Authentication failure with local gitlab runner

[Robin-Ln]

What would you like help with?

I think I found a bug

How are you running Renovate?

Self-hosted

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

https://gitlab.com/renovate-bot/renovate-runner/-/blob/main/templates/renovate.gitlab-ci.yml#L10

Please tell us more about your question or problem

I've reached the limit of GitLab CI's free tier, so I decided to set up a local GitLab Runner on macOS:

brew install gitlab-runner
gitlab-runner register --url https://gitlab.com --token *********

Now, I'm starting a new pipeline. For my GitLab setup with Renovate, I'm using:

include:
  - project: 'renovate-bot/renovate-runner'
    file: '/templates/renovate.gitlab-ci.yml'

renovate:
  stage: 🤖 bot
  variables:
    RENOVATE_GIT_AUTHOR: "Renovate Bot <bot@renovateapp.com>"
    RENOVATE_EXTRA_FLAGS: "$CI_PROJECT_PATH"
  rules:
    - if: "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH"

I've set the environment variable RENOVATE_TOKEN with all the necessary permissions.

However, when I run the job using my local GitLab Runner, I encounter this error:

FATAL: Authentication failure
INFO: Renovate was run at log level "info". Set LOG_LEVEL=debug in environment variables to see extended debug logs.
INFO: Renovate is exiting with a non-zero code due to the following logged errors:
  "loggerErrors": [
    {
      "name": "renovate",
      "level": 60,
      "logContext": "5EJbINx2PFSSBplMAFnse",
      "msg": "Authentication failure"
    }
  ]

Can you explain what mistake I made? Why does it work on the GitLab Runner but fail on my local runner?

Logs (if relevant)

artifacts.zip

[github-actions[bot]]

Hi there,

This issue or discussion is missing some logs, making it difficult or impossible to help you. Depending on which situation applies follow one, some or all of these instructions.

No logs at all

If you haven't posted any log yet, we need you to find and copy/paste the log into the issue template.

Finding logs on hosted app

Select me to read instructions

If you use the Mend Renovate app (GitHub):

1. Log in to the Mend Developer Portal
2. Navigate to the correct organization and repository
3. Locate the appropriate log (it may not always be the latest one)
4. Copy/paste the log contents
5. Follow the steps in the formatting your logs section

Finding logs when self-hosting

Select me to read instructions

Read the Renovate docs, troubleshooting, self-hosted to learn how to find the logs.

Insufficient logs

Select me to read instructions

If you already gave us a log, and the Renovate team said it's not enough, then follow the instructions from the No logs at all section.

Formatting your logs

Select me to read instructions

Please put your logs in a <details> and <summary> element like this:

<details><summary>Select me to see logs</summary>

```
Copy/paste your logs here, between the starting and ending backticks
```

</details>

If you feel the logs are too large to paste here, please use a service like GitHub Gist and paste the link here.

Good luck,

The Renovate team

[rarkins]

You should run with debug log level set

[Robin-Ln]

