AWS CloudFormation CodeBuild：我可以使用 ECR 映像作为环境映像吗

如何解决AWS CloudFormation CodeBuild：我可以使用 ECR 映像作为环境映像吗

我在尝试使用来自 ECR 的自定义图像时创建了以下脚本：

  Adminrole:
    Type: AWS::IAM::Role
    Properties:
      RoleName: !Join
                  - "."
                  - - !Ref "AWS::StackName"
                    - !Ref "AWS::Region"
                    - "codebuild"
      Path: "/"
      AssumeRolePolicyDocument:
        Statement:
        - Action: ['sts:AssumeRole']
          Effect: Allow
          Principal:
            Service: [codebuild.amazonaws.com]
        Version: '2012-10-17'
      Policies:
        - PolicyName: "root"
          PolicyDocument:
            Version: "2012-10-17"
            Statement:
               - Effect: "Allow"
                 Action: "*"
                 Resource: "*"

  ProjectTerrafom:
    Type: AWS::CodeBuild::Project
    Properties:
      Name: !Join
              - "_"
              - - !Ref "AWS::StackName"
                - !Ref "AWS::Region"
                - "ProjectTerrafom"
      Description: terraform deployment
      ServiceRole: !Ref Adminrole
      Artifacts:
        Type: no_artifacts
      Environment:
        Type: LINUX_CONTAINER
        ComputeType: BUILD_GENERAL1_SMALL
        Image: 111111.cer.ecr.eu-center-1.amazonaws.com/my_terraform
      Source:
        Location: !Ref "FullPathRepoNameterraform"
        Type: GITHUB_ENTERPRISE
      TimeoutInMinutes: 10
      Tags:
        - Key: Project
          Value: "Run terraform From CodeBuild"

当我运行 CodeBuild 时，出现以下错误：

BUILD_CONTAINER_UNABLE_TO_PULL_IMAGE: Unable to pull customer's container image.
CannotPullContainerError: Error response from daemon: pull access denied for
111111.cer.ecr.eu-center-1.amazonaws.com/my_terraform,repository does
 not exist or may `enter code here`require 'docker login': denied: User: CodeBuild

这是权限问题还是我们不允许将 ECR 映像用于 CodeBuild？

解决方法

您可以在代码构建中使用 ECR 图像，但您需要根据该错误进行验证。所以我建议你交叉检查你的 docker 凭据，确认登录然后交叉检查图像 URL

,

我通过添加以下行解决了这个问题：

(define-macro (overload name-spec . body)
   (let ((name (car name-spec))
         (args (cdr name-spec)))
      `(define,name (let ((,name,name))
                       (lambda,args,@body)))))

(overload (display x . rest)
   (let ((port (if (null? rest)
                   (current-output-port)
                   (car rest))))
     (if (number? x)
         (display (string-append "#<" (number->string x 16) ">") port)
         (display x port))))

(display 10)
;; ==> #<a>
(display "20")
;; ==>  20

整个部分如下所示：

ImagePullCredentialsType: SERVICE_ROLE