Unsupported Schema version

[030]

clairctl analyze jenkins
client quit unexpectedly
2017-09-19 16:10:44.116145 C | cmd: pushing image "jenkins:latest": unsupported Schema version

2017-09-19 16:10:52.850249 C | clair: Unsupported Schema version.

[sepzam]

I have the same exact error in my clairctl. I have tried updating clairctl, docker and docker-compose, but still have the error.

[jdel]

Looks like clairctl does not support *manifestlist.DeserializedManifestList

application/vnd.docker.distribution.manifest.list.v2+json: Manifest list, aka “fat manifest”

source: https://docs.docker.com/registry/spec/manifest-v2-2/

Full debug log:

$ clairctll --log-level debug analyze jenkins
2017-10-02 09:34:48.080406 D | config: Using config file: /home/clairctl/clairctl.yml
2017-10-02 09:34:48.080563 D | dockerdist: Downloading manifest for jenkins
2017-10-02 09:34:48.080709 D | dockerdist: Retrieving repository client
2017-10-02 09:34:49.611677 D | dockerdist: endpoint.TLSConfig.InsecureSkipVerify: true
2017-10-02 09:34:51.802320 D | dockerdist: manifest type: *manifestlist.DeserializedManifestList
2017-10-02 09:34:51.802357 I | dockerdist: Could not verify manifest for image jenkins: not signed
2017-10-02 09:34:51.802395 I | config: retrieving interface for local IP
2017-10-02 09:34:51.802403 D | config: no interface provided, looking for docker0
2017-10-02 09:34:51.803130 D | config: docker0 not found, looking for first connected broadcast interface
client quit unexpectedly
2017-10-02 09:34:51.803884 C | cmd: pushing image "jenkins:latest": unsupported Schema version

[sepzam]

But it was working about 3 weeks ago. It suddenly changed and is not working anymore. Even if you install everything from scratch.

[jdel]

Yes, it seems the docker hub has introduced a new manifest format that we cannot handle in clairctl yet.

Unfortunately, 3rd parties can make changes on their side that can impact how clairctl works.

[sepzam]

Oh. I see. Thank you so much for your reply.

[toddysm]

Any word on whether this will be solved? Right now ClairCtl doesn't seem to be working with Docker Hub images?

[jdel]

Sorry we didn't have much time to look into this lately

I will do my best to have a look at it before next week.

[rickbliss]

any luck?

[ye]

I am running into this exact error as well.

$ clairctl --log-level debug analyze postgres
2017-11-30 16:41:45.406853 D | config: No config file used
2017-11-30 16:41:45.407041 D | dockerdist: Downloading manifest for postgres
2017-11-30 16:41:45.407478 D | dockerdist: Retrieving repository client
2017-11-30 16:41:46.497331 D | dockerdist: endpoint.TLSConfig.InsecureSkipVerify: true
2017-11-30 16:41:47.605030 D | dockerdist: manifest type: *manifestlist.DeserializedManifestList
2017-11-30 16:41:47.605050 I | dockerdist: Could not verify manifest for image postgres: not signed
2017-11-30 16:41:47.605068 I | config: retrieving interface for local IP
2017-11-30 16:41:47.605071 D | config: no interface provided, looking for docker0
2017-11-30 16:41:47.605149 D | config: docker0 not found, looking for first connected broadcast interface
client quit unexpectedly
2017-11-30 16:41:47.605300 C | cmd: pushing image "postgres:latest": unsupported Schema version

Any updates?

Also, how do I use clairctl to analyze local images? Thanks.