abiosoft / abiosoft/colima

'docker push' send 'client hello' packet to insecure registry

Đang mở
#1,450 0 bình luận 0 reaction 0 người được giao Xem trên GitHub
Ngôn ngữ chính
Go
Star
30.8k
Fork
613
Chỉ số merge pull request
Không có pull request nào được merge trong 30 ngày

Mô tả

### Description

```bash
~ docker info
Client: Docker Engine - Community
Version: 29.0.2
Context: colima
Debug Mode: false

Server:
Server Version: 28.4.0
Storage Driver: overlayfs
driver-type: io.containerd.snapshotter.v1
Logging Driver: json-file
Cgroup Driver: cgroupfs
Cgroup Version: 2
Plugins:
Volume: local
Network: bridge host ipvlan macvlan null overlay
Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
CDI spec directories:
/etc/cdi
/var/run/cdi
Swarm: inactive
Runtimes: io.containerd.runc.v2 runc
Default Runtime: runc
Init Binary: docker-init
containerd version: 05044ec0a9a75232cad458027ca83437aae3f4da
runc version: v1.2.5-0-g59923ef
init version: de40ad0
Security Options:
apparmor
seccomp
Profile: builtin
cgroupns
Kernel Version: 6.8.0-64-generic
Operating System: Ubuntu 24.04.2 LTS
OSType: linux
Architecture: x86_64
CPUs: 4
Total Memory: 1.919GiB
Name: colima
ID: 884ea862-03cb-4cd2-97bb-70d0f37aebe2
Docker Root Dir: /var/lib/docker
Debug Mode: false
HTTP Proxy: 192.168.5.2:8001
HTTPS Proxy: 192.168.5.2:8001
Experimental: false
Insecure Registries:
192.1.250.60:8083
::1/128
127.0.0.0/8

~ docker push 192.1.250.60:8083/jetstack/cert-manager-acmesolver:v1.16.4
The push refers to repository [192.1.250.60:8083/jetstack/cert-manager-acmesolver]
38f4a9ccb8d6: Unavailable
......
d557676654e5: Unavailable
failed to do request: Post "https://192.1.250.60:8083/v2/jetstack/cert-manager-acmesolver/blobs/uploads/": http: server closed idle connection
```

tcpdump shows docker send 'client hello' pcakge to '192.1.250.60:8083' while this registry is configured as a plain http registry both in daemon.json of docker daemon and colima.yaml of colima.

### Version

```
colima version 0.9.1
git commit: 0cbf719f5409ce04b9f0607b681c005d2ff7d94a

runtime: docker
arch: x86_64
client: v29.0.2
server: v28.4.0
limactl version 2.0.1
qemu-img version 10.1.2
```

### Operating System

- [ ] macOS Intel <= 13 (Ventura)
- [x] macOS Intel >= 14 (Sonoma)
- [ ] Apple Silicon <= 13 (Ventura)
- [ ] Apple Silicon >= 14 (Sonoma)
- [ ] Linux

### Output of `colima status`

```
colima status
INFO[0001] colima is running using macOS Virtualization.Framework
INFO[0001] arch: x86_64
INFO[0001] runtime: docker
INFO[0001] mountType: virtiofs
INFO[0001] docker socket: unix:///Users/user/.colima/default/docker.sock
INFO[0001] containerd socket: unix:///Users/user/.colima/default/containerd.sock
```

### Reproduction Steps

1. configure a insecure registry in colima.yaml
2. (re)start colima
3. docker tag a image to that http registry and push

### Expected behaviour

_No response_

### Additional context

_No response_

Hướng dẫn đóng góp

Chưa lập chỉ mục được hướng dẫn đóng góp cho kho mã nguồn này

Đánh giá

Issue này chưa được đánh giá.

Nhận issue mới trong hộp thư của bạn

Bản tóm tắt ngắn những issue GitHub phù hợp với người mới.