docker save gives Error response from daemon: no suitable export target found:

[iraj-jelo]

Description

Hi there,

I'm trying to pull an image in my docker and then import it in my Kubernetes cluster's nodes (build by Kind). the pulls seem successful.

$ docker pull --platform=linux/amd64 kserve/llmisvc-controller:v0.20.0
v0.20.0: Pulling from kserve/llmisvc-controller
Digest: sha256:d502b5b56713b12d0e04127cdea76bd935402a0d7870d3c30dbf730349d86a95
Status: Image is up to date for kserve/llmisvc-controller:v0.20.0
docker.io/kserve/llmisvc-controller:v0.20.0

But when I import them in Kind nodes:

$ docker save --platform="linux/amd64" "kserve/llmisvc-controller:v0.20.0" | docker exec --privileged -i "cluster-demo-worker2" ctr --namespace=k8s.io images import --snapshotter=overlayfs -
Error response from daemon: no suitable export target found: image with reference kserve/llmisvc-controller:v0.20.0 was found but does not provide the specified platform (linux/amd64)
ctr: unrecognized image format

Reproduce

docker pull --platform=linux/amd64 kserve/llmisvc-controller:v0.20.0
docker save --platform="linux/amd64" "kserve/llmisvc-controller:v0.20.0" | echo

Expected behavior

No response

docker version

Client:
 Version:           29.7.2
 API version:       1.55
 Go version:        go1.26.5
 Git commit:        a7dcaa6
 Built:             Wed Aug  5 18:31:33 2026
 OS/Arch:           windows/amd64
 Context:           desktop-linux

Server: Docker Desktop 4.89.0 (238018)
 Engine:
  Version:          29.7.2
  API version:      1.55 (minimum version 1.40)
  Go version:       go1.26.5
  Git commit:       6a43e3d
  Built:            Wed Aug  5 18:28:36 2026
  OS/Arch:          linux/amd64
  Experimental:     false
 containerd:
  Version:          v2.3.3
  GitCommit:        aad11006b869517fcd3009450b6f82da282e1a9b
 runc:
  Version:          1.4.3
  GitCommit:        v1.4.3-0-gbb14dabe
 docker-init:
  Version:          0.19.0
  GitCommit:        de40ad0

docker info

Client:
 Version:    29.7.2
 Context:    desktop-linux
 Debug Mode: false
 Plugins:
  agent: Docker AI Agent Runner (Docker Inc.)
    Version:  v1.127.0
    Path:     C:\Users\C1\.docker\cli-plugins\docker-agent.exe
  ai: Docker AI Agent - Ask Gordon (Docker Inc.)
    Version:  v1.30.0
    Path:     C:\Users\C1\.docker\cli-plugins\docker-ai.exe
  buildx: Docker Buildx (Docker Inc.)
    Version:  v0.36.1-desktop.1
    Path:     C:\Users\C1\.docker\cli-plugins\docker-buildx.exe
  compose: Docker Compose (Docker Inc.)
    Version:  v5.5.0
    Path:     C:\Users\C1\.docker\cli-plugins\docker-compose.exe
  debug: Get a shell into any image or container (Docker Inc.)
    Version:  0.0.47
    Path:     C:\Users\C1\.docker\cli-plugins\docker-debug.exe
  desktop: Docker Desktop commands (Docker Inc.)
    Version:  v0.4.3
    Path:     C:\Users\C1\.docker\cli-plugins\docker-desktop.exe
  dhi: CLI for managing Docker Hardened Images (Docker Inc.)
    Version:  v0.0.7
    Path:     C:\Users\C1\.docker\cli-plugins\docker-dhi.exe
  extension: Manages Docker extensions (Docker Inc.)
    Version:  v0.2.31
    Path:     C:\Users\C1\.docker\cli-plugins\docker-extension.exe
  init: Creates Docker-related starter files for your project (Docker Inc.)
    Version:  v1.4.0
    Path:     C:\Users\C1\.docker\cli-plugins\docker-init.exe
  mcp: Docker MCP Plugin (Docker Inc.)
    Version:  v0.43.3
    Path:     C:\Users\C1\.docker\cli-plugins\docker-mcp.exe
  model: Docker Model Runner (Docker Inc.)
    Version:  v1.2.6
    Path:     C:\Users\C1\.docker\cli-plugins\docker-model.exe
  offload: Docker Offload (Docker Inc.)
    Version:  v0.6.13
    Path:     C:\Users\C1\.docker\cli-plugins\docker-offload.exe
  pass: Docker Pass Secrets Manager Plugin (beta) (Docker Inc.)
    Version:  v0.2.2
    Path:     C:\Users\C1\.docker\cli-plugins\docker-pass.exe
  sandbox: "docker sandbox" is deprecated, use Docker Sandboxes instead (Docker Inc.)
    Version:  v0.13.0
    Path:     C:\Users\C1\.docker\cli-plugins\docker-sandbox.exe
  scout: Docker Scout (Docker Inc.)
    Version:  v1.24.0
    Path:     C:\Users\C1\.docker\cli-plugins\docker-scout.exe

