2 handshake receivedtls: server did not send a key sharetls: server selected unoffered curveerrors removing all credentials: * .config/containers/registries.conf.dcould not read CA certificate %q: %vcrypto/rand: argument to Int is <= 0creating temporary on-disk layer: %wmethod ABI and value ABI don't alignreflect.Value.Equal: values of type exceeded maximum template depth (%v)%s is not a method but has argumentsinternal error: associate not commonreflect: NumField of non-struct typeorg.opencontainers.image.enc.puboptsgetCPUInfo for pattern: %s not foundloading image from docker engine: %wPlease check module path, input is: Could not create session to any slot%s: Could not parse input as JWK: %wcrypto/rsa: missing private exponentx509: zero or negative DSA parameterx509: invalid CRL distribution pointx509: invalid subject key identifierx509: malformed algorithm identifierx509: invalid X25519 private key: %vOIDFromInts(%v) unexpected error: %vunable to generate a random salt: %winvalid ED25519 public key specifiedKey string literal expected, got %#vMissing "data" field in hashedrekordIA5String contains invalid characterruntime/cgo: ran out of handle spacebad magic value in continuation filexz: invalid checksum for file headerinvalid input: magic number mismatchcompressed block size too large (%d)corruption detected (total %d != %d)total mismatch %d (got) != %d (want)validating digests for new image: %w(even after %d cleanup attempts:) %wloading primary layer store data: %wCannot find mappings for user %q: %vdigest len %d exceeds the tag len %dvalidating and decompressing TOC: %wMissing %d bytes out of %d (%.2f %%)invalid boolean value %q for -%s: %vmalformed MIME header initial line: crypto/cipher: input not full blockscrypto/sha1: invalid hash state sizehkdf: requested key length too largemultiplication of zero with infinityfilename may not have trailing slasharchive/tar: missed writing %d bytesuids and gids must be in range %d-%dnil source for passwd-formatted data6ba7b810-9dad-11d1-80b4-00c04fd430c86ba7b811-9dad-11d1-80b4-00c04fd430c86ba7b812-9dad-11d1-80b4-00c04fd430c86ba7b814-9dad-11d1-80b4-00c04fd430c8expiration subpacket with bad lengthcross-signature has unexpected type module '%s' is not allowed by policyCKR_UNWRAPPING_KEY_TYPE_INCONSISTENTgo-jose/go-jose: invalid crit headerECDSA P-256 SHA2-512 sign and verifyname %q does not begin with a lettersql: converting argument %s type: %wconverting NULL to %s is unsupportedinvalid pattern syntax (+ after -): [DEBUG] %s: retrying in %s (%d left)newRangeDecoder: first byte not zeronot a valid name for a big data itemwould-be parent layer is a containerFailed to decode the keys %q from %qthere are bytes left after unmarshalerror removing stale temp dir %s: %wunable to parse key/value option: %swalking into directory %q failed: %wcreating a detached procfs clone: %wuntar json encode to pipe failed: %wcipher: message too large for bufferincorrect generateEVPPKey parametersopenssl: unsupported hash function: chacha20: wrong HChaCha20 nonce sizeChannel switches to new LB policy %qSubchannel Connectivity change to %vedwards25519: invalid point encodingbytes,1051,rep,name=method_signaturebytes,525000001,opt,name=api_versionoidc: failed to unmarshal claims: %vNil prefix passed into a method callparsing '%s' failed: mount point: %wfailed to reopen %s as read-only: %wfailed to mount erofs filesystem: %wmountfrom error on pipe creation: %wrecording overlay support status: %wfailed to add to stage directory: %wreading driver home directory %q: %wcreate mapped mount for %q on %q: %wCheck for idmapped mounts support %vDestroy zfs.DestroyDeferDeletion: %vsetting permissions on zfs mount: %wnil receiver passed to UnmarshalJSONinvalid gRPC request content-type %qpeer header list size exceeded limittransport: malformed grpc-status: %vtransport: malformed http-status: %vfailed to write the HTTP request: %vmem.Buffer(%p, data: %p, length: %d)duration (%v) has out-of-range nanos%v: MessageSet with no unknown fieldCannot set up loopback device %s: %scannot merge into invalid %v messagegoogle/protobuf/source_context.protoproto: tag has unknown wire type: %qbad pointer or slice in map case in proto: textWriter unindented too farstdtime is not time.Duration, but %Tinvalid hex escape code %q in stringerror parsing additional-tag '%s': %vFailed to write digest to file %q: %wError determining repository tags: %wNo tag or digest allowed in referencerun the tool without any policy checkError reading public keys from %s: %wthe number of times to possibly retrydetermining size of blob %s in %s: %wdigesting manifest in PutManifest: %wtoo many parts returned by the servercobra_annotation_command_display_nameinitializing image from source %s: %wUpload of manifest type %s failed: %vbytes.Buffer: truncation out of rangecrypto: Size of unknown hash functioncannot create context from nil parentcredential file is not accessible: %wtimezone hour outside of range [0,23]Docker reference %q does not match %qsetting gpgme passphrase callback: %wUnexpected policy requirement type %q Using transport %q policy section %q Using transport %q policy section ""value too large for defined data typecannot exec a shared library directlyoperation not possible due to RF-killexpected DOCUMENT-START or STREAM-ENDcreating continue read/write pipe: %werror writing "deny" to setgroups: %vReading the current capabilities setslooking for layers with digest %q: %wstore specifier in %q did not end: %wempty trailing digest or ID in %q: %wTag or digest of the target manifest.repository name not known to registryvariable value type must be a pointerruntime: allocation size out of range) is smaller than minimum page size (/cpu/classes/gc/mark/idle:cpu-secondssetprofilebucket: profile already setfailed to reserve page summary memory_cgo_notify_runtime_init_done missingfatal: concurrent switchToCrashStack startTheWorld: inconsistent mp->nextpCouldn't put Gs into empty local runqruntime: unexpected SPWRITE function all goroutines are asleep - deadlock!semaphore wake of synctest goroutine internal error: invalid operation: %dio.github.containers.compression.zstdhttp: invalid byte %q in Cookie.Valueunexpected CONTINUATION for stream %dhttp2: unencrypted HTTP/2 not enabledhttp2: Transport sending health checkhttp2: Transport health check successRoundTrip on uninitialized ClientConnhttp2: server encoding header %q = %qhttp: TLS handshake error from %s: %v2220446049250313080847263336181640625tls: unsupported certificate key (%T)TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256opensslcrypto: invalid code executiontls: failed to verify certificate: %srewinding temporary on-disk layer: %wexec: StdinPipe after process starteddetecting compression for file %q: %wreflect: Bits of non-arithmetic Type reflect: NumField of non-struct type reflect: IsVariadic of non-func type reflect: OverflowInt of non-int type reflect: funcLayout of non-func type reflect.Value.Bytes of non-byte slicereflect.Value.Bytes of non-byte arrayreflect.Value.Bytes of non-rune slicemethod ABI and value ABI do not alignreflect.Value.Convert: value of type %q is an incomplete or empty templatedereference of nil pointer of type %scannot index slice/array with type %sorg.opencontainers.image.enc.keys.pgporg.opencontainers.image.enc.keys.jwe^[^/]*(/[^:/]*(/[^:/]*(:[^:/]*)?)?)?$default cluster has no server definedinitializing docker engine client: %wMissing PIN for private key operationNo module available in pkcs11 URI: %wThere are too many (=%d) keys with %ssubtle: slices have different lengthsx509: malformed extension value fieldx509: RSA key missing NULL parametersx509: invalid CRL distribution pointsx509: unsupported private key versionx509: invalid Ed25519 private key: %v%d chains with incompatible key usagex509: unsupported public key type: %Tinvalid ED25519 private key specifieddeleting compressor for digest %q: %wgodebug: unexpected IncNonDefault of missing Rekor SET Payload API versionpublicKey in Rekor SET does not matchexplicitly tagged member didn't matchLiteralData not followed by Signatureeach group must have 4 or less digitstoo many Authorities to pack (>65535)too many Additionals to pack (>65535)dnsmessage.TXTResource{TXT: []string{non-Value type %T returned from Valuegenerating short-term private key: %wError signing key ownership proof: %wobtaining certificate from Fulcio: %wunexpected Rekor entry body type: %#vgzip.Write: non-Latin-1 header stringxz: wrong uncompressed size for blockcorrupt block: reserved bits not zeronewState (%d) outside table size (%d)internal error: charnum > s.symbolLenparse error on line %d, column %d: %vruntime: cgroup invalid buffer lengthinvalid Connection request header: %qcipher: message authentication failedcrypto/cipher: invalid buffer overlapcrypto/cipher: incorrect GCM tag sizechacha20poly1305: plaintext too largeout does not point to an integer typecrypto/ecdh: invalid private key sizeExpected boolean value, but got '%s'.Expected integer value, but got '%s'.comment ends before closing delimiterunrecognized character in action: %#Udon't seem to have the right passwordcannot encrypt to public key of type public key cannot generate signaturesgo-jose/go-jose: protected header: %sbigmod: internal error: shrinking natcrypto/rsa: unsupported hash functioncrypto/rsa: public exponent too largesql: Scan called without calling NextPRAGMA ignore_check_constraints = %d;bisect.Hash: unexpected argument type[ERR] error reading response body: %vfile integrity checksum failed for %qlzma: data after end of stream markerlzma: lookahead buffer size too smallcorrupt input: output table too largecorruption detected: stream overrun 1corruption detected: stream overrun 2corruption detected: stream overrun 3corruption detected: stream overrun 4xxhash: invalid hash state identifierunexpected value type, internal errorexpect { or , or } or n, but found %screating temp directory %s failed: %wunable to get raw syscall.Stat_t data[internal error] broken symlink stackchanging to new root after chroot: %wunknown file type with mode %v for %sopenssl: destination buffer too smallgrpc.internal.resolver.configSelectorgrpc: error unmarshalling request: %vmail: expected single address, got %qgo-jose/go-jose: failed to unwrap keytimestamp (%v) has out-of-range nanoslowerdir=%s:%s,upperdir=%s,workdir=%sfailed to create erofs filesystem: %wFailed to unmount %s overlay: %s - %vmalformed header: missing HTTP statusbinarylogging: failed to parse %q: %vfailed to parse binary log config: %vhash/adler32: invalid hash state sizecannot parse invalid wire-format datainvalid type: got %v, want slice kindWhile cleaning up the loopback deviceGOLANG_PROTOBUF_REGISTRATION_CONFLICTPut called on closed buffer.Unboundedinfinite loop from %v to %v on %q..%qproto: repeated field has nil elementproto does not have a message type ID%v.%s cannot be a direct struct value%T.%s cannot be a direct struct valuebad type for XXX_unrecognized field: Usage: skopeo manifest-digest manifestError decoding untrusted signature: %vInvalid source directory specified: %wmissing realm in bearer auth challengeLooking for sigstore attachments in %sFetching sigstore attachment config %sUploading sigstore attachment manifestgenerating random signature len %d: %wFetching sigstore attachment %d/%d: %sError deleting temporary directory: %vretrieving stream of bytes from %q: %wapplication/vnd.oci.image.layer.v1.tarstrings.Reader.ReadAt: negative offsetstrings.Reader.Seek: negative positionstrings: Repeat output length overflownewline in format does not match inputnewline in input does not match formatTrying to use manifest list type %s…reading manifest from source image: %wcreating an updated image manifest: %wWriting manifest to image destination skipped: already exists (found by TOC)Invalid parent ID. Expected %v, got %qunsupported docker v2s2 media type: %qcould not parse file descriptor %s: %wafter decimal point in numeric literalplease provide a registry to log in tonon-positive interval for Ticker.Resettime: missing Location in call to DateUnknown policy reference match type %q"rekorPublicKeyPath" already specified"rekorPublicKeyData" already specifiedSignature for digest %s does not matchRekor public key %d is not using ECDSAcan not access a needed shared libraryline %d: cannot unmarshal %s%s into %sline %d: field %s not found in type %sdid not find expected could not find expected directive namefound an incorrect leading UTF-8 octeterror writing "allow" to setgroups: %vUsing a statically-provided OIDC tokenerror saving metadata for image %q: %vError deleting incomplete image %q: %vdecoding metadata for source image: %wused only %d out of %d physical layersCancel the upload specified by `uuid`.manifest failed signature verificationindex out of range [%x] with length %ym changed unexpectedly in cgocallbackgmakechan: invalid channel element typeunreachable method called. linker bug?gcBgMarkWorker: blackening not enabledcannot read stack of running goroutineruntime: blocked read on free polldescruntime: sudog with non-false isSelectarg size to reflect.call more than 1GBv could not fit in traceBytesPerNumberfailed to parse Location header %q: %vhttp2: server connection from %v on %phttp: Accept error: %v; retrying in %v1110223024625156540423631668090820312555511151231257827021181583404541015625tls: invalid ClientKeyExchange messagetls: invalid ServerKeyExchange messageexpected an Ed25519 public key, got %Tinternal error: unknown signature typetls: server selected unsupported grouptls: unsupported signing key type (%T)tls: early_data without pre_shared_keytls: client sent unexpected early datatls: failed to sign ECDHE parameters: tls: server selected unsupported curvetls: missing ServerKeyExchange messagetls: internal error: unsupported curveunmarshaling "auths" in JSON at %q: %wNo credentials matching %s found in %sinvalid alias %q: must not contain taginvalid prefix '%v' for reference '%v'failed to read system certificates: %vwriting to temporary on-disk layer: %wmime: expected slash after first tokenexec: StdoutPipe after process startedexec: StderrPipe after process startedCan't add file %s to tar: %s; skippingreflect.typeptrdata: unexpected type, reflect: close of receive-only channelreflect: Method on nil interface valuetemplate: %s: executing %q at <%s>: %scan't give argument to non-function %sindirection through explicit nil in %sevalEmptyInterface: nil (can't happen)no wrapped keys produced by encryptioncould not base64 decode the annotationJWK EC Public Key curve identifier: %sdecoding JWK Public Key JSON data: %s JWK Public Key type not supported: %q host must be a URL or a host:port pair/oapi/v1/namespaces/%s/imagestreams/%sfailed to parse image reference %q: %wdocker-daemon: sending done, status %vCould not unmarshal pkcs11 keyfile: %wecdsa: public key does not match curvex509: invalid subject alternative namex509: invalid authority key identifierx509: empty name constraints extensionx509: failed to parse EC private key: x509: cannot validate certificate for initializing blob info cache at %q: %wlooking for uncompressed digest for %qinternal error: unknown string type %dasn1: Unmarshal recipient value is nilsigning Entity must have a private keyIPv4 field has octet with leading zeroinsufficient data for base length typexz: padding (4 zero bytes) encounteredinvalid input: compressed size too bigcorruption detected (bitCount %d > 32)output bigger than max block size (%d)an image with ID %q already exists: %wnot allowed to delete images at %q: %wFound incomplete layer %q, deleting itclosing bigdata file for the layer: %wnot allowed to delete layers at %q: %wlooking for TOC matching digest %q: %wError deleting temporary layer %#v: %vopen file %q under rootfs for copy: %wunexpected error in getBlobAtGoroutineflag %s set at %s before being definedconcurrent map iteration and map writechacha20poly1305: ciphertext too largetoml: cannot decode to nil value of %qunexpected '=': key name appears blankScan: unable to scan type %T into UUID%s is an unsupported JWE key algorithmdeprecated s2k function in private keysignature creation time not four bytesunknown SymmetricallyEncrypted versiongo-jose/go-jose: unknown key type '%s'failed to unmarshal algorithm: %v: %#vgo-jose/go-jose: invalid P2C: too highinvalid P224 compressed point encodinginvalid P256 compressed point encodinginvalid P384 compressed point encodinginvalid P521 compressed point encodingbigmod: internal error: bad arithmeticscrypt: N must be > 1 and a power of 2non-subset type %T returned from Valuesql: Register called twice for driver _auth_crypt=ssha1, requires _auth_saltduplicates of file paths not supportedarch-specific Castagnoli not availablelzma: dictionary capacity out of rangecontainer data item has incorrect size/usr/share/containers/selinux/contexts%w exhausting input failed (error: %w)crypto/sha256: invalid hash state sizecrypto/sha1: can't retrieve hash statecrypto/sha512: invalid hash state sizeCould not determine native endianness.GODEBUG sys/cpu: unknown cpu feature "grpc: the client connection is closingconsumeAddrSpec: parsing quoted-stringmail: