request a new token before downloading each layer

Fixes #20069

Signed-off-by: Shijiang Wei <mountkin@gmail.com>
Upstream-commit: 05b05a358f80b49901a4714b98c2cdb1348c5874
Component: engine

components/engine/contrib/download-frozen-image-v2.sh

@@ -95,6 +95,7 @@ while [ $# -gt 0 ]; do
 			echo "skipping existing ${imageId:0:12}"
 			continue
 		fi
+		token="$(curl -sSL "https://auth.docker.io/token?service=registry.docker.io&scope=repository:$image:pull" | jq --raw-output .token)"
 		curl -SL --progress -H "Authorization: Bearer $token" "https://registry-1.docker.io/v2/$image/blobs/$imageLayer" -o "$dir/$imageId/layer.tar" # -C -
 	done
 	echo