Docker
129 incident problems in Docker environments.
Read first
When the CI cache restores the wrong dependency graphAn InfraTree guide that lays out the first signals to check, the CLI verification order, common misdiagnoses, and a safe recovery path when package.json, the lockfile, and artifacts no longer agree even after a cache hit.CI/CD3 min readWhen GitHub Actions succeeds but only the rollout failsAn InfraTree guide that lays out the first signals to check, the CLI verification order, common misdiagnoses, and a safe recovery path when the build logs look fine but the failure surfaces only on the target deploy cluster or runtime.CI/CD3 min readThe checking order when GitHub Actions succeeds but only the deploy failsAn InfraTree guide that lays out the first signals to check, the CLI verification order, common misdiagnoses, and a safe recovery path when the workflow is green but the failure happens only in the rollout, promotion, or health check stage.CI/CD3 min read
Recommended problems
Reviewed problems first, then problems with detailed scenarios.
All problems (129)
CICD-1612A Docker image push failsOne image push fails right after a secret rename.ReviewedCI/CDBeginner6 minFreeCICD-1649A cache restore is healthy and one build still recompilesOne build still recompiles after cache tuning.CI/CDBeginner8 minFreeCICD-1659A cache restore is healthy and one build still recompilesOne build still recompiles after cache tuning.CI/CDBeginner8 minFreeCICD-1669A cache restore is healthy and one build still recompilesOne build still recompiles after cache tuning.CI/CDBeginner8 minFreeCICD-1639A cache restore looks healthy and one build still recompilesOne build still recompiles after cache tuning.CI/CDBeginner8 minFreeCICD-1627A cache restore works and one Buildx layer still rebuildsOne Buildx stage still rebuilds after cache tuning.CI/CDBeginner8 minFreeCICD-1364A private registry behind NGINX handles login and small layers fineA private registry behind NGINX handles login and small layers fine focuses on Artifact Promotion and asks the reader to isolate the key signal in NGINX. Path-specific protection can succeed on auth and manifest routes while silently breaking long-l...CI/CDAdvanced15 minProCICD-1595An Argo CD OCI repo works and one app still syncs the old chartOne Argo CD app keeps syncing the old chart after OCI registry cleanup.CI/CDAdvanced10 minProCICD-1605An Argo CD repo update is correct and one application still syncs the old chartOne Argo CD app still syncs the old chart after registry cleanup.CI/CDAdvanced10 minProCICD-1585An Argo CD sync is healthy and one app still deploys the old chartOne Argo CD app syncs the old chart after OCI repository cleanup.CI/CDAdvanced10 minProCICD-1534A registry mirror serves the new image and signature verification still failsSignature verification fails only through one mirror tier after edge caching is enabled.CI/CDAdvanced11 minProCICD-1487A rootless GitHub runner survives reboots and loses Docker accessSelf-hosted runners fail only after host reboots on hardened images with rootless Docker.CI/CDAdvanced11 minProCICD-1558A self-hosted runner image adds rootless Docker and one job still failsOnly restored runners fail image builds after moving to rootless Docker.CI/CDAdvanced11 minProCICD-1524An image mirror serves pulls and signature verification still failsVerification fails only when images are pulled through one registry mirror tier.CI/CDAdvanced11 minProCICD-1544An OCI mirror serves the new image and signature verification still failsSignature verification fails only through one mirror tier after edge caching is enabled.CI/CDAdvanced11 minProCICD-1494A BuildKit cache import looks healthy and one branch still cold-buildsA branch-based build farm loses cache hits only behind one internal registry proxy after HTTP optimization changes.CI/CDAdvanced12 minProCICD-1502A BuildKit cache import works on one runner group and misses on anotherOnly one runner group cold-builds after a proxy redirect optimization in front of the registry.CI/CDAdvanced12 minProCICD-1540A registry cleanup deletes a layer and one release job still fetches itA deleted OCI layer remains fetchable only through one edge cache after cleanup.CI/CDAdvanced12 minProCICD-1530A registry cleanup deletes an image layer and one release job still fetches itA deleted OCI layer remains fetchable only through one edge cache after cleanup.CI/CDAdvanced12 minProCICD-1560A registry retention rule deletes untagged blobs and one build still succeedsA stale build works only through one proxy after registry retention cleanup.CI/CDAdvanced12 minPro