empty quoted string in addr-specOTEL_SPAN_ATTRIBUTE_VALUE_LENGTH_LIMITbytes,1055,opt,name=resource_referenceCLIENT_LIBRARY_DESTINATION_UNSPECIFIEDdeprecated_legacy_json_field_conflictstype mismatch: cannot convert %v to %soidc: unsupported signing algorithm %qValid encoded KSUIDs are %v charactersbr:%s,dirperm1,xino=/dev/shm/aufs.xinokernel does not support overlay fs: %wcomposefs helper program not found: %wvfs driver does not support %s options--storage-opt is not supported for vfsthe 'zfs' command is not available: %wFailed to remove %s mount point %s: %vproto: not an extendable proto.Messageerror parsing config for policy %q: %vReceived SubConn state update: %p, %+vearlyAbortStream not handled on clientreceived GOAWAY with no active streamsname reference must be fully qualifiedno support for message_set_wire_formatinvalid field: no encoder for %v %v %v%v: unable to resolve extension %v: %vCannot set up loopback device info: %sfailed to clear PROJINHERIT for %s: %wfound wrong type: got %v, want messageGRPC_EXPERIMENTAL_ENABLE_LEAST_REQUESTdns: error getting client hostname: %vproto: field %q contains invalid UTF-8proto: can't skip unknown wire type %dinvalid octal escape code %q in stringError retrieving manifest for image: %wUsage: layers imageReference [layer...]directory used to store temporary filesinvalid request, expecting one argumentapplication/vnd.oci.image.index.v1+json%q is not a valid destination transportError parsing repository name, skippingInvalid Retry-After format, ignoring itdownloading signatures for %s in %s: %winitiating layer upload to %s in %s: %w... finished converting squashfs to tarcobra_annotation_bash_completion_custom local_nonpersistent_flags+=("-%s") cobra_annotation_required_if_others_setexpected space in input to match formatmissing verb: % at end of format stringInternal error: no candidate MIME typesgetting public key from private key: %wre-encoding compat image config %#v: %wre-decoding compat image config %#v: %wcould not read from file descriptor: %wwrite to hash function returned error: 2006-01-02 15:04:05.999999999 -0700 MST"rekorPublickeyPaths" already specified"rekorPublickeyDatas" already specified"caIntermediatesPath" already specified"caIntermediatesData" already specifiederror loading PKI CA Roots certificatesRunning image %s is rejected by policy.transport endpoint is already connectedSetctty set but Ctty not valid in childsyscall.releaseForkLock: negative countcannot decode node with unknown kind %dunknown problem generating YAML contentcannot marshal invalid UTF-8 data as %scannot encode node with unknown kind %dfound an incorrect trailing UTF-8 octetdid not find expected hexdecimal numbererror reading ID mappings in parent: %verror writing "%d" to oom_score_adj: %vStarting OIDC device flow for issuer %sThe length of the requested blob chunk.}/blobs/uploads/{uuid:[a-zA-Z0-9-_.=]+}mismatched count during itab table copyout of memory allocating heap arena map/cpu/classes/gc/mark/assist:cpu-seconds/cpu/classes/scavenge/total:cpu-seconds/memory/classes/profiling/buckets:bytesmspan.sweep: bad span state after sweepruntime: blocked write on free polldescruntime.Pinner: object already unpinnedsuspendG from non-preemptible goroutineruntime: casfrom_Gscanstatus failed gp=stack growth not allowed in system calltraceback: unexpected SPWRITE function traceRegion: alloc with concurrent dropunable to find instance %s in OCI1Indexhttp: putIdleConn: keep alives disabledusername/password authentication failed277555756156289135105907917022705078125tls: unsupported certificate curve (%s)TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256tls: internal error: wrong nonce lengthno mutually supported protocol versionschain is not signed by an acceptable CAloading registries configuration %q: %wexec: environment variable contains NULfailed to read %q attribute from %q: %wTar: Can't archive a file with includes cannot produce iter.Seq2[Value, Value]reflect: OverflowUint of non-uint type reflect.MakeMapWithSize of non-map typetemplate: pattern matches no files: %#qboth zstd:chunked and eStargz TOC foundorg.opencontainers.image.enc.keys.pkcs7no encryptor found to handle encryptionJWK EC Public Key ID does not match: %sCould not parse Pkcs11URI from file: %wecdsa: unsupported curve by crypto/ecdhmath/big: buffer too small to fit valueecdsa: public key point is the infinityecdsa: private key does not match curvecrypto/rsa: invalid options for Decryptx509: invalid subject alternative namesx509: invalid NameConstraints extensionx509: failed to parse URI constraint %qx509: invalid policy mappings extensionx509: failed to marshal private key: %vx509: unknown EC private key version %d because it doesn't contain any IP SANsx509: invalid elliptic curve public keyx509: signing with MD5 is not supportednil signature passed to VerifySignatureecdsa: Invalid IEEE_P1363 encoded bytesnegative minwidth, tabwidth, or paddingtags don't match (%d vs %+v) %+v %s @%dasn1: Unmarshal recipient value is nil subkey packet not followed by signatureIPv4 field must have at least one digitdnsmessage.AAAAResource{AAAA: [16]byte{missing argument to repetition operatortrailing backslash at end of expressioninitializing short-term private key: %winvalid Rekor entry (missing data): %#vcorruption detected (remaining %d != 1)internal error: no path for location %vcreating a layer from template layer %qcreating read-only layer with ID %q: %wcreating a tar-split copy from templatereading root ID values for layer %q: %w[graphdriver] trying provided driver %qCreated zstd:chunked differ for blob %qno path mapping exists for tar entry %qextraneous or missing " in quoted-fieldcsv: invalid field or comment delimiterinvalid indexed representation index %dcipher: incorrect tag size given to GCMcrypto/cipher: incorrect GCM nonce sizemlkem: invalid encapsulation key lengthexpected '.' or '=', but got %q insteadfloats must start with a digit, not '.'Key '%s' was already created as a hash.encrypting a key to public key of type error while verifying cross-signature: hash cannot be represented in OpenPGP: ^[a-z][a-z][a-z]?(?:_[A-Z][A-Z])?\.(.+)Invalid format for library-version '%s'go-jose/go-jose: unprotected header: %sgo-jose/go-jose: invalid EC private keyfailed to unmarshal x5c header: %v: %#vgo-jose/go-jose: failed to compute hmaced25519: bad Ed25519ph context length: sql: RawBytes isn't allowed on Row.Scanthe only supported slice type is []bytefunction requires at least %d argumentsYour browser will now be opened to: %s %s %s giving up after %d attempt(s): %wlzma: unsupported match algorithm valuenewBinTree: capacity must less 2^{32}-1corrupt input: %d bits remain on streamcorruption detected: short output blocknot enough unused IDs in user namespaceexpect : after object field, but found making old root private after pivot: %wEVP_PKEY_CTX_set0_rsa_oaep_label failedopenssl: hash state is not marshallableopenssl: can't retrieve OpenSSL versionfips140: no verification checksum found/keyprovider.KeyProviderService/WrapKeyCreating new client transport to %q: %vresolver returned an empty address listgrpc: failed to set send compressor: %vbytes,1053,rep,name=resource_definitionoidc: invalid userinfo jwt signature %voutput size (%d) > DecompressLimit (%d)aufs was not found in /proc/filesystems--storage-opt is not supported for aufsChecking dirperm1: failed to unmount %vfailed to write to merged directory: %wFailed to remove check directory %v: %vmountfrom re-exec output: %s: error: %wadditional layer (%q, %q) not found: %wGenerating version 4 uuid, retrying: %verror while getting pool information %vUnrecognized streamID %d in loopyWriter%v: MessageSet with no extensions fieldinvalid value: merging into nil messagegoogle.golang.org/genproto/protobuf/apigoogle.golang.org/protobuf/types/known/GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRSTGRPC_EXPERIMENTAL_XDS_SYSTEM_ROOT_CERTSdns: TXT record %v missing %v attributebad element kind in byte slice case in proto: %s: illegal tag 0 (wire type %d)list-tags [command options] SOURCE-IMAGEExactly one non-option argument expectedInvalid %q: does not specify a transportfound %d args, expecting (imgid, digest)Repeated warning from registry at %q: %qerror fetching external blob from %q: %wapplication/vnd.oci.image.config.v1+jsonInvalid tag %#v in manifest item @%d: %wgenerating configuration blob for %q: %werrors: target must be a non-nil pointerUsing original blob without modificationcopying image: invalid copy operation %dpreparing updated manifest, layer %q: %wReturned when a service is not availabletime: Stop called on uninitialized Timercannot prompt for username without stdinInvalid docker reference %q in signatureInvalid format of dockerReference %q: %saddress family not supported by protocolline %d: field %s already set in type %sunsupported flag %q in tag %q of type %swriting "deny" to /proc/%s/setgroups: %wwriting 'deny' to /proc/%s/setgroups: %werror writing %q to /proc/%s/uid_map: %vcreated new image ID %q with metadata %qA list of tags for the named repository.HTTP Range header specifying blob chunk.^[^"(),/:;<=>?@[\]{}[:space:][:cntrl:]]+unknown flagNotExistErrorMessageType: %vinvalid span in heapArena for user arenabulkBarrierPreWrite: unaligned argumentsruntime: typeBitsBulkBarrier with type refill of span with free space remaining/cpu/classes/scavenge/assist:cpu-secondsruntime.SetFinalizer: first argument is failed to acquire lock to reset capacitymarkWorkerStop: unknown mark worker modecannot free workbufs when work.full != 0runtime: out of memory: cannot allocate runtime: netpollBreak write failed with stopTheWorld: broken CPU time accountingglobal runq empty with non-zero runqsizemust be able to track idle limiter eventgoroutine stack size is not a power of 2Unimplemented manifest list MIME type %shttp2: timeout awaiting response headersFrame accessor called on non-owned Frameinternal error: expecting non-nil streamrequest header %q is not valid in HTTP/2http2: Transport encoding header %q = %qprotocol error: headers after END_STREAMwriteData(stream=%d, p=%d, endStream=%v)host contains '{' (missing initial '/'?)bad wildcard segment (must end with '}')13877787807814456755295395851135253906256938893903907228377647697925567626953125ryuFtoaFixed32 called with negative precclient doesn't support certificate curveoversized record received with length %dtls: received empty certificates messagetls: client didn't provide a certificatecredentials not found in native keychainmissing client certificate %s for key %smultipart: unexpected line in Next(): %qwalkchunk: Unexpectedly no parent for %sfailed querying overlay opaque xattr: %wno subuid ranges found for user %q in %sthe number of parts in %s is less than 3descriptor selector func must not be nilMapIter.Key called on exhausted iteratorreflect: FieldByName of non-struct type reflect.Value.Call: call of nil functionreflect.Value.Call: wrong argument countattempted to copy pointer to FP registerreflect.Value.SetBytes of non-byte slicereflect.Value.setRunes of non-rune slicecontainerd.io/snapshot/stargz/toc.digestorg.opencontainers.image.enc.keys.pkcs11could not JSON unmarshal pubOptsData: %werror unmarshalling protected header: %sJWK RSA Public Key ID does not match: %s%s: Could not parse x509 certificate: %wcrypto/rsa: input must be hashed messagex509: malformed extension critical fieldx509: cannot parse IP address of length %s %q is not permitted by any constraintunsupported hash algorithm: %q not in %vSigning image using a sigstore signatureSELECT 1 FROM sqlite_schema WHERE name=?publicKey in Rekor SET has trailing dataNumericString contains invalid charactercannot represent time as GeneralizedTimeIPv6 zones cannot be present in a prefixruntime/cgo: misuse of an invalid Handlexz: index size not aligned to four bytesxz: last filter must be the LZMA2 filterxz: wrong LZMA2 dictionary size propertyinvalid input: window size was too smallframe size does not match size on streamcreating read-write layer with ID %q: %wdetermining size of layer with ID %q: %wError unmounting temporary layer %#v: %vFailed to built-in GetDriver graph %s %sCache file size is zero for layer %q: %vdetermining expected metadata for %q: %wnot enough data returned from the serverdigesting staged uncompressed stream: %wmalformed MIME header: missing colon: %qevictOldest(%v) on table with %v entriescrypto/cipher: output smaller than inputcipher: the nonce can't have zero lengthcrypto/cipher: message too large for GCMopensslcrypto: can't initialize OpenSSL chacha20poly1305: invalid buffer overlapquotedprintable: invalid hex byte 0x%02xNo private keys found for JWE decryptionPGP: No suitable key found to unwrap keykey expiration subpacket with bad lengthCannot have multiple embedded signatures^(public|private|cert|secret-key}data)?$go-jose/go-jose: unsupported crit headerunexpected key algorithm %q; expected %qgo-jose/go-jose: payload is not detacheded25519: bad Ed25519ctx context length: rsa: internal error: inconsistent lengththe only supported interface type is any_auth_crypt=ssha256, requires _auth_salt_auth_crypt=ssha384, requires _auth_salt_auth_crypt=ssha512, requires _auth_saltlzma: WriterConfig has no Properties setget safe /proc/thread-self/fd handle: %wget safe /proc/thread-self/%s handle: %wunpacking failed (error: %w; output: %s)crypto/sha256: can't retrieve hash statecrypto/sha512: can't retrieve hash stategrpc: server failed to encode response: mail: misformatted parenthetical commentmail: invalid utf-8 in quoted-string: %qmail: bad character in quoted-string: %qber2der: offset is after end of ber databer2der: BER tag length has leading zeroedwards25519: use of uninitialized Pointparsing '%s' failed: missing - separatorcould not remove diff path for id %s: %wFailed to unmount check directory %v: %vfailed to mount erofs filesystem: %s: %wmountfrom json encode to pipe failed: %wrecording volatile-being-used status: %wrecording metacopy-being-used status: %w'overlay' is not supported over %s at %qUnexpected error from context packet: %vno error details for status with code OKinvalid method name: should start with /malformed duration %q: too many decimalsnet/trace: Failed executing template: %vnet/trace: couldn't execute template: %vproto: wrong wireType = %d for field Envcannot unmarshal ID from string '%s': %wmessage %T is neither a v1 or v2 Messageinvalid type: no encoder for %v %v %v/%vfound wrong type: got %v, want extensionAddress %q not found address list in %vmismatched message type: got %q, want %qinvalid Unicode escape code %q in stringtime.Time year outside of range [0,9999]additional tags (supports docker-archive)Copy all images if SOURCE-IMAGE is a listraw output does not support format optioninvalid request, expecting zero argumentsunsupported legacy manifest MIME type: %sinput names a reference, not a repositoryError creating directory for image %s: %wRef was not a digest, trying as a tag: %sA destination transport must be specifiedRetry-After date in the past, ignoring itIgnored Warning: header from registry: %q... Already tried the primary destinationError uploading signature, status %d, %#v help [path to command] for full details.Generate the autocompletion script for %sunexpected call to os.Exit(0) during testdetermining manifest MIME type for %s: %wDigest did not match, expected %s, got %sunsupported MIME type for compression: %qID %+v appears multiple times in manifesterror encoding rootfs information %#v: %wplease provide a registry to log out fromWrite more detailed information to stdouttime: Reset called on uninitialized Timertime: missing Location in call to Time.InTime.UnmarshalBinary: unsupported versionInvalid format of dockerRepository %q: %s"rekorPublickeyPaths" contains no entries"rekorPublickeyDatas" contains no entriesSignature for identity %q is not acceptedbytes.Buffer.WriteTo: invalid Write countbytes.Reader.WriteTo: invalid Write countclone(CLONE_PIDFD) failed to return pidfd%s does not have same major version as %s%s does not have same minor version as %sfound an indentation indicator equal to 0opening "allow" to /proc/%s/setgroups: %wunshare: CombinedOutput() not implementedlooking for layers with TOC digest %q: %wchecking for a layer based on blob %q: %werror saving big data %q for image %q: %vThe length of the requested blob content.The upload has been successfully deleted.