Keycloak image pull error

Hi Ozone team,

Looks like the last alpha version was released quite a while ago, now depending on some obsolete package. When I tried to launch demo earlier today, I encountered this error.

✘ keycloak Error failed to resolve reference Error response from daemon: failed to resolve reference “docker.io/bitnami/keycloak:22.0.5”: docker.io/bitnami/keycloak:22.0.5: not found

On the final note, is the next release coming up soon?

Thank you much!

1 Like

Hi @hai ,

Sorry about the inconvenience. The bitnami Docker Hub repo had been removed for a month or so, so this image became not available.

The nightly version of Ozone contains a fix for this, so you can possibly use 1.0.0-SNAPSHOT instead of the alpha.13 and you should be sorted.

Alternatively, you can override this image in your Ozone distro directly. To do so, override the image declaration using a custom Docker Compose override file. Have a look at this documentation article: Further customizing Docker Compose files with docker-compose-override.yml

Set the file content to be:

services:

  keycloak:
    image: bitnamilegacy/keycloak:22.0.5

We are about to release alpha.15 (in a week or two).

Let me know if that works.

2 Likes

Hi Romain,

That’s awesome, thank you much for the update!

With the change made to docker-compose-keycloak.yml, to exactly that, I was able to pull the image. However, it’s still failing to launch in healthy mode, with some password issue (I’m attaching the log); all apps are reachable but inaccessible (wont take jdoe/password as infos).

