container registry deployment manifest fails to pull from ACR

Question

When applying the command

az iot edge set-modules

Edge fails to pull the containers from an Azure Container Registry. Credentials are indeed provided in the Deployment Manifest Json to access the registry.

Answer 1

Hello @Omar Navarro ,

you are using the AZ CLI command to set edge modules on a single device.

You need to provide a deployment manifest because the expected Modules content is json and in the form of {"modulesContent":{...}} or {"content":{"modulesContent":{...}}}.

A number of issues could happen, but I expect something wrong prevents pulling modules.

Can you try side-loading the modules by hand on the device?

Note: Access to a private registry has to be provided to the docker CLI tooling.

This indicates that Moby/Docker can access the container registry (or network issues or firewall issues).

----------

If the response helped, do "Accept Answer". If it doesn't work, please let us know the progress. All community members with similar issues will benefit by doing so. Your contribution is highly appreciated.

Answer 2

@Omar Navarro We have not heard back from you on this.

If you are still blocked, in addition to the above suggestions, please also try the following.

Edge fails to pull the containers from an Azure Container Registry. Credentials are indeed provided in the Deployment Manifest Json to access the registry.

Are you following any documentation for the steps? If not, check Deploy a connected registry to an IoT Edge device and see if you are missing any steps.

1. Ensure that the Azure Container Registry is accessible from the device running the az iot edge set-modules command. You can test connectivity by running the docker login command with the same credentials used in the deployment manifest JSON.
2. Check if the IoT Edge device is able to connect to the Azure Container Registry. You can try to pull the image manually using the docker pull command on the IoT Edge device to see if it is able to connect to the registry
3. Check that the device running the az iot edge set-modules command has the necessary network connectivity to the Azure Container Registry. This may involve configuring firewall rules or network security groups to allow outbound traffic to the Azure Container Registry.
4. Make sure that the image name and tag in the deployment manifest JSON match the image name and tag in the Azure Container Registry.
5. Check the logs of the Edge agent running on the device for any errors related to pulling the container from the Azure Container Registry. You can view the Edge agent logs by running the command docker logs -f edgeAgent.

Hope this helps.