fix issue

Signed-off-by: ChengyuZhu6 <[email protected]>

Author: ChengyuZhu6

pkg/cmd/image/ensure.go

@@ -99,7 +99,7 @@ func ensureOne(ctx context.Context, client *containerd.Client, rawRef string, ta
 
 		if err != nil {
 			// In some circumstance (e.g. people just use 80 port to support pure http), the error will contain message like "dial tcp <port>: connection refused".
-			if !errors.Is(err, http.ErrSchemeMismatch) && !errutil.IsErrConnectionRefused(err) {
+			if !errors.Is(err, http.ErrSchemeMismatch) && !errutil.IsErrConnectionRefused(err) && !errutil.IsErrHTTPResponseToHTTPSClient(err) {
 				return err
 			}
 			if options.InsecureRegistry {

pkg/errutil/errors_check.go

@@ -24,3 +24,10 @@ func IsErrConnectionRefused(err error) bool {
 	const errMessage = "connect: connection refused"
 	return strings.Contains(err.Error(), errMessage)
 }
+
+// IsErrHTTPResponseToHTTPSClient return whether err is
+// "http: server gave HTTP response to HTTPS client"
+func IsErrHTTPResponseToHTTPSClient(err error) bool {
+	const errMessage = "server gave HTTP response to HTTPS client"
+	return strings.Contains(err.Error(), errMessage)
+}

pkg/imgutil/transfer.go

@@ -173,7 +173,7 @@ func executeTransferWithRetry(ctx context.Context, client *containerd.Client, pa
 
 	transferErr := doTransfer(false)
 	if transferErr != nil {
-		if errors.Is(transferErr, http.ErrSchemeMismatch) || errutil.IsErrConnectionRefused(transferErr) {
+		if errors.Is(transferErr, http.ErrSchemeMismatch) || errutil.IsErrConnectionRefused(transferErr) || errutil.IsErrHTTPResponseToHTTPSClient(transferErr) {
 			if gOptions.InsecureRegistry {
 				log.G(ctx).WithError(transferErr).Warnf("server %q does not seem to support HTTPS, falling back to plain HTTP", parsedReference.Domain)
 				transferErr = doTransfer(true)