Yisiphi isitolo se-Docker CA ukwehluleka kwe-proxy okukhomba kuso?
Hlukanisa ukudonswa kwezithombe, ukulandwa ngesikhathi se-build kanye nezicelo zohlelo lokusebenza lwe-container lapho uthemba i-inspection CA egunyaziwe.
Ukufaka i-CA yenkampani ngaphakathi kwe-container akukwazi ukulungisa ukudonswa kwesithombe okwehlulekile kukazakwenu. Ukudonsa okuphumelelayo nakho akufakazeli ukuthi uhlelo lokusebenza olungaphakathi kwesithombe luthemba insizakalo ye-HTTPS ehloliwe.
| Umsebenzi | Ukwethemba okufanele kuphenywe |
|---|---|
| Ukudonsa isithombe nge-proxy yokuhlola yenhlangano | I-host noma imvelo ye-Docker eyenza ukudonsa |
| Ukulanda ngesikhathi se-build yesithombe | Imvelo ye-build kanye nesilandi sayo |
| Ukushaya insizakalo ye-HTTPS kusuka kuhlelo olusebenzayo | Isitolo se-OS sesithombe noma ukulungiselelwa kokwethemba kohlelo lokusebenza uqobo |
Landelela iphutha kuze kufike kunqubo eqinisekisa uhlangothi, bese uqinisekisa umkhiphi, igama le-host kanye nesigaba se-handshake. Insizakalo yokuhlola egunyaziwe ingasayina isitifiketi sendawo nge-CA yenhlangano. Ukwehluleka kwe-TLS kumsilaleli we-proxy ye-HTTPS akusikho ngokuzenzakalela ukwehluleka kwesitifiketi sendawo esifinyelelwa ngayo. Ukufaka i-IP ye-proxy akunikezi mpahla yokwethemba.
Faka isitifiketi somkhiphi womphakathi esigunyaziwe ngendlela esekelwayo ye-host, ukusatshalaliswa kwesithombe noma uhlelo lokusebenza oluhambisanayo. Umhlahlandlela we-CA we-Docker uhlanganisa izitolo ze-host ne-container, kodwa indlela ye-CentOS akuwona umyalo ohambisekayo we-Debian noma i-Windows. Ukwengeza ku-bundle ekhiqiziwe kungahoxiswa ukuvuselelwa; uhlelo lokusebenza lwe-Java noma elinye iklayenti elinokulungiselelwa kwalo kwe-CA lingase lishaye indiva i-bundle ye-OS ngokuphelele.
Ukuze ukwethemba kohlelo lokusebenza kuqhubeke, faka ushintsho enqubeni egunyaziwe yokulungiselela isithombe noma uhlelo lokusebenza. Ukuhlela okusebenzisanayo ku-container eyodwa esebenzayo ngeke kube khona ku-container elandelayo edalwe kusukela esithombeni.
Sakaza kuphela isitifiketi sokwethemba somphakathi esidingekayo ngomzila ogunyaziwe. Ungalokothi ufake ukhiye oyimfihlo we-CA esithombeni futhi ungathathi isicelo sokufaka impande esivela ku-proxy yomphakathi engaziwa njengokulungiselela okuvamile. Gcina ukuqinisekiswa kwegama le-host kanye nochunge luvuliwe ngemva kokuba isitolo esihlosiwe silungiselelwe.