无法将Docker镜像上传到Artifactory

无法将Docker镜像上传到Artifactory - 由对等方重置连接(Can't upload Docker image to Artifactory - connection reset by peer)

我正在尝试将docker镜像推送到同一本地网络中的Artifactory，但它会在一段时间后停止并显示该错误信息：

root @ CI：/ home / iggy #docker push 10.87.65.7:5000/tibco push是指存储库[10.87.65.7:5000/tibco] da6d16ef19d5：推送[=> ] 551.4 kB / 1.519 GB写tcp 10.87.65.33:54890->10.152.254.201:8080：写：连接由同行重置

我可以使用“docker login 10.87.65.7:5000”使用管理员凭据登录Artifactory。 我向不安全的注册管理机构添加了“10.87.65.7:5000”。 我在nginx中看不到任何错误日志，但是我在Artifactory中看到了一些错误日志：

2017-08-31 09：24：03,076 [ACCEPTED CONFIGURATION_CHANGE]为admin / 10.87.65.9。 2017-08-31 09：24：19,947 [ACCEPTED CONFIGURATION_CHANGE]为admin / 10.87.65.9。 2017-08-31 09：24：24,404 [拒绝登录] NA / 10.87.65.7。 2017-08-31 09：27：06,160 [DENIED LOGIN]为NA / 10.87.65.7。

更多信息：

root @ CI：/ home / iggy #docker -v Docker version 1.12.6，build 78d1802 Artifactory - jfrog-artifactory-pro-5.4.6

10.87.65.7 - Artifactory VM，10.87.65.33 - Docker VM

任何线索为什么会发生这种情况？

PS。 来自10.87.65.33的journalctl -u docker.service：

wrz 01 10:25:54 CI dockerd [10907]：time =“2017-09-01T10：25：54.102482175 + 02:00”level = error msg =“GET的处理程序/v1.24/containers/c9d96afbfa84/json返回错误：没有这样的容器：c9d96afbfa84“wrz 01 10:27:54 CI dockerd [10907]：time =”2017-09-01T10：27：54.827236788 + 02:00“level = error msg =”尝试推送下一个端点错误：获取https://10.87.65.7:5000/v2/ ：隧道或SSL禁止“wrz 01 10:28:21 CI dockerd [10907]：time =”2017-09-01T10：28：21.191783057 + 02:00 “level = error msg =”上传失败，正在重试：写tcp 10.87.65.33:55014->10.152.254.201:8080：写：连接由同行重置“wrz 01 10:28:21 CI dockerd [10907]：time =” 2017-09-01T10：28：21.250673504 + 02:00“level = error msg =”上传失败，重试：写tcp 10.87.65.33:55016->10.152.254.201:8080：写：连接由同行重置“wrz 01 10 ：28：21 CI dockerd [10907]：time =“2017-09-01T10：28：21.301091802 + 02:00”level = error msg =“Upload failed，retrying：read tcp 10.87.65.33:55022->10.152.254.201 ：8080：读取：由pe重置连接 呃“wrz 01 10:28:21 CI dockerd [10907]：time =”2017-09-01T10：28：21.321781695 + 02:00“level = error msg =”上传失败，重试：写tcp 10.87.65.33:55018 - > 10.152.254.201:8080：写：连接由同行重置“wrz 01 10:28:51 CI dockerd [10907]：time =”2017-09-01T10：28：51.250855040 + 02:00“level = error msg = “上传失败，重试：读取tcp 10.87.65.33:55032->10.152.254.201:8080：读取：连接由同行重置”wrz 01 10:28:51 CI dockerd [10907]：time =“2017-09-01T10： 28：51.314110199 + 02:00“level = error msg =”上传失败，重试：写tcp 10.87.65.33:55034->10.152.254.201:8080：写：连接由同行重置“wrz 01 10:28:51 CI dockerd [10907]：time =“2017-09-01T10：28：51.336208120 + 02:00”level = error msg =“上传失败，重试：写tcp 10.87.65.33:55036->10.152.254.201:8080：写：连接由同行重置“wrz 01 10:28:51 CI dockerd [10907]：time =”2017-09-01T10：28：51.357638907 + 02:00“level = error msg =”上传失败，重试：写tcp 10.87.65.33 ：55038-> 10.152.254.201:8080：写：连接 n由peer重置“wrz 01 10:28:57 CI dockerd [10907]：time =”2017-09-01T10：28：57.837608810 + 02:00“level = error msg =”上传失败，重试：收到意外的HTTP状态：502 Server Hangup“wrz 01 10:29:26 CI dockerd [10907]：time =”2017-09-01T10：29：26.160819971 + 02:00“level = error msg =”上传失败，重试：读取tcp 10.87。 65.33：55048-> 10.152.254.201:8080：读取：连接由同行重置“wrz 01 10:29:26 CI dockerd [10907]：time =”2017-09-01T10：29：26.247001138 + 02:00“level =错误消息msg =“上传失败，正在重试：写入tcp 10.87.65.33:55050->10.152.254.201:8080：写入：连接由同行重置”wrz 01 10:29:26 CI dockerd [10907]：time =“2017-09 -01T10：29：26.345532227 + 02:00“level = error msg =”上传失败，重试：写tcp 10.87.65.33:55056->10.152.254.201:8080：写：连接由同行重置“wrz 01 10:29： 26 CI dockerd [10907]：time =“2017-09-01T10：29：26.532987146 + 02:00”level = error msg =“上传失败，重试：写tcp 10.87.65.33:55052->10.152.254.201:8080：写：连接由同行重置“w rz 01 10:30:04 CI dockerd [10907]：time =“2017-09-01T10：30：04.385713563 + 02:00”level = error msg =“上传失败，正在重试：收到意外的HTTP状态：502 Server Hangup” wrz 01 10:30:06 CI dockerd [10907]：time =“2017-09-01T10：30：06.191469609 + 02:00”level = error msg =“上传失败，正在重试：读取tcp 10.87.65.33:55070-> 10.152.254.201:8080：读取：通过对等方重置连接“wrz 01 10:30:06 CI dockerd [10907]：time =”2017-09-01T10：30：06.215756304 + 02:00“level = error msg =”Upload失败，重试：写tcp 10.87.65.33:55072->10.152.254.201:8080：写：连接由同行重置“wrz 01 10:30:06 CI dockerd [10907]：time =”2017-09-01T10：30： 06.352755861 + 02:00“level = error msg =”上传失败，重试：写tcp 10.87.65.33:55074->10.152.254.201:8080：写：连接由同行重置“wrz 01 10:30:06 CI dockerd [10907 ]：time =“2017-09-01T10：30：06.599892629 + 02:00”level = error msg =“上传失败，重试：写tcp 10.87.65.33:55076->10.152.254.201:8080：写：连接重置为同行“wrz 01 10:30:51 CI dockerd [10907]：time =“2017-09-01T10：30：51.246752156 + 02:00”level = error msg =“上传失败：写tcp 10.87.65.33:55092->10.152.254.201:8080：写：连接重置by peer“wrz 01 10:30:51 CI dockerd [10907]：time =”2017-09-01T10：30：51.246859375 + 02:00“level = error msg =”尝试下一个端点推送错误后：写入tcp 10.87 .65.33：55092-> 10.152.254.201:8080：写：连接由同行重置“

