Skip to content

fix(ci): retry Docker push on Go net/http deadline + cancellation errors #1877

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Aureliolo merged 2 commits into from
May 12, 2026
Merged

fix(ci): retry Docker push on Go net/http deadline + cancellation errors #1877

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
71ccc04
fix(ci): retry Docker push on Go net/http deadline + cancellation errors
Aureliolo May 12, 2026
656c6e6
fix(ci): also retry on Go net/http response-body timeout
Aureliolo May 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 11 additions & 1 deletion .github/scripts/docker_push_with_retry.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,17 @@ set -euo pipefail
# failures); a bare `tls: ` is intentionally NOT included because it would
# also match non-transient configuration errors like
# `tls: failed to verify certificate` or `tls: bad certificate`.
TRANSIENT_RE='page is taking too long|unknown blob|blob unknown|blob upload invalid|manifest unknown|received unexpected HTTP status: 5[0-9]{2}|HTTP/[0-9.]+ 5[0-9]{2}|HTTP 5[0-9]{2}|status: 5[0-9]{2}|429 Too Many Requests|temporarily unavailable|server is currently unable|service unavailable|bad gateway|gateway time-?out|i/o timeout|tls handshake|connection reset|connection refused|EOF|unexpected EOF|read: connection|net/http: TLS handshake'
#
# `context deadline exceeded` / `Client.Timeout exceeded` / `timeout awaiting
# response headers` / `timeout awaiting response body` / `request canceled`
# cover Go ``net/http`` client-side timeout strings emitted by Docker / buildx
# when GHCR fails to respond to a request within the per-request deadline.
# These are the canonical transient signatures `i/o timeout` misses on the
# GHCR HTTP path: the underlying socket may be healthy while the HTTP
# response just never arrives in time. Both the headers and body variants
# are kept so a stall after the upload starts streaming also retries --
# `docker push` is idempotent, so re-pushing on a body-timeout is safe.
TRANSIENT_RE='page is taking too long|unknown blob|blob unknown|blob upload invalid|manifest unknown|received unexpected HTTP status: 5[0-9]{2}|HTTP/[0-9.]+ 5[0-9]{2}|HTTP 5[0-9]{2}|status: 5[0-9]{2}|429 Too Many Requests|temporarily unavailable|server is currently unable|service unavailable|bad gateway|gateway time-?out|i/o timeout|tls handshake|connection reset|connection refused|EOF|unexpected EOF|read: connection|net/http: TLS handshake|context deadline exceeded|Client\.Timeout exceeded|timeout awaiting response headers|timeout awaiting response body|request canceled'

# Discovery flag: callers that need to share the same regex (for example the
# inline retag-inspect retry loop, which must drop a couple of patterns the
Expand Down
Loading