problem with uploading container image

[Xyz00777]

Hi,
after 3 hours of trying and troubleshooting i give up, hopefully someone can help me.
I want to build and upload a container image to my forgejo server and im getting since 2 hours the following error:

    "msg": "Failed to push image git.example.com/xyz00777/server-setup/ansible-toolkit-podman:latest",
    "podman_actions": [
        "/usr/bin/podman image exists git.example.com/xyz00777/server-setup/ansible-toolkit-podman:latest",
        "/usr/bin/podman build -t git.example.com/xyz00777/server-setup/ansible-toolkit-podman:latest --format docker --rm --file /dev/shm/container_build/Containerfile.generated_by_ansible_1750800800.4137354 --label containerfile.hash=e1d83ae2fb269d36e8fa52dd065fd7477945668cbb3a4fd2f9cd64acb9572263 --creds forgejo-bot:******** /dev/shm/container_build",
        "/usr/bin/podman inspect 04b4aab368d --format json",
        "/usr/bin/podman push --creds forgejo-bot:******** --format oci git.example.com/xyz00777/server-setup/ansible-toolkit-podman:latest git.example.com/xyz00777/server-setup/ansible-toolkit-podman:latest"
    ],
    "stderr": "Getting image source signatures\nCopying blob sha256:1edaa928e3e734b5ac2fbfa81f1214bc13b1e7e6ca9114befbd489465349d9e4\nCopying blob sha256:ea419a904b5e5091f6a0a02f6c4cb2586869f4b355ee8e465fd162cb31543677\nCopying blob sha256:892c1d533de2265b03161056d68e2168004fb41b92582272adf931b2ab312df2\nError: writing blob: initiating layer upload to /v2/xyz00777/server-setup/ansible-toolkit-podman/blobs/uploads/ in git.example.com: unauthorized: authentication required\n",
    "stderr_lines": [
        "Getting image source signatures",
        "Copying blob sha256:1edaa928e3e734b5ac2fbfa81f1214bc13b1e7e6ca9114befbd489465349d9e4",
        "Copying blob sha256:ea419a904b5e5091f6a0a02f6c4cb2586869f4b355ee8e465fd162cb31543677",
        "Copying blob sha256:892c1d533de2265b03161056d68e2168004fb41b92582272adf931b2ab312df2",
        "Error: writing blob: initiating layer upload to /v2/xyz00777/server-setup/ansible-toolkit-podman/blobs/uploads/ in git.example.com: unauthorized: authentication required"
    ],
    "stdout": "",
    "stdout_lines": []

And my ansible script looks like:

- name: Create Container image for forgejo ansible
  hosts: ds9
  become: true
  vars:
    # The URL of your private registry.
    registry_url: "git.example.com"

    # The user or group/project path in your registry.
    registry_namespace: "xyz00777/server-setup"

    # The desired name for your image.
    image_name: "ansible-toolkit-podman"
    image_tag: "latest"

    build_folder: "/dev/shm/container_build"

  tasks:
#    - name: Define the full image name
#      ansible.builtin.set_fact:
#        full_image_name: "{{ registry_url }}/{{ registry_namespace }}/{{ image_name }}:{{ image_tag }}"

    - name: Create build folder
      ansible.builtin.file:
        path: "{{ build_folder }}"
        mode: "0640"
        state: directory

    - name: Build container image and push it to the private registry
      containers.podman.podman_image:
        name: "git.example.com/xyz00777/server-setup/{{ image_name }}"
        path: "{{ build_folder }}"
        build:
          format: docker
          container_file: |-
            FROM fedora:40
            LABEL description="A container with Ansible, ansible-lint, yamllint, NodeJS, and Podman for nested builds in CI/CD."

            RUN dnf install -y podman nodejs python3-pip python3-devel gcc git && dnf clean all && \
                pip3 install --no-cache-dir ansible ansible-lint yamllint

            RUN groupadd --system ansible && useradd --system --gid ansible ansible && \
                mkdir /dev/shm/ansible && chown ansible:ansible /dev/shm/ansible
            USER ansible

            WORKDIR /dev/shm/ansible
        push: true
        pull: false
        username: "forgejo-bot"
        password: "XXXXXXXX"
        push_args:
#          dest: "git.example.com/xyz00777"
          format: "oci"
        state: build
        tag: "latest"
      register: build_result

    - name: Print the build result
      ansible.builtin.debug:
        var: build_result
      when: build_result is changed

and on the server site im getting:

