docker-compose 與 keycloak & postgres

Question

我正在使用 docker-compose 並嘗試將其部署在 VPS Centos 8 上，但 keycloak 無法訪問 postgres 數據庫。 但是我可以使用 pgAdmin 連接到數據庫。

我有以下錯誤：

    Caused by: java.net.NoRouteToHostException: No route to host (Host unreachable)
            at java.base/java.net.PlainSocketImpl.socketConnect(Native Method)
            at java.base/java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:399)
            at java.base/java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:242)
            at java.base/java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:224)
            at java.base/java.net.SocksSocketImpl.connect(SocksSocketImpl.java:403)
            at java.base/java.net.Socket.connect(Socket.java:609)
            at org.postgresql.jdbc@42.2.5//org.postgresql.core.PGStream.<init>(PGStream.java:70)
            at org.postgresql.jdbc@42.2.5//org.postgresql.core.v3.ConnectionFactoryImpl.tryConnect(ConnectionFactoryImpl.java:91)
            at org.postgresql.jdbc@42.2.5//org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:192)
            ... 62 more
    
    13:34:55,281 FATAL [org.keycloak.services] (ServerService Thread Pool -- 65) java.lang.RuntimeException: Failed to connect to database

和

    13:34:56,307 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("add") failed - address: ([("subsyste                                                                                                                                         m" => "microprofile-metrics-smallrye")]): java.lang.NullPointerException
            at org.wildfly.extension.microprofile.metrics-smallrye@19.1.0.Final//org.wildfly.extension.microprofile.metrics.MicroProfileMetricsSubsystemAdd$                                                                                                                                         2.execute(MicroProfileMetricsSubsystemAdd.java:86)
            at org.jboss.as.controller@11.1.1.Final//org.jboss.as.controller.AbstractOperationContext.executeStep(AbstractOperationContext.java:999)
            at org.jboss.as.controller@11.1.1.Final//org.jboss.as.controller.AbstractOperationContext.processStages(AbstractOperationContext.java:743)
            at org.jboss.as.controller@11.1.1.Final//org.jboss.as.controller.AbstractOperationContext.executeOperation(AbstractOperationContext.java:467)
            at org.jboss.as.controller@11.1.1.Final//org.jboss.as.controller.OperationContextImpl.executeOperation(OperationContextImpl.java:1413)
            at org.jboss.as.controller@11.1.1.Final//org.jboss.as.controller.ModelControllerImpl.boot(ModelControllerImpl.java:527)
            at org.jboss.as.controller@11.1.1.Final//org.jboss.as.controller.AbstractControllerService.boot(AbstractControllerService.java:515)
            at org.jboss.as.controller@11.1.1.Final//org.jboss.as.controller.AbstractControllerService.boot(AbstractControllerService.java:477)
            at org.jboss.as.server@11.1.1.Final//org.jboss.as.server.ServerService.boot(ServerService.java:448)
            at org.jboss.as.server@11.1.1.Final//org.jboss.as.server.ServerService.boot(ServerService.java:401)
            at org.jboss.as.controller@11.1.1.Final//org.jboss.as.controller.AbstractControllerService$1.run(AbstractControllerService.java:416)
            at java.base/java.lang.Thread.run(Thread.java:834)

這是我的 docker-compose.yml：

    version: "3.7"
    
    services: 
    
      keycloak: 
        container_name: app-keycloak
        depends_on: 
          - postgres
        environment: 
          # Admin account
          KEYCLOAK_USER: foo
          KEYCLOAK_PASSWORD: foo
          #KEYCLOAK_IMPORT: /tmp/realm-export.json
           
          # PostgreSQL DB settings
          DB_VENDOR: POSTGRES
          DB_ADDR: postgres
          DB_PORT: 5432
          DB_DATABASE: foo
          DB_SCHEMA: public
          DB_USER: foo
          DB_PASSWORD: foo
        image: "jboss/keycloak:10.0.2"
        ports: 
          - "9999:8080"
        restart: always
        networks:
          - auth-network
    
      postgres: 
        container_name: app-postgres
        environment: 
          POSTGRES_DB: foo
          POSTGRES_PASSWORD: foo
          POSTGRES_USER: foo
        image: "postgres:13-alpine"
        ports: 
          - "5432:5432"
        restart: always
        volumes: 
          - "./volumes/postgres-data:/var/lib/postgresql/data"
        networks:
          - auth-network
    
    networks:   auth-network:
        driver: bridge

您對我如何解決此問題有任何想法嗎？

Answer 1

使用我的 Windows 10 PC，該解決方案有效，但我的 VPS Centos 上仍有這些錯誤 8. 你還有其他想法嗎？

防火牆-cmd --zone=public --list-all

public (active)
  target: default
  icmp-block-inversion: no
  interfaces: eth0
  sources:
  services: cockpit dhcpv6-client https ssh
  ports: 8077/tcp 27017/tcp 8081/tcp 9999/tcp 5432/tcp 8443/tcp 8080/tcp
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:

Answer 2

為我工作的例子

version: '3'

volumes:
  postgres_data:
      driver: local

services:
  postgres:
      image: postgres
      volumes:
        - postgres_data:/var/lib/postgresql/data
      environment:
        POSTGRES_DB: keycloak
        POSTGRES_USER: keycloak
        POSTGRES_PASSWORD: password
  keycloak:
      image: quay.io/keycloak/keycloak:latest
      environment:
        DB_VENDOR: POSTGRES
        DB_ADDR: postgres
        DB_DATABASE: keycloak
        DB_USER: keycloak
        DB_SCHEMA: public
        DB_PASSWORD: password
        KEYCLOAK_USER: admin
        KEYCLOAK_PASSWORD: Pa55w0rd
        # Uncomment the line below if you want to specify JDBC parameters. The parameter below is just an example, and it shouldn't be used in production without knowledge. It is highly recommended that you read the PostgreSQL JDBC driver documentation in order to use it.
        #JDBC_PARAMS: "ssl=true"
      ports:
        - 8080:8080
      depends_on:
        - postgres