Server:
 Containers: 6
  Running: 3
  Paused: 3
  Stopped: 0
 Images: 52
 Server Version: 29.7.2
 Storage Driver: overlayfs
  driver-type: io.containerd.snapshotter.v1
 Logging Driver: json-file
 Cgroup Driver: cgroupfs
 Cgroup Version: 2
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
 CDI spec directories:
  /etc/cdi
  /var/run/cdi
 Discovered Devices:
  cdi: docker.com/gpu=webgpu
 Swarm: inactive
 Runtimes: nvidia runc io.containerd.runc.v2
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: aad11006b869517fcd3009450b6f82da282e1a9b
 runc version: v1.4.3-0-gbb14dabe
 init version: de40ad0
 Security Options:
  seccomp
   Profile: builtin
  cgroupns
 Kernel Version: 6.6.87.2-microsoft-standard-WSL2
 Operating System: Docker Desktop
 OSType: linux
 Architecture: x86_64
 CPUs: 12
 Total Memory: 31.02GiB
 Name: docker-desktop
 ID: 0b9e8bc1-b125-496b-bcaf-b6b579a96379
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 HTTP Proxy: http.docker.internal:3128
 HTTPS Proxy: http.docker.internal:3128
 No Proxy: hubproxy.docker.internal
 Labels:
  com.docker.desktop.address=npipe://\\.\pipe\docker_cli
 Experimental: false
 Insecure Registries:
  hubproxy.docker.internal:5555
  ::1/128
  127.0.0.0/8
 Live Restore Enabled: false
 Firewall Backend: iptables

Additional Info

Some context information:

$ docker image inspect   kserve/llmisvc-controller:v0.20.0   --format '{{.Os}}/{{.Architecture}}'
linux/amd64

$ docker image ls --tree \
  kserve/llmisvc-controller:v0.20.0
                                                                                                                                                                                             
IMAGE                               ID             DISK USAGE   CONTENT SIZE   EXTRA
kserve/llmisvc-controller:v0.20.0   d502b5b56713        185MB           50MB
├─ linux/amd64                      4bf78942d500        184MB         49.1MB
├─ linux/arm/v7                     be6453e834ba           0B             0B
├─ linux/arm64                      e0963c6adc62           0B             0B
├─ linux/ppc64le                    ff7e02dc8f4e           0B             0B
└─ linux/s390x                      dcfa3ce26f74           0B             0B

Note that the above output for linux/amd64 seems not to be valid, as it's printed with gray color font:

$ docker buildx imagetools inspect kserve/llmisvc-controller:v0.20.0

Name:      docker.io/kserve/llmisvc-controller:v0.20.0
MediaType: application/vnd.oci.image.index.v1+json
Digest:    sha256:d502b5b56713b12d0e04127cdea76bd935402a0d7870d3c30dbf730349d86a95

Manifests:
  Name:        docker.io/kserve/llmisvc-controller:v0.20.0@sha256:4bf78942d5009b2684decfe68d8f1c904b4a0f41711ec750869f16df0fd7ef29
  MediaType:   application/vnd.oci.image.manifest.v1+json
  Platform:    linux/amd64

  Name:        docker.io/kserve/llmisvc-controller:v0.20.0@sha256:be6453e834ba2fe6d797395c8e43ea42f011694b0d88ac2870075e94327d1222
  MediaType:   application/vnd.oci.image.manifest.v1+json
  Platform:    linux/arm/v7

  Name:        docker.io/kserve/llmisvc-controller:v0.20.0@sha256:e0963c6adc62593ada575cfb8224127ee50d335dd469f24be1093bbf68ab7cbb
  MediaType:   application/vnd.oci.image.manifest.v1+json
  Platform:    linux/arm64

  Name:        docker.io/kserve/llmisvc-controller:v0.20.0@sha256:ff7e02dc8f4e96eaf24371794225df0140d4309dfc7f6b498cbd9663e9c26b9e
  MediaType:   application/vnd.oci.image.manifest.v1+json
  Platform:    linux/ppc64le

