Containers not available

[kzantow]

It looks like every release is supposed to push a container to ghcr.io, but this doesn't seem to be available at ghcr.io/spdx/tools-java (or ghcr.io/spdx/tools-java/tools-java):

$ docker run --rm -it ghcr.io/spdx/tools-java/tools-java:v2.0.4

Unable to find image 'ghcr.io/spdx/tools-java/tools-java:v2.0.4' locally
docker: Error response from daemon: unknown: failed to resolve reference "ghcr.io/spdx/tools-java/tools-java:v2.0.4": unexpected status from HEAD request to https://ghcr.io/v2/spdx/tools-java/tools-java/manifests/v2.0.4: 403 Forbidden

I suspect it's supposed to be published to ghcr.io/spdx/tools-java, but isn't working due to the additional path segment of /tools-java.

I think this line should probably omit the /tools-java and defer to the repository name set here.

I don't know if there are permission issues on the organization preventing these from being available -- there are no containers in the org, but if it's a path issue I'm happy to submit a PR.

[bact]

From the config and the way it runs in the CI, I think the intention is to release it to ghcr.io. @heliocastro is that correct?

[heliocastro]

I just made a quick confirmation.

Last push was on 2.0.4 tag on December 5
The deploy was sucessful, BUT:

Trying locally:
docker pull --platform linux/amd64 ghcr.io/spdx/tools-java/tools-java:latest
Error response from daemon: unknown: failed to resolve reference "ghcr.io/spdx/tools-java/tools-java:latest": unexpected status from HEAD request to https://ghcr.io/v2/spdx/tools-java/tools-java/manifests/latest: 403 Forbidden

This is simple, the owner of repo, can't be me, neeed change the visibility of docker packages.

[heliocastro]

@goneall You need to fix this as i'm. not admin of the repo.

[goneall]

It should now be public - @kzantow - if you could confirm and close (I was always able to see the published packages ;)

[kzantow]

Yes, these now show up in the GH GUI and I'm able to pull ghcr.io/spdx/tools-golang/tools-golang:v2.0.4 👍

% docker run --rm -it ghcr.io/spdx/tools-java/tools-java:v2.0.4
Unable to find image 'ghcr.io/spdx/tools-java/tools-java:v2.0.4' locally
v2.0.4: Pulling from spdx/tools-java/tools-java
9f1a423a80d5: Pull complete 
67cf99ea3a75: Pull complete 
077c4ca28173: Pull complete 
273ff2530fbb: Pull complete 
b88b6ae1b108: Pull complete 
02d80376fd82: Pull complete 
950f2e158c43: Download complete 
Digest: sha256:15062f85b4be9688c7bf42df34ad6b84e084ed46e262e1f2dc1603795de9f7b4
Status: Downloaded newer image for ghcr.io/spdx/tools-java/tools-java:v2.0.4
Usage: java -jar spdx-tools-jar-with-dependencies.jar <function> <parameters> 
function                 parameter                         example 
------------------------------------------------------------------------------------------------------------------- 
Convert         inputFile outputFile [fromType] [toType]   Examples/SPDXTagExample.tag TagToSpreadsheet.xls 
SPDXViewer      inputFile                                  TestFiles/SPDXRdfExample.rdf 
Verify          inputFile [type]                           TestFiles/SPDXRdfExample.rdf 
CompareDocs     output.xlsx doc1 doc2 ... docN 
GenerateVerificationCode sourceDirectory
Version
MatchingStandardLicenses licenseTextFile

P.S. is the extra /tools-java at the end intentional? It's possible to publish packages that match the repository name; it's a little unclear to me, I thought all packages were org-based (and these show up in the spdx org), but I guess there can be repo-based packages, too.

Anyway, it seems to be working now, thanks!