[英]Docker DIND unable to access private registry
我正在使用GitLab以及GitLab运行程序和DIND。
配置详细信息:
---------------------------------------
docker run --privileged --name gitlab-dind -d --restart=always docker:17.07-dind
---------------------------------------
cat gitlab_runner.sh
docker run -d --name gitlab-runner --restart always \
-v /mnt/data/gitlab/gitlab-runner:/etc/gitlab-runner \
--link gitlab-dind:docker \
gitlab/gitlab-runner:v9.5.0
---------------------------------------
cat /mnt/data/gitlab/gitlab-runner/config.toml
concurrent = 1
check_interval = 0
[[runners]]
name = "RunnerA"
url = "https://gitlab.dev.abc.net"
token = "d8ed43a69ebed74ccab2493857d8cb"
executor = "docker"
[runners.docker]
tls_verify = false
image = "docker:17.07"
privileged = false
disable_cache = false
volumes = ["/cache"]
host = "tcp://gitlab-dind:2375"
shm_size = 0
[runners.cache]
---------------------------------------
cat ~/wksp/test-proj/.gitlab-ci.yml
image: docker.artifactory.abc.net/docker:17.07
variables:
DOCKER_HOST: tcp://docker:2375
# This before_script block was added later but it seems this block
# isn't executed before the DIND tries fetching image from Artifactory
before_script:
- docker login -u svc-art-user -p some-pwd docker.artifactory.abc.net
- docker info
services:
- docker.artifactory.abc.net/docker:17.07-dind
build:
stage: build
script:
- docker build -t my-docker-node-image .
---------------------------------------
顺便说一句,在上述结构中, DOCKER_HOST
配置需要.gitlab-ci.yml
或只是入门( host = "tcp://gitlab-dind:2375
)在config.toml
足够?
现在,当跑步者跑步时,出现以下错误:
Runner log error:
Running with gitlab-ci-multi-runner 9.5.0 (413da38)
on RunnerA (d8ed43a6)
Using Docker executor with image docker.artifactory.abc.net/docker:17.07 ...
Starting service docker.artifactory.abc.net/docker:17.07-dind ...
Pulling docker image docker.artifactory.abc.net/docker:17.07-dind ...
ERROR: Preparation failed: Error response from daemon: Get https://docker.artifactory.abc.net/v2/: x509: certificate signed by unknown authority
我可能是错的,但似乎出现此错误是因为服务帐户 ( svc-art-user
)在DIND映像提取发生之前无法登录。
您需要向Gitlab Runner提供身份验证详细信息,因为它需要提取图像。
您需要使用以下身份验证详细信息创建DOCKER_AUTH_CONFIG
秘密变量
{
"auths": {
"docker.artifactory.abc.net": {
"auth": "bXlfdXNlcm5hbWU6bXlfcGFzc3dvcmQ="
}
}
}
您可以通过本地登录~/.docker/config.json
并检查~/.docker/config.json
该文档提供了有关此内容的详细信息
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.