podman manifest create with local images tries to access remote repository

[dmick]

Podman 4.0.0 on centos 8stream:

Trying to create a manifest-list image to hold two different architecture containers fails to recognize the component images are local. Various workaround attempts shown below as directed by @nalind in a Slack conversation; the final one is a workaround. @nalind requested an issue be created, and apparently has an idea where in the code the issue lies.

Here's the verbose output from a shell script attempting various combinations of image specifiers:

with no localhost
+ podman manifest create ceph/daemon-base:main ceph/daemon-base:main-arm64 ceph/daemon-base:main-x86_64
Error: error setting up to read manifest and configuration from "docker://ceph/daemon-base:main-arm64": reading manifest main-arm64 in docker.io/ceph/daemon-base: manifest unknown: manifest unknown
+ set +x

with localhost
+ podman manifest create ceph/daemon-base:main localhost/ceph/daemon-base:main-arm64 localhost/ceph/daemon-base:main-x86_64
Error: error setting up to read manifest and configuration from "docker://localhost/ceph/daemon-base:main-arm64": pinging container registry localhost: Get "https://localhost/v2/": x509: certificate has expired or is not yet valid: current time 2024-03-08T12:18:27-08:00 is after 2022-04-09T03:11:53Z
+ set +x

with containers-storage:
+ podman manifest create ceph/daemon-base:main containers-storage:ceph/daemon-base:main-arm64 containers-storage:ceph/daemon-base:main-x86_64
Error: error setting up to read manifest and configuration from "containers-storage:[overlay@/home/dmick/.local/share/containers/storage+/run/user/1104/containers]docker.io/ceph/daemon-base:main-arm64": reference "[overlay@/home/dmick/.local/share/containers/storage+/run/user/1104/containers]docker.io/ceph/daemon-base:main-arm64" does not resolve to an image ID: identifier is not an image
+ set +x

with containers-storage: and localhost
+ podman manifest create ceph/daemon-base:main containers-storage:localhost/ceph/daemon-base:main-arm64 containers-storage:localhost/ceph/daemon-base:main-x86_64
72a000e82a97f6a8393fb81d647ebc6995f62563727a67f2eb6a8a95e2d5baa2
+ set +x

with image ID
+ podman manifest create localhost/ceph/daemon-base:main 99167b84e24b e96a33f8a74e
Error: error setting up to read manifest and configuration from "docker://99167b84e24b:latest": reading manifest latest in docker.io/library/99167b84e24b: errors:
denied: requested access to the resource is denied
unauthorized: authentication required

+ set +x

with container-storage:image ID
+ podman manifest create localhost/ceph/daemon-base:main containers-storage:99167b84e24b containers-storage:e96a33f8a74e
8e4715c1bd2a9ba85de119a9c29b1215c86176d012d5b82f0fcedfd955c52e1d
+ set +x

[dmick]

Just to call it out because there's a lot of info above, two workarounds worked: specifying containers-storage:localhost/... or containers-storage:imageid