job

$ renovate $RENOVATE_EXTRA_FLAGS
DEBUG: Using RE2 regex engine
DEBUG: Parsing configs
DEBUG: Checking for config file in config.js
DEBUG: No config file found on disk - skipping
DEBUG: Enabling debug logging to renovate-log.ndjson
DEBUG: File config
       "config": {}
DEBUG: CLI config
       "config": {"repositories": ["robin.louarn/monorepo-test"]}
DEBUG: Env config
       "config": {
         "hostRules": [],
         "repositoryCache": "enabled",
         "baseDir": "/builds/robin.louarn/monorepo-test/renovate",
         "logFile": "renovate-log.ndjson",
         "logFileLevel": "debug",
         "onboardingConfig": {
           "$schema": "https://docs.renovatebot.com/renovate-schema.json",
           "extends": ["config:recommended"]
         },
         "optimizeForDisabled": true,
         "platform": "gitlab",
         "endpoint": "https://gitlab.com/api/v4",
         "token": "***********",
         "gitAuthor": "Renovate Bot <bot@renovateapp.com>"
       }
DEBUG: Combined config
       "config": {
         "hostRules": [],
         "repositoryCache": "enabled",
         "baseDir": "/builds/robin.louarn/monorepo-test/renovate",
         "logFile": "renovate-log.ndjson",
         "logFileLevel": "debug",
         "onboardingConfig": {
           "$schema": "https://docs.renovatebot.com/renovate-schema.json",
           "extends": ["config:recommended"]
         },
         "optimizeForDisabled": true,
         "platform": "gitlab",
         "endpoint": "https://gitlab.com/api/v4",
         "token": "***********",
         "gitAuthor": "Renovate Bot <bot@renovateapp.com>",
         "repositories": ["robin.louarn/monorepo-test"]
       }
DEBUG: Adding trailing slash to endpoint
DEBUG: Enabling forkProcessing while in non-autodiscover mode
DEBUG: Found valid git version: 2.43.2
DEBUG: Setting global hostRules
DEBUG: hostRules: authentication already set for gitlab.com
DEBUG: GET https://gitlab.com/api/v4/version = (code=ENETUNREACH, statusCode=-1 retryCount=2, duration=1025)
DEBUG: Gitlab API error
       "err": {
         "name": "RequestError",
         "code": "ENETUNREACH",
         "timings": {
           "start": 1714292039671,
           "socket": 1714292039672,
           "lookup": 1714292039676,
           "error": 1714292040696,
           "phases": {"wait": 1, "dns": 4, "total": 1025}
         },
         "message": "connect ENETUNREACH 2606:4700:90:0:f22e:fbec:5bed:a9b9:443",
         "stack": "RequestError: connect ENETUNREACH 2606:4700:90:0:f22e:fbec:5bed:a9b9:443\n    at ClientRequest.<anonymous> (/usr/local/renovate/node_modules/.pnpm/got@11.8.6/node_modules/got/dist/source/core/index.js:970:111)\n    at Object.onceWrapper (node:events:632:26)\n    at ClientRequest.emit (node:events:529:[35](https://gitlab.com/robin.louarn/monorepo-test/-/jobs/6733177699#L35))\n    at ClientRequest.emit (node:domain:489:12)\n    at ClientRequest.origin.emit (/usr/local/renovate/node_modules/.pnpm/@szmarczak+http-timer@4.0.6/node_modules/@szmarczak/http-timer/dist/source/index.js:43:20)\n    at TLSSocket.socketErrorListener (node:_http_client:501:9)\n    at TLSSocket.emit (node:events:517:28)\n    at TLSSocket.emit (node:domain:489:12)\n    at emitErrorNT (node:internal/streams/destroy:151:8)\n    at emitErrorCloseNT (node:internal/streams/destroy:116:3)\n    at processTicksAndRejections (node:internal/process/task_queues:82:21)\n    at TCPConnectWrap.afterConnect [as oncomplete] (node:net:1555:16)",
         "options": {
           "headers": {
             "user-agent": "RenovateBot/[37](https://gitlab.com/robin.louarn/monorepo-test/-/jobs/6733177699#L37).326.2 (https://github.com/renovatebot/renovate)",
             "accept": "application/json",
             "authorization": "***********",
             "accept-encoding": "gzip, deflate, br"
           },
           "url": "https://gitlab.com/api/v4/version",
           "hostType": "gitlab",
           "username": "",
           "password": "",
           "method": "GET",
           "http2": false
         }
       }
DEBUG: Error authenticating with GitLab. Check that your token includes "api" permissions
       "err": {
         "name": "RequestError",
         "code": "ENETUNREACH",
         "timings": {
           "start": 17142920[39](https://gitlab.com/robin.louarn/monorepo-test/-/jobs/6733177699#L39)671,
           "socket": 1714292039672,
           "lookup": 1714292039676,
           "error": 17142920[40](https://gitlab.com/robin.louarn/monorepo-test/-/jobs/6733177699#L40)696,
           "phases": {"wait": 1, "dns": 4, "total": 1025}
         },
         "message": "connect ENETUNREACH 2606:4700:90:0:f22e:fbec:5bed:a9b9:4[43](https://gitlab.com/robin.louarn/monorepo-test/-/jobs/6733177699#L43)",
         "stack": "RequestError: connect ENETUNREACH 2606:4700:90:0:f22e:fbec:5bed:a9b9:[44](https://gitlab.com/robin.louarn/monorepo-test/-/jobs/6733177699#L44)3\n    at ClientRequest.<anonymous> (/usr/local/renovate/node_modules/.pnpm/got@11.8.6/node_modules/got/dist/source/core/index.js:970:111)\n    at Object.onceWrapper (node:events:632:26)\n    at ClientRequest.emit (node:events:529:35)\n    at ClientRequest.emit (node:domain:[48](https://gitlab.com/robin.louarn/monorepo-test/-/jobs/6733177699#L48)9:12)\n    at ClientRequest.origin.emit (/usr/local/renovate/node_modules/.pnpm/@szmarczak+http-timer@4.0.6/node_modules/@szmarczak/http-timer/dist/source/index.js:43:20)\n    at TLSSocket.socketErrorListener (node:_http_client:[50](https://gitlab.com/robin.louarn/monorepo-test/-/jobs/6733177699#L50)1:9)\n    at TLSSocket.emit (node:events:[51](https://gitlab.com/robin.louarn/monorepo-test/-/jobs/6733177699#L51)7:28)\n    at TLSSocket.emit (node:domain:489:12)\n    at emitErrorNT (node:internal/streams/destroy:151:8)\n    at emitErrorCloseNT (node:internal/streams/destroy:116:3)\n    at processTicksAndRejections (node:internal/process/task_queues:82:21)\n    at TCPConnectWrap.afterConnect [as oncomplete] (node:net:1[55](https://gitlab.com/robin.louarn/monorepo-test/-/jobs/6733177699#L55)5:16)",
         "options": {
           "headers": {
             "user-agent": "RenovateBot/37.326.2 (https://github.com/renovatebot/renovate)",
             "accept": "application/json",
             "authorization": "***********",
             "accept-encoding": "gzip, deflate, br"
           },
           "url": "https://gitlab.com/api/v4/version",
           "hostType": "gitlab",
           "username": "",
           "password": "",
           "method": "GET",
           "http2": false
         }
       }
FATAL: Authentication failure
 INFO: Renovate is exiting with a non-zero code due to the following logged errors
       "loggerErrors": [
         {
           "name": "renovate",
           "level": [60](https://gitlab.com/robin.louarn/monorepo-test/-/jobs/6733177699#L60),
           "logContext": "_B5LB14DIQwlwFBWxYfEZ",
           "msg": "Authentication failure"
         }
       ]

[Robin-Ln]

[rarkins]

Read the error - it's not related to authentication

[rarkins]

This is not a bug, not related to authentication. User has a network error

[Robin-Ln]

It's a gitlab API problem, do you think?

[rarkins]

No, it's a network reachability problem. You probably need it to use IPv4

[Robin-Ln]

thx !

this config fix my bug :

  [runners.feature_flags]
    FF_NETWORK_PER_BUILD = true