Can't dowload trivy db

[zerr0s]

Hello,

I'm deploying harbor (2.5.1) in an air gap environment and I have to use a proxy to download the gtrivy's CVE database. The proxy is set in harbor.yaml and I can see that the trivy container is running with the http(s)_proxy set. But trivy can't download the database:

2022-10-03T14:41:09Z [INFO] [/pkg/scan/job.go:167]: Report mime types: [application/vnd.security.vulnerability.report; version=1.1]
2022-10-03T14:41:09Z [INFO] [/pkg/scan/job.go:222]: Get report for mime type: application/vnd.security.vulnerability.report; version=1.1
2022-10-03T14:41:11Z [INFO] [/pkg/scan/job.go:243]: Report with mime type application/vnd.security.vulnerability.report; version=1.1 is not ready yet, retry after 5 seconds
2022-10-03T14:41:16Z [ERROR] [/pkg/scan/job.go:292]: check scan report with mime type application/vnd.security.vulnerability.report; version=1.1: running trivy wrapper: running trivy: exit status 1: 2022-10-03T14:41:13.890Z	[34mINFO[0m	Need to update DB
2022-10-03T14:41:13.890Z	[34mINFO[0m	DB Repository: ghcr.io/aquasecurity/trivy-db
2022-10-03T14:41:13.890Z	[34mINFO[0m	Downloading DB...
2022-10-03T14:41:13.903Z	[31mFATAL[0m	DB error: failed to download vulnerability DB: OCI artifact error: OCI artifact error: OCI repository error: Get "https://ghcr.io/v2/": http: server gave HTTP response to HTTPS client
: general response handler: unexpected status code: 500, expected: 200

Harbor is running in HTTPS. the core, job and trivy components are set to use the proxy.

Any idea please ?

[rrgadeev]

#17061

[zerr0s]

ok I see. I'll check local network and the proxy used to connect outside. Thanks

[wy65701436]

@zerr0s This seems to be a network issue, so if you are having this problem, reopen it.