  Name:        docker.io/kserve/llmisvc-controller:v0.20.0@sha256:dcfa3ce26f74bdaf669173b41ec20cdc3048f31d66dc046eb7f4d3ae2449c79c
  MediaType:   application/vnd.oci.image.manifest.v1+json
  Platform:    linux/s390x

  Name:        docker.io/kserve/llmisvc-controller:v0.20.0@sha256:1a38319dea7cee5ee5dee08192261cc0dde56af6d694155363b8059407259a2a
  MediaType:   application/vnd.oci.image.manifest.v1+json
  Platform:    unknown/unknown
  Annotations:
    vnd.docker.reference.digest: sha256:4bf78942d5009b2684decfe68d8f1c904b4a0f41711ec750869f16df0fd7ef29
    vnd.docker.reference.type:   attestation-manifest

  Name:        docker.io/kserve/llmisvc-controller:v0.20.0@sha256:1cb484a64e3299f93ec131420198b306838f564750b5c482d3906c3af40023dd
  MediaType:   application/vnd.oci.image.manifest.v1+json
  Platform:    unknown/unknown
  Annotations:
    vnd.docker.reference.digest: sha256:be6453e834ba2fe6d797395c8e43ea42f011694b0d88ac2870075e94327d1222
    vnd.docker.reference.type:   attestation-manifest

  Name:        docker.io/kserve/llmisvc-controller:v0.20.0@sha256:9183b01ba342ffbcc15c67abfed6d163ebedf1aa02ec500f6db51a5c5f768082
  MediaType:   application/vnd.oci.image.manifest.v1+json
  Platform:    unknown/unknown
  Annotations:
    vnd.docker.reference.type:   attestation-manifest
    vnd.docker.reference.digest: sha256:e0963c6adc62593ada575cfb8224127ee50d335dd469f24be1093bbf68ab7cbb

  Name:        docker.io/kserve/llmisvc-controller:v0.20.0@sha256:db621d21a6f8587a951b28ade6a7bd231d8c8d62b51c2a85607391fe3d9ee91b
  MediaType:   application/vnd.oci.image.manifest.v1+json
  Platform:    unknown/unknown
  Annotations:
    vnd.docker.reference.digest: sha256:ff7e02dc8f4e96eaf24371794225df0140d4309dfc7f6b498cbd9663e9c26b9e
    vnd.docker.reference.type:   attestation-manifest

  Name:        docker.io/kserve/llmisvc-controller:v0.20.0@sha256:6483d021538ad1a55dbdbbdbc7faaf911cf560ad7c5ed00723b418ea08cd261b
  MediaType:   application/vnd.oci.image.manifest.v1+json
  Platform:    unknown/unknown
  Annotations:
    vnd.docker.reference.digest: sha256:dcfa3ce26f74bdaf669173b41ec20cdc3048f31d66dc046eb7f4d3ae2449c79c
    vnd.docker.reference.type:   attestation-manifest

[thaJeztah]

What version of containerd is running inside the container? There may be some issues if the platform is not the native platform, but trying to reproduce, I don't get the error;

docker pull --platform=linux/amd64 kserve/llmisvc-controller:v0.20.0
docker run -d --rm --name dind --privileged docker:dind
docker save --platform="linux/amd64" "kserve/llmisvc-controller:v0.20.0" | docker exec --privileged -i "dind" ctr --address /var/run/docker/containerd/containerd.sock --namespace=k8s.io images import --snapshotter=overlayfs -
docker.io/kserve/llmisvc controller:v0.2	saved
application/vnd.oci.image.manifest.v1+json sha256:4bf78942d5009b2684decfe68d8f1c904b4a0f41711ec750869f16df0fd7ef29
Importing	elapsed: 0.8 s	total:   0.0 B	(0.0 B/s)

docker exec --privileged -i "dind" ctr --address /var/run/docker/containerd/containerd.sock --namespace=k8s.io images ls
REF                                         TYPE                                       DIGEST                                                                  SIZE     PLATFORMS LABELS
docker.io/kserve/llmisvc-controller:v0.20.0 application/vnd.oci.image.manifest.v1+json sha256:4bf78942d5009b2684decfe68d8f1c904b4a0f41711ec750869f16df0fd7ef29 46.9 MiB -         -
time="2026-09-02T16:01:52Z" level=error msg="failed resolving platform for image docker.io/kserve/llmisvc-controller:v0.20.0" error="content digest sha256:76953e89391382ee3fbecb0b41c1d87e45eb86f796c36eaccafcf73c90ca5f66: not found"