@devcontainer/cli publish templates to GitLab container registry

Start with the devcontainer templates publish command and compare the Docker-login and ORAS-login workflows shown in the issue. Reproduce the 401 against a GitLab container registry with trace logging; done means identifying why the workflows differ and documenting or fixing the failure path.

Related to this issue.

I don't see any update, and that issue was closed, so I created a new one.

TL;DR

It seems that we can publish devcontainer template to GitLab container registry now.

What happened

I tried to publish devcontainer template to self hosted GitLab container registry (v17.3.7-ee), by following the example.

It failed with 401(Could not fetch published tags) as expected, but it worked locally on my machine with the same user and access token.

So I was thinking maybe GitLab container registry start to support OADS now, tried another .gitlab-ci.yml and it worked.

But I didn't see any updates from GitLab saying they start to support OADS in this issue.

Anyone know why the original .gitlab-ci.yml failed, but the new one worked?

I was thinking building a @devcontainer/cli image with more detailed logs, and use it in the original .gitlab-ci.yml to help with the root cause analysis.

My .gitlab-ci.yml

Here's my .gitlab-ci.yml:

image: alpine:3.20

before_script:
  - apk add --update nodejs npm curl
  - npm install -g @devcontainers/cli
  - VERSION="1.2.0"
  - curl -LO "https://github.com/oras-project/oras/releases/download/v${VERSION}/oras_${VERSION}_linux_amd64.tar.gz"
  - mkdir -p oras-install/
  - tar -zxf oras_${VERSION}_*.tar.gz -C oras-install/
  - mv oras-install/oras /usr/local/bin/
  - rm -rf oras_${VERSION}_*.tar.gz oras-install/

build:
  stage: build
  script:
    - echo "$PERSONAL_ACCESS_TOKEN" | oras login registry.gitlab.com -u "$PERSONAL_USER" --password-stdin
    - devcontainer templates publish --log-level trace -r registry.gitlab.com -n group/project ./src

Here's my original and failed .gitlab-ci.yml:

image: docker:latest

variables:
  DOCKER_TLS_CERTDIR: "/certs"

services:
  - docker:dind

before_script:
  - apk add --update nodejs npm python3 make g++ ca-certificates
  - npm install -g @devcontainers/cli

build:
  stage: build
  script:
    - echo "$PERSONAL_ACCESS_TOKEN" | docker login -u "$PERSONAL_USER" registry.gitlab.com --password-stdin
    - devcontainer templates publish --log-level trace -r registry.gitlab.com -n group/project ./src