Depot builders cannot reach ghcr.io: `COPY --from` builds failing

Since Feb 12, all --remote-only deploys fail when the Dockerfile references ghcr.io images. The error is connection reset by peer from Depot builders (2605:6440:d000:34b:: ) to GHCR (2606:50c0:8001::154). Docker Hub images resolve fine. Workaround: using --local-only.

##[debug]Evaluating condition for step: 'Deploy to Fly.io (Production)'
##[debug]Evaluating: success()
##[debug]Evaluating success:
##[debug]=> true
##[debug]Result: true
##[debug]Starting: Deploy to Fly.io (Production)
##[debug]Loading inputs
##[debug]Loading env
Run flyctl deploy --config fly.toml --app fiscalnacional-api --remote-only
##[debug]/usr/bin/bash -e /home/runner/work/_temp/62933e95-2035-4fca-b0a5-e7406ead78e0.sh
==> Verifying app config
Validating fly.toml
✓ Configuration is valid
--> Verified app config
==> Building image
Waiting for depot builder...
==> Building image with Depot
--> build:  (​)
#1 [internal] load build definition from Dockerfile
#1 transferring dockerfile: 1.72kB 0.0s done
#1 DONE 0.0s
#2 [internal] load metadata for docker.io/library/python:3.11-slim
#2 DONE 0.2s
#3 [internal] load metadata for ghcr.io/astral-sh/uv:latest
#3 ERROR: failed to copy: httpReadSeeker: failed open: failed to do request: Get "https://pkg-containers.githubusercontent.com/ghcr1/blobs/sha256:a6bf84bb32636a4380b16bb37407665c3ee8af0f549c8cff1793254d441c534e?se=2026-02-14T13%3A55%3A00Z&sig=LnxOzGTH2ZiUFS2abtfBj1v1c2sSJuapWYbO%2BMcU5L0%3D&ske=2026-02-15T00%3A55%3A43Z&skoid=fb3d2a07-ec6c-4fe4-aced-9efe0fd2fe1a&sks=b&skt=2026-02-14T00%3A55%3A43Z&sktid=398a6654-997b-47e9-b12b-9515b896b4de&skv=2025-01-05&sp=r&spr=https&sr=b&sv=2025-01-05&hmac=672d3d085bb6bdc9f25c7a53c3c5b54f702f5a1e774e018ac1751935b152433d": read tcp [2605:6440:d000:34b:0:22f2:5835:1]:38180->[2606:50c0:8001::154]:443: read: connection reset by peer
------
 > [internal] load metadata for ghcr.io/astral-sh/uv:latest:
------
==> Building image
Waiting for depot builder...
==> Building image with Depot
--> build:  (​)
#1 [internal] load build definition from Dockerfile
#1 transferring dockerfile: 1.72kB 0.0s done
#1 DONE 0.0s
#2 [internal] load metadata for docker.io/library/python:3.11-slim
#2 DONE 0.2s
#3 [internal] load metadata for ghcr.io/astral-sh/uv:latest
#3 ERROR: failed to copy: httpReadSeeker: failed open: failed to do request: Get "https://pkg-containers.githubusercontent.com/ghcr1/blobs/sha256:a6bf84bb32636a4380b16bb37407665c3ee8af0f549c8cff1793254d441c534e?se=2026-02-14T13%3A55%3A00Z&sig=pCifhAwlBE7TTdysG0VrnXxRH5V7pZfwG2x0a1XlBvE%3D&ske=2026-02-14T23%3A18%3A51Z&skoid=fb3d2a07-ec6c-4fe4-aced-9efe0fd2fe1a&sks=b&skt=2026-02-13T23%3A18%3A51Z&sktid=398a6654-997b-47e9-b12b-9515b896b4de&skv=2025-01-05&sp=r&spr=https&sr=b&sv=2025-01-05&hmac=672d3d085bb6bdc9f25c7a53c3c5b54f702f5a1e774e018ac1751935b152433d": read tcp [2605:6440:d000:34b:0:22f2:5835:1]:38794->[2606:50c0:8001::154]:443: read: connection reset by peer
------
 > [internal] load metadata for ghcr.io/astral-sh/uv:latest:
------
Error: failed to fetch an image or build from source: error building: failed to solve: ghcr.io/astral-sh/uv:latest: failed to resolve source metadata for ghcr.io/astral-sh/uv:latest: failed to copy: httpReadSeeker: failed open: failed to do request: Get "https://pkg-containers.githubusercontent.com/ghcr1/blobs/sha256:a6bf84bb32636a4380b16bb37407665c3ee8af0f549c8cff1793254d441c534e?se=2026-02-14T13%3A55%3A00Z&sig=pCifhAwlBE7TTdysG0VrnXxRH5V7pZfwG2x0a1XlBvE%3D&ske=2026-02-14T23%3A18%3A51Z&skoid=fb3d2a07-ec6c-4fe4-aced-9efe0fd2fe1a&sks=b&skt=2026-02-13T23%3A18%3A51Z&sktid=398a6654-997b-47e9-b12b-9515b896b4de&skv=2025-01-05&sp=r&spr=https&sr=b&sv=2025-01-05&hmac=672d3d085bb6bdc9f25c7a53c3c5b54f702f5a1e774e018ac1751935b152433d": read tcp [2605:6440:d000:34b:0:22f2:5835:1]:38794->[2606:50c0:8001::154]:443: read: connection reset by peer
Error: Process completed with exit code 1.
##[debug]Finishing: Deploy to Fly.io (Production)

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.