Docker网络代理设置

我会带着你远行 2022-05-10 04:50 213阅读 0赞

背景

在一些环境，服务器没有直接连接外网的权限，需要通过网络代理。我们通常会将网络代理直接配置在/etc/environment、/etc/profile之类的配置文件中，这对于大部分操作都是可行的。然而，docker命令却使用不了这些代理。

比如docker pull时需要从外网下载镜像，就会出现如下错误：

$ docker pull hello-world
    Unable to find image 'hello-world:latest' locally
    Pulling repository docker.io/library/hello-world
    docker: Network timed out while trying to connect to https://index.docker.io/v1/repositories/library/hello-world/images. You may want to check your internet connection or if you are behind a proxy..
    See 'docker run --help'.

ps: 本文在Ubuntu16.04下测试通过。  
解决方案一：  
停止docker服务，手动以使用2375端口监听所有网络接口的方式启动docker daemon。

$ systemctl stop docker.service
    $ nohup docker daemon -H tcp://0.0.0.0:2375 -H unix:///var/run/docker.sock &

解决方案二：

编辑配置文件，Ubuntu下是/etc/default/docker，CentOS下是/etc/sysconfig/docker。不过通过修改这两个文件来配置daemon已经是discouraged的了。不鼓励使用这种方法。

HTTP_PROXY="http://[proxy-addr]:[proxy-port]/"
    HTTPS_PROXY="https://[proxy-addr]:[proxy-port]/"
    export HTTP_PROXY HTTPS_PROXY

解决方案三：  
该方法是持久化的，修改后会一直生效。该方法覆盖了默认的docker.service文件。

1.  为docker服务创建一个内嵌的systemd目录
    
    $ mkdir -p /etc/systemd/system/docker.service.d
2.  创建/etc/systemd/system/docker.service.d/http-proxy.conf文件，并添加HTTP\_PROXY环境变量。其中\[proxy-addr\]和\[proxy-port\]分别改成实际情况的代理地址和端口：
    
    \[Service\]  
    Environment=“HTTP\_PROXY=http://\[proxy-addr\]:\[proxy-port\]/” “HTTPS\_PROXY=https://\[proxy-addr\]:\[proxy-port\]/”
3.  如果还有内部的不需要使用代理来访问的Docker registries，那么嗨需要制定NO\_PROXY环境变量：

[Service]
    #Environment="HTTP_PROXY=http://proxy1.bj.petrochina:8080/" "HTTPS_PROXY=https://proxy1.bj.petrochina:8080/" "NO_PROXY=localhost,127.0.0.1,*.cnpc,*.petrochina,10.*,11.*"

1.  查看环境变量

$systemctl show --property=Environment docker

1.  更新配置：
    
    $ systemctl daemon-reload
2.  重启Docker服务：
    
    $ systemctl restart docker
3.  运行helloworld

$ docker run hello-world

Unable to find image 'hello-world:latest' locally
    latest: Pulling from library/hello-world
    d1725b59e92d: Pull complete 
    Digest: sha256:0add3ace90ecb4adbf7777e9aacf18357296e799f81cabc9fde470971e499788
    Status: Downloaded newer image for hello-world:latest
        
        Hello from Docker!
        This message shows that your installation appears to be working correctly.
        
        To generate this message, Docker took the following steps:
         1. The Docker client contacted the Docker daemon.
         2. The Docker daemon pulled the "hello-world" image from the Docker Hub.
            (amd64)
         3. The Docker daemon created a new container from that image which runs the
            executable that produces the output you are currently reading.
         4. The Docker daemon streamed that output to the Docker client, which sent it
            to your terminal.
        
        To try something more ambitious, you can run an Ubuntu container with:
         $ docker run -it ubuntu bash
        
        Share images, automate workflows, and more with a free Docker ID:
         https://hub.docker.com/
        
        For more examples and ideas, visit:
         https://docs.docker.com/get-started/