Image build error

[sujit-jadhav]

I am trying to build RHEL 10.1 image, it was working earlier but suddenly stopped working now.

[root@demo images]# podman run --rm --device /dev/fuse -e "S3_ACCESS=admin" -e "S3_SECRET=admin123" -v /opt/workdir/images/rhel-compute.yaml:/home/builder/config.yaml -v /mnt/iso:/mnt/iso:ro ghcr.io/openchami/image-build:latest image-build --config config.yaml --log-level DEBUG
INFO - --------------------ARGUEMENTS--------------------
INFO - log_level : DEBUG
INFO - config : config.yaml
INFO - layer_type : base
INFO - pkg_man : dnf
INFO - parent : demo.openchami.cluster:5000/demo/rhel-base:10.1
INFO - proxy :
INFO - name : rhel-compute
INFO - publish_local : False
INFO - publish_s3 : http://demo.openchami.cluster:9000
INFO - s3 endpoint : http://demo.openchami.cluster:9000
INFO - s3_prefix : compute/rhel-compute-base/
INFO - s3_bucket : boot-images
INFO - publish_registry : demo.openchami.cluster:5000/demo
INFO - registry_opts_push : ['--tls-verify=false', '--insecure']
INFO - registry_opts_pull : []
INFO - publish_tags : 10.1
ERROR - Trying to pull demo.openchami.cluster:5000/demo/rhel-base:10.1...
ERROR - Error: initializing source docker://demo.openchami.cluster:5000/demo/rhel-base:10.1: pinging container registry demo.openchami.cluster:5000: Get "https://demo.openchami.cluster:5000/v2/": http: server gave HTTP response to HTTPS client

-------------------BUILD LAYER--------------------
Error building layer: Command '['buildah', 'from', '--name', 'rhel-compute20250715045647', 'demo.openchami.cluster:5000/demo/rhel-base:10.1']' returned non-zero exit status 125.

Here is version of the software which I am using:

[root@demo images]# buildah --version
buildah version 1.39.0 (image-spec 1.1.0, runtime-spec 1.2.0)

[root@demo images]# ochami version
Version:    0.3.4
Tag:        v0.3.4
Branch:     HEAD
Commit:     78a2b046518839bbd8283804905e1648dd739927
Git State:  clean
Date:       2025-06-02T21:19:21Z
Go:         go1.24.3
Compiler:   gc
Build Host: fv-az1758-958
Build User: runner

[root@demo images]# podman ps
CONTAINER ID  IMAGE                                   COMMAND               CREATED       STATUS       PORTS                                           NAMES
44f384a96c0c  docker.io/minio/minio:latest            server /data --co...  19 hours ago  Up 19 hours  0.0.0.0:9000->9000/tcp, 0.0.0.0:9091->9001/tcp  minio-server
594721327b86  docker.io/library/registry:latest       /etc/distribution...  19 hours ago  Up 19 hours  0.0.0.0:5000->5000/tcp                          registry
bc490bae5a17  ghcr.io/openchami/local-ca:v0.2.2       /bin/sh -c exec /...  19 hours ago  Up 19 hours  9000/tcp                                        step-ca
863a2dae2408  docker.io/library/postgres:11.5-alpine  postgres              19 hours ago  Up 19 hours  5432/tcp                                        postgres
7b772d16bb67  docker.io/oryd/hydra:v2.3               serve -c /etc/con...  19 hours ago  Up 19 hours                                                  hydra
977029242b16  ghcr.io/openchami/smd:v2.18.0           /smd                  19 hours ago  Up 19 hours  27779/tcp                                       smd
0a7f7ecadaa0  ghcr.io/openchami/opaal:v0.3.10         /opaal/opaal serv...  19 hours ago  Up 19 hours                                                  opaal-idp
157e677ad8ae  ghcr.io/openchami/opaal:v0.3.10         /opaal/opaal logi...  19 hours ago  Up 19 hours                                                  opaal
c5e8178525a9  ghcr.io/openchami/bss:v1.32.0           /bin/sh -c /usr/l...  19 hours ago  Up 19 hours  27778/tcp                                       bss
11dd6759f350  ghcr.io/openchami/cloud-init:v1.2.3     /bin/sh -c /usr/l...  19 hours ago  Up 19 hours                                                  cloud-init-server
df5293723441  cgr.dev/chainguard/haproxy:latest       haproxy -f /usr/l...  19 hours ago  Up 19 hours  0.0.0.0:8081->80/tcp, 0.0.0.0:8443->443/tcp     haproxy
a289a4786174  ghcr.io/openchami/coredhcp:v0.3.0       /coredhcp             19 hours ago  Up 19 hours                                                  coresmd