Jun 24 21:35:28 publicpodman forgejo[78619]: 2025/06/24 21:35:28 ...eb/routing/logger.go:102:func1() [I] router: completed GET /v2/ for 192.168.0.2:0, 401 Unauthorized in 0.2ms @ container/container.go:124(container.ReqContainerAccess)
Jun 24 21:35:28 publicpodman forgejo[78619]: 2025/06/24 21:35:28 ...eb/routing/logger.go:102:func1() [I] router: completed GET /v2/token?account=forgejo-bot&scope=repository%3Axyz00777%2Fserver-setup%2Fansible-toolkit-podman%3Apull%2Cpush&service=container_registry for 192.168.0.2:0, 200 OK in 168.5ms @ container/container.go:147(container.Authenticate)
Jun 24 21:35:28 publicpodman forgejo[78619]: 2025/06/24 21:35:28 ...eb/routing/logger.go:102:func1() [I] router: completed GET /v2/token?account=forgejo-bot&scope=repository%3Axyz00777%2Fserver-setup%2Fansible-toolkit-podman%3Apull%2Cpush&service=container_registry for 192.168.0.2:0, 200 OK in 169.7ms @ container/container.go:147(container.Authenticate)
Jun 24 21:35:28 publicpodman forgejo[78619]: 2025/06/24 21:35:28 ...eb/routing/logger.go:102:func1() [I] router: completed GET /v2/token?account=forgejo-bot&scope=repository%3Axyz00777%2Fserver-setup%2Fansible-toolkit-podman%3Apull%2Cpush&service=container_registry for 192.168.0.2:0, 200 OK in 170.2ms @ container/container.go:147(container.Authenticate)
Jun 24 21:35:28 publicpodman forgejo[78619]: 2025/06/24 21:35:28 ...eb/routing/logger.go:102:func1() [I] router: completed HEAD /v2/xyz00777/server-setup/ansible-toolkit-podman/blobs/sha256:1edaa928e3e734b5ac2fbfa81f1214bc13b1e7e6ca9114befbd489465349d9e4 for 192.168.0.2:0, 404 Not Found in 2.9ms @ packages/api.go:818(packages.ContainerRoutes.(*Route).Group.ContainerRoutes.func2)
Jun 24 21:35:28 publicpodman forgejo[78619]: 2025/06/24 21:35:28 ...eb/routing/logger.go:102:func1() [I] router: completed HEAD /v2/xyz00777/server-setup/ansible-toolkit-podman/blobs/sha256:892c1d533de2265b03161056d68e2168004fb41b92582272adf931b2ab312df2 for 192.168.0.2:0, 404 Not Found in 3.0ms @ packages/api.go:818(packages.ContainerRoutes.(*Route).Group.ContainerRoutes.func2)
Jun 24 21:35:28 publicpodman forgejo[78619]: 2025/06/24 21:35:28 ...eb/routing/logger.go:102:func1() [I] router: completed HEAD /v2/xyz00777/server-setup/ansible-toolkit-podman/blobs/sha256:ea419a904b5e5091f6a0a02f6c4cb2586869f4b355ee8e465fd162cb31543677 for 192.168.0.2:0, 404 Not Found in 3.0ms @ packages/api.go:818(packages.ContainerRoutes.(*Route).Group.ContainerRoutes.func2)
Jun 24 21:35:28 publicpodman forgejo[78619]: 2025/06/24 21:35:28 ...eb/routing/logger.go:102:func1() [I] router: completed POST /v2/xyz00777/server-setup/ansible-toolkit-podman/blobs/uploads/ for 192.168.0.2:0, 401 Unauthorized in 1.8ms @ packages/api.go:818(packages.ContainerRoutes.(*Route).Group.ContainerRoutes.func2)
Jun 24 21:35:29 publicpodman forgejo[78619]: 2025/06/24 21:35:29 ...eb/routing/logger.go:102:func1() [I] router: completed POST /v2/xyz00777/server-setup/ansible-toolkit-podman/blobs/uploads/ for 192.168.0.2:0, 401 Unauthorized in 2.0ms @ packages/api.go:818(packages.ContainerRoutes.(*Route).Group.ContainerRoutes.func2)
Jun 24 21:35:37 publicpodman forgejo[78619]: 2025/06/24 21:35:37 ...eb/routing/logger.go:102:func1() [I] router: completed POST /v2/xyz00777/server-setup/ansible-toolkit-podman/blobs/uploads/ for 192.168.0.2:0, 401 Unauthorized in 2.0ms @ packages/api.go:818(packages.ContainerRoutes.(*Route).Group.ContainerRoutes.func2)

I believe its something with the name of the image. but im absolutely not sure, maybe someone also uses forgejo and can help me :/

Greetings Xyz

[sshnaidm]

The error tells unauthorized: authentication required, can you try from command line to do: /usr/bin/podman push --creds forgejo-bot:******** --format oci git.example.com/xyz00777/server-setup/ansible-toolkit-podman:latest ?
Maybe something wrong with credentials

[Xyz00777]

found the issue, the issue is that forgejo does not allow to push packages to repositorys, only to "organizations" and user accounts... so it works. but thanls for trying to help me :)

[sshnaidm]

Sure, glad it's solved.