Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: Docker pull fails in Spain due to football Cloudflare block

news.ycombinator.com

Post reply on HN
Print view View original

1–10 of 444 posts

Tell HN: Docker pull fails in Spain due to football Cloudflare block

#1

Post by littlecranky67 »

I just spent 1h+ debugging why my locally-hosted gitlab runner would fail to create pipelines. The gitlab job output would just display weird TLS errors when trying to pull a docker images. After debugging gitlab and the runner, I realized after a while I could not even run "docker pull " on my machine as root:

> error pulling image configuration: download failed after attempts=6: tls: failed to verify certificate: x509: certificate is not valid for any names, but wanted to match docker-images-prod.6aa30f8b08e16409b46e0173d6de2f56.r2.cloudflarestorage.com

First blaming tailscale, dns configuration and all other stuff. Until I just copied that above URL into my browser on my laptop, and received a website banner:

> El acceso a la presente dirección IP ha sido bloqueado en cumplimiento de lo dispuesto en la Sentencia de 18 de diciembre de 2024, dictada por el Juzgado de lo Mercantil nº 6 de Barcelona en el marco del procedimiento ordinario (Materia mercantil art. 249.1.4)-1005/2024-H instado por la Liga Nacional de Fútbol Profesional y por Telefónica Audiovisual Digital, S.L.U. https://www.laliga.com/noticias/nota-informativa-en-relacion-con-el-bloqueo-de-ips-durante-las-ultimas-jornadas-de-laliga-ea-sports-vinculadas-a-las-practicas-ilegales-de-cloudflare

For those non-spanish speakers: It means there is football match on, and during that time that specific host is blocked. This is just plain madness. I guess that means my gitlab pipelines will not run when football is on. Thank you, Spain.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#3

Post by vaylian »

This is a know issue and it is completely fucked up: https://www.techradar.com/vpn/vpn-privacy-security/cloudflar...

What Spain does is basically censorship and it's very poorly executed. The docker image registry is only one out of the many collateral victims of this stupid law.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#4

Post by utrack »

They block the whole of Cloudflare R2, I believe the Docker hub is just (heh) a collateral.

When the La Liga match starts, everything that's proxied via CF (including zero access reverse tunnels) stops working.

There's even a website made for checking if the match is on: https://hayahora.futbol/

You can check if your host is affected: https://hayahora.futbol/#comprobador&domain=docker-images-pr...

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#7

Post by darkwater »

sigio wrote: post #2

Time to use a VPN in your docker pipelines ;) Or run your systems outside of Spain. Or can this be avoided by using an alternate DNS?

They are planning to also block VPN providers during football matches, see https://www.techradar.com/vpn/vpn-privacy-security/la-liga-w...

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#10

Post by Mordisquitos »

darkwater wrote: post #7
sigio wrote: post #2

Time to use a VPN in your docker pipelines ;) Or run your systems outside of Spain. Or can this be avoided by using an alternate DNS?

They are planning to also block VPN providers during football matches, see https://www.techradar.com/vpn/vpn-privacy-security/la-liga-w...

They are not "planning" to block VPNs. A technologically illiterate judge has ordered it, but there are no plans nor mechanisms to enforce it.
Post reply on HN