question

Clevenger avatar image
0 Votes"
Clevenger asked ·

error pulling image configuration: image config verification failed for digest sha256:

trying to pull from mcr.microsoft.com any image gets the error in the title.

I found the issue when running the following in PowerShell

docker pull mcr.microsoft.com/dotnet/core/sdk:3.1

but any docker pull mcr.microsoft.com/* returns the "error pulling image configuration" error message.

I have confirmed that coworkers get the same error when trying to pull from mcr.microsoft.com. I am able to pull from the docker image repository using :

docker pull microsoft/powershell

but the DotNet Core sdk has been migrated completely off of docker image repo from what I can tell.


additional troubleshooting steps (tested pulling from mcr after each and got the same error as the title of this post) :

  1. docker images purge

  2. docker system prune -a

  3. Factory Reset Docker

  4. Uninstalled and Reinstalled Docker


azure-container-registry
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Clevenger avatar image
0 Votes"
Clevenger answered ·

Ended up Restoring all Windows firewall settings to Defaults, which then lead to better documented issues that I resolved with my network team.

·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

vipullag-MSFT avatar image
0 Votes"
vipullag-MSFT answered ·

@Clevenger

This is due to recent changes that was implemented for MCR data endpoints. The change is implemented to avoid confusion over the current domains used in all supported Azure Regions.


If any users are pulling images from mcr.microsoft.com, new pulls will fail if firewall rules are not updated. all rules for MCR in all supported Azure regions.

Please check and update firewall rules config as detailed here.





Please 'Accept as answer' if the provided information is helpful, so that it can help others in the community looking for help on similar topics.

· 4 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you for your response. Unfortunately currently I am doing local development and not blocking outbound connections, but am still experiencing the issue

0 Votes 0 ·

@Clevenger

I tried pulling the image from my local machine and it is working as expected without any errors.

Can you put this URL (https://mcr.microsoft.com/v2/hello-world/blobs/sha256:fce289e99eb9bca977dae136fbe2a82b6b7d4c372474c9235adc1741675f587e) which is mentioned in the document into a browser on your local machine and see if this is getting downloaded without any error.

As you mentioned that your co-workers are also getting the same issue, just wanted to see if there is any restriction on mcr.microsoft.com from your corp network.
Also, can you also try to pull the image from other machine (outside of corp network) and see if that works.

0 Votes 0 ·

powershell iwr the included url gave a 200 response and powershell curl gave <a href =xxxxx> as included in the documentation.
Switching to the browser did change the error message to indicate that my "internet access is blocked". Since I was able to chat with my coworkers and IT while getting this message we are able to troubleshoot it on our end and decided to restore some of the default network settings across our machines until we were able to resolve the error.

Thank you for your help.

0 Votes 0 ·
Show more comments