[Bug]: macOS docker-credential-desktop - “IntelliJ IDEA.app” would like to access data from other apps.

[StefanLobbenmeierObjego]

Module

Core

Testcontainers version

2.0.4

Using the latest Testcontainers version?

Yes

Host OS

macOS

Host Arch

arm

Docker version

Client:
 Version:           29.4.0
 API version:       1.54
 Go version:        go1.26.1
 Git commit:        9d7ad9f
 Built:             Tue Apr  7 08:34:32 2026
 OS/Arch:           darwin/arm64
 Context:           desktop-linux

Server: Docker Desktop 4.67.0 (222858)
 Engine:
  Version:          29.3.1
  API version:      1.54 (minimum version 1.41)
  Go version:       go1.25.8
  Git commit:       f78c987
  Built:            Wed Mar 25 16:14:30 2026
  OS/Arch:          linux/arm64
  Experimental:     false
 containerd:
  Version:          v2.2.1
  GitCommit:        dea7da592f5d1d2b7755e3a161be07f43fad8f75
 runc:
  Version:          1.3.4
  GitCommit:        v1.3.4-0-gd6d73eb8
 docker-init:
  Version:          0.19.0
  GitCommit:        de40ad0

What happened?

When I run any unit tests that use test containers, I get this macOS prompt

Relevant log output

In the logs I can see this:


12:04:02.952 [Test worker] INFO tc.testcontainers/ryuk:0.14.0 -- Creating container for image: testcontainers/ryuk:0.14.0

<prompt appears, I click no or I wait 30 seconds>

12:04:10.262 [Test worker] INFO org.testcontainers.utility.RegistryAuthLocator -- Credential helper/store (docker-credential-desktop) does not have credentials for https://index.docker.io/v1/

Additional Information

Maybe it's possible to turn this off and pull without credentials, or prompt users to configure their credentials elsewhere

Mostly raising this for awareness because I had to debug file system access event logs sudo fs_usage -w -f filesys java > filesys.log to figure out the culprit

[StefanLobbenmeierObjego]

So it looks like testcontainers is just running docker-credential-desktop get to get those credentials, which feels reasonable (and just running this command has the same behaviour). I will bother docker desktop instead 😄

[StefanLobbenmeierObjego]

Workaround for me was to put this value in the ~/.docker/config.json:

{
	"credsStore": "osxkeychain",
}

then testcontainers calls docker-credential-osxkeychain get instead which does not seem to have that issue