actions / runner-images

GitHub Actions runner images

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Rollback ORAS CLI version to 0.12 instead of 0.13 as it breaks login for GHCR

suyash691 opened this issue · comments

Tool name

ORAS CLI

Tool license

MIT License

Add or update?

  • Add
  • Update

Desired version

0.12

Approximate size

No response

Brief description of tool

No response

URL for tool's homepage

No response

Provide a basic test case to validate the tool's functionality.

No response

Platforms where you need the tool

  • Azure DevOps
  • GitHub Actions

Virtual environments where you need the tool

  • Ubuntu 18.04
  • Ubuntu 20.04
  • Ubuntu 22.04
  • macOS 10.15
  • macOS 11
  • macOS 12
  • Windows Server 2019
  • Windows Server 2022

Can this tool be installed during the build?

No response

Tool installation time in runtime

Less than 10s

Are you willing to submit a PR?

Yes

Raised PR

Raised PR

You can easily install oras in runtime:

 - run: |
        curl -LO https://github.com/oras-project/oras/releases/download/v0.12.0/oras_0.12.0_linux_amd64.tar.gz
        sudo tar xzf oras_0.12.0_linux_amd64.tar.gz -C /usr/local/bin oras

Yes i understand but this is to ensure better out of the box experience with GHCR for actions.
In the meanwhile, we are working with the ORAS CLI folks to address this problem with the newer CLI versions

@suyash691 do you know how long will it take to release the new ORAS CLI version with the fix? I'm asking as we tend to start rollouts on Monday but can wait till Tuesday if the fix is available early next week.

I am not sure, the maintainers for ORAS CLI have yet to respond to my request.
That is why I wanted to ensure that we are fixing the experience for GitHub customers first; WRT the actual fix in the newer version i'll report back with to this issue when we can upgrade the ORAS CLI

Updating here from the issue in ORAS CLI. The newer version has removed support for protocol detection, which is why we were seeing the above issue. They are still considering whether to add back protocol detection or not

@suyash691 I'm going to close this as external then. Feel free to contact us if you have any objections.
Thank you!