Here is rhel-compute.yaml

[root@demo images]# cat rhel-compute.yaml
options:
  layer_type: 'base'
  name: 'rhel-compute'
  publish_tags: '10.1'
  pkg_manager: 'dnf'
  parent: 'demo.openchami.cluster:5000/demo/rhel-base:10.1'
  registry_opts_push:
    - '--tls-verify=false'

  # Publish SquashFS image to local S3
  publish_s3: 'http://demo.openchami.cluster:9000'
  s3_prefix: 'compute/rhel-compute-base/'
  s3_bucket: 'boot-images'

  # Publish OCI image to container registry
  #
  # This is the only way to be able to re-use this image as
  # a parent for another image layer.
  publish_registry: 'demo.openchami.cluster:5000/demo'
  registry_opts_push:
    - '--tls-verify=false'
    - '--insecure'

repos:
  - alias: 'Epel10.1'
    url: 'https://dl.fedoraproject.org/pub/epel/10.1/Everything/x86_64/'
    gpg:

  - alias: 'RHEL_10_AppStream'
    url: 'file:///mnt/iso/AppStream'

packages:
  - cloud-init
  - cmake3
  - dmidecode
  - dnf
  - efibootmgr
  - git
  - ipmitool
  - jq
  - make
  - nfs-utils
  - python3
  - rsyslog
  - sudo
  - tcl
  - traceroute
  - vim
  - nfs-utils
  - tcpdump
  - traceroute
  - git
  - shadow-utils

cmds:
  - cmd: "useradd -mG wheel -p '$6$gZGyFUSYf8Js.tic$Fpj4Sx1m4/cWcjDTipFlZqwTDhb4rIMM7MZGnhFbvitNWV22KhaHdoUbpNxac5..N52zFzVFcAX/7uQ57PyxC.' testuser"
  - cmd: "echo '/etc/init.d/sshd start' | tee -a /etc/rc.local"
  - cmd: "echo '/etc/init.d/firewalld stop' | tee -a /etc/rc.local"
    loglevel: INFO
[root@demo images]#

I am able to build rhel-base image. Following is the rhel-base.yaml file:

[root@demo images]# cat rhel-base.yaml
options:
  layer_type: 'base'
  name: 'rhel-base'
  publish_tags: '10.1'
  pkg_manager: 'dnf'
  parent: 'scratch'
  publish_registry: 'demo.openchami.cluster:5000/demo'
  registry_opts_push:
    - '--tls-verify=false'

  # Publish SquashFS image to local S3
  publish_s3: 'http://demo.openchami.cluster:9000'
  s3_prefix: 'rhel-base/'
  s3_bucket: 'boot-images'


repos:
  - alias: 'RHEL_10_BaseOS'
    url: 'file:///mnt/iso/BaseOS'

  - alias: 'RHEL_10_AppStream'
    url: 'file:///mnt/iso/AppStream'

package_groups:
  - 'Minimal Install'
  - 'Development Tools'

packages:
  - kernel
  - wget
  - dracut-live
  - cloud-init
  - chrony
  - rsyslog
  - sudo

cmds:
  - cmd: 'dracut --add "dmsquash-live livenet network-manager" --kver $(basename /lib/modules/*) -N -f --logfile /tmp/dracut.log 2>/dev/null'
    loglevel: INFO
  - cmd: 'echo DRACUT LOG:; cat /tmp/dracut.log'
    loglevel: INFO
  - cmd: "useradd -mG wheel -p '$6$gZGyFUSYf8Js.tic$Fpj4Sx1m4/cWcjDTipFlZqwTDhb4rIMM7MZGnhFbvitNWV22KhaHdoUbpNxac5..N52zFzVFcAX/7uQ57PyxC.' testuser"
  - cmd: "echo '/etc/init.d/sshd start' | tee -a /etc/rc.local"
  - cmd: "echo '/etc/init.d/firewalld stop' | tee -a /etc/rc.local"
    loglevel: INFO
[root@demo images]#

[synackd]

http: server gave HTTP response to HTTPS client

buildah is telling you that it is trying to perform an HTTPS request when pulling your parent image from your registry which only supports HTTP.

You have:

  registry_opts_push:
    - '--tls-verify=false'

twice in your options section. Change the first one to:

 registry_opts_pull:
   - '--tls-verify=false'

and it should work.