{ "repositories": [ , ... ] }trying to get %s value of flag of type %s closed, unable to open /dev/null, errno=runtime: typeBitsBulkBarrier without typeWARNING: LIKELY CLEANUP/FINALIZER ISSUES /memory/classes/metadata/mspan/free:bytesruntime.SetFinalizer: second argument is gcSweep being done but phase is not GCoffobjects added out of order or overlappingmheap.freeSpanLocked - invalid stack freemheap.freeSpanLocked - invalid span stateattempted to add zero-sized address rangeruntime: blocked read on closing polldescstopTheWorld: not stopped (stopwait != 0) received on thread with no signal stack invalid timer: fake time but no syncgroupinvalid signature format, missing newlinewriteEndsStream called on nil writeFramerinvariant; can't close stream in state %vhttp2: server ignoring unknown setting %vCloseNotify called after Handler finishedWriteHeader called after Handler finishedhttp2: no cached connection was availablehttp2: Transport health check failure: %vtransport got GOAWAY with error code = %vnet/url: invalid control character in URL34694469519536141888238489627838134765625strconv: illegal AppendInt/FormatInt basetls: internal error: unsupported key (%T)tls: handshake has not yet been performedinvalid value length: expected %d, got %dtls: unsupported decryption key type (%T)tls: failed to parse client certificate: tls: internal error: failed to clone hashtls: internal error: unknown cipher suitetls: no supported elliptic curves offeredtls: internal error: empty verified chainexceeded maximum allowed size of %d bytesinvalid alias %q: must not contain digestcopying contents to temporary file %q: %warchive: skipping %q since it is a socketno subgid ranges found for group %q in %scan't call pointer on a non-pointer ValueMapIter.Next called on exhausted iteratorreflect: FieldByIndex of non-struct type reflect: OverflowFloat of non-float type reflect.Value.Addr of unaddressable valuewrong type for value; expected %s; got %ssync/atomic: swap of nil value into Valuemissing Annotations needed for decryptioncould not JSON unmarshal privOptsData: %w%s: Could not PEM decode x509 certificatex509: cannot parse URI %q: invalid domainMissing "signature" field in hashedrekordMissing "data.hash" field in hashedrekordasn1: internal error in parseTagAndLength%s slice too big: %d elements of %d bytesfirst packet was not a public/private keyprimary key cannot be used for signaturesgiven identity string not found in Entitycolon must be followed by more characterslzma: dictionary capacity is out of rangecorrupted input (position=%d, expected 0)no mount information for layers at %q: %wlooking for layers matching digest %q: %wError loading cache file for layer %q: %vdetermining physical file path for %q: %wbinary: varint overflows a 64-bit integeridna: internal error in punycode encodingcrypto/md5: invalid hash state identifiertoml: error: %s At line %d, column %d: newlines not allowed within inline tablesfips140: unknown GODEBUG setting fips140=nonzero finite number with empty mantissasigning subkey is missing cross-signatureerror while hashing for cross-signature: primary user id subpacket with bad lengthmodule-path '%s' is not allowed by policy{"crv":"%s","kty":"EC","x":"%s","y":"%s"}RSASSA-PKCS-v1.5 2048-bit sign and verifySUBJECT_ALTERNATIVE_NAME_TYPE_UNSPECIFIEDaggregator constructor returned nil statenon-function passed to RegisterAggregatorerror getting code from local server: %v Go to the following link in a browser: hash/crc32: invalid hash state identifierhash/crc64: invalid hash state identifierwalking into root with part %q failed: %wwalking into %q had unexpected result: %w%w: incorrect procfs root inode number %dcreating mount namespace before pivot: %wwhile unmounting old root after pivot: %wGODEBUG sys/cpu: no value specified for "/keyprovider.KeyProviderService/UnWrapKeygrpc: unmarshalling service config %s: %vmail: invalid utf-8 in domain-literal: %qmail: bad character in domain-literal: %qjpeg: fill called when unread bytes existjson: error calling MarshalJSON for type oidc: token is expired (Token Expiry: %v)lock %q is used already with other threadaufs: unmount error after retries: %s: %wcould not remove mountpoint for id %s: %waufs doesn't support changing ID mappingsfailed to create erofs filesystem: %s: %woverlay: failed to make mount private: %woverlay: can't stat imageStore dir %s: %wvfs driver does not support mount optionsno zfs dataset found for rootdir '%s': %wno supported policies found in config: %vReceived error from the name resolver: %vReceived new config %s, resolver state %stransport: timeout string is too long: %qproto: wrong wireType = %d for field Namemismatching message name: got %v, want %vinvalid Message.WhichOneof descriptor on Loopback device %s is not a block device. Running without d_type is not supported.google.golang.org/genproto/protobuf/ptypeGRPC_EXPERIMENTAL_XDS_DUALSTACK_ENDPOINTSinvalid target address %v, error info: %vhtml/template: cannot Parse after Executecannot handle non-pointer message type %vboth pointer and slice for basic type in unmarshaler not found type:%s encoding:%sskopeo list-tags docker://docker.io/fedoraapplication/vnd.oci.image.manifest.v1+jsonskopeo experimental-image-proxy --sockfd 3Invalid scope %s: Must be an absolute pathambiguous Content-Range:, %d header values%w (after reconnecting, fetching blob: %v)Increasing token expiration to: %d secondsexternal URLs not supported with GetBlobAtCreating a temporary squashfs image %s ...unable to find a command for arguments: %vError while parsing flags from args %v: %sruntime.AddCleanup: ptr is arena-allocatedcopying image %d/%d from manifest list: %wUpload of manifest list type %s failed: %vtrying to reuse blob %s at destination: %werror encoding history information %#v: %wCould not marshal Pkcs11Config to Yaml: %wlooking for beginning of object key stringrequested access to the resource is deniedlogging into %q: invalid username/passwordtime: Reset called on uninitialized TickerTime.MarshalBinary: unexpected zone offsetField optional.timestamp is not an integerinvalid array: want %d elements but got %dwriting "%d" to /proc/%s/oom_score_adj: %wreading manifest for image instance %q: %wcreating LayerInfosForCopy of image %q: %wAn RFC7235 compliant authorization header.-deprecated message for flag %q must be setinvalid string being converted to CIDR: %s bytes; incompatible with mutex flag mask persistentalloc: align is not a power of 2/cpu/classes/gc/mark/dedicated:cpu-seconds/memory/classes/metadata/mcache/free:bytes/memory/classes/metadata/mspan/inuse:bytesnon-empty mark queue after concurrent marksweep: tried to preserve a user arena spanruntime: blocked write on closing polldescunexpected state passed to panicrangestateacquireSudog: found s.elem != nil in cachefatal error: cgo callback before cgo call on a locked thread with no template threadunexpected signal during runtime execution received but handler not on signal stack stop of synctest timer from outside bubbletraceStopReadCPU called with trace enabledattempted to trace a bad status for a procout of memory allocating checkmarks bitmapmix of request and response pseudo headersPRIORITY frame payload size was %d; want 5Failed to parse goroutine ID out of %q: %vhttp2: server connection error from %v: %vpromised request headers cannot include %qbad wildcard segment (must start with '{')http: multipart handled by MultipartReaderhttp: ContentLength=%d with Body length %d173472347597680709441192448139190673828125867361737988403547205962240695953369140625tls: malformed ECHConfig, invalid %s fieldtls: private key does not match public keyregistry must be in v2 format but is in v1could not get either XDG_DATA_HOME or HOMEInvalid scope %s: must be an absolute pathMapIter.Value called on exhausted iteratorreflect: negative length passed to ArrayOfreflect: Call with too few input argumentsmismatch between ABI description and typesreflect: cannot convert slice with length internal error: no fields in evalChainNodefunction name %q is not a valid identifiersync/atomic: store of nil value into Valuehost must be a URL or a host:port pair: %qHTTP error: status code: %d (%s), body: %scrypto/rsa: salt length cannot be negativex509: %q cannot be encoded as an IA5Stringx509: RSA modulus is not a positive numberx509: invalid policy constraints extensionx509: invalid inhibit any policy extensionall candidate chains have invalid policiesUnexpected "data.hash.algorithm" value %#vPrintableString contains invalid characterinsufficient data for resource body lengthRequesting a certificate from Fulcio at %sxz: data for LZMA2 filter has wrong lengthdecompressed size exceeds configured limitcorrupt stream, did not find end of streamnewState (%d) == oldState (%d) and no bits{deltabits: %08x, findstate:%d outbits:%d}not allowed to create new images at %q: %wnot allowed to create new layers at %q: %wcreating an ID-mapped copy of layer %q: %wlocating big data for layer with ID %q: %wError stat'ing cache file for layer %q: %vError mmap'ing cache file for layer %q: %vError creating cache file for layer %q: %vvalidating and decompressing tar-split: %wtar-split and TOC data is inconsistent: %wTOC contains duplicate entries for path %qfailed to duplicate file descriptor %d: %winternal error: call to runtimeSource.Seedopensslcrypto: can't enable FIPS mode for crypto/sha1: invalid hash state identifierpoly1305: write to MAC after Sum or Verifyunexpected EOF; expected key separator '='addition of infinities with opposite signssubtraction of infinities with equal signsquotedprintable: invalid bytes after =: %qplatform and architecture is not supportedRead()ing not complete, unable to finalizeno private keys found for PKCS7 decryptionsignature creation time in non-hashed areaunknown critical signature subpacket type sql: unknown driver %q (forgotten import?)SQLite functions must return 1 or 2 valueslzma: buffer size must be larger than zerolzma: can't write empty uncompressed chunkcorrupt input: last value not power of twocalled a write method on a read-only storeobject ended prematurely, unexpected char creating root temp directory %s failed: %wEC_POINT_get_affine_coordinates_GFp failedaddrConn: updateAddrs addrs (%d of %d): %vgrpc: failed to decompress the message: %vgrpc: failed to read decompressed data: %vno codec registered for content-subtype %sgrpc: server failed to compress response: Rectangle has huge or negative dimensionsid token did not have an access token hashCouldn't run auplink before unmount %s: %soverlay: image path %q must be a directoryUnable to create kernel-style whiteout: %vunable to create kernel-style whiteout: %wadditionallayer must be absolute (got: %v)could not switch to new child balancer: %wchannel %d references invalid parent ID %dtransport: unknown control message type %TDraining transport: t.nextID > MaxStreamIDkeepalive ping not acked within timeout %stransport: timeout string is too short: %qAddresses received from proxy resolver: %smalformed duration %q: contains no numbersproto: wrong wireType = %d for field ValueNo support for lazy fns for ExtensionFieldentry %q already added with different datadid not hit any dirent during iteration %sGRPC_XDS_ENDPOINT_HASH_KEY_BACKWARD_COMPATdns: error parsing service config json: %vproto: duplicate proto type registered: %sbad pointer or slice in interface case in proto: invalid google.protobuf.Any messageGenerate a sigstore public/private key pairDestination directory could not be used: %wTag %q cannot be parsed as semver, skippingWould have synced %d images from %d sourceserror parsing HTTP %d response body: %s: %qMissing "Content-Length" header in responseError initiating layer upload, response %#vchecking whether a blob %s exists in %s: %wInvalid tag %q (%s): does not contain a tagmore than one image in oci, choose an imagefailed fetching external blob from all urlsConverting squashfs to tar, command: %s ...application/vnd.oci.image.layer.v1.tar+gzipapplication/vnd.oci.image.layer.v1.tar+zstd local_nonpersistent_flags+=("--%[1]s") multiple Read calls return no data or errorparsing primary manifest as list for %s: %wchoosing an image from manifest list %s: %wcopying system image from manifest list: %wWriting manifest list to image destination %s compression is not supported for type %qunsupported MIME type for decompression: %qunsupported mediaType: %q already encryptedInvalid image name %q, unknown transport %q looking for beginning of object key string%v not available (make sure it is imported)error rewriting reference from %q to %q: %winvalid docker-manifest-digest value %q: %vinterrupted system call should be restarted!!binary value contains invalid base64 datafound character that cannot start any tokendid not find expected comment or line breakfound unexpected non-alphabetical characterfound invalid Unicode character escape code%s should be setgid or have filecaps setgid%s should be setuid or have filecaps setuidparsing expected diffID %q for layer %q: %wThe registry does not implement the V2 API.Flag shorthand -%s has been deprecated, %s invalid string being converted to IPNet: %sinvalid time format `%s` must be one of: %sruntime: opened unexpected file descriptor /memory/classes/metadata/mcache/inuse:bytesruntime.SetFinalizer: first argument is nilruntime.SetFinalizer: finalizer already setgcBgMarkWorker: unexpected gcMarkWorkerModenon in-use span found with specials bit setgrew heap, but no adequate free space foundroot level max pages doesn't fit in summarymeasures of the retained heap are not equalruntime.Pinner: argument is not a pointer: runtime: releaseSudog with non-nil gp.paramunknown runnable goroutine during bootstrapruntime: casfrom_Gscanstatus bad oldval gp=runtime:stoplockedm: lockedg (atomicstatus=methodValueCallFrameObjs is not in a modulereset of synctest timer from outside bubblesynctest timer accessed from outside bubbleGcSlice can't handle on-demand gcdata typeshttp2: client conn could not be establishedno multipart boundary param in Content-Typenet/http: timeout awaiting response headerstimeout waiting for SETTINGS frames from %vhttp2: server closing client connection: %vhttp2: unexpected ALPN protocol %q; want %qTransport: unhandled response frame type %TError enabling Transport HTTP/2 support: %vmult64bitPow10: power of 10 is out of rangeTLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256tls: received unexpected key update messagetls: no supported elliptic curves for ECDHEtls: server did not select an ALPN protocoltls: server sent unrequested session tickettls: received malformed key_share extensiontls: invalid early data for QUIC connectiontls: client's Finished message is incorrectinvalid short name %q: must not contain taginvalid condition: mirror location is unsetexec: WaitDelay expired before I/O completecannot convert stat value to syscall.Stat_tbufio: tried to rewind past start of bufferreflect: nil type passed to Type.Implementsreflect: CallSlice of non-variadic functionreflect: Call with too many input arguments%s is an unexported field of struct type %swrong number of args for %s: want %d got %dwrong number of args for %s: got %d want %dorg.opencontainers.image.enc.keys.provider.no key identity provided for simple signingx509: failed to parse dnsName constraint %qx509: invalid X25519 private key parametersrecording uncompressed digest %q for %q: %wpublicKey in Rekor SET is not in PEM formatexplicit time type given to non-time memberrequested skippable frame (%d) > max uint32Error cleaning up temporary directories: %vcannot mount layer %v: shifting not enabledUnknown filesystem type %#x reported for %sinsecure_allow_unpredictable_image_contentstoo many streams returned, got more than %dinternal error: chunked differ already usedchunked encoding contains too much non-dataopensslcrypto: can't disable FIPS mode for trailing comma not allowed in inline tablesLastWrite.equals on an uninitialized objectnon executable command in pipeline stage %dHMAC is not provided for decryption processNo private keys found for PKCS11 decryptiongo-jose/go-jose: recipients is nil or emptygo-jose/go-jose: unsupported enc value '%s'go-jose/go-jose: no key algorithms providedsql: connection returned that was never outPKCE is not supported by OIDC provider '%v'oauth2: cannot fetch token: %v Response: %snewHashTable: capacity must not be negativenewHashTable: argument wordLen out of rangeMultiple IDs found with provided prefix: %sreflinks are not supported on this platformcipher: unable to initialize EVP cipher ctxcipher: incorrect nonce length given to GCMopenssl: EVP_default_properties_enable_fipsimpl: package name must not contain slasheskeyprovider.keyProviderKeyWrapProtocolInputgrpc: received unexpected payload format %dconfig selector returned illegal status: %vpublic key not on same curve as private keyedwards25519: invalid point encoding lengthparsing '%s' failed: not enough fields (%d)error performing atomic remove due to EBUSYvolatile,lowerdir=%s,upperdir=%s,workdir=%sAdding metacopy option, configured globallycannot mount a composefs layer as writeablemodifying zfs mountpoint (%s) ownership: %wtransport: SendHeader called multiple timesmalformed header: missing HTTP content-typeFailed to marshal rpc status: %s, error: %vAddresses received from target resolver: %vmalformed duration %q: missing seconds unithash/adler32: invalid hash state identifierMeasures the size of HTTP request messages.proto: wrong wireType = %d for field RemoteClearing PROJINHERIT flag from directory %sfile %q has a package name conflict over %v%s: signs of seconds and nanos do not matchhtml/template: %q is an incomplete template'/' could start a division or regexp: %.32qunfinished escape sequence in JS string: %qbad type for XXX_InternalExtensions field: timestamp: %#v: nanos not in range [0, 1e9)Can not check for a blob with unknown digestno error details found in HTTP response bodyinvalid Content-Range: %q, missing prefix %qUploading updated sigstore attachment config local_nonpersistent_flags+=("--%[1]s=") encoding updated manifest list (%q: %#v): %wapplication/vnd.docker.image.rootfs.diff.tar(?s){{\s*range\s*\.