ITADN

Unable to login to Azure container Registry using a JWT

#29082Openjam-re 创建于 2026-06-30
kind/bug
J
jam-recommented
### Issue Description Hello I'm facing an issue where podman login using a JWT from Azure (on a private ACR) fails ``` az login (...) podman login REDACTED.azurecr.io -u 00000000-0000-0000-0000-000000000000 -p "$(az acr login --name REDACTED.azurecr.io --expose-token -o tsv --query accessToken)" ``` Fails with `Error: get credentials: illegal base64 data at input byte 127` **However pulling directly by specifying --creds works** : podman pull REDACTED.azurecr.io/REDACTED/REDACTED:v0.8.0 --creds 00000000-0000-0000-0000-000000000000:$(az acr login --name REDACTED.azurecr.io --expose-token -o tsv --query accessToken) Best Version is the default for RHEL 9 : ``` podman version 5.8.2 ``` ### Steps to reproduce the issue Steps to reproduce the issue az login (...) podman login REDACTED.azurecr.io -u 00000000-0000-0000-0000-000000000000 -p "$(az acr login --name REDACTED.azurecr.io --expose-token -o tsv --query accessToken)" ### Describe the results you received Error: get credentials: illegal base64 data at input byte 127 ### Describe the results you expected Login suceed ### podman info output ```yaml host: arch: amd64 buildahVersion: 1.43.1 cgroupControllers: - cpuset - cpu - io - memory - hugetlb - pids - rdma - misc cgroupManager: systemd cgroupVersion: v2 conmon: package: conmon-2.2.1-1.el9.x86_64 path: /usr/bin/conmon version: 'conmon version 2.2.1, commit: ' cpuUtilization: idlePercent: 97.43 systemPercent: 1.08 userPercent: 1.49 cpus: 2 databaseBackend: sqlite distribution: distribution: rhel version: "9.7" eventLogger: journald freeLocks: 2048 hostname: REDACTED idMappings: gidmap: null uidmap: null kernel: 5.14.0-611.45.1.el9_7.x86_64 linkmode: dynamic logDriver: journald memFree: 844619776 memTotal: 7996928000 networkBackend: netavark networkBackendInfo: backend: netavark defaultNetwork: podman dns: package: aardvark-dns-1.17.0-1.el9.x86_64 path: /usr/libexec/podman/aardvark-dns version: aardvark-dns 1.17.0 package: netavark-1.17.2-1.el9.x86_64 path: /usr/libexec/podman/netavark version: netavark 1.17.2 ociRuntime: name: crun package: crun-1.27-1.el9_8.x86_64 path: /usr/bin/crun version: |- crun version 1.27 commit: a718a92cc9a94955a5a550b6fdec1378c247ec50 rundir: /run/crun spec: 1.0.0 +SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +CRIU +YAJL os: linux pasta: executable: /bin/pasta package: passt-0^20251210.gd04c480-5.el9_8.x86_64 version: | pasta 0^20251210.gd04c480-5.el9_8.x86_64 Copyright Red Hat GNU General Public License, version 2 or later <https://www.gnu.org/licenses/old-licenses/gpl-2.0.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. remoteSocket: exists: true path: /run/podman/podman.sock ``` ### Podman in a container No ### Privileged Or Rootless None ### Upstream Latest Release Yes ### Additional environment details Additional environment details ### Additional information Additional information like issue happens only occasionally or issue happens with a particular architecture or on a particular setting
1 条评论