Getting credential helpers to work with "pass"

General
, ,
1

Hi all,

I am trying to get docker-credential-helpers to work with “pass” on ubuntu but keep getting the following error when pulling an image from my ECR repo

$ docker pull XXXXXXXX7971.dkr.ecr.eu-central-1.amazonaws.com/ocr_proxy
Using default tag: latest
Error response from daemon: Head https://XXXXXXXX7971.dkr.ecr.eu-central-1.amazonaws.com/v2/ocr_proxy/manifests/latest: no basic auth credentials

Here is my setup

$ uname -a
Linux ip-19-0-25-58 6.14.0-1015-aws #15~24.04.1-Ubuntu SMP Tue Sep 23 22:44:48 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

I downloaded and installed credential-helper via:
$ curl -L -o docker-credential-pass https://github.com/docker/docker-credential-helpers/releases/download/v0.9.4/docker-credential-pass-v0.9.4.linux-amd64
$ chmod 755 docker-credential-pass
$ mv docker-credential-pass /usr/local/bin/

Validating its version, looking good
$ docker-credential-pass --version
docker-credential-pass (GitHub - docker/docker-credential-helpers: Programs to keep Docker login credentials safe by storing in platform keystores) v0.9.4

I have installed pass via apt
$ pass --version
============================================
= pass: the standard unix password manager =
= =
= v1.7.4 =
= =
= Jason A. Donenfeld =
= Jason@zx2c4.com =
= =
= http://www.passwordstore.org/ =
============================================

logging into my ECR repo seems to properly initialize pass

$ aws ecr get-login-password --region eu-central-1 | sudo -u ubuntu docker login --username AWS --password-stdin XXXXXXXX7971.dkr.ecr.eu-central-1.amazonaws.com

$ pass list
Password Store
±- docker-credential-helpers

  • ±- xxxxxxxxxxxxUtY2VudHJhbC0xLmFtxxxxxxxxx=*
  •    +-- AWS*

.docker/config.json seems to be fine as well

$ more .docker/config.json
{

  •    "auths": {*

  •            "XXXXXXXX7971.dkr.ecr.eu-central-1.amazonaws.com": {}*

  •    },*

  •    "credsStore": "pass"*

}

NOTE: When I run the following commands WITHOUT having pass and credential helpers installed, everything is working fine, image is getting pulled and repo password is getting stored directly in .docker/config.json so overall repo and permission setup should be fine:

$ aws ecr get-login-password --region eu-central-1 | sudo -u ubuntu docker login --username AWS --password-stdin XXXXXXXX7971.dkr.ecr.eu-central-1.amazonaws.com
$ docker pull XXXXXXXX7971.dkr.ecr.eu-central-1.amazonaws.com/ocr_proxy

Any idea how to make it work?