\s*}}.*{{\s*end\s*-?\s*}}login accepts only one registry to log in toRemoved login credentials for all registriesreexec func already registered under name %quse of WriteTo with pre-connected connectionyaml internal error: please report the issueneither tag nor implicit flags are specifiedmapping keys are not allowed in this contextdid not find expected digit or '.' characterparsing size value %q from line %q in %q: %wNot using TOC %q to look for layer reuse: %vwe have blob %q, but don't know its layer IDfailed to put layer using a partial pull: %wreference %q does not resolve to an image IDThe repository is not known to the registry.provided length did not match content lengthspan on userArena.faultList has invalid sizesend on synctest channel from outside bubbleout of memory allocating heap arena metadataruntime: cannot remap pages in address space/cpu/classes/scavenge/background:cpu-secondsruntime: unexpected metric registration for gcmarknewobject called while doing checkmarkactive sweepers found at start of mark phaseno P available, write barriers are forbiddenheapInUse and consistent stats are not equaltotalFree and consistent stats are not equalmappedReady and other memstats are not equalcannot trace user goroutine on its own stackunsafe.Slice: ptr is nil and len is not zeroinvalid signature format, non-ASCII byte %#xOCI1Index.EditInstances: digest %s not foundhttp: putIdleConn: too many idle connectionsconnection exceeded flow control window sizehttp2: could not negotiate protocol mutuallyhttp2: 1xx informational responses too largehttp: Request.ContentLength=%d with nil Bodymult128bitPow10: power of 10 is out of rangetls: server's Finished message was incorrecttls: server sent an incorrect legacy versiontls: invalid server X25519MLKEM768 key sharetls: invalid X25519MLKEM768 server key sharetls: invalid X25519MLKEM768 client key shareunmarshaling "credHelpers" in JSON at %q: %wcan't take write lock on read-only lock filemime: unexpected content after media subtypemultipart: expecting a new Part; got line %qInvalid image config (rootFS is not set): %qInvalid source index @%s: not an integer: %wunexpected data type %v, expected one of: %vreflect: call of MakeFunc with non-Func typereflect: Value.SetIterKey called before Nextreflect: FieldByNameFunc of non-struct type reflect: funcLayout with interface receiver using value obtained using unexported fieldreflect: function created by MakeFunc using reflect: slice length out of range in SetLenincompatible types for comparison: %v and %vopensslcrypto: unexpected code execution in x509: invalid RDNSequence: invalid attributex509: invalid Ed25519 private key parametersx509: invalid Ed25519 private key length: %dx509: internal error: cannot parse domain %qcrypto/x509: error fetching intermediate: %wencoding alphabet contains newline characterencoding alphabet includes duplicate symbolschecking if SQLite schema item %q exists: %wdecoding the body of a Rekor SET payload: %vrevocation signature signed by alternate keyinsufficient data for calculated length typeliteral output size mismatch want %d, got %dinvalid decoding table, base overflows int32internal error: lock is not held for writingnot allowed to set flags on images at %q: %wnot allowed to set flags on layers at %q: %wremove mapped top layer %v from image %v: %wfailed to built-in GetDriver graph %s %s: %w[graphdriver] using prior storage driver: %sbloom filter length %d exceeds max length %dinvalid Transfer-Encoding request header: %qcipher: NewGCM requires 128-bit block ciphertoml: error: %s At line %d, column %d-%d: unexpected '.': keys cannot start with a '.'Invalid float %q: cannot have leading zeroesEscaped character '\u%s' is not valid UTF-8.template: multiple definition of template %qSymmetricallyEncrypted: incorrect key lengthonly structs, maps, and slices are supportedMalformed pkcs11 URI: missing pcks11: prefixgo-jose/go-jose: unsupported key type/formatgo-jose/go-jose: no recipients to encrypt toed25519: bad Ed25519ph message hash length: urn:ietf:params:oauth:grant-type:device_codeunable to get raw syscall.Stat_t data for %scrypto/sha256: invalid hash state identifiercrypto/sha512: invalid hash state identifierkeyprovider.keyProviderKeyWrapProtocolOutputSubchannel picks a new address %q to connectccResolverWrapper: reporting error to cc: %voidc: malformed jwt, expected 3 parts got %doauth2: server response missing access_tokenunmount failed due to EBUSY: retry count: %dfailed to rename dir in merged directory: %wfailed to set erofs filesystem read-only: %wfailed to set noacl for erofs filesystem: %wcreating overlay mount to %s, mount_data=%q 'overlay' is not supported over %s at %q: %wSet %s label to %q file ended with error: %vEncountered error while encoding headers: %vtransport: failed to write window update: %vfailed to do connect handshake, response: %qrequires SecurityLevel %v; connection has %vconflicting method rules for method %v foundinvalid header/message length config: %q, %vMeasures the size of HTTP response messages.%s previously from: %q currently from: %qpredefined escaper %q disallowed in templateunfinished escape sequence in CSS string: %qError writing manifest to standard output: %wunable to mark registries-conf flag as hiddenServe on opened socket pair (default 0/stdin)Error reading untrusted signature from %s: %wDo not abort the sync if any image copy fails'--tls-verify' is deprecated, instead use: %sUnknown manifest digest, can't add signaturesfetching %q failed, response code not 200: %wrequires at least %d arg(s), only received %dhandleTransientAcquire called in invalid modehandleTransientRelease called in invalid modeFailed, retrying in %s ... (%d/%d). Error: %v... will convert to %s first, and then try %vInternal error: unexpected panic in copyLayererror re-encoding compat image config %#v: %wjson.RawMessage: UnmarshalJSON on nil pointer[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+context: internal error: missing cancel errormust provide --username with --password-stdinSignature for docker digest %q does not matchinvalid ASN.1 in OIDC issuer v2 extension: %vloading trusted intermediate certificates: %vcannot send after transport endpoint shutdowninvalid digest supplied when reading blob: %wobtaining config of image to be committed: %wsignatures data (%s) contained %d extra bytesReturn the specified portion of repositories.%q shorthand is more than one ASCII characterclose of synctest channel from outside bubble may be in the same tiny block as finalizer transitioning GC to the same state as before?produced a trigger greater than the heap goaltried to run scavenger from another goroutineruntime: failed mSpanList.remove span.npages=totalAlloc and consistent stats are not equalexitsyscall: syscall frame is no longer validunsafe.String: ptr is nil and len is not zerohttp: putIdleConn: connection is in bad statehttp: no Client.Transport or DefaultTransportunbuffered done channel passed in for type %Thttp: multipart handled by ParseMultipartFormHTTP/1.1 %d %s%sUnsupported transfer encodingnet/http: internal error: connCount underflowTLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256tls: internal error: unexpected renegotiationtls: invalid reconstructed inner client hellotls: no server certificates in client sessiontls: failed to find any PEM data in key inputNot logged in to %s with credential helper %sInvalid tag %#v in manifest.json item @%d: %wPAX Global Extended Headers found and ignoredhost ID %d cannot be mapped to a container IDcontainer ID %d cannot be mapped to a host IDbufio.Scanner: Read returned impossible countreflect: OverflowComplex of non-complex type reflect: nil type passed to Type.AssignableToreflect: internal error: invalid method indexmissing private key needed for decryption: %sunable to read client-key %v for %v due to %wecdsa: curve not supported by PublicKey.Bytescrypto/rsa: message too long for RSA key sizex509: IP constraint contained invalid mask %xx509: certificate signed by unknown authorityx509: trailing data after ASN.1 of public-keylooking for specific variant compressor of %qcryptographic signature verification failed: zero length explicit tag was not an asn1.Flagparsing/packing of this section has completedxz: uvarint overflows 64-bit unsigned integerxz: reserved filter id in block stream headermatch len (%d) bigger than max allowed lengthvalidating digest %q for big data item %q: %wno storage runroot or graphroot specified: %wregistering ID-mapped layer with image %q: %wgraph driver %s does not support partial pullinvalid request :path %q from URL.Opaque = %qCannot infer primitive type of lex item '%s'.ensuring that path %q is an absolute path: %wmath/big: cannot unmarshal %q into a *big.Intmath/big: cannot unmarshal %q into a *big.Ratinvalid key length of %d bytes; need %d bytesURI must not contain pin-source and pin-valuego-jose/go-jose: invalid P2S: must be presentsqlite succeeded without returning a database^https:\/\/login\.microsoftonline\.(com|us)\/newBinTree: capacity must be larger than zerounable to decode ApplyLayer JSON response: %werror from balancer.UpdateClientConnState: %vccb RemoveSubConn(%v) called unexpectedly, sccould not get resolver for default scheme: %qreceived picker error with illegal status: %vpkcs7: unsupported hash function for RSA OAEPw must be at least 2 by the definition of NAFoidc: failed to obtain source from claim nameValid encoded KSUIDs are bounded by %s and %sfailed to set opaque flag on middle layer: %wfailed to read opaque flag on upper layer: %wfailed to set source for erofs filesystem: %wcomposefs is not supported in user namespacesoverlay: using composefs blob %s for lower %sproto: invalid compressed file descriptor: %vsubchannel %d references invalid parent ID %dmalformed binary metadata %q in header %q: %vgrpc.resolver.delegatingresolver.proxyOptionstransport: failed to set TCP_USER_TIMEOUT: %vtransport: failed to write client preface: %vAborting due to connect deadline expiring: %vFailed to decode metadata header (%q, %q): %vtransport: timeout unit is not recognized: %qpassthrough: received empty target in Build()cannot use component logger as grpclog loggerproto: wrong wireType = %d for field Disableddetected mutation on the default bytes for %vdecode failure in lazy extension decoding: %vgrpc.lb.pick_first.connection_attempts_failedFailed to create a subConn for address %v: %vdns: error parsing A record IP address %v: %vcannot compute output context for template %s*Experimental* key needed to decrypt the imageadditional-tag '%s' must be a tagged referencelayers [command options] IMAGE-NAME [LAYER...]found %d args, expecting (imgid, digest, size)Refusing to overwrite destination directory %qReading data from an already terminated uploadcreating a reference for manifest item @%d: %wInvalid source index @%d: must not be negativeconverting rootfs from SquashFS to Tarball: %werror generating configuration blob for %q: %wERROR: unexpected ShellCompDirective value: %druntime.AddCleanup: ptr not in allocated blockreplicating image %d/%d from manifest list: %wapplication/vnd.docker.container.image.v1+jsonReturn the current login user for the registryTime.UnmarshalJSON: input is not a JSON string Using transport %q specific policy section %qsigning mechanism does not support passphrasesbytes.Reader.UnreadByte: at beginning of slicebytes.Reader.UnreadRune: at beginning of sliceboth Setctty and Foreground set in SysProcAttrmapping values are not allowed in this contextdid not find expected whitespace or line breakerror writing 'deny' to /proc/%s/setgroups: %vFailed to read current user namespace mappingssetting up signing using parameter file %q: %wSetting uncompressed digest to %q for layer %qfailed to put layer from digest and labels: %wcreating a resolved reference for (%s, %s): %wexpected more than %d physical layers to existCreate, update, delete and retrieve manifests.provided digest did not match uploaded contentinvalid string being converted to Bytes: %s %sslice bounds out of range [:%x] with length %ypanicwrap: unexpected string after type name: memory reservation exceeds address space limittried to park scavenger from another goroutinereleased less than one physical page of memorysysGrow bounds not aligned to pallocChunkBytesruntime: failed to create new OS thread (have runtime: panic before malloc heap initialized stopTheWorld: not stopped (status != _Pgcstop)select on synctest channel from outside bubbleruntime: name offset base pointer out of rangeruntime: type offset base pointer out of rangeruntime: text offset base pointer out of rangeSchema2List.EditInstances: digest %s not foundrequest Content-Type isn't multipart/form-dataGOAWAY close timer fired; closing conn from %vinternal error: cannot create stream with id 0http2: Transport creating client conn %p to %vprotocol error: received DATA after END_STREAMclient sent an HTTP request to an HTTPS servernet/http: internal error: misuse of tryDeliverfirst path segment in URL cannot contain colonPSSWithSHA256PSSWithSHA384PSSWithSHA512Ed25519tls: server chose an unconfigured cipher suitetls: failed to parse certificate from server: tls: server did not echo the legacy session IDtls: server accepted 0-RTT with the wrong ALPNtls: received new session ticket from a clientinvalid short name %q: must not contain digestmixing sysregistry v1/v2 is not supported: %#vSome layer tarfiles are missing in the tarballreflect: Value.SetIterValue called before Nextreflect: nil type passed to Type.ConvertibleToreflect.Struct: fields with different PkgPath reflect.StructOf: illegal embedded field type returned value obtained from unexported fieldreflect: slice capacity out of range in SetCapreflect.Value.Slice: slice index out of boundstemplate: no files named in call to ParseFiles%T instance can't be reused after %[1]T.Wait()invalid number of octets: got %d, should be %dunable to read client-cert %v for %v due to %w/oapi/v1/namespaces/%s/imagestreamimages/%s@%sstarting a load operation in docker engine: %wUnsupported hash algorithm '%s' for decryptionCould not find a pkcs11 key for decryption: %smodule-directories: %sallowed-module-paths: %s%s: Missing password for encrypted private keyecdsa: curve not supported by PrivateKey.Bytesx509: failed to unmarshal elliptic curve pointx509: failed to parse rfc822Name constraint %qx509: malformed signature algorithm identifierx509: unknown curve while marshaling to PKCS#8x509: invalid elliptic curve private key valueDELETE FROM DigestCompressors WHERE digest = ?signing Entity's private key must be decryptedkey material not followed by encrypted messagesql/driver: couldn't convert %q into type boolsql/driver: couldn't convert %d into type boolinvalid input: reserved block type encounteredSteam Size: %d, Type: %v, Last: %t, Window: %dsequenceDecs_decode returned erroneous code %d(even after successfully cleaning up once:) %wnot allowed to clear flags on images at %q: %wnot allowed to modify image metadata at %q: %wnot allowed to clear flags on layers at %q: %wlocating layer with ID %q to write bigdata: %wnot allowed to modify layer metadata at %q: %wnot allowed to modify layer contents at %q: %wTOC and tar-split metadata doesn’t match: %winternal error: splitPath(%q) contains a slashinvalid digest to convert: expected %q, got %qinvariant failed: growthLeft is unexpectedly 0cipher.newCFB: IV length must equal block sizecipher.NewCTR: IV length must equal block sizeerror storing credentials - err: %v, out: `%s`error getting credentials - err: %v, out: `%s`error erasing credentials - err: %v, out: `%s`error listing credentials - err: %v, out: `%s`Invalid integer %q: cannot have leading zeroesContext for key '%s' has not been established.LastWrite.serialize on an uninitialized objectmath/big: mismatched montgomery number lengthscould not decode base64 encoded PGP packet: %wcan't try ciphers with different block lengthsNeither pin-source nor pin-value are availableMalformed pkcs11 URI: malformed path attributego-jose/go-jose: unknown/unsupported algorithmgo-jose/go-jose: failed to sanitize header: %ved25519: internal error: setting scalar failedidentifier is not a layer, image, or container%w: incorrect procfs root filesystem type 0x%xcrypto/hmac: hash does not support hash.Cloneredwards25519: invalid field element input sizeconnect called on shutdown addrConn; ignoring.Server retry pushback specified to abort (%q).mail: invalid IP address in domain-literal: %qpkcs7: content data is a decryptable data typepkcs7: trailing data after RSA OAEP parametersaufs cannot be used in non-init user namespacefailed to mount overlay for volatile check: %wrecording overlay not being supported (%v): %wremoving a pre-existing layer directory %q: %wFailed to remove mountpoint %s overlay: %s: %vtransport: authentication handshake failed: %vtransport: received unexpected content-type %qcredentials: rawConn is dispatched out of gRPCconflicting service rules for service %v foundinvalid method name: suffix /method is missinginvalid field: %v: unsupported message type %vlazyUnmarshal: can't find field data for %v.