Skip to content

Pull from mcr.microsoft.com is flaky: requests blocked from GitHub Actions #964

@smola

Description

@smola

Pulling from mcr.microsoft.com/mssql/server is flaky. From GitHub Actions' runners, pulling this image often leads to errors with the following The request is blocked message:

Error response from daemon: pull access denied for mcr.microsoft.com/mssql/server, repository does not exist or may require 'docker login': denied: <!DOCTYPE html PUBLIC '-//W3C//DTD XHTML 1.0 Transitional//EN' 'http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd'><html xmlns='http://www.w3.org/1999/xhtml'><head><meta content='text/html; charset=utf-8' http-equiv='content-type'/><style type='text/css'>body { font-family:Arial; margin-left:40px; }img  { border:0 none; }#content { margin-left: auto; margin-right: auto }#message h2 { font-size: 20px; font-weight: normal; color: #000000; margin: 34px 0px 0px 0px }#message p  { font-size: 13px; color: #000000; margin: 7px 0px 0px 0px }#errorref { font-size: 11px; color: #737373; margin-top: 41px }</style><title>Microsoft</title></head><body><div id='content'><div id='message'><h2>The request is blocked.</h2></div><div id='errorref'><span>Ref A: 89100010323940BC977749AD188FF625 Ref B: BY1AA1072320025 Ref C: 2026-04-24T07:58:43Z</span></div></div></body></html>

Example job. This pull is the only interaction with mcr.microsoft.com made from this runner. Best guess is GitHub Actions' IPs are being blocked, without any notion of runners being fresh. Once allocated to a blocked runner, the error seems to be unrecoverable, even adding longer back-offs to the retries.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions