Docker
129 incident problems in Docker environments.
먼저 읽을 가이드
추천 문제
All problems (129)
CICD-1520An OCI registry cleanup finishes and one release job still pulls a deleted layerA deleted OCI layer remains fetchable only through one proxy tier after cleanup.CI/CDAdvanced12 minProCICD-1408A CodeBuild local cache speeds most jobs and one privileged image build...A CodeBuild local cache speeds most jobs and one privileged image build... focuses on Artifact Promotion and asks the reader to isolate the key signal in AWS. Local cache reuse can inherit ownership assumptions from the most privil...CI/CDAdvanced13 minProLINUX-1358A journald limit is raised and disk pressure persistsOperators tune journald aggressively and later discover that node disk pressure barely changes during the next incident spike.LinuxAdvanced13 minProLINUX-1366A journald limit is raised and disk pressure remainsAn operator raises journald limits during an incident and later sees no real improvement in node disk pressure.LinuxAdvanced13 minProSECURITY-1328A private registry login is successful and image pulls still return 401A private registry login is successful and image pulls still return 401 focuses on Identity And Access and asks the reader to isolate the key signal in docker. Auth redirects across hosts can fail at cookie scope even when credentials and TLS are co...SecurityIntermediate13 minProCICD-1418A CodeBuild privileged step pushes a multi-arch image and the next pipeline...A CodeBuild privileged step pushes a multi-arch image and the next pipeline... focuses on Artifact Promotion and asks the reader to isolate the key signal in AWS. A successful push does not guarantee every referenced architectur...CI/CDAdvanced14 minProCICD-1396A release provenance check fails only on one registryA release provenance check fails only on one registry focuses on Artifact Promotion and asks the reader to isolate the key signal in GitHub. Integrity failures can come from serialization assumptions rather than from tampering or ke...CI/CDAdvanced14 minProLINUX-1392A rootless container runtime works on one host and fails on anotherA rootless container runtime works on one host and fails on another focuses on Identity And Access and asks the reader to isolate the key signal in Linux. User namespace failures often come from host identity allocation conflicts rather than f...LinuxAdvanced14 minProLINUX-1362A rootless Docker host survives reboot and later loses outbound connectivityA rootless Docker host survives reboot and later loses outbound connectivity focuses on network-segmentation and asks the reader to isolate the key signal in Linux. Rootless restore issues after reboot often come from helper lif...LinuxAdvanced14 minProLINUX-1323A rootless Docker service works until rebootA node image refresh is followed by rootless container services staying down after reboot until someone logs in manually.LinuxAdvanced14 minProLINUX-1336A rootless Podman or Docker service survives upgrades and failsA rootless Podman or Docker service survives upgrades and fails focuses on Runner Hygiene and asks the reader to isolate the key signal in Linux. Rootless startup is a contract between systemd user units and the user lifecycle itself.LinuxAdvanced14 minProCICD-1356A BuildKit cache import appears healthy and later every merge build goes coldA BuildKit cache import appears healthy and later every merge build goes cold focuses on Artifact Promotion and asks the reader to isolate the key signal in docker. A present cache tag does not guarantee it still points to a cache artifact.CI/CDAdvanced15 minProCICD-1366A Buildx multiarch release publishes a manifest list and one architecture...A Buildx multiarch release publishes a manifest list and one architecture... focuses on Artifact Promotion and asks the reader to isolate the key signal in docker. Temporary-looking tags can still be part of the publish chain for...CI/CDAdvanced15 minProCICD-1376A Buildx multiarch release shows green and one architecture tag is absentA Buildx multiarch release shows green and one architecture tag is absent focuses on Artifact Promotion and asks the reader to isolate the key signal in docker. Temporary refs can still be live dependencies in the publish chain of...CI/CDAdvanced15 minProCICD-1334A Compose deployment deletes generated migration assetsA local compose workflow looks fine until one container starts missing generated migration or asset files after a directory is mounted for live editing.CI/CDAdvanced15 minProCICD-1320A deploy stage reuses the wrong Helm valuesA self-hosted runner deploys reliably until cross-environment contamination appears after a compose-based local prep step was added.CI/CDAdvanced15 minProCICD-1344A Docker registry behind NGINX accepts pushes and later large uploads hangA reverse proxy config is reorganized for clarity and later only larger image pushes start hanging or failing halfway through upload.CI/CDAdvanced15 minProCICD-1374A private registry behind NGINX logs in correctly and larger pushes hangA private registry behind NGINX logs in correctly and larger pushes hang focuses on Artifact Promotion and asks the reader to isolate the key signal in NGINX. Shared security includes can quietly undo streaming behavior required by...CI/CDAdvanced15 minProCICD-1354A registry behind NGINX accepts auth and fails large pushesA registry behind NGINX accepts auth and fails large pushes focuses on Artifact Promotion and asks the reader to isolate the key signal in NGINX. Security includes can accidentally revert performance-critical streaming directives on special...CI/CDAdvanced15 minProCICD-1336A registry mirror speeds up CI and later returns stale manifestsA registry mirror speeds up CI and later returns stale manifests focuses on Artifact Promotion and asks the reader to isolate the key signal in docker. Fast pulls can conceal stale tag identity when a mirror caches mutable tags too aggressively.CI/CDAdvanced15 minPro