ghcr.io - Docker push fails: error 403 on specific layer

[cbinckly]

Select Topic Area

Question

Body

I am trying to push three images that make up an application to ghcr.io. I can push two of the three images, but the third is failing consistently with the following error:

ERROR: failed to solve: failed to push ghcr.io/<org>/<repo>:<tag>: failed commit on ref "layer-sha256:<sha256hash>": unexpected status from PUT request to https://ghcr.io/v2/<org>/<repo>/blobs/upload/<uuid4>?digest=sha256%3A<sha256hash>: 403 Forbidden

I have:

• logged out and back in to ghcr.io using docker login to confirm that my creds are still good.
• spoken to my org admin to confirm that I can write, delete, and read packages.
• confirmed that I can re-tag the image to <dockerusername>/<repo>:<tag> and push that without error to docker hub.
• tried pushing/building with --provenance=false.
• deleting all existing images from the same repo on ghcr.io and trying again.

I use the same build command for all three images (where image and tag are updated each time):

    echo "Bulding and pushing $IMAGE"
    docker buildx build --platform linux/amd64,linux/arm64 -t $IMAGE \
        -f Dockerfile --provenance=false \
        --push .

I am the only user in my GitHub org that has pushed images/packages. My three repos are the only ones that exist.

Any ideas?

[DiarmuidEnright]

First thought it to Check your package permissions?

Even if you have the correct repository permissions, the package itself may have restrictive settings. Verify and adjust them and see if that fixes it. If not then move and check your workflow permissions, some workflows do not have the write permission for some packages, make sure you have:

permissions: packages: write

in your workflow. Maybe this helps?

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