docker的bug日记篇:
出了一个bug,就是xin麒想将要创建的容器在centos7挂载数据卷失败了。
一、案发现场:
[root@xinqi ~]# docker volume ls
DRIVER VOLUME NAME
[root@xinqi ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
nginx latest 605c77e624dd 9 months ago 141MB
[root@xinqi ~]# docker volume create html
html
[root@xinqi ~]# docker volume inspect html
[
{
"CreatedAt": "2022-09-29T14:25:50+08:00",
"Driver": "local",
"Labels": {},
"Mountpoint": "/var/lib/docker/volumes/html/_data",
"Name": "html",
"Options": {},
"Scope": "local"
}
]
xin麒欲想创建一个nginx容器,并且挂载容器重要文件到虚拟机/var/lib/docker/volumes/html/_data
这个位置,但是出现了错误:
报错详情:
[root@xinqi ~]# docker run --name mynginx -p8080:80 -v html:/usr/share/nginx/html -d nginx
7fa8135461e5b45b188aa751ba4f3f4cc19c6f8d1bd5727bc6310264a35078c5
docker: Error response from daemon: driver failed programming external connectivity on endpoint mynginx (a887f75d26e23c07e5f430f4f6e008c72dc625bdff8c73573aef7947aa9fc40c): (iptables failed: iptables --wait -t nat -A DOCKER -p tcp -d 0/0 --dport 8080 -j DNAT --to-destination 172.17.0.2:80 ! -i docker0: iptables: No chain/target/match by that name.
(exit status 1)).
[root@xinqi ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
[root@xinqi ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
7fa8135461e5 nginx "/docker-entrypoint.…" 56 seconds ago Created mynginx
三、分析:
会不会是端口的原因,于是不断删除,不断尝试,发现还是一样的错误:
[root@xinqi ~]# docker rm -f mynginx
mynginx
[root@xinqi ~]# docker run --name mynginx -p 8081:80 -v html:/usr/share/nginx/html -d nginx
909f32a0b18a545da420f5b78f6bff50174c364975d96c82da3c782b6fd978a0
docker: Error response from daemon: driver failed programming external connectivity on endpoint mynginx (166832793e07470df9fdc975615371832fec3891f688432d07c7b0084a197fae): (iptables failed: iptables --wait -t nat -A DOCKER -p tcp -d 0/0 --dport 8081 -j DNAT --to-destination 172.17.0.2:80 ! -i docker0: iptables: No chain/target/match by that name.
(exit status 1)).
[root@xinqi ~]# docker rm -f mynginx
mynginx
[root@xinqi ~]# docker run --name mynginx -p 8081:8081 -v html:/usr/share/nginx/html -d nginx
4deaa2eec792807ad2a3d63ddb2d4076fd6e74fba2a71c4b2b5e6fbe85389f4f
docker: Error response from daemon: driver failed programming external connectivity on endpoint mynginx (ad6725e43997128df27857b3a0ba55759387e0d581cc4d36a45668784a4c3624): (iptables failed: iptables --wait -t nat -A DOCKER -p tcp -d 0/0 --dport 8081 -j DNAT --to-destination 172.17.0.2:8081 ! -i docker0: iptables: No chain/target/match by that name.
(exit status 1)).
[root@xinqi ~]# docker rm -f mynginx
mynginx
然后又想到了会不会是之前的daemon.json
旧的内容影响了当前的操作:
xin麒于是去查,又改了,终于才解决了
四、解决:
[root@xinqi _data]# cd /etc/docker
[root@xinqi docker]# ls
daemon.json key.json
[root@xinqi docker]# cat daemon.json
{
"registry-mirrors": ["https://************"],
"insecure-registries": ["192.168.10.100:5000"]
}
[root@xinqi docker]# vim daemon.json
将多余的"insecure-registries": ["192.168.10.100:5000"]
删除
[root@xinqi docker]# cat daemon.json
{
"registry-mirrors": ["你自己的配置"]
}
五、成功+展示:
先将之前创建的nginx容器删除,再—>
[root@xinqi ~]# docker run --name mynginx -p 8080:8080 -v /var/lib/docker/volumes/html/_data:/usr/share/nginx/html -d nginx
ce3d891cfb88b431d8b8bb355ad932b1f32710d57c44ad778b04c1635467b241
xin麒想换为vomlue为html的数据卷来挂载:
于是
[root@xinqi docker]# docker rm -f mynginx
mynginx
[root@xinqi ~]# docker run --name mynginx -p 8080:8080 -v html:/usr/share/nginx/html -d nginx
816f56974b1b8ef0d53f7db5c4f4a8dc12f67de470992ba335a11acbcfe536e9
查看一下:
[root@xinqi docker]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
816f56974b1b nginx "/docker-entrypoint.…" 19 minutes ago Up 19 minutes 80/tcp, 0.0.0.0:8080->8080/tcp, :::8080->8080/tcp mynginx
注意:如果nginx内部是使用80端口,那么可以改为80的端口。或者创建容器时用其他端口配置,而后再做对应的处理也行,这里便不做介绍。
[root@xinqi ~]# docker rm -f mynginx
mynginx
[root@xinqi ~]# docker run --name mynginx -p 8080:80 -v /var/lib/docker/volumes/html/_data:/usr/share/nginx/html -d nginx
f985f9b425805f5dadba17f19bb2d01b97df44f6ad73a711fa0340b6911e2e32
end