Unable to pull private docker image from github container registry

Question

I built and pushed a image from the dockerfile using github actions, here is the worflow file

name: Create and publish a Docker image
on:
  push:
    branches: ['temp']
env:
  REGISTRY: ghcr.io
  IMAGE_NAME: ${{ github.repository }}
jobs:
  build-and-push-image:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    steps:
      - name: Checkout repository
        uses: actions/checkout@v3

      - name: Log in to the Container registry
        uses: docker/login-action@f054a8b539a109f9f41c372932f1ae047eff08c9
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta
        uses: docker/metadata-action@98669ae865ea3cffbcbaa878cf57c20bbf1c6c38
        with:
          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} 

      - name: Build and push Docker image
        uses: docker/build-push-action@ad44023a93711e3deb337508980b4b5e9bcdc5dc
        with:
          context: .
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}

Now when I go to the package, I get link saying "install from command line -> docker pull ghcr.io/<OWNER_NAME>/<IMAGE_NAME>:"

However on using this command to actually pull the image, I get an error message saying I am not authorized.

NOTE: I am able to pull the image if I make the package public, but not once it is private

A quick google search tells me I need to use PAT to authenticate, I did that but still get the same error. For example on following this (https://docs.github.com/en/packages/working-with-a-github-packages-registry/working-with-the-container-registry#authenticating-to-the-container-registry)

I get an error saying: Error response from daemon: Get "https://ghcr.io/v2/": denied: denied

I am not sure how to proceed now.

Answer 1

I was getting the similar problem. I looked for how to solve it everywhere but what worked for me, I will put it in the steps.

Step 1 : Make a Personal access token(classic) one. You can make it by going in your Github Settings>> Developer Settings>> Personal Access Token

Step 2 : Now come in your PC terminal from where you are trying to pull Image

Step 3 : Now use command "docker logout ghcr.io" this is to remove ur existing login credentials.

Step 4 : Now use command "docker login ghcr.io", it will ask for your username, input your Github username

Step 5 : Then it will ask for your password, now paste your Personal access token that you just created in it.

Now it shall show you 'login succeeded' Now try to pull your image through docker pull command and it should work.

Edit : Dont forget to give atleast "read packages permission to the Personal access token"