failed to SAVE IMAGE with two docker repos

[rougsig]

What went wrong?
Error: failed to SAVE IMAGE: server message: insufficient_scope: authorization failed

Do that pipeline:

docker login -u user1
// Was successfully pushed
earthly --ci --push +docker --IMAGE=user1/app:latest

docker logout
docker login -u user2
// Error: failed to SAVE IMAGE: server message: insufficient_scope: authorization failed
// All build was cached
earthly --ci --push +docker --IMAGE=user2/app:latest

We can swap user2 to be first and it will be successfully pushed for user2, but not for both.

What should have happened?
Successfully pushed

[rougsig]

As workaround we can add --no-cache to build command and it will be pushed successfully for two repos

[rougsig]

It looks like SAVE IMAGE knows that the image was pushed and wants to add a new tag. But it is an another user to another repository.

[rougsig]

сс containerd/containerd#2865

[rougsig]

As one more workaround, add just after FROM
ARG --required DOCKER_USER
RUN echo $DOCKER_USER > user.txt

In the result all layers below will be with another hashes, and both users will be pushed. At least all other caches will work, rather than --no-cache workaround.

[idodod]

Thanks for reporting the issue @rougsig.
I happened to encounter it myself just now :)