Isteegga Docker CA kee ayaa fashilka proxy-ga tilmaamaya?
Kala sooc jiidashada sawirrada, soo dejinta build-ka iyo codsiyada application-ka container-ka marka aad aaminto CA baaritaan la ogolaaday.
Ku darista CA shirkadeed gudaha container-ka ma hagaajin karto jiidashada sawirka ee fashilantay ee saaxiibkaa. Jiidasho guulaysatay sidoo kale ma caddeyso in application-ka sawirka gudihiisa uu aamino adeegga HTTPS ee la baaray.
| Hawlgal | Aaminaadda la baarayo |
|---|---|
| Sawir ku jiidista proxy-ga baaritaanka ee ururka | Host-ka ama deegaanka Docker ee jiidashada sameynaya |
| Soo dejinta inta lagu guda jiro build-ka sawirka | Deegaanka build-ka iyo soo dejintiisa |
| Wicitaanka adeeg HTTPS ah oo ka imanaya application-ka socda | Kaydka OS-ka sawirka ama habaynta aaminaadda application-ka laftiisa |
Raadi khaladka ilaa habka caddaynaya dhinaca kale, ka dibna xaqiiji soo saaraha, magaca host-ka iyo marxaladda handshake-ka. Adeeg baaritaan la ogolaaday ayaa ku saxeexi kara shahaadada goobta CA-da ururka. Fashilka TLS ee dhagaystaha proxy HTTPS si otomaatig ah ma aha fashilka shahaadada goobta ee lagu gaaro isaga. Gelinta IP-ga proxy-ga ma bixiso wax aaminaad ah.
Ku rakib shahaadada soo saaraha ee dadweynaha la ansixiyay iyada oo loo marayo habka la taageeray ee host-ka, qaybinta sawirka ama application-ka la xiriira. Hanuunka CA ee Docker waxa uu daboolaa kaydka host-ka iyo container-ka, laakiin waddada CentOS ma aha tilmaan la qaadi karo oo loogu talagalay Debian ama Windows. Ku darista bundle la soo saaray ayaa lagu beddeli karaa cusboonaysiin; application Java ama macmiil kale oo leh habayn CA u gaar ah ayaa laga yaabaa inuu gabi ahaanba iska indhatiro bundle-ka OS-ka.
Aaminaad application oo joogto ah, geli isbeddelka habka habaynta sawirka ama application-ka ee la ansixiyay. Tafatir is dhexgal ah oo ku saabsan hal container socda ma jiri doono container-ka xiga ee laga abuuray sawirka.
Qaybi kaliya shahaadada aaminaadda dadweynaha ee loo baahan yahay iyada oo loo marayo kanaalka la ogolaaday. Waligaa ha gelin furaha gaarka ah ee CA sawirka oo ha u qaadan codsiga rakibidda xididka ee proxy dadweyne aan la aqoon sida habayn caadi ah. Ku hay xaqiijinta magaca host-ka iyo silsiladda mid shaqaynaya ka dib marka kaydka loogu talagalay la habeeyo.