Unable to perform diff on fedora host machine

[surajssd]

I wanted to compare the exited container and the base image it is based off of but got following error:

$ sudo ~/.local/bin/container-diff diff 422dc563ca32 53fc993ed0ae
E1118 16:14:14.606483    4485 image_prep_utils.go:99] errors:
denied: requested access to the resource is denied
unauthorized: authentication required
E1118 16:14:14.771308    4485 image_prep_utils.go:99] errors:
denied: requested access to the resource is denied
unauthorized: authentication required
E1118 16:14:14.771363    4485 differs.go:62] Error getting diff with AptAnalyzer: stat : no such file or directory
E1118 16:14:14.771391    4485 diff.go:47] Could not retrieve diff: Could not perform diff on {  {{[]} []}} and {  {{[]} []}}

Steps to reproduce:

Create a container with some content

$ docker run -it fedora bash                                                                                                                      [12/12]
[root@53fc993ed0ae /]# cat > file
yeah yeah

^C
[root@53fc993ed0ae /]# exit

Get image ID:

$ docker images
REPOSITORY                   TAG                 IMAGE ID            CREATED             SIZE
fedora                       latest              422dc563ca32        3 days ago          252MB

Get the exited container ID:

$ docker ps -a
CONTAINER ID        IMAGE                COMMAND                  CREATED             STATUS                            PORTS               NAMES
53fc993ed0ae        fedora               "bash"                   19 seconds ago      Exited (130) 8 seconds ago                            keen_shannon
5bcb29c50c7c        fedora               "bash"                   2 minutes ago       Exited (127) About a minute ago                       ecstatic_lewin
...

Do the diff as shown in the top:

$ sudo ~/.local/bin/container-diff diff 422dc563ca32 53fc993ed0ae
E1118 16:14:14.606483    4485 image_prep_utils.go:99] errors:
denied: requested access to the resource is denied
unauthorized: authentication required
E1118 16:14:14.771308    4485 image_prep_utils.go:99] errors:
denied: requested access to the resource is denied
unauthorized: authentication required
E1118 16:14:14.771363    4485 differs.go:62] Error getting diff with AptAnalyzer: stat : no such file or directory
E1118 16:14:14.771391    4485 diff.go:47] Could not retrieve diff: Could not perform diff on {  {{[]} []}} and {  {{[]} []}}

OS information:

$ cat /etc/redhat-release 
Fedora release 25 (Twenty Five)

$ container-diff version
v0.5.0

# SELinux is enabled
$ getenforce 
Enforcing

[surajssd]

similar thing with the debian container as well

$ docker  run -it debian bash
root@2cc78510b422:/# cat > file
yeah yeah

^C
root@2cc78510b422:/# cat file 
yeah yeah

root@2cc78510b422:/# exit

find the image id

$ docker images
REPOSITORY                   TAG                 IMAGE ID            CREATED             SIZE
debian                       latest              6d83de432e98        2 weeks ago         100MB

find the container id

$ docker ps -a
CONTAINER ID        IMAGE                COMMAND                  CREATED             STATUS                        PORTS               NAMES
2cc78510b422        debian               "bash"                   31 seconds ago      Exited (0) 9 seconds ago                          angry_torvalds

and similar error

$ container-diff diff 6d83de432e98 2cc78510b422
E1118 16:37:12.476914   19631 image_prep_utils.go:99] errors:
denied: requested access to the resource is denied
unauthorized: authentication required
E1118 16:37:12.526400   19631 image_prep_utils.go:99] errors:
denied: requested access to the resource is denied
unauthorized: authentication required
E1118 16:37:12.526446   19631 differs.go:62] Error getting diff with AptAnalyzer: stat : no such file or directory
E1118 16:37:12.526477   19631 diff.go:47] Could not retrieve diff: Could not perform diff on {  {{[]} []}} and {  {{[]} []}}

[surajssd]

Update, built from source on git version: 392830b

diffing on the fedora containers

$ container-diff diff 422dc563ca32 53fc993ed0ae
Starting diff on images 422dc563ca32 and 53fc993ed0ae, using differs: [apt]
Retrieving image 53fc993ed0ae from source Cloud Registry
Retrieving image 422dc563ca32 from source Cloud Registry
ERRO[0003] errors:
denied: requested access to the resource is denied
unauthorized: authentication required
 
WARN[0003] Diff may be inaccurate: errors:
denied: requested access to the resource is denied
unauthorized: authentication required
 
ERRO[0003] errors:
denied: requested access to the resource is denied
unauthorized: authentication required
 
WARN[0003] Diff may be inaccurate: errors:
denied: requested access to the resource is denied
unauthorized: authentication required
 
