Podman pasta: ukufinyelela i-host loopback proxy kusuka ku-container engena-root

Sebenzisa ukudluliswa kwe-TCP kwe-pasta kusuka ku-namespace kuye ku-host nge-loopback proxy ekhona, futhi uyihlukanise nokushicilela i-container port.

I-127.0.0.1:8118 ye-host kanye ne-127.0.0.1:8118 ye-container ngokuvamile izindawo zokugcina ze-loopback ezihlukene. Ukudlulisa i-proxy variable ku-container engena-root akuhlanganisi lezo loopback interface.

Ekufakweni kwe-Podman okusebenzisa i-pasta, ukudluliswa kwayo kwe-TCP kusuka ku-namespace kuye ku-host kungaveza i-host port ehlosiwe ngaphakathi kwe-namespace:

podman run --network=pasta:-T,8118 \
  --env http_proxy=http://127.0.0.1:8118 \
  --env https_proxy=http://127.0.0.1:8118 \
  existing-image application-command

Sebenzisa isithombe nomuthi/umyalo okhona wesicelo. Isibonelo sithatha ukuthi kukhona i-HTTP proxy esebenzayo ohlangothini lwe-host ku-port 8118 kanye nenguqulo ye-Podman/pasta esekela inketho yokudlulisa ekhonjisiwe.

Uhlamvu olukhulu -T lwe-pasta ludlulisa kusuka ku-namespace eqondiwe luye ku-namespace ye-host. Uhlamvu oluncane -t kanye ne---publish ye-Podman zibheke ekwelinye iceleni. Ngakho-ke ukushicilela i-container port 8118 akwenzi i-proxy ye-host itholakale ku-container ngokwayo.

I-Podman ivamise ukuvala ukudluliswa kwe-port okuzenzakalelayo kusuka ku-namespace kuye ku-host; i-port ecacile ikhetha insizakalo edingekayo lapha. Inketho ehlukile ye-pasta:--map-gw iphathelene nokufinyelela i-host ngokusebenzisa ikheli le-gateway, okuwukuhlelwa okunye.

Nge-Compose, hlola umhlinzeki wangempela kanye nokucushwa kwenethiwekhi okukhiqiziwe. Inethiwekhi ye-bridge enegama ayibi ngokuzenzakalelayo ibe yi-pasta namespace ngenxa nje yokuthi umyalo ozimele we-podman run usebenzise i-pasta ngempumelelo. Injini ye-Podman ekude nayo ibeka “i-host” endaweni yenjini.

Izihloko ezihlobene