From e8f9f33eb1f3c668ee01f5d8e9d2ca150a9918ac Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan-Otto=20Kr=C3=B6pke?= <mail@jkroepke.de>
Date: Fri, 9 Oct 2026 10:31:43 +0200
Subject: [PATCH] ci: retry container fixture image pulls (#2589)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de>
---
 .github/workflows/ci.yml | 44 +++++++++++++++++++++++++++++++---------
 1 file changed, 34 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9ab715ef..bbbf098a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -774,13 +774,25 @@ jobs:
         run: |
           $ErrorActionPreference = "Stop"
 
+          # Registry connections can be reset while downloading image layers.
+          $PSNativeCommandUseErrorActionPreference = $false
           $crictl = Join-Path $env:ProgramFiles "containerd\crictl.exe"
-          & $crictl `
-              --runtime-endpoint $env:CRI_ENDPOINT `
-              pull mcr.microsoft.com/oss/kubernetes/windows-host-process-containers-base-image:v1.0.0
+          $maxAttempts = 3
+          for ($attempt = 1; $attempt -le $maxAttempts; $attempt++) {
+              & $crictl `
+                  --runtime-endpoint $env:CRI_ENDPOINT `
+                  pull mcr.microsoft.com/oss/kubernetes/windows-host-process-containers-base-image:v1.0.0
 
-          if ($LASTEXITCODE -ne 0) {
-              throw "Failed to pull HostProcess base image"
+              if ($LASTEXITCODE -eq 0) {
+                  break
+              }
+              if ($attempt -eq $maxAttempts) {
+                  throw "Failed to pull HostProcess base image after $maxAttempts attempts"
+              }
+
+              $delay = 5 * $attempt
+              Write-Warning "Failed to pull HostProcess base image (attempt $attempt/$maxAttempts); retrying in $delay seconds"
+              Start-Sleep -Seconds $delay
           }
 
       - name: Pull Nano Server image
@@ -790,13 +802,25 @@ jobs:
         run: |
           $ErrorActionPreference = "Stop"
 
+          # Registry connections can be reset while downloading image layers.
+          $PSNativeCommandUseErrorActionPreference = $false
           $crictl = Join-Path $env:ProgramFiles "containerd\crictl.exe"
-          & $crictl `
-              --runtime-endpoint $env:CRI_ENDPOINT `
-              pull $env:NANOSERVER_IMAGE
+          $maxAttempts = 3
+          for ($attempt = 1; $attempt -le $maxAttempts; $attempt++) {
+              & $crictl `
+                  --runtime-endpoint $env:CRI_ENDPOINT `
+                  pull $env:NANOSERVER_IMAGE
 
-          if ($LASTEXITCODE -ne 0) {
-              throw "Failed to pull Nano Server image $env:NANOSERVER_IMAGE"
+              if ($LASTEXITCODE -eq 0) {
+                  break
+              }
+              if ($attempt -eq $maxAttempts) {
+                  throw "Failed to pull Nano Server image $env:NANOSERVER_IMAGE after $maxAttempts attempts"
+              }
+
+              $delay = 5 * $attempt
+              Write-Warning "Failed to pull Nano Server image $env:NANOSERVER_IMAGE (attempt $attempt/$maxAttempts); retrying in $delay seconds"
+              Start-Sleep -Seconds $delay
           }
 
       - name: Setup container network