From f404331e907c08d7f3ea007c78a623005c8fbf31 Mon Sep 17 00:00:00 2001
From: Darren Stahl <darst@microsoft.com>
Date: Tue, 23 Jan 2018 14:39:49 -0800
Subject: [PATCH] ctr: print error when pull auth fails

Signed-off-by: Darren Stahl <darst@microsoft.com>
---
 remotes/docker/resolver.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/remotes/docker/resolver.go b/remotes/docker/resolver.go
index 57a18b664..edc994158 100644
--- a/remotes/docker/resolver.go
+++ b/remotes/docker/resolver.go
@@ -136,6 +136,9 @@ func (r *dockerResolver) Resolve(ctx context.Context, ref string) (string, ocisp
 		log.G(ctx).Debug("resolving")
 		resp, err := fetcher.doRequestWithRetries(ctx, req, nil)
 		if err != nil {
+			if errors.Cause(err) == ErrInvalidAuthorization {
+				err = errors.Wrapf(err, "pull access denied, repository does not exist or may require authorization")
+			}
 			return "", ocispec.Descriptor{}, err
 		}
 		resp.Body.Close() // don't care about body contents.