Unable to push docker image on registry using Jenkinsfile

Question

I am trying to push my image through Jenkinsfile on repository but when I do that I am facing below error.

Error response from daemon: Get https://mydockerregistryurl/v1/users/: x509: certificate signed by unknown authority

I have found many articles about this but did not understand any of this.

Can anyone try to help me?

Below is my jenkinsfile.

#!groovy

pipeline {
  agent {
    node {
      label 'otd-agent'
    }
  }
  stages{
    stage('Test Stage'){
      steps{
          sh 'mvn clean test'
      }
    }
    stage('SonarQube Analysis'){
      steps{
        withSonarQubeEnv('otd-sonar') {
          sh 'mvn sonar:sonar'
        }
      }
    }
    stage('Package Stage'){
      steps{
        sh 'mvn clean package'
      }
    }
    stage('Building Docker image') {
      steps{
        script {
          sh 'docker build . -t jagathe-spike'
        }
      }
    }
    stage('Deploy Docker Image') {
      steps{
        script {
          sh 'docker login -u username -p password docker-registry-default'
          sh 'docker push docker-registry-default/otd-agathe'
        }
      }
    }
  }
}

Answer 1

If target registry docker-registry-default is running on OpenShift , you should deploy the OCP CA certificate which download from OCP on your Jenkins host. Refer Installing a certificate authority certificate for external registries for more details.

For instance,

• Download CA certificate from your OCP.

jenkins ~# scp root@master1.ocp.example.com:/etc/origin/master/ca.crt \
           /etc/pki/ca-trust/source/anchors/ocp-ca.crt

• Execuste update-ca-trust for registering the CA.

jenkins ~# update-ca-trust extract

• Copy the CA to /etc/docker/certs.d as follows.(${} is placeholder, you should replace it properly with your information)

jenkins ~# cp /etc/pki/ca-trust/source/anchors/ocp-ca.crt \
           /etc/docker/certs.d/${docker-registry-default}:${PORT}

• Restart docker service for reloading

jenkins ~# systemctl restart docker.service

I hope it help you.

Answer 2

按照https://jenkins.io/doc/book/pipeline/docker/上的说明使用withRegistry（）方法