%vReading information about loopback file %s: %vgoogle.golang.org/genproto/protobuf/field_maskexpected XXX_unrecognized to be of type []byteproto: can't get size for unknown wire type %dCopy an IMAGE-NAME from one location to anotherSuppress output information when copying imagesRegistry disallows tag list retrieval; skippingerror reading the current capabilities sets: %werror loading the current capabilities sets: %wCannot compress and decompress at the same timeDeleting images not implemented for dir: imagesmultipart/byteranges; boundary=([A-Za-z-0-9:]+)invalid Content-Range: %q, parsing last-pos: %wfailed fetching external blob from all urls: %wUnsupported scheme when writing signature to %sparsing sigstore attachment config %s in %s: %winvalid number of chunks returned by the serverDeleting images not implemented for oci: imagesDeleting images not implemented for sif: imagescobra_annotation_bash_completion_subdirs_in_dirunexpected error wrapping poll.ErrFileClosing: Source manifest MIME type %q, treating it as %qcomputing digest of source image's manifest: %wSkipping: image already present at destination length of history not equal to number of layerscaPath and caData cannot be used simultaneouslyNone of the signatures were accepted, reasons: No public key verified against the RekorSET: %sattempting to link in too many shared librariesfound a tab character that violates indentationInitializing a new Capabilities object of pid 0parsing host ID value %q from line %q in %q: %wreference %s has neither a tag nor a digest: %wsize for layer %q is unknown, failing getSize()%q does not look like an image ID or digest: %wBearer dGhpcyBpcyBhIGZha2UgYmVhcmVyIHRva2VuIQ==Digest of the targeted content for the request.slice bounds out of range [::%x] with length %yreceive on synctest channel from outside bubbleruntime·lock: sleeping while lock is availableP has cached GC work at end of mark terminationfailed to acquire lock to start a GC transitionfinishGCTransition called without starting one?tried to sleep scavenger from another goroutineheapReleased and consistent stats are not equalracy sudog adjustment due to parking on channelfunction symbol table not sorted by PC offset: attempted to trace a bad status for a goroutinehttp: server gave HTTP response to HTTPS clientflow control update exceeds maximum window sizewr.done != nil for write100ContinueHeadersFrame1xx informational response with END_STREAM flagprotocol error: received DATA on a HEAD request[FrameWriteRequest stream=%d, ch=%v, writer=%v]tls: malformed encrypted_client_hello extensionfirst record does not look like a TLS handshaketls: handshake did not verify certificate chaintls: incorrect renegotiation extension contentstls: server selected unadvertised ALPN protocoltls: internal error: pskBinders length mismatchtls: server selected TLS 1.3 in a renegotiationtls: malformed encrypted client hello extensiontls: server sent two HelloRetryRequest messagesInvalid unqualified-search-registries entry %#vloading drop-in registries configuration %q: %wSkipping scan of %s due to permission error: %vfailed to append certificates from PEM file: %qauto-decompressing %q to determine its size: %wInvalid OCI reference: path %s contains a colonbufio: reader returned negative count from Readreflect.Value.Bytes of unaddressable byte arrayreflect: CallSlice with too few input argumentsregister-based return value has stack componentreflect.Value.Slice3: slice index out of boundsreflect.Value.UnsafeAddr of unaddressable valueDetected corner case, setting cpu variant to v6Note: pkcs11 support is currently experimental Error while running command: %s. stderr: %s: %wecdsa: hash length does not match hash functionx509: malformed public key algorithm identifierx509: public key contains large public exponentx509: internal error: IP SAN %x failed to parseMissing "data.hash.value" field in hashedrekordasn1: Unmarshal recipient value is non-pointer explicit string type given to non-string membercomputing digests for image with ID %q (%v): %wnot allowed to modify the image store at %q: %wnot allowed to modify the layer store at %q: %wlocating item named %q for layer with ID %q: %wreading list of big data items for image %q: %wtags len %d exceeds the maximum allowed size %dCould not create estargz differ for blob %q: %vchecksum mismatch for %q (got %q instead of %q)invalid :protocol header in non-CONNECT requestchacha20poly1305: message authentication failedcrypto/ecdh: public key is the identity elementExpected valid escape code after \, but got %q.Error while parsing keyprovider config file: %wdon't know how to serialize encrypted key type Malformed pkcs11 URI: malformed query attributemodule-path '%s' points to an invalid file typego-jose/go-jose: invalid key size for algorithmgo-jose/go-jose: unknown json web key type '%s'go-jose/go-jose: invalid EC key (X/Y too large)go-jose/go-jose: missing payload in JWS messagebigmod: modulus for ExpShortVarTime must be oddsql: Scan error on column index %d, name %q: %wUnsupported code challenge method in list: '%v'match length %d out of range; dist %d rep[0] %dcorrupt input: min elt size, even check failed !intervals[%d].Before(intervals[%d]) for %s, %sEC_KEY_set_public_key_affine_coordinates failedfailed to get parameters for key encryption: %vfailed marshaling key encryption parameters: %vgo-jose/go-jose: invalid ciphertext (too short)failed to read redirect flag on upper layer: %wcreating overlay mount to %s, mount_data=%q: %wFailed to replace mountpoint %s overlay: %s: %vUpdateSubConnState(%v, %+v) called unexpectedlyreceived goaway and there are no active streamsfailed to do connect handshake, status code: %sconflicting blacklist rules for method %v foundproto: wrong wireType = %d for field Privilegesmap field %v cannot be set with read-only valuemismatching number of fields: expect 4, got: %dmismatching number of fields: expect 3, got: %dGot unexpected health update for SubConn %p: %v%s appears in an ambiguous context within a URLtemplate: %q is an incomplete or empty templateduration: %#v is out of range for time.Durationproto: bad extended type; %v does not extend %vCannot use --all and --multi-arch flags togetherexperimental-image-proxy [command options] IMAGEinvalid Content-Range: %q, parsing first-pos: %wFetching sigstore attachment manifest failed: %vIgnoring invalid tag %q matching a digest formatdetermining upload URL after a mount attempt: %wError trying to cancel an inadvertent upload: %sindex %d is too large, only %d entries available... finished creating a temporary squashfs imagegroup id '%s' is not defined for subcommand '%s'parsing just-created compression annotations: %wInternal error: Unexpected d.operation value %#vInvalid value for options.ImageListSelection: %dSource is a manifest list; copying all instancesFailed to compare destination image manifest: %vUnable to create destination image %s source: %vrepository name must have at least one componentInvalid parent ID in the base layer of the imageapplication/vnd.oci.image.layer.v1.tar+encryptedneither XDG_DATA_HOME nor HOME was set non-emptyAuthenticating with existing credentials for %s logout accepts only one registry to log out fromapplication/vnd.dev.cosign.simplesigning.v1+jsonunable to modify capabilities of another processCan not check for a blob with invalid digest: %wlooking for compressed layers with digest %q: %winternal inconsistency: layer (%d, %q) not foundreference %q does not resolve to an image ID%.0wlooking up signatures data for image %q (%s): %wUpload a chunk of data for the specified upload.The canonical location of the blob for retrievalinvalid string being converted to IP address: %sslice bounds out of range [:%x] with capacity %y is reachable from cleanup or cleanup argument runtime: cannot map pages in arena address spaceruntime: malformed profBuf buffer - invalid sizeruntime: taggedPointerPack invalid packing: ptr=attempt to trace invalid or unsupported P statusnet/http: extended connect not supported by peerinternal error: should have a body in this statenet/http: Hijack called after ServeHTTP finishedstrconv: illegal AppendFloat/FormatFloat bitSizenot enough significant bits after mult64bitPow10tls: CloseWrite called before handshake completeunable to generate random session ticket key: %vfailed to parse certificate #%d in the chain: %wtls: no FIPS compatible certificate chains foundtls: no supported symmetric ciphersuites for ECHtls: invalid EncryptedClientHelloKeys Config: %stls: CurvePreferences includes unsupported curveFound credentials for %s in credential helper %sinvalid short name %q: must not contain registrybufio: writer returned negative count from Writereflect: CallSlice with too many input argumentscan't use %v iterate over more than one variablesignature length is %d octets long, should be %dRSA Digital Signature Algorithm %q not supportedx509: X25519 key encoded with illegal parametersx509: SAN uniformResourceIdentifier is malformedx509: IP constraint contained value of length %dx509: public key contains zero or negative valuex509: internal error: cannot parse constraint %qx509: internal error: URI SAN %q failed to parsex509: only RSA, ECDSA and Ed25519 keys supportedDigestUncompressedPairs_index_uncompressedDigestrecording known location %q for (%q, %q, %q): %wparsing/packing of this type isn't available yettableLiteralLengthstableOffsetstableMatchLengthscan't set empty name for image big data item: %wcan't set empty name for layer big data item: %wmapping host ID pair %#v for %q to container: %wmapping container ID pair %#v for %q to host: %w[graphdriver] prior storage driver %s failed: %serror reading /proc/sys/crypto/fips_enabled: %v out points to big.Int, but defaultValue does notcannot use sign with non-decimal numbers: '%s%c'division of zero by zero or infinity by infinityInt.GobDecode: encoding version %d not supportedRat.GobDecode: encoding version %d not supportedError while unmarshalling grpc method output: %wPGP: No key found for the following recipients: SymmetricallyEncrypted.Serialize: bad key lengthuncompressed data would be too large (>%d bytes)go-jose/go-jose: unsupported elliptic curve '%s'go-jose/go-jose: invalid Ed key, missing x valuecrypto/rsa: input must be hashed with given hashconverting driver.Value type %T (%q) to a %s: %vSQlite aggregator doesn't have a Step() functionSQlite aggregator doesn't have a Done() functionnot enough args to execute query: want %d got %ddecoding a tar header from a tar-split entry: %wlayer not referenced by any images or containerswalking into symlink %q failed: push symlink: %w%w: incorrect /proc/self/fd filesystem type 0x%xcipher: nonce counter must be less than 2^64 - 1the provided transport is no longer valid to use%v while waiting for connections to become readyunexpected error marshaling simple LB config: %wCached value indicated that overlay is supportedoverlay: can't stat additionallayerstore dir: %wRecording overlay native-diff support status: %vcannot call deleteSelfIfReady on a listen sockettransport: per-RPC creds failed due to error: %vno active streams left to process while drainingMeasures the duration of outbound HTTP requests.proto: negative length found during unmarshalingproto: PluginSpec: illegal tag %d (wire type %d)proto: wrong wireType = %d for field Descriptioninvalid Mutable on field with non-composite typefield %v has invalid type: got %v, want map kindlist field %v cannot be set with read-only valueunable to get user ns file descriptor for %q: %wError retrieving the next available loopback: %sGRPC_EXPERIMENTAL_RING_HASH_SET_REQUEST_HASH_KEYgrpc.lb.pick_first.connection_attempts_succeededRead a passphrase for the private key from `PATH`Dump contents of a signature WITHOUT VERIFYING ITError determining repository tags for repo %s: %wProvide a Bearer token for accessing the registryoverwriting existing container image directory %qUnsupported scheme when reading signature from %sdocker: image reference %s does not start with //reading lines from SIF definition file object: %w# bash completion for %-36s -*- shell-script -*- # fish completion for %-36s -*- shell-script -*- strings.Reader.UnreadByte: at beginning of stringstrings.Reader.UnreadRune: at beginning of stringstrings.Reader.WriteTo: invalid WriteString countapplication/vnd.docker.image.rootfs.diff.tar.gzipCompression change for blob %s (%q) not supportedSource is a manifest list; copying some instancesinvalid passphrase: must not contain a line breakChecking if image destination supports signaturesuncompressed variant is not supported for type %qA signature was required, but no signature existsinvalid or incomplete multibyte or wide charactererror determining uncompressed digest for blob %qThe API implements V2 protocol and is accessible.Delete the blob identified by `name` and `digest`slice bounds out of range [::%x] with capacity %yinvalid memory address or nil pointer dereferencepanicwrap: unexpected string after package name: s.allocCount != s.nelems && freeIndex == s.nelemsruntime.reflect_makemap: unsupported map key typesweeper left outstanding across sweep generationsfully empty unfreed span set block found in resetcasgstatus: waiting for Gwaiting but is GrunnableUnknown media type during manifest conversion: %qhttp2: request body closed due to handler exitinghttp: wrote more than the declared Content-Length (Client.Timeout exceeded while awaiting headers)http: partitioned cookies must be set with Secureunexpected Peek failure reading buffered byte: %vnet/http: Transport.Dial hook returned (nil, nil)not enough significant bits after mult128bitPow10crypto/tls: ExportKeyingMaterial context too longtls: server advertised unrequested ALPN extensiontls: internal error: TLS 1.3 reached in FIPS modetls: server sent a cookie in a normal ServerHellotls: client offered only unsupported versions: %xtls: client using inappropriate protocol fallbacktls: client illegally modified second ClientHelloStored credentials for %s in credential helper %sAll credentials removed from credential helper %skey %s contains a ':' character after host[:port]Internal inconsistency, unexpected default branchreflect.Value.Slice: slice of unaddressable arrayUnsupported key object type for pkcs11 public key%s: Wrong password: could not decrypt private keyecdsa: internal error: truncated hash is too long/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pemx509: invalid RDNSequence: invalid attribute typex509: Ed25519 key encoded with illegal parametersx509: private key contains zero or negative valuex509: private key contains zero or negative primex509: signature returned by signer is invalid: %wcrypto/elliptic: internal error: invalid encodingthe :: must expand to at least one field of zerosuint64 values with high bit set are not supportedCreateLogEntry reported a conflict, location = %ssingle stream used with more than 10 bits length.%slayer %s: read %d bytes instead of %d bytes: %wcreating copy of template layer %q with ID %q: %wreading size of big data item %q for image %q: %wvdata len %d exceeds the remaining buffer size %dtar-split contains an entry for %q missing in TOCno TOC found and convert_images is not configuredchacha20poly1305: bad nonce length passed to Sealchacha20poly1305: bad nonce length passed to Opentype mismatch for %s: expected table but found %sJWE: No suitable private key found for decryptionpublic key and signature use different algorithmspath %s of module-name attribute must be absolutego-jose/go-jose: error in cryptographic primitivego-jose/go-jose: no x5c header present in messagego-jose/go-jose: invalid public key in epk headergo-jose/go-jose: ecdsa signature failed to verifygo-jose/go-jose: invalid protected header: %s, %sgo-jose/go-jose: invalid elliptic key (too large)crypto/rsa: public exponent too small or negativeinternal error: maxNbBits (%d) > tableLogMax (%d)input too small for table, want %d bytes, have %derror listing potential stale temp dirs in %s: %w%w: handle path %q doesn't match expected path %qinternal error: fillWindow called with stale databalancer is being closed; no new SubConns allowedimpossible error parsing empty service config: %vfinished serving streams for the server transportgrpc: Unexpected error (%T) from sendResponse: %vSOS length inconsistent with number of componentsCouldn't generate KSUID, inconceivable! error: %vkernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabledCached value indicated that native-diff is usableFailed to unlock and delete staging lock file: %vserver closed the stream without sending trailersbinarylogging: failed to marshal status proto: %vfailed to set quota limit for projid %d on %s: %wfailed to get quota limit for projid %d on %s: %w{{%s}} branches end in different contexts: %v, %vproto: bad wiretype for map field: got %d want %dError reading OCI-formatted configuration data: %wRead a passphrase for signing an image from `PATH`Size mismatch when copying %s, expected %d, got %dinvalid digest %q: unsupported digest algorithm %qError parsing BlobInfoCache location reference: %sUnsupported scheme when deleting signature from %sinvalid chunk offset specified %v (expected >= %v) Sigstore attachments: using "docker" namespace %sPushing signatures for OCI images is not supportedComputing a digest of the SIF conversion output...The transport "%s:" is not supported in this buildcobra_annotation_bash_completion_one_required_flagacquiring semaphore for concurrent blob copies: %wupdating digest during verification: %d vs. %d: %wUnable to get destination image %s/%s manifest: %vgetting DiffID for foreign layers is unimplementedcan't specify both --password-stdin and --passwordFulcio certificate is missing the issuer extensionno certificate found in signature certificate dataInvalid PolicyContext state, expected %q, found %qgo package net: dynamic selection of DNS resolver ^(\s*(%s)\s*(%s)\s*)((?:\s+|,\s*)(%s)\s*(%s)\s*)*$^[-+]?