Dockerfile 执行 git clone 一直 timeout 或者 server certificate verification failed

问题1：fatal: unable to access ‘https://github.com/***/’: Operation timed out after 300032 milliseconds with 0 out of 0 bytes received

原因：链路的MTU导致，docker默认1500，应该主机或者路由有限制1450或者1340啥的，一般改为较小的1300就比较保险，参考Git clone command fails with timeout
解决：由于我是gitlab k8s runner的形式，设置参数如下Setting a MTU for dind

services:
  # include the docker-in-docker network service
  - name: docker:dind
    command: ["--mtu=1300"]

问题2：fatal: unable to access ‘https://github/***’: server certificate verification failed. CAfile: none CRLfile: none

原因：ca证书导致
解决：

• 方式1：禁用gitlab ssl，dockerfile里添加 RUN git config --global http.sslVerify false
• 方式2（推荐）：安装更新ca，dockerfile里添加 RUN apt-get install -y ca-certificates && update-ca-certificates