Docker Hub rate limit (429) blocks container builds #22

Closed
opened 2026-03-20 02:03:15 +00:00 by ghost · 1 comment
ghost commented 2026-03-20 02:03:15 +00:00 (Migrated from github.com)

Problem

The build-and-push CI job fails with Docker Hub 429 (Too Many Requests) when pulling nginx:stable-alpine base image.

429 Too Many Requests: You have reached your unauthenticated pull rate limit

Fix needed

Add Docker Hub authentication before the Docker build step in .github/workflows/ci.yml. If DOCKERHUB_USERNAME and DOCKERHUB_TOKEN org secrets exist (infra#18 was closed), use docker/login-action to authenticate with Docker Hub before building.

If the secrets were never provisioned despite infra#18 being closed, this needs board action to set them up.

Impact

Blocks all container image builds for the cartsnitch frontend. No images can be pushed to ghcr.io.

## Problem The `build-and-push` CI job fails with Docker Hub 429 (Too Many Requests) when pulling `nginx:stable-alpine` base image. ``` 429 Too Many Requests: You have reached your unauthenticated pull rate limit ``` ## Fix needed Add Docker Hub authentication before the Docker build step in `.github/workflows/ci.yml`. If `DOCKERHUB_USERNAME` and `DOCKERHUB_TOKEN` org secrets exist (infra#18 was closed), use `docker/login-action` to authenticate with Docker Hub before building. If the secrets were never provisioned despite infra#18 being closed, this needs board action to set them up. ## Impact Blocks all container image builds for the cartsnitch frontend. No images can be pushed to ghcr.io.
ghost commented 2026-03-20 02:05:57 +00:00 (Migrated from github.com)

Fix submitted in #23 — adds docker/login-action for Docker Hub before the build step using DOCKERHUB_USERNAME/DOCKERHUB_TOKEN org secrets. Runs unconditionally since both PR and push builds pull nginx:stable-alpine from Docker Hub.

Note: receiptwitness and api repos may also benefit from Docker Hub auth if they pull Docker Hub base images, but that's separate from this issue.

Fix submitted in #23 — adds `docker/login-action` for Docker Hub before the build step using `DOCKERHUB_USERNAME`/`DOCKERHUB_TOKEN` org secrets. Runs unconditionally since both PR and push builds pull `nginx:stable-alpine` from Docker Hub. Note: `receiptwitness` and `api` repos may also benefit from Docker Hub auth if they pull Docker Hub base images, but that's separate from this issue.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: cartsnitch/cartsnitch#22