[0-9][0-9_]*(?::[0-5]?[0-9])+(?:\.[0-9_]*)?$The location where the layer should be accessible.cgo argument has Go pointer to unpinned Go pointermallocgc called with gcphase == _GCmarkterminationruntime.Pinner: object was allocated into an arenaruntime.Pinner: decreased non-existing pin counterrecursive call during initialization - linker skewattempt to execute system stack code on user stackunsupported, and unrecognized, signature format %qnet/http: cannot rewind body after connection losshttp: putIdleConn: CloseIdleConnections was calledgot CONTINUATION for stream %d; expected stream %dhttp: suspiciously long trailer after chunked bodynet/http: Transport failed to read from server: %vnet/http: HTTP/1.x transport connection broken: %wcryptobyte: attempted write while child is pendingtls: received unexpected CertificateStatus messagetls: invalid signature by the server certificate: tls: invalid signature by the client certificate: tls: client offered TLS version older than TLS 1.3Returning credentials for %s from DockerAuthConfigwrites to %s using legacy format are not supportedreflect.Value.Slice3: slice of unaddressable array%s has arguments but cannot be invoked as functionfunction %s has %d return values; should be 1 or 2no suitable key found for decrypting layer key: %sJWK RSA Public Key cannot contain private exponentInvalid format of docker reference %q: missing '/'Deleting images not implemented for atomic: imagesdocker-daemon: Closing tar stream to abort loadingCould not create session to any slot and/or log incrypto/rsa: prime factors are not relatively primex509: missing ASN.1 contents; use ParseCertificatex509: invalid RDNSequence: invalid attribute valuex509: RSA public exponent is not a positive numberx509: unknown key type while marshaling PKCS#8: %Tcrypto/elliptic: nistec rejected normalized scalarsignature in Rekor SET does not match: %#v vs. %#vmatch offset (%d) bigger than current history (%d)an incomplete layer exists and can't be cleaned upmounting read/only store images is not allowed: %wcrypto/cipher: incorrect nonce length given to GCMchacha20: SetCounter attempted to rollback countercrypto/ecdh: public key does not match private keyFloat.GobDecode: encoding version %d not supportedUnsupported public key algorithm used in signaturego-jose/go-jose: failed to unmarshal x5c field: %sgo-jose/go-jose: no signature algorithms specifiedoauth2: token expired and refresh token is not setgrpc: received message larger than max (%d vs. %d)grpc: failed to unmarshal the received message: %vtrying to send message larger than max (%d vs. %d)edwards25519: invalid SetUniformBytes input lengthaccess token hash does not match value in ID tokenlowerdir=%s::%s,upperdir=%s,workdir=%s,metacopy=onCached value indicated that volatile is being usedCached value indicated that metacopy is being usedoverlay: test mount with multiple lowers succeededoverlay: test mount with a single lower failed: %v%T at address %p that called NewSubConn is deletedError closing underlying net.Conn during Close: %vbinarylogging: failed to marshal proto message: %vinvalid Mutable on map with non-message value typefield %v has invalid type: got %v, want slice kindSetQuota path=%s, size=%d, inodes=%d, projectID=%dmismatching number of fields: expect 3..4, got: %dfailed to parse line %d of zfs diff: %w, got: '%s'google.golang.org/genproto/protobuf/source_contextLogValue called too many times on Value of type %Tskopeo generate-sigstore-key --output-prefix my-keyWrite the keys to `PREFIX`.pub and `PREFIX`.privateUsage: generate-sigstore-key --output-prefix PREFIXSignature verified using fingerprint %s, digest %s Invalid scope "/": Use the generic default scope ""Warning from registry (first encountered at %q): %qinternal error: getExternalBlob called with no URLsMounting %s from %s to %s started an upload instead... got status 404, as expected = end of signaturesFound a sigstore attachment manifest with %d layersScanState's Read should not be called. Use ReadRuneinternal error: too many releases of process handleCopying %d images generated from %d images in list Writing manifest using preferred type %s failed: %vrepository name must not be more than %v characters(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])JSON decoder out of sync - data changing underfoot?internal error: key %q registry mismatch, %q vs. %qAt least one of caPath and caData must be specified%s does not have same major and minor version as %sline %d: mapping key %#v already defined at line %d%v is neither a valid digest(%s) nor a valid ID(%s)Digest of blob to mount from the source repository.default type does not match variable type: %v != %vlimiterEvent.stop: invalid limiter event type foundpotentially overlapping in-use allocations detectedfatal: systemstack called from unexpected goroutineUploading empty layer during conversion to schema 1Manifest does not match provided manifest digest %sprotocol error: received %T before a SETTINGS framehttp: Transport does not support unencrypted HTTP/2tls: missing signature_algorithms from TLS 1.2 peertls: VerifyHostname called on TLS server connectioncrypto/tls: reserved ExportKeyingMaterial label: %stls: server's identity changed during renegotiationtls: server selected unsupported compression formattls: server offered only incompatible point formatstls: server sent an unexpected early_data extensiontls: client did not request an application protocoltls: client offered only incompatible point formatsunsupported pull-from-mirror value %q for mirror %qLooking for TLS certificates and private keys in %scannot overwrite directory %q with non-directory %qcannot overwrite non-directory %q with directory %qcan't use %v to iterate over more than one variableio.github.containers.zstd-chunked.manifest-checksumCould not set environment variable '%s' to '%s': %wx509: certificate has expired or is not yet valid: crypto/elliptic: Add was called on an invalid pointgodebug: Value of name not listed in godebugs.All: Missing "signature.publicKey" field in hashedrekordMissing "data.hash.algorithm" field in hashedrekordInvalid "data.hash.value" field in hashedrekord: %vsql/driver: couldn't convert %v (%T) into type boolinsufficient selector indices for number of symbolsgzip: block size cannot be less than or equal to %dreading list of big data items for container %q: %wWritten lookaside cache for layer %q with length %vio.github.containers.zstd-chunked.manifest-positionio.github.containers.zstd-chunked.tarsplit-positioninvalid blob checksum, expected checksum %s, got %sLastWrite.equals with an uninitialized counterpartyarchive/tar: sparse file contains unreferenced dataonly PAXRecords should be set for TypeXGlobalHeaderPKCS7: No suitable private key found for decryptiongo-jose/go-jose: unsupported/unknown elliptic curvego-jose/go-jose: ed25519 signature failed to verifygo-jose/go-jose: failed to decompress plaintext: %vgo-jose/go-jose: recipient %d: missing header "alg"go-jose/go-jose: recipient %d: missing header "enc"go-jose/go-jose: invalid EC key, missing x/y valuesecdsa: internal error: request size exceeds maximumsql: driver does not support read-only transactionsbuffer.Discard: discarded less bytes then requestederror unlocking and deleting stale lock file %s: %wcrypto/ecdh: internal error: isLess input too largegrpc: cannot create SubConn with empty address listgrpc: failed to decompress the received message: %vber2der: BER tag length is more than available dataoidc: multiple signatures on id token not supportedparsing '%s' failed: unexpected major:minor pair %schanging permissions on file for metacopy check: %woverlay: test mount with multiple lowers failed: %vfailed to access to the linked additional layer: %wreading random number generator, retried for %v: %wcannot add a child (id = %d) of type %T to a serverreceived %d-bytes data exceeding the limit %d bytesstream terminated by RST_STREAM with error code: %vkeepalive ping failed to receive ACK within timeoutproto: PluginSpec: wiretype end group for non-groupinvalid AppendMutable on list with non-message typeinvalid value: setting map field to read-only valueextension %v extends %v outside the extension rangefield %v has invalid type: got %v, want struct kindfield %v has invalid type: %v does not implement %vEXPERIMENTAL. Number of failed connection attempts.proto: bad extension number; not in declared rangesunknown or mismatched type: type: %v, wire type: %vdocker: image reference %s does not start with %s://Login to a container registry on a specified server.application/vnd.docker.distribution.manifest.v1+jsonapplication/vnd.docker.distribution.manifest.v2+jsonCannot use any fingerprint without a public key fileUse `USERNAME[:PASSWORD]` for accessing the registrydocker-archive doesn't support digest references: %smanifest lists are not supported by the %q transportcobra_annotation_bash_completion_filename_extensionsRegisterFlagCompletionFunc: flag '%s' does not existerrors: *target must be interface or implement errorWe can't modify the manifest, hoping for the best...Sign identity must be a fully specified reference %sapplication/vnd.docker.image.rootfs.foreign.diff.tardockerReference %q contains neither a tag nor digestinternal error: missing handler for resolver table: parsing container ID value %q from line %q in %q: %wunable to get capability version from the kernel: %wlayer %d (blob %s) does not match config's DiffID %qUpdating image %q (old names %v) failed, deleting itResult set will include values lexically after last.The canonical location url of the uploaded manifest.Range indicating the current progress of the upload.failed to correctly flush all P-owned cleanup blocksruntime: cannot disable permissions in address spaceruntime.SetFinalizer: pointer not in allocated blockruntime: use of FixAlloc_Alloc before FixAlloc_Init span set block with unpopped elements found in resetcasfrom_Gscanstatus: gp->status is not in scan stateinvalid mixed OCI image with Docker v2s2 config (%q)Cannot convert an image with 0 history entries to %srequest header "TE" may only be "trailers" in HTTP/2http2: Transport readFrame error on conn %p: (%T) %vprotocol error: received DATA before a HEADERS frametls: invalid EncryptedClientHelloKeys PrivateKey: %stls: server selected unsupported protocol version %xtls: received a session ticket with invalid lifetimetls: internal error: session ticket keys unavailabletls: private key type does not match public key typeinternal error: multierr.Format called with 0 errorsinvalid location '%s': URI schemes are not supportedManifest lists are not supported by "docker-daemon:"template: no template %q associated with template %qwrong number of args for %s: want at least %d got %dwrong number of args for %s: got %d want at least %decdsa: internal error: unexpectedly masking off bitsx509: cannot verify signature: insecure algorithm %vlooking for uncompressed digest for blob with TOC %qdnsmessage.OPTResource{Options: []dnsmessage.Option{driver: skip fast-path; continue as if unimplementedinternal error: literalsHeader has invalid size (%d)buildDtable_asm returned unhandled nonzero code = %dsequenceDecs_decode_amd64 returned erroneous code %dcan't set empty name for container big data item: %wlooking for compressed layers matching digest %q: %wCould not create zstd:chunked differ for blob %q: %vmath/big: cannot unmarshal %q into a *big.Float (%v)cannot append two slice with different type (%s, %s)API returned a %d (%s) but provided no error-messagego-jose/go-jose: invalid RSA key, missing n/e valuessql: Tx.Stmt: statement from different database usedSecond return value of SQLite function must be erroroidc: failed to decode provider discovery object: %wcrypto/rsa: PSSOptions.SaltLength cannot be negativegrpc: the provided default service config is invalidSubchannel Connectivity change to %v, last error: %sgrpc: Server.handleStream failed to write status: %vpkcs7: unsupported key encryption algorithm providedpkcs7: cannot parse data: unimplemented content typepkcs7: encryption algorithm parameters are incorrectpkcs7: encryption algorithm parameters are malformedgo-jose/go-jose: invalid ciphertext (invalid length)oidc: failed to decode provider discovery object: %vexpected Content-Type = application/json, got %q: %vmetacopy flag was not set on file in upper layer: %wrecording overlay idmapped mounts support status: %wCached value indicated that overlay is not supportedfailed to stat '%s' while scanning for zfs mount: %vcannot add a child (id = %d) of type %T to a channelcannot delete a child (id = %d) from a listen sockettransport: preface mismatch, wrote %d bytes; want %dheader/message limit not allowed in blacklist configmalformed duration %q: too many digits after decimalprototext: error parsing unknown field wire type: %vexpected space, attr name, or end of tag, but got %qcopy [command options] SOURCE-IMAGE DESTINATION-IMAGELogout of a container registry on a specified server.file that contains a passphrase for the --sign-by keypassword must be specified when username is specifiedusername must be specified when password is specifiedSign the image using a sigstore private key at `PATH` Lookaside configuration: using "docker" namespace %smanifest lists are not supported by the sif transportInternal error: unexpected panic in compressGoroutineapplication/vnd.oci.image.layer.v1.tar+gzip+encryptedReading user-specified passphrase for signing from %s^[-+]?(\.[0-9]+|[0-9]+(\.[0-9]*)?)([eE][-+]?[0-9]+)?$did not find expected alphabetic or numeric characterSetting BUILDAH_ISOLATION=rootless in environment: %vwriting to c/storage without a valid image config: %wafter config %q, refusing to record another config %qAn RFC7235 compliant authentication challenge header.non-concurrent sweep failed to drain all sweep queuesexited a goroutine internally locked to the OS threadUnexpectedly missing special filename component in %sapplication/vnd.oci.image.layer.v1.tar+zstd+encryptedhttp: putIdleConn: too many idle connections for hosthttp2: Framer %p: failed to decode just-written frameillegal use of AllowIllegalReads with ReadMetaHeadershttp2: Transport failed to get client conn for %s: %vnon-CONNECT pattern with unclean path can never matchdescribeConflict called with non-conflicting patternsnet/http: CloseNotify called after ServeHTTP finishedtls: unable to generate random session ticket key: %vtls: received unexpected handshake message of type %Ttls: unexpected server_name extension in server hellotls: client does not support uncompressed connectionstls: failed to find any PEM data in certificate inputinvalid condition: both location and prefix are unsetManifest lists are not supported for docker tar filesUnexpected tar manifest.json: expected 1 item, got %dLayer tarfile %q used for two different DiffID valuestar: cannot use extra whiteout with non-empty file %sbufio.Scan: too many empty tokens without progressingreflect: non-interface type passed to Type.Implementsreflect.Value.Slice: string slice index out of boundssync/atomic: compare and swap of nil value into ValueJWK EC Public Key curve identifier not supported: %q x509: certificate specifies an incompatible key usagepem: cannot encode a header key that contains a coloncrypto/elliptic: attempted operation on invalid pointunique.canonMap: ran out of hash bits while iteratingunique.canonMap: ran out of hash bits while insertingCalling Rekor's NewGetLogEntryByUUIDParamsWithContextframe content size %d given, but %d bytes was writtenimage name %q is already associated with image %q: %wgraph driver name changed from %q to %q during reloadreading size of big data item %q for container %q: %w\.