	at org.postgresql.ds.common.BaseDataSource.getConnection(BaseDataSource.java:103)
	at org.postgresql.xa.PGXADataSource.getXAConnection(PGXADataSource.java:49)
	at org.postgresql.xa.PGXADataSource.getXAConnection(PGXADataSource.java:35)
	at io.agroal.pool.ConnectionFactory.createConnection(ConnectionFactory.java:232)
	at io.agroal.pool.ConnectionPool$CreateConnectionTask.call(ConnectionPool.java:536)
	at io.agroal.pool.ConnectionPool$CreateConnectionTask.call(ConnectionPool.java:517)
	at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
	at io.agroal.pool.util.PriorityScheduledExecutor.beforeExecute(PriorityScheduledExecutor.java:75)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1134)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
	at java.base/java.lang.Thread.run(Thread.java:840)
2025-11-18 10:55:33,327 WARN  [org.infinispan.PERSISTENCE] (keycloak-cache-init) ISPN000554: jboss-marshalling is deprecated and planned for removal
2025-11-18 10:55:33,436 INFO  [org.infinispan.CONTAINER] (keycloak-cache-init) ISPN000556: Starting user marshaller 'org.infinispan.jboss.marshalling.core.JBossUserMarshaller'
2025-11-18 10:55:33,616 INFO  [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000088: Unable to use any JGroups configuration mechanisms provided in properties {}. Using default JGroups configuration!
2025-11-18 10:55:33,748 INFO  [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000078: Starting JGroups channel `ISPN`
2025-11-18 10:55:33,750 INFO  [org.jgroups.JChannel] (keycloak-cache-init) local_addr: 5aff8a5b-cc23-465a-a804-f9056d1849fa, name: e8febc9e681e-29742
2025-11-18 10:55:33,758 WARN  [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the send buffer of socket MulticastSocket was set to 1MB, but the OS only allocated 212.99KB
2025-11-18 10:55:33,758 WARN  [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the receive buffer of socket MulticastSocket was set to 20MB, but the OS only allocated 212.99KB
2025-11-18 10:55:33,758 WARN  [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the send buffer of socket MulticastSocket was set to 1MB, but the OS only allocated 212.99KB
2025-11-18 10:55:33,759 WARN  [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the receive buffer of socket MulticastSocket was set to 25MB, but the OS only allocated 212.99KB
2025-11-18 10:55:33,768 INFO  [org.jgroups.protocols.FD_SOCK2] (keycloak-cache-init) server listening on *.31348
2025-11-18 10:55:33,780 WARN  [io.quarkus.vertx.http.runtime.VertxHttpRecorder] (main) The X-Forwarded-* and Forwarded headers will be considered when determining the proxy address. This configuration can cause a security issue as clients can forge requests and send a forwarded header that is not overwritten by the proxy. Please consider use one of these headers just to forward the proxy address in requests.
2025-11-18 10:55:33,792 WARN  [io.agroal.pool] (agroal-11) Datasource '<default>': FATAL: password authentication failed for user "keycloak"
2025-11-18 10:55:35,774 INFO  [org.jgroups.protocols.pbcast.GMS] (keycloak-cache-init) e8febc9e681e-29742: no members discovered after 2003 ms: creating cluster as coordinator
2025-11-18 10:55:35,784 INFO  [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000094: Received new cluster view for channel ISPN: [e8febc9e681e-29742|0] (1) [e8febc9e681e-29742]
2025-11-18 10:55:35,795 INFO  [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000079: Channel `ISPN` local address is `e8febc9e681e-29742`, physical addresses are `[172.18.0.8:46884]`
2025-11-18 10:55:35,806 WARN  [org.infinispan.CONFIG] (keycloak-cache-init) ISPN000569: Unable to persist Infinispan internal caches as no global state enabled
2025-11-18 10:55:36,248 INFO  [org.infinispan.CLUSTER] (main) ISPN000080: Disconnecting JGroups channel `ISPN`
2025-11-18 10:55:36,295 ERROR [org.keycloak.quarkus.runtime.cli.ExecutionExceptionHandler] (main) ERROR: Failed to start server in (development) mode
2025-11-18 10:55:36,295 ERROR [org.keycloak.quarkus.runtime.cli.ExecutionExceptionHandler] (main) ERROR: Failed to obtain JDBC connection
2025-11-18 10:55:36,295 ERROR [org.keycloak.quarkus.runtime.cli.ExecutionExceptionHandler] (main) ERROR: FATAL: password authentication failed for user "keycloak"
2025-11-18 10:55:36,295 ERROR [org.keycloak.quarkus.runtime.cli.ExecutionExceptionHandler] (main) For more details run the same command passing the '--verbose' option. Also you can use '--help' to see the details about the usage of the particular command.
keycloak 10:56:37.61 INFO  ==> 
keycloak 10:56:37.61 INFO  ==> Welcome to the Bitnami keycloak container
keycloak 10:56:37.62 INFO  ==> Subscribe to project updates by watching https://github.com/bitnami/containers
keycloak 10:56:37.62 INFO  ==> Submit issues and feature requests at https://github.com/bitnami/containers/issues
keycloak 10:56:37.62 INFO  ==> 
keycloak 10:56:37.62 INFO  ==> ** Starting keycloak setup **
keycloak 10:56:37.63 INFO  ==> Validating settings in KEYCLOAK_* env vars...
keycloak 10:56:37.65 INFO  ==> Trying to connect to PostgreSQL server postgresql...
keycloak 10:56:37.66 INFO  ==> Found PostgreSQL server listening at postgresql:5432
keycloak 10:56:37.66 INFO  ==> Configuring database settings
keycloak 10:56:37.69 INFO  ==> Enabling statistics
keycloak 10:56:37.70 INFO  ==> Enabling health endpoints
keycloak 10:56:37.71 INFO  ==> Configuring http settings
keycloak 10:56:37.74 INFO  ==> Configuring hostname settings
keycloak 10:56:37.75 INFO  ==> Configuring cache count
keycloak 10:56:37.76 INFO  ==> Configuring log level
keycloak 10:56:37.78 INFO  ==> Configuring proxy
keycloak 10:56:37.79 INFO  ==> ** keycloak setup finished! **
keycloak 10:56:37.80 INFO  ==> ** Starting keycloak **
2025-11-18 10:56:40,919 INFO  [org.keycloak.quarkus.runtime.hostname.DefaultHostnameProvider] (main) Hostname settings: Base URL: http://192.168.1.234:8084, Hostname: 192.168.1.234, Strict HTTPS: false, Path: /, Strict BackChannel: true, Admin URL: <unset>, Admin: <request>, Port: 8084, Proxied: true
2025-11-18 10:56:40,925 WARN  [org.keycloak.protocol.oidc.OIDCLoginProtocolFactory] (main) Deprecated switch 'legacy-logout-redirect-uri' is enabled. Please try to disable it and update your clients to use OpenID Connect compliant way for RP-initiated logout.
