7.5.4. Pushing and pulling images

Procedure

1. Log in to your Red Hat Quay registry using the fest_test+robot1 robot account and the QUAY_TOKEN access token. For example:

   $ podman login <quay-server.example.com> -u fed_test+robot1 -p $QUAY_TOKEN

2. Pull an image from a Red Hat Quay repository for which the robot account has the proper permissions. For example:

   $ podman pull <quay-server.example.com/<repository_name>/<image_name>>

   Example output

   Getting image source signatures
   Copying blob 900e6061671b done
   Copying config 8135583d97 done
   Writing manifest to image destination
   Storing signatures
   8135583d97feb82398909c9c97607159e6db2c4ca2c885c0b8f590ee0f9fe90d
   0.57user 0.11system 0:00.99elapsed 68%CPU (0avgtext+0avgdata 78716maxresident)k
   800inputs+15424outputs (18major+6528minor)pagefaults 0swaps

3. Attempt to pull an image from a Red Hat Quay repository for which the robot account does not have the proper permissions. For example:

   $ podman pull <quay-server.example.com/<different_repository_name>/<image_name>>

   Example output

   Error: initializing source docker://quay-server.example.com/example_repository/busybox:latest: reading manifest in quay-server.example.com/example_repository/busybox: unauthorized: access to the requested resource is not authorized

   After one hour, the credentials for this robot account are set to expire. Afterwards, you must generate a new access token for this robot account.