nerdctl login will save whatever credentials is being provided when a registry does NOT ask for authentication

[apostasie]

Description

Title says all

Steps to reproduce the issue

1. Start a registry with no authentication
2. nerdctl login against it

Describe the results you received and expected

Bogus credentials have been saved (and will be used moving forward).

It seems to me like a lot of our login issues could be solved with a preflight request.

What version of nerdctl are you using?

1.7.6

Are you using a variant of nerdctl? (e.g., Rancher Desktop)

None

Host information

No response

[apostasie]

@Zheaoli I am working on a somewhat large rewrite of overall login code.
You did flag this as "needs discussion", and I was wondering what is your overall opinion on this, so that I can inform my work with your insight on this.

Kindly let me know your thoughts.

Thanks a lot :)

[apostasie]

To my chagrin, this is actually docker behavior, which is just wrong...

Closing this as wontfix.