Computing diffs
ERRO[0003] Error getting diff with AptAnalyzer: stat : no such file or directory 
ERRO[0003] Could not retrieve diff: Could not perform diff on {  {{[] [] map[] [] map[] } []}} and {  {{[] [] map[] [] map[] } []}} 

diffing on the debian containers

$ container-diff diff 6d83de432e98 2cc78510b422
Starting diff on images 6d83de432e98 and 2cc78510b422, using differs: [apt]
Retrieving image 2cc78510b422 from source Cloud Registry
Retrieving image 6d83de432e98 from source Cloud Registry
ERRO[0003] errors:
denied: requested access to the resource is denied
unauthorized: authentication required
 
WARN[0003] Diff may be inaccurate: errors:
denied: requested access to the resource is denied
unauthorized: authentication required
 
ERRO[0011] Get https://auth.docker.io/token?scope=repository%3Alibrary%2F2cc78510b422%3Apull&service=registry.docker.io: net/http: TLS handshake timeout 
WARN[0011] Diff may be inaccurate: Get https://auth.docker.io/token?scope=repository%3Alibrary%2F2cc78510b422%3Apull&service=registry.docker.io: net/http: TLS handshake timeout 
Computing diffs
ERRO[0011] Error getting diff with AptAnalyzer: stat : no such file or directory 
ERRO[0011] Could not retrieve diff: Could not perform diff on {  {{[] [] map[] [] map[] } []}} and {  {{[] [] map[] [] map[] } []}} 

[surajssd]

Not able to do diff on the images that are available locally

So I am trying to build the docker image that is based on the debian base image which has htop installed:

$ cat Dockerfile 
FROM debian

RUN apt-get update -y && apt-get install -y htop


$ docker build -t deb-htop .
Sending build context to Docker daemon  2.048kB
Step 1/2 : FROM debian
 ---> 6d83de432e98
Step 2/2 : RUN apt-get update -y && apt-get install -y htop
 ---> Using cache
 ---> d93e8e8cc4c4
Successfully built d93e8e8cc4c4
Successfully tagged deb-htop:latest

The images that are available locally are:

$ docker images
REPOSITORY                   TAG                 IMAGE ID            CREATED             SIZE
deb-htop                     latest              d93e8e8cc4c4        29 minutes ago      117MB
debian                       latest              6d83de432e98        2 weeks ago         100MB

doing diff on above two images also fails

$ container-diff diff d93e8e8cc4c4 6d83de432e98
Starting diff on images d93e8e8cc4c4 and 6d83de432e98, using differs: [apt]
Retrieving image 6d83de432e98 from source Cloud Registry
Retrieving image d93e8e8cc4c4 from source Cloud Registry
ERRO[0003] errors:
denied: requested access to the resource is denied
unauthorized: authentication required
 
WARN[0003] Diff may be inaccurate: errors:
denied: requested access to the resource is denied
unauthorized: authentication required
 
ERRO[0003] errors:
denied: requested access to the resource is denied
unauthorized: authentication required
 
WARN[0003] Diff may be inaccurate: errors:
denied: requested access to the resource is denied
unauthorized: authentication required
 
Computing diffs
ERRO[0003] Error getting diff with AptAnalyzer: stat : no such file or directory 
ERRO[0003] Could not retrieve diff: Could not perform diff on {  {{[] [] map[] [] map[] } []}} and {  {{[] [] map[] [] map[] } []}} 

[frezbo]

@surajssd I am also facing the same issue on Fedora 26

[frezbo@RINPNDLL10 ~]$ container-diff diff a532f142c111 624e18098fe5
E1118 17:37:04.711789    5077 image_prep_utils.go:99] errors:
denied: requested access to the resource is denied
unauthorized: authentication required
E1118 17:37:05.415537    5077 image_prep_utils.go:99] errors:
denied: requested access to the resource is denied
unauthorized: authentication required
E1118 17:37:05.415636    5077 differs.go:62] Error getting diff with AptAnalyzer: stat : no such file or directory
E1118 17:37:05.415702    5077 diff.go:47] Could not retrieve diff: Could not perform diff on {  {{[]} []}} and {  {{[]} []}}
[frezbo@RINPNDLL10 ~]$ 

[dlorenc]

I think this might be a docs issue. IIRC we dropped support for diffing based on container IDs at some point. @nkubala do you remember?

If you want to diff local images, could you try by commiting your container into an image, and using the syntax:

container-diff diff daemon://<image> daemon://<other-image>

[nkubala]

Ah yeah, because of the way the containers/image library works, it's not possible to reference an image or container by its Docker ID. If you commit your container to an image and then reference it using the syntax @dlorenc mentioned above, this should work. I'll update the docs to make this more clear.