2025-11-18 10:56:42,994 WARN  [io.quarkus.agroal.runtime.DataSources] (main) Datasource <default> enables XA but transaction recovery is not enabled. Please enable transaction recovery by setting quarkus.transaction-manager.enable-recovery=true, otherwise data may be lost if the application is terminated abruptly
2025-11-18 10:56:43,217 WARN  [io.agroal.pool] (agroal-11) Datasource '<default>': FATAL: password authentication failed for user "keycloak"
2025-11-18 10:56:43,219 WARN  [org.hibernate.engine.jdbc.env.internal.JdbcEnvironmentInitiator] (JPA Startup Thread) HHH000342: Could not obtain connection to query metadata: org.postgresql.util.PSQLException: FATAL: password authentication failed for user "keycloak"
	at org.postgresql.core.v3.ConnectionFactoryImpl.doAuthentication(ConnectionFactoryImpl.java:693)
	at org.postgresql.core.v3.ConnectionFactoryImpl.tryConnect(ConnectionFactoryImpl.java:203)
	at org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:258)
	at org.postgresql.core.ConnectionFactory.openConnection(ConnectionFactory.java:54)
	at org.postgresql.jdbc.PgConnection.<init>(PgConnection.java:263)
	at org.postgresql.Driver.makeConnection(Driver.java:443)
	at org.postgresql.Driver.connect(Driver.java:297)
	at java.sql/java.sql.DriverManager.getConnection(DriverManager.java:681)
	at java.sql/java.sql.DriverManager.getConnection(DriverManager.java:229)
	at org.postgresql.ds.common.BaseDataSource.getConnection(BaseDataSource.java:103)
	at org.postgresql.xa.PGXADataSource.getXAConnection(PGXADataSource.java:49)
	at org.postgresql.xa.PGXADataSource.getXAConnection(PGXADataSource.java:35)
	at io.agroal.pool.ConnectionFactory.createConnection(ConnectionFactory.java:232)
	at io.agroal.pool.ConnectionPool$CreateConnectionTask.call(ConnectionPool.java:536)
	at io.agroal.pool.ConnectionPool$CreateConnectionTask.call(ConnectionPool.java:517)
	at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
	at io.agroal.pool.util.PriorityScheduledExecutor.beforeExecute(PriorityScheduledExecutor.java:75)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1134)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
	at java.base/java.lang.Thread.run(Thread.java:840)
2025-11-18 10:56:43,962 WARN  [org.infinispan.PERSISTENCE] (keycloak-cache-init) ISPN000554: jboss-marshalling is deprecated and planned for removal
2025-11-18 10:56:44,042 INFO  [org.infinispan.CONTAINER] (keycloak-cache-init) ISPN000556: Starting user marshaller 'org.infinispan.jboss.marshalling.core.JBossUserMarshaller'
2025-11-18 10:56:44,233 INFO  [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000088: Unable to use any JGroups configuration mechanisms provided in properties {}. Using default JGroups configuration!
2025-11-18 10:56:44,330 WARN  [io.quarkus.vertx.http.runtime.VertxHttpRecorder] (main) The X-Forwarded-* and Forwarded headers will be considered when determining the proxy address. This configuration can cause a security issue as clients can forge requests and send a forwarded header that is not overwritten by the proxy. Please consider use one of these headers just to forward the proxy address in requests.
2025-11-18 10:56:44,346 WARN  [io.agroal.pool] (agroal-11) Datasource '<default>': FATAL: password authentication failed for user "keycloak"
2025-11-18 10:56:44,355 INFO  [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000078: Starting JGroups channel `ISPN`
2025-11-18 10:56:44,357 INFO  [org.jgroups.JChannel] (keycloak-cache-init) local_addr: 398d117e-b0f9-432f-8f06-c2567ae5438d, name: e8febc9e681e-36972
2025-11-18 10:56:44,363 WARN  [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the send buffer of socket MulticastSocket was set to 1MB, but the OS only allocated 212.99KB
2025-11-18 10:56:44,364 WARN  [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the receive buffer of socket MulticastSocket was set to 20MB, but the OS only allocated 212.99KB
2025-11-18 10:56:44,364 WARN  [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the send buffer of socket MulticastSocket was set to 1MB, but the OS only allocated 212.99KB
2025-11-18 10:56:44,364 WARN  [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the receive buffer of socket MulticastSocket was set to 25MB, but the OS only allocated 212.99KB
2025-11-18 10:56:44,371 INFO  [org.jgroups.protocols.FD_SOCK2] (keycloak-cache-init) server listening on *.33890
2025-11-18 10:56:46,376 INFO  [org.jgroups.protocols.pbcast.GMS] (keycloak-cache-init) e8febc9e681e-36972: no members discovered after 2003 ms: creating cluster as coordinator
2025-11-18 10:56:46,386 INFO  [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000094: Received new cluster view for channel ISPN: [e8febc9e681e-36972|0] (1) [e8febc9e681e-36972]
2025-11-18 10:56:46,398 INFO  [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000079: Channel `ISPN` local address is `e8febc9e681e-36972`, physical addresses are `[172.18.0.8:49426]`
2025-11-18 10:56:46,409 WARN  [org.infinispan.CONFIG] (keycloak-cache-init) ISPN000569: Unable to persist Infinispan internal caches as no global state enabled
2025-11-18 10:56:46,859 INFO  [org.infinispan.CLUSTER] (main) ISPN000080: Disconnecting JGroups channel `ISPN`
2025-11-18 10:56:46,938 ERROR [org.keycloak.quarkus.runtime.cli.ExecutionExceptionHandler] (main) ERROR: Failed to start server in (development) mode
2025-11-18 10:56:46,938 ERROR [org.keycloak.quarkus.runtime.cli.ExecutionExceptionHandler] (main) ERROR: Failed to obtain JDBC connection
2025-11-18 10:56:46,938 ERROR [org.keycloak.quarkus.runtime.cli.ExecutionExceptionHandler] (main) ERROR: FATAL: password authentication failed for user "keycloak"
2025-11-18 10:56:46,938 ERROR [org.keycloak.quarkus.runtime.cli.ExecutionExceptionHandler] (main) For more details run the same command passing the '--verbose' option. Also you can use '--help' to see the details about the usage of the particular command.

Also good to know that making the 1.0.0-SNAPSHOT calls for a nightly build, does that also contains Odoo 17 integrations yet?

Or maybe I should wait for the alpha.15… Can’t wait to see what you have coming up next!

BR,