From https://integration.wikimedia.org/ci/job/service-pipeline/32/console
[service-pipeline] Running shell script + sudo /usr/local/bin/docker-pusher docker-registry.wikimedia.org/wikimedia/mediawiki-services-mathoid:build-32 The push refers to a repository [docker-registry.wikimedia.org/wikimedia/mediawiki-services-mathoid] 6fa9c0522178: Preparing 0d111570ed17: Preparing fae8af7d18e4: Preparing 0c03b4356347: Preparing 25ded9f9eec0: Preparing 90e7e7a8266b: Preparing 90e7e7a8266b: Waiting error parsing HTTP 403 response body: invalid character '<' looking for beginning of value: "<html>\r\n<head><title>403 Forbidden</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>403 Forbidden</h1></center>\r\n<hr><center>nginx/1.11.13</center>\r\n</body>\r\n</html>\r\n"
Given that nginx, and not the docker daemon, is the one responding with a 403, perhaps our credentials are wrong or the user is not authorized. @hashar or maybe @akosiaris (someone with root on contint1001) can you verify that the contents of /etc/docker-pusher/config.json are populated with the right base64 encoded credentials for docker-registry.wikimedia.org?
Also, the job is attempting to push to a wikimedia/mediawiki-services-mathoid repo in the registry. Does this naming convention need tweaking at all and/or does the repo need to be initialized before we can push?