error pulling image configuration: image config verification failed for digest sha256:

Question

error pulling image configuration: image config verification failed for digest sha256:

Clevenger 1

trying to pull from mcr.microsoft.com any image gets the error in the title.

I found the issue when running the following in PowerShell

docker pull mcr.microsoft.com/dotnet/core/sdk:3.1

but any docker pull mcr.microsoft.com/* returns the "error pulling image configuration" error message.

I have confirmed that coworkers get the same error when trying to pull from mcr.microsoft.com. I am able to pull from the docker image repository using :

docker pull microsoft/powershell

but the DotNet Core sdk has been migrated completely off of docker image repo from what I can tell.

additional troubleshooting steps (tested pulling from mcr after each and got the same error as the title of this post) :

docker images purge
docker system prune -a
Factory Reset Docker
Uninstalled and Reinstalled Docker

2 answers

Your answer

Answer 1

vipullag-MSFT 26,522 Moderator

@Clevenger

This is due to recent changes that was implemented for MCR data endpoints. The change is implemented to avoid confusion over the current domains used in all supported Azure Regions.

If any users are pulling images from mcr.microsoft.com, new pulls will fail if firewall rules are not updated. all rules for MCR in all supported Azure regions.

Please check and update firewall rules config as detailed here.

Please 'Accept as answer' if the provided information is helpful, so that it can help others in the community looking for help on similar topics.

Clevenger 1 Reputation point

2020-06-23T14:44:21.243+00:00

Thank you for your response. Unfortunately currently I am doing local development and not blocking outbound connections, but am still experiencing the issue
vipullag-MSFT 26,522 Reputation points Moderator

2020-06-23T17:05:58.887+00:00

@Clevenger

I tried pulling the image from my local machine and it is working as expected without any errors.

Can you put this URL (https://mcr.microsoft.com/v2/hello-world/blobs/sha256:fce289e99eb9bca977dae136fbe2a82b6b7d4c372474c9235adc1741675f587e) which is mentioned in the document into a browser on your local machine and see if this is getting downloaded without any error.

As you mentioned that your co-workers are also getting the same issue, just wanted to see if there is any restriction on mcr.microsoft.com from your corp network.
Also, can you also try to pull the image from other machine (outside of corp network) and see if that works.
Clevenger 1 Reputation point

2020-06-24T16:12:26.47+00:00

powershell iwr the included url gave a 200 response and powershell curl gave <a href =xxxxx> as included in the documentation.
Switching to the browser did change the error message to indicate that my "internet access is blocked". Since I was able to chat with my coworkers and IT while getting this message we are able to troubleshoot it on our end and decided to restore some of the default network settings across our machines until we were able to resolve the error.

Thank you for your help.
vipullag-MSFT 26,522 Reputation points Moderator

2020-06-24T16:44:13.053+00:00

@Clevenger

Thanks for confirming that the issue is resolved.

Answer 2

Clevenger 1

Ended up Restoring all Windows firewall settings to Defaults, which then lead to better documented issues that I resolved with my network team.

Share via

error pulling image configuration: image config verification failed for digest sha256:

2 answers

Your answer