fix: provide auth when pulling images in the imager

Use standard Docker/Podman auth methods plus `GITHUB_TOKEN`. See #8363 Signed-off-by: Andrey Smirnov <[email protected]> (cherry picked from commit 4575078)
siderolabs · Mar 6, 2024 · 38b5aed · 38b5aed
1 parent 4af77b5
commit 38b5aed
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/pkg/imager/profile/input.go b/pkg/imager/profile/input.go
@@ -11,6 +11,8 @@ import (
 	"os"
 	"path/filepath"
 
+	"github.com/google/go-containerregistry/pkg/authn"
+	"github.com/google/go-containerregistry/pkg/authn/github"
 	"github.com/google/go-containerregistry/pkg/crane"
 	v1 "github.com/google/go-containerregistry/pkg/v1"
 	"github.com/google/go-containerregistry/pkg/v1/layout"
@@ -264,6 +266,12 @@ func (c *ContainerAsset) Pull(ctx context.Context, arch string, printf func(stri
 			OS:           "linux",
 		}),
 		crane.WithContext(ctx),
+		crane.WithAuthFromKeychain(
+			authn.NewMultiKeychain(
+				authn.DefaultKeychain,
+				github.Keychain,
+			),
+		),
 	}
 
 	if c.ForceInsecure {