nI've made sure to add the .dockercfg file to both /home/core/.dockercfg and /root/.dockercfg\r\nPulling the repository myself works fine as both core and root.\r\n```\r\ncore@coreos1 ~ $ ls -l /home/core/.dockercfg\r\n-rw------- 1 core core 175 Apr  9 13:52 /home/core/.dockercfg\r\ncore@coreos1 ~ $ sudo ls -l /root/.dockercfg\r\n-rw------- 1 root root 175 Apr  9 14:00 /root/.dockercfg\r\n```\r\nBy the way, the documentation [here](https://coreos.com/docs/enterprise-registry/configure-machines/) says that the home directory for root is /home/root which is wrong. I added .dockercfg to home/root/.dockercfg for good measure but that did not fix the error. \r\n\r\n```\r\ncore@coreos1 ~ $ /usr/bin/docker pull quay.io/whitby/proxy-pac:latest\r\n224873bdcaa1: Download complete\r\nStatus: Image is up to date for quay.io/whitby/proxy-pac:latest\r\n\r\ncore@coreos1 ~ $ sudo /usr/bin/docker pull quay.io/whitby/proxy-pac:latest\r\n224873bdcaa1: Download complete\r\nStatus: Image is up to date for quay.io/whitby/proxy-pac:latest\r\n\r\ncore@coreos1 ~ $ sudo su\r\ncoreos1 core # /usr/bin/docker pull quay.io/whitby/proxy-pac:latest\r\nStatus: Image is up to date for quay.io/whitby/proxy-pac:latest\r\n```\r\n\r\nRebooting the server does not resolve this issue either. \r\n\r\nI'm zalmoxes on #coreos if I can help with debugging this further. \r\n\r\n"}}