Skip to content

auth: retry transient registry token failures - #7155

Open
crazy-max wants to merge 2 commits into
moby:masterfrom
crazy-max:fix-registry-auth-retry
Open

crazy-max wants to merge 2 commits into
moby:masterfrom
crazy-max:fix-registry-auth-retry

Conversation

@crazy-max

@crazy-max crazy-max commented Sep 16, 2026

Copy link
Copy Markdown
Member

Retry transient registry token failures in both the client auth provider and daemon authorizer, allowing builds to recover from connection resets and temporary server errors. Token requests reuse the existing retry policy, while requests already covered by an image handler leave retry ownership with that handler to avoid multiplying attempts and backoff. Cancellation interrupts backoff, existing GET/POST fallback behavior is preserved, and Windows connection resets are correctly recognized as WSAECONNRESET.

Recognize Winsock WSAECONNRESET errors when classifying transient network failures, while
retaining ECONNRESET on other platforms.

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Retry transient token request failures in both the client auth provider and daemon authorizer. Reuse the
existing retry policy, leave retry ownership with an enclosing handler, and interrupt backoff when the context
is canceled. Preserve the existing GET and POST fallback behavior.

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Auth token fetch is not retried on transient network errors (unlike blob/manifest fetches)

1 participant