Docker Engine daemon.json: ka-marista proxy ee ECR iyo S3 gaar ah

Tixgeli soo dejinta lakabyada S3 marka aad ka marmarto HTTP proxy soo jiidashada sawirada ECR ee gaarka ah iyada oo loo marayo VPC endpoints.

Xiriir guuleysan oo lala yeesho diiwaanka ECR gaarka ah ma dhammeeyo soo jiidashada sawirka. ECR waxay bixisaa manifest-ka, halka Amazon S3 uu kaydiyo lakabyada sawirka. Sidaa darteed ka-maris ku habboon diiwaanka oo keliya ayaa laga yaabaa inuu soo dejinta lakabka uga tago waddo kale.

Helitaanka gaarka ah ee loo marayo VPC endpoints, hubi labada waddo:

  • ECR interface endpoint iyo habaynta DNS gaarka ah.
  • S3 endpoint, shaxda waddooyinka la xiriirta, iyo siyaasadda u oggolaanaysa gelitaanka bucket-ka lakabyada ECR.

Kadib dhig magacyada ka-marista ee khuseeya geeddi-socodka soo jiidashada. Docker Engine asal ah oo leh habayn proxy daemon.json hore u jirtay, habayn tusaale ah oo us-east-2 ah waa:

{
  "proxies": {
    "http-proxy": "http://proxy.example:8080",
    "https-proxy": "http://proxy.example:8080",
    "no-proxy": "123456789012.dkr.ecr.us-east-2.amazonaws.com,prod-us-east-2-starport-layer-bucket.s3.us-east-2.amazonaws.com"
  }
}

Isku dar qoraallada loogu talagalay habaynta kale ee daemon-ka iyo liiska ka-marista ee jira. Haddii soo dejinta diiwaannada kale ee dadweynaha ay isticmaali karaan dhexdhexaadiye dadweyne, liiska HTTP proxy wuxuu bixiyaa musharixiin loogu talagalay URL-yada proxy ee aan akoonka lahayn; ilaali ka-marista ECR iyo S3 gaarka ah. Ku beddel akoonka, gobolka iyo hostname-ka soo dejinta lakabyada magacyada soo jiidashada dhab ahaan isticmaasho. Qaababka magaca S3 iyo habaynta endpoint way kala duwanaan karaan; tusaalahan ma aha liis dhamaystiran oo endpoint-yada AWS ah. Isticmaalka habaynta daemon-ka waxay u baahan tahay dib u bilowga daemon-ka loogu talagalay. Docker Desktop wuxuu isticmaalaa habayntiisa proxy gaar ah.

Ka-marisku wuxuu doortaa waddo toos ah. Ma abuuri karo S3 endpoint maqan, ma ku xiri karo shax waddooyin, ma bixin karo gelitaan bucket ama ma hagaajin karo DNS gaar ah. Xaqiiji ku-tiirsanaantaas ka hor intaadan ka-marista u fidin domain-yada AWS ee ballaaran.

Habaynta proxy-ga container-ka ee macmiilka Docker ma habayso soo dejinta sawirada daemon-ka. Sidoo kale, amarka AWS CLI ee hela aqoonsiga gelitaanka ECR wuxuu leeyahay habayn proxy u gaar ah; ku dar goobta API haddii codsigaas gaar ah uu isna u baahan yahay gelitaan gaar ah.

Maqaallo la xiriira