(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])small map with no empty slot (concurrent map writes?)expected array length %d; got TOML array of length %dmath/big: internal error: cannot find (D/n) = -1 for archive/tar: sparse file references non-existent datacannot append two slices with different type (%s, %s)go-jose/go-jose: invalid EC key (nil, or X/Y missing)Enter the verification code %s in your browser at: %slayer in lower level storage driver not accounted forcheck safety of /proc/thread-self/fd/%s magiclink: %wcheck safety of /proc/thread-self/fd/%d magiclink: %wchacha20: internal error: wrong dst and/or src lengthcrypto/ecdh: internal error: mismatched isLess inputscannot combine empty 'service' and non-empty 'method'grpc: Server.Serve failed to create ServerTransport: go-jose/go-jose: key wrap input must be 8 byte blocksrecording overlay data-only layers support status: %wtransport: failed to write initial settings frame: %vreceived an illegal stream id: %v. headers frame: %+vbinarylogging: error in trailer is not a status errorproto: PluginPrivilege: illegal tag %d (wire type %d)unkown field number %d while unmarshalling GoFeaturesunkown field number %d while unmarshalling FeatureSetinvalid GOLANG_PROTOBUF_REGISTRATION_CONFLICT value: duration: %#v: seconds and nanos have different signsdns resolver: missing port after port-separator colon--encrypt-layer can only be used with --encryption-keyuse `OS` instead of the running OS for choosing imagesFailed to retrieve list of images from registry %q: %wuse docker daemon host at `HOST` (docker-daemon: only)invalid Content-Range: %q, parsing complete-length: %winvalid Content-Range: %q, unexpected trailing contenterror accessing certs directory due to permissions: %vdecoding bearer token (last URL %q, body start %q): %w"sif:" locations can only be read from, not written tofmt: scanning called UnreadRune with no rune availableManifest has MIME type %s, ordered candidate list [%s]Checking if image list destination supports signaturesconverting manifest list to list with MIME type %q: %wUnimplemented manifest MIME type %q (normalized as %q)Do not try to unmarshal PolicyTransportScopes directlybytes.Buffer: reader returned negative count from Readtag handle must contain alphanumerical characters onlyexplicitly tagged !!binary data must be base64-encodedblock sequence entries are not allowed in this contextoption ,inline needs a map with string keys in struct Starting interactive OIDC authentication for issuer %sManifest to be saved does not match expected digest %sruntime.m memory alignment too small for spinbit mutexmin size of malloc header is not a size class boundarygcControllerState.findRunnable: blackening not enabledno goroutines (main called runtime.Goexit) - deadlock!trace: non-empty full trace buffer for done generationtrace: non-empty full trace buffer for next generation goroutine running on other thread; stack unavailable Internal error: Error creating v1compatibility for %#vhttp: Request.Write on Request with no Host or URL setread loop ending; caller owns writable underlying conninternal error: expected to be already writing a framehttp2: received GOAWAY %+v, starting graceful shutdownhttp2: handler wrote more than declared Content-Lengthtarget must be an absolute URL or an absolute path: %qnet/http: can't write control character in Request.URLcertificate is not valid for requested server name: %wcryptobyte: Builder is exceeding its fixed-size buffertls: server resumed a session with a different versiontls: server accepted 0-RTT with the wrong cipher suitetls: certificate used with invalid signature algorithmtls: Encrypted Client Hello cannot be used pre-TLS 1.3tls: client indicated early data in second ClientHellotls: failed to create cipher while encrypting ticket: tls: found unknown private key type in PKCS#8 wrappinginvalid alias %q: must contain registry and repositoryprivate key is encrypted, but could not decrypt it: %wInconsistent layer count: %d in manifest, %d in configreflect: Value.SetIterKey called on exhausted iteratorInternal error: unexpected panic in imageLoadGoroutineecdsa: curve not supported by deterministic signaturesx509: cannot verify signature: algorithm unimplementedx509: invalid RDNSequence: invalid attribute value: %sURI with IP (%q) cannot be matched against constraintscrypto/elliptic: Double was called on an invalid pointdeleting specific variant compressor for digest %q: %wrecording specific variant compressor %q/%q for %q: %wunsupported Rekor SET Payload hashedrekord version %#v, square brackets can only be used with IPv6 addresses, IPv6 addresses must be surrounded by square bracketsname is not in canonical format (it must end with a .)literal block was treeless, but no history was definedinvalid decoding table entry %d, symbol %d >= max (%d)layer %s: consume any trailer after the EOF marker: %winternal error: lock is not held by the expected ownernot allowed to change image name assignments at %q: %wcan't retrieve image big data value for empty name: %wnot allowed to change layer name assignments at %q: %wcan't retrieve layer big data value for empty name: %wpanic calling String method on zero %v for flag %s: %vbinary.Write: some values are not fixed-sized in type TOML files cannot contain control characters: '0x%02x'quotedprintable: invalid unescaped byte 0x%02x in bodyno x509 certificates found needed for PKCS7 decryptionsql: expected %d destination arguments in Scan, not %dSQLite aggregator constructors must not have arguments%w: trying to pop component %q of empty stack entry %sgrpc: no decompressor available for compressed payloadgrpc: Server.RegisterService after Server.Serve for %qpkcs7: no enveloped recipient for provided certificateCached value indicated that volatile is not being usedCached value indicated that metacopy is not being usedIgnored state change because subConn is not recognizedgRPC requires a ResponseWriter supporting http.FlusherClosing server transport due to maximum connection agefailed to unmarshal, message is %T, want proto.Messagefield %v has invalid type: got %v, want interface kindkill process pid: %d with SIGKILL ended with error: %v%v.%s cannot be a slice of pointers to primitive types%T.%s cannot be a slice of pointers to primitive typesa message with extensions, but no extensions field in indent may only be composed of space or tab charactersError writing configuration blob to standard output: %wuntrusted-signature-dump-without-verification SIGNATUREcreds and no-creds cannot be specified at the same timecreds and username cannot be specified at the same timeError trying to cancel an inadvertent upload, status %sSignature with digest %s already exists on the registryreference %q matches unsupported manifest MIME types %qat least one of the flags in the group [%v] is requiredos: invalid use of WriteAt on file opened with O_APPENDinternal error: negative process handle reference countinternal error: destSupportedManifestMIMETypes is emptyapplication/vnd.oci.image.layer.nondistributable.v1.tarSignature by %s does not match expected fingerprints %vmap merge requires map or sequence of maps as the valuealias value must contain alphanumerical characters onlyuncompressed digest of layer %q is %q, config claims %qmheap.freeSpanLocked - invalid free of user arena chunkcasfrom_Gscanstatus:top gp->status is not in scan stateunrecognized signature format, starting with binary %#xinternal error: invalid allowedManifestFields value %#vnet/http: request canceled while waiting for connectionnet/http: invalid byte %q in %s; dropping invalid byteshttp2: server: error reading preface from client %v: %vinternal error: can only be writing one frame at a timehttp2: Transport received GOAWAY from server ErrCode:%vtls: internal error: handshake should have had a resulttls: server sent non-zero legacy TLS compression methodbufio.Scanner: SplitFunc returns negative advance countreflect: internal error: invalid use of makeMethodValuereflect.FuncOf: last arg of variadic func must be sliceMissing 'token' attribute since 'slot-id' was not givenecdsa: internal error: shift can only be by 1 to 7 bitsx509: authority info access incorrectly marked criticalx509: too many intermediates for path length constraintx509: failed to load system roots and no roots providedunexpected length of digest for hash function specified?_loc=auto&_sync=FULL&_foreign_keys=1&_txlock=exclusiveeach colon-separated field must have at least one digitRekor /api/v1/log/entries failed: bad request (%d), %+vxz: LZMA2 filter parameter dictionary capacity overflowmatch offset (%d) bigger than current history+dict (%d)loading recomputing image digest information for %s: %wlocating layer with ID %q to retrieve bigdata names: %wTOC contains entries not present in tar-split, incl. %qrequest header list larger than peer's advertised limitcipher.NewCBCEncrypter: IV length must equal block sizecipher.NewCBCDecrypter: IV length must equal block sizeFloat.GobDecode: buffer too small for finite form floatcannot override two slices with different type (%s, %s)unexpected content encryption algorithm %q; expected %qsql: Scan called without calling Next (closemuScanHold)temp dir instance not initialized or already cleaned upgrpc: the connection is closing due to channel idlenessgrpc: Server.processUnaryRPC failed to write status: %vber2der: invalid negative value found in BER tag lengthinvalid ContentEncryptionAlgorithm in encryptAESGCM: %dinvalid ContentEncryptionAlgorithm in encryptAESCBC: %dprogressive AC coefficients for more than one componentgo-jose/go-jose: invalid ciphertext (auth tag mismatch)edwards25519: invalid SetBytesWithClamping input lengthzfs get all -t filesystem -rHp '%s' should contain '%s'cannot add a child (id = %d) of type %T to a subChannelclosing transport due to: %v, received prior goaway: %va HEADERS frame cannot appear in the middle of a streamoutput does not match what is expected on this platformextension number %d is already registered on message %vGRPC_TEST_ONLY_GOOGLE_C2P_RESOLVER_TRAFFIC_DIRECTOR_URIEXPERIMENTAL. Number of successful connection attempts.indent may only be composed of space and tab charactersSign the image using a sigstore parameter file at `PATH`strings: illegal use of non-zero Builder copied by valueStoring signatures for docker tar files is not supporteddocker-archive doesn't support modifying existing imagesRegisterFlagCompletionFunc: flag '%s' already registeredunknown compressed with algorithm %s variant for type %qptrEncoder.encode should have emptied ptrSeen via defersExisting credentials are valid. Already logged in to %s invalid ASN.1 in OIDC issuer v2 extension, trailing dataattempted to go past the end of stream; corrupted value?anchor value must contain alphanumerical characters onlyoption ,inline may only be used on a struct or map fieldprivate key %s specified, but no way to get a passphraseSkipping commit for layer %q, manifest not yet availableDiffID value for layer %d is unknown or explicitly emptyrange function continued iteration after loop body panicrange function continued iteration after whole loop exitprofilealloc called without a P or outside bootstrappingdetected possible issues with cleanups and/or finalizersin gcMark expecting to see gcphase as _GCmarkterminationruntime: netpoll: eventfd ready for something unexpectedsemaphore wake of synctest goroutine from outside bubblehttp2: request body larger than specified content lengthhttp2: response header list larger than advertised limithttp: Request.RequestURI can't be set in client requestspromised request headers cannot include pseudo header %qnet/http: Transport.DialContext hook returned (nil, nil)tls: TLS 1.3 client supports illegal compression methodsnamespaced key is not supported for credential helper %sError removing credentials from credential helper %s: %vnon-empty pointer map passed for non-pointer-size valuesreflect: Value.SetIterValue called on exhausted iteratorunable to read certificate-authority %v for %v due to %wx509: subject key identifier incorrectly marked criticalx509: internal error: empty chain when appending CA certb4050a850c04b3abf54132565044b0b7d7bfd8ba270b39432355ffb4b70e0cbd6bb4bf7f321390b94a03c1d356c21122343280d6115c1d21bd376388b5f723fb4c22dfe6cd4375a05a07476444d5819985007e34cryptographic signature verification of Rekor SET failedbacking file system is unsupported for this graph driverestargz manifest too big to process in memory (%d bytes)record on line %d; parse error on line %d, column %d: %vcrypto/cipher: internal error: generic CBC used with AEScrypto/cipher: internal error: generic CTR used with AEScrypto/ecdh: invalid random source in FIPS 140-only modeunexpected table separator (table names cannot be empty)PKCS11: No suitable private key found for decryption: %wgo-jose/go-jose: cannot sanitize merged headers: %v (%v)go-jose/go-jose: compact JWE format must have five partsgo-jose/go-jose: invalid P2C: must be a positive integersql: driver does not support the use of Named Parameterssql: driver does not support non-default isolation levelSQLite aggregator constructors must return 1 or 2 valuesSQlite aggregator Done() function must have no argumentssqlite statement with already closed database connectioncorruption detected: short output block %d, end %d != %dacBalancerWrapper: NewSubConn: failed to newAddrConn: %vgrpc: Decompressor is not installed for grpc-encoding %qgrpc: trying to send message larger than max (%d vs. %d)overlay: storage already configured with a mount-programpickfirst: received illegal BalancerConfig (type %T): %vAborting the stream early due to InTapHandle failure: %vempty string is not a valid method binary logging configproto: PluginPrivilege: wiretype end group for non-groupduration (%v) has seconds and nanos with different signsinvalid value: setting repeated field to read-only valuehttps://protobuf.dev/reference/go/faq#namespace-conflicttimeseries: resolutions must be monotonically increasingapplication/vnd.docker.distribution.manifest.list.v2+jsonapplication/vnd.docker.distribution.manifest.v1+prettyjws`DIRECTORY` to use to share blobs across OCI repositories%w (after reconnecting, invalid Content-Range header: %v)writing sigstore attachments is disabled by configurationcreating a reference for tag %#v in manifest item @%d: %w... will first try using the original manifest unmodifiedapplication/vnd.docker.image.rootfs.foreign.diff.tar.gzipcurrently logged in, auth file contains an Identity tokenpath of a Docker-compatible config file to update insteadinconsistent OIDC issuer extension values: v1 %#v, v2 %#vno policy.json file found at any of the following: %q, %qcaRootsPath and caRootsData cannot be used simultaneouslysync: WaitGroup misuse: Add called concurrently with Waitsync: WaitGroup.Add called from multiple synctest bubblesFound no UID ranges set aside for user %q in /etc/subuid.Found no GID ranges set aside for user %q in /etc/subgid.Failed to send a signal '%d' to the Process (PID: %d): %vThe client made too many requests within a time interval.Fetch the tags under the repository identified by `name`.runtime: checkmarks found unexpected unmarked object obj=runtime: failed to disable profiling timer; timer_delete(non-Go code set up signal handler without SA_ONSTACK flaginternal error: invalid comparison between two candidatesImage manifest does not match selected manifest digest %sDownload config.json digest %s does not match expected %shttp2: TLS conn unexpectedly found in unencrypted handofftls: client sent invalid encrypted_client_hello extensiontls: Ed25519 public keys are not supported before TLS 1.2received record with version %x when expecting version %xtls: server sent an unnecessary HelloRetryRequest messagetls: server selected an invalid PSK and cipher suite pairtls: no key exchanges supported by both client and servertls: client sent invalid encrypted client hello extensionCredentials for %q were deleted from credential helper %sremoving credentials for %s from credential helper %s: %wcannot run executable found relative to current directory (set GODEBUG=execwait=2 to capture stacks for debugging)can't handle assignment of %s to empty interface argumentDeleting images not implemented for docker-daemon: imagesx509: failed to parse EC private key embedded in PKCS#8: Encrypt must only be called once for each cipher instanceinvalid signature when validating ASN.1 encoded signaturerecording uncompressed digest %q for blob with TOC %q: %wSELECT compressor FROM DigestCompressors WHERE digest = ?unexpected buffer cap %d, want at least %d with window %dcan't retrieve size of image big data with empty name: %wfailed to register containers/storage graph driver %q: %vneither a partial pull nor convert_images is possible: %scrypto/cipher: invalid buffer overlap of output and inputexpected '.' or ']' to end table name, but got %q insteadcrypto/drbg: internal error: request size exceeds maximumgo-jose/go-jose: invalid embedded jwk, must be public keygo-jose/go-jose: compact JWS format must have three partssqlite library was not compiled for thread-safe operationroot path provided to SecureJoin contains '..' componentsgrpc: compressed flag set with identity or empty encodingimage: NewYCbCr Rectangle has huge or negative dimensionsoverlay: test mount indicated that volatile is being usedoverlay: test mount indicated that metacopy is being usedoverlay: additionallayerstore path %q must be a directoryCached value indicated that native-diff is not being used--storage-opt size is only supported for ReadWrite Layersfinished processing active streams while in draining modereceived goaway with non-zero even-numbered stream id: %vunexpected HTTP status code received from server: %d (%s)unkown field number %d while unmarshalling EditionDefaultSubConn with unexpected state %v present in SubConns map.Write the digest of the pushed image to the specified fileInternal error, reference %s does not have a tag, skippingusername and no-creds cannot be specified at the same timeDocker reference without a tag or digest cannot be deletedcalled CompareAndSwap when value is not of comparable typeDeleting images not implemented for docker-archive: images"tarball:" locations can only be read from, not written to"help" flag declared as non-bool. Please correct your codeGenerate the autocompletion script for the specified shelldetermining manifest list type to write to destination: %wjson: cannot set embedded pointer to unexported struct: %vList of verification policy requirements must not be emptyDNS response contained records which contain invalid namesuncompressed digest and TOC digest for layer %q is unknownIdentifies the docker upload uuid for the current request.Check that the endpoint implements Docker Registry API V2.Return a portion of the tags for the specified repository.unable to find instance %s passed to Schema2List.Instancescannot push URL with scheme %q from request with scheme %qhttp2: client connection force closed via ClientConn.Closetls: FIPS 140-3 requires the use of Extended Master Secrettls: server changed cipher suite after a HelloRetryRequestGODEBUG=execwait=2 detected a leaked exec.Cmd created by: Unsupported manifest type, need a Docker schema 2 manifestInvalid source index @%d, only %d manifest items availableError reading tar archive component %q: not a regular fileInternal inconsistency: Information about layer %s missingsync/atomic: swap of inconsistently typed value into Valueusername/password or bearer token may be set, but not bothimageLoadGoroutine: Error during reader.CloseWithError: %vdocker-daemon: reference %s has neither a tag nor a digestx509: authority key identifier incorrectly marked criticalx509: certificate contains duplicate extension with OID %qx509: failed to parse RSA private key embedded in PKCS#8: crypto/elliptic: ScalarMult was called on an invalid pointRekor /api/v1/log/entries failed with a conflict (%d), %+vcan't retrieve container big data value for empty name: %wunknown: cleanupFailureContext not set at the failure sitenot allowed to update mount locations for layers at %q: %wsetting compression concurrency threads to 1: %v; ignoringprerequisites for driver not satisfied (wrong filesystem?)requires mapping configuration on stdin and directory pathcrypto/ecdh: bad X25519 remote ECDH input: low order pointunexpected end of table name (table names cannot be empty)Invalid float %q: underscores must be surrounded by digitsgo-jose/go-jose: no content encryption algorithms providedgo-jose/go-jose: invalid JWK, unable to hex decode x5t: %vgo-jose/go-jose: invalid EC public key, wrong length for xgo-jose/go-jose: invalid EC public key, wrong length for ysql: transaction has already been committed or rolled backSQlite aggregator constructor must return a pointer objectServer.addConn called when server has already been stoppedoidc: user info endpoint is not supported by this provideroidc: current time %v before the nbf (not before) time: %vfailed to find zfs dataset mounted on '%s' in /proc/mountscannot add a child (id = %d) of type %T to a listen sockettransport: http2Client.reader got unhandled frame type %v.attrNoneattrScriptattrScriptTypeattrStyleattrURLattrSrcseturlPartNoneurlPartPreQueryurlPartQueryOrFragurlPartUnknownSending reply: err=%v value=%v pipeid=%v datafd=%v errfd=%vSynchronize one or more images from one location to another--%s can only be used if the destination transport is 'dir'Invalid scope %s: Uses non-canonical format, perhaps try %s... Internal error: domain %s does not match destination %s Sigstore attachments: using "default-docker" configurationDestination reference must not contain a manifest index @%dUsing original blob without modification for encrypted blobManifest list has MIME type %q, ordered candidate list [%s]invalid reference format: repository name must be lowercaseLength of privKeys should match length of privKeysPasswordsFulcio certificate has a duplicate OIDC issuer v1 extensionFulcio certificate has a duplicate OIDC issuer v2 extensionInternal error: Unexpected signature verification result %qsync: WaitGroup is reused before previous Wait has returnedlooking for compressed layers with digest %q and labels: %wThe client does not have required access to the repository.runtime: mmap: too much locked memory (check 'ulimit -l'). tried to trace goroutine with invalid or unsupported statusTreating single images as manifest lists is not implementedUnimplemented manifest list MIME type %q (normalized as %q)http2: Transport received Server's graceful shutdown GOAWAYRoundTripper returned a response & error; ignoring responsehttp: superfluous response.WriteHeader call from %s (%s:%d)http: response.Write on hijacked connection from %s (%s:%d)tls: server resumed a session with a different cipher suitetls: server selected TLS 1.3 using the legacy version fieldtls: server sent an unnecessary HelloRetryRequest key_sharetls: client didn't send one key share in second ClientHellotls: client sent unexpected key share in second ClientHelloTar: Can't create device %v while running in user namespacebufio.Scanner: SplitFunc returns advance count beyond inputreflect: reflect.Value.Elem on an invalid notinheap pointerreflect: indirection through nil pointer to embedded structsync/atomic: store of inconsistently typed value into ValueCould not determine the absolute path of config file %s: %wecdsa: internal error: ordInverse produced an invalid valueRekor /api/v1/log/entries/{entryUUID}: entry not found (%d)size/digest of layer with ID %q could not be calculated: %wwhile resolving %q. It resolves outside the root directorycrypto/des: use of DES is not allowed in FIPS 140-only modecrypto/rc4: use of RC4 is not allowed in FIPS 140-only modecrypto/ecdh: private key and public key curves do not matchcrypto/md5: use of MD5 is not allowed in FIPS 140-only modeerror while retrieving keyprovider protocol grpc output: %wgo-jose/go-jose: JWK with matching kid not found in JWK Setgo-jose/go-jose: invalid JWK, x5u header is invalid URL: %wgo-jose/go-jose: invalid EC private key, wrong length for xgo-jose/go-jose: invalid EC private key, wrong length for ygo-jose/go-jose: invalid EC private key, wrong length for dcrypto/dsa: use of DSA is not allowed in FIPS 140-only modeunsupported Scan, storing driver.Value type %T into type %Tcan't allocate 'cgo-pointer hack index pointer': ptr == nilSQlite aggregator Step() function must return 0 or 1 valuestype of SQlite aggregator Step() return value must be errorSQLite aggregator Done() function must return 1 or 2 valuesstream: failed to validate md when setting trailer, err: %vber2der: Indefinite form tag must have constructed encoding--storage-opt inodes is only supported for ReadWrite Layersinitial http2 frame from server is not a settings frame: %Tsecond GOAWAY written and no active streams left to processcannot register CodecV2 with empty string result for Name()proto: failed to marshal, message is %T, want proto.Messagedelegating_resolver: unable to build the proxy resolver: %vdelimNonedelimDoubleQuotedelimSingleQuotedelimSpaceOrTagEndhtml/template internal error: template escaping out of sync%v.%s cannot be a pointer to a map or a slice of map values%T.%s cannot be a pointer to a map or a slice of map valuesError creating a tagged reference from registry tag list: %vunexpected MIME type for sigstore attachment manifest %s: %qSignature %q has Content-Type %q, unexpected for a signatureunable to retrieve auth token: invalid username/password: %scalled CompareAndDelete when value is not of comparable typeInternal error: Cannot have both ref %s and source index @%dencoding original manifest list for comparison (%q: %#v): %wComparing source and destination manifest digests: %v vs. %vapplication/vnd.oci.image.layer.nondistributable.v1.tar+gzipapplication/vnd.oci.image.layer.nondistributable.v1.tar+zstdInternal inconsistency: both "caPath" and "caData" specifiedbytes.Reader.UnreadRune: previous operation was not ReadRunefound a tab character where an indentation space is expectedTOC digest %q for layer %q is present but %q flag is not setInitiate a resumable blob upload with an empty request body.manual span allocation called with non-manually-managed typeaddr range base and limit are not in the same memory segmentruntime: failed to configure profiling timer; timer_settime(runtime: malformed profBuf buffer - tag and data out of syncfetching target platform image selected from image index: %w (Client.Timeout or context cancellation while reading body)internal error: attempt to send frame on a closed stream: %vmalformed response from server: missing status pseudo headernet/http: server response headers exceeded %d bytes; abortedtls: no supported versions satisfy MinVersion and MaxVersiontls: initial handshake had non-empty renegotiation extensiontls: server resumed a session with a different EMS extensiontls: client requested unsupported application protocols (%q)Error storing credentials for %s in credential helper %s: %vUnexpected Docker reference %s with both a name and a digestreflect: call of reflect.Value.Cap on ptr to non-array Valuereflect: call of reflect.Value.Len on ptr to non-array Valuesync/atomic: compare and swap of inconsistently typed valuesx509: encrypted PEM data is not a multiple of the block sizeblockTypeRawblockTypeRLEblockTypeCompressedblockTypeReserveddigesting manifest: no manifest digest callback provided: %wcreating tar-split parent directory for a copy from templaterelease of references to the previous zstd reader failed: %vinternal error: just-created zstd:chunked missing TOC digestexpected a comma (',') or array terminator (']'), but got %sInvalid integer %q: underscores must be surrounded by digitsInvalid float %q: '.' must be followed by one or more digitsKey '%s' was already created and cannot be used as an array.invalid context to convert cursor rows, missing parent *Rowsoidc: device authorization endpoint not returned by providerparsing #%v byte, around ...|%s|..., whole buffer ...|%s|...creating and locking temp dir instance lock in %s failed: %wconnect called on addrConn in non-idle state (%v); ignoring.ber2der: cannot move offset forward, end of ber data reachedoverlay: image path %q is not absolute. Can not be relativeheader key %q contains illegal characters not in [0-9a-z-_.]end group tag %d does not match begin group tag %d at pos %dpickfirst: received illegal BalancerConfig (type %T): %v: %wInvalid oci: layout reference: index @%d must not be negative"version" flag declared as non-bool. Please correct your codeto request completion choices for the specified command-line.... will use the original manifest list type, and then try %vwriting manifest failed and we cannot try conversions: %q: %wuse certificates at the specified path to access the registryInternal inconsistency: Fulcio use set up without OIDC issuerAt least one of caRootsPath and caRootsData must be specifiedInternal inconsistency: PKI specified with a Rekor public keyinternal error: unexpected tail comment event (please report)Failed to read CAP_SYS_ADMIN presence for the current processexporting filesystem layer %q without compression for blob %q is in a tiny block with other (possibly long-lived) values runtime: may need to increase max user processes (ulimit -u) unsupported image-specific operation on artifact with type %qnet/http: invalid Cookie.Domain %q; dropping domain attributetls: unsupported certificate: private key is %T, expected *%Ttls: EncryptedClientHelloConfigList contains no valid configstls: server sent a ServerHello extension forbidden in TLS 1.3tls: received a session ticket with empty opaque ticket labeltls: client certificate used with invalid signature algorithmpull-from-mirror must not be set for a non-mirror registry %qexec: Cmd started a Process but leaked without a call to Waitreflect: wrong return count from function created by MakeFuncInternal error: Unknown manifest digest, can't add signaturesNeither 'id' nor 'object' attributes were found in pkcs11 URIx509: failed to parse URI constraint %q: cannot be IP addressDELETE FROM DigestSpecificVariantCompressors WHERE digest = ?can't retrieve size of container big data with empty name: %wthis error may indicate that the docker daemon is not runninggo-jose/go-jose: invalid JWK, x5t header has invalid encodinggo-jose/go-jose: invalid JWK, x5t header is of incorrect sizego-jose/go-jose: invalid RSA private key, missing %s value(s)go-jose/go-jose: invalid EC private key, missing x/y/d valuesgo-jose/go-jose: invalid OCT (symmetric) key, missing k valuebigmod: internal error: u and v are not in the expected statecipher: incorrect additional data length given to GCM TLS 1.2cipher: incorrect additional data length given to GCM TLS 1.3subconn returned from pick is type %T, not *acBalancerWrappergrpc: message after decompression larger than max (%d vs. %d)grpc: received message after decompression larger than max %dgo.opentelemetry.io/contrib/instrumentation/net/http/otelhttpoverlay: test mount indicated that volatile is not being usedoverlay: test mount indicated that metacopy is not being usedadditional Layer Store %v failed to stat additional layer: %vUnexpected error on reading Additional Layer Store pointer %vReceived a HEADERS frame with :method %q which should be POSTcan only set project ID on empty directories, %s is not emptygenerate-sigstore-key [command options] --output-prefix PREFIXUnsupported transport '%s' for tag listing. Only supported: %sInteractive proxy for fetching container images (EXPERIMENTAL)internal error: GetBlobAt is not supported by the %q transport Lookaside configuration: using "default-docker" configurationunsquashfs -d %s -f %s && tar --acls --xattrs -C %s -cpf %s ./... finished computing the digest of the SIF conversion outputtarball: does not support any scopes except the default "" onestrings.Reader.UnreadRune: previous operation was not ReadRuneCannot determine canonical Docker reference for destination %sUploading manifest failed, attempted the following formats: %sInternal error: unexpected panic in diffIDComputationGoroutineError determining a location for %s, using a memory-only cacheexactly one of keyPath, keyPaths and keyData must be specifiedcannot have key %q in inlined map: conflicts with struct fieldRunning %+v with environment %+v, UID map %+v, and GID map %+vold/unsupported capability version (kernel older than 2.6.26?)can't copy layers for a manifest list (shouldn't be attempted)Standard HTTP Host Header. Should be set to the registry host.found bad pointer in Go heap (incorrect use of unsafe or cgo?)limiterEvent.stop: found wrong event in p's limiter event slotslice length too short to convert to array or pointer to arrayruntime: internal error: misuse of lockOSThread/unlockOSThreadfetching target platform image selected from manifest list: %wInternal error: neither src nor configBlob set in manifestOCI1trying to put back buffer of the wrong size in the copyBufPooltls: server echoed TLS 1.3 compatibility session ID in TLS 1.2tls: server did not send a quic_transport_parameters extensiontls: client used the legacy version field to negotiate TLS 1.3tls: client did not send a quic_transport_parameters extensiontls: certificate cannot be used with the selected cipher suiteInternal error: trying to use an already closed tarfile.Writerarchive: Skipping xattr for file %s since value is too big: %sreflect.ArrayOf: array size would exceed virtual address spacereflect: reflect.Value.Pointer on an invalid notinheap pointerdocker-daemon: can not use algo:digest value %s as a namespacex509: failed to marshal EC private key while building PKCS#8: x509: certificate is not authorized to sign other certificatesURI with empty host (%q) cannot be matched against constraintsx509: certificate private key does not implement crypto.Signerinvalid signature when validating IEEE_P1363 encoded signatureError re-loading previously-created log entry with UUID %s: %wcrypto/cipher: use of CFB is not allowed in FIPS 140-only modecrypto/sha1: use of SHA-1 is not allowed in FIPS 140-only modeexpected two hexadecimal digits after '\x', but got %q instead0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZerror while retrieving keyprovider protocol command output: %wError while unmarshalling binary executable command output: %wgo-jose/go-jose: invalid EC key, X/Y are not on declared curveread-only image store assigns the same name to multiple imagesread-only layer store assigns the same name to multiple layers0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyzfailed to mount overlay for metacopy check with %q options: %wcannot mount layer, mount data %q too large %d >= page size %doverlay: removing an item from the merged directory failed: %vpickfirst: unable to unmarshal LB policy config: %s, error: %v