I'm trying to push a docker image to a Artifactory in the same local network but it stops after a while with that error msg:

root@CI:/home/iggy# docker push 10.87.65.7:5000/tibco The push refers to a repository [10.87.65.7:5000/tibco] da6d16ef19d5: Pushing [=> ] 551.4 kB/1.519 GB write tcp 10.87.65.33:54890->10.152.254.201:8080: write: connection reset by peer

I'm able to login using "docker login 10.87.65.7:5000" with admin credentials to Artifactory. I've added "10.87.65.7:5000" to insecure-registries. I can't see any error logs in nginx, however I saw some error logs in Artifactory:

2017-08-31 09:24:03,076 [ACCEPTED CONFIGURATION_CHANGE] for admin/10.87.65.9. 2017-08-31 09:24:19,947 [ACCEPTED CONFIGURATION_CHANGE] for admin/10.87.65.9. 2017-08-31 09:24:24,404 [DENIED LOGIN] for NA/10.87.65.7. 2017-08-31 09:27:06,160 [DENIED LOGIN] for NA/10.87.65.7.

More info:

root@CI:/home/iggy# docker -v Docker version 1.12.6, build 78d1802 Artifactory - jfrog-artifactory-pro-5.4.6

10.87.65.7 - Artifactory VM, 10.87.65.33 - Docker VM

Any clue why is that happening?

PS. journalctl -u docker.service from 10.87.65.33:

wrz 01 10:25:54 CI dockerd[10907]: time="2017-09-01T10:25:54.102482175+02:00" level=error msg="Handler for GET /v1.24/containers/c9d96afbfa84/json returned error: No such container: c9d96afbfa84" wrz 01 10:27:54 CI dockerd[10907]: time="2017-09-01T10:27:54.827236788+02:00" level=error msg="Attempting next endpoint for push after error: Get https://10.87.65.7:5000/v2/: Tunnel or SSL Forbidden" wrz 01 10:28:21 CI dockerd[10907]: time="2017-09-01T10:28:21.191783057+02:00" level=error msg="Upload failed, retrying: write tcp 10.87.65.33:55014->10.152.254.201:8080: write: connection reset by peer" wrz 01 10:28:21 CI dockerd[10907]: time="2017-09-01T10:28:21.250673504+02:00" level=error msg="Upload failed, retrying: write tcp 10.87.65.33:55016->10.152.254.201:8080: write: connection reset by peer" wrz 01 10:28:21 CI dockerd[10907]: time="2017-09-01T10:28:21.301091802+02:00" level=error msg="Upload failed, retrying: read tcp 10.87.65.33:55022->10.152.254.201:8080: read: connection reset by peer" wrz 01 10:28:21 CI dockerd[10907]: time="2017-09-01T10:28:21.321781695+02:00" level=error msg="Upload failed, retrying: write tcp 10.87.65.33:55018->10.152.254.201:8080: write: connection reset by peer" wrz 01 10:28:51 CI dockerd[10907]: time="2017-09-01T10:28:51.250855040+02:00" level=error msg="Upload failed, retrying: read tcp 10.87.65.33:55032->10.152.254.201:8080: read: connection reset by peer" wrz 01 10:28:51 CI dockerd[10907]: time="2017-09-01T10:28:51.314110199+02:00" level=error msg="Upload failed, retrying: write tcp 10.87.65.33:55034->10.152.254.201:8080: write: connection reset by peer" wrz 01 10:28:51 CI dockerd[10907]: time="2017-09-01T10:28:51.336208120+02:00" level=error msg="Upload failed, retrying: write tcp 10.87.65.33:55036->10.152.254.201:8080: write: connection reset by peer" wrz 01 10:28:51 CI dockerd[10907]: time="2017-09-01T10:28:51.357638907+02:00" level=error msg="Upload failed, retrying: write tcp 10.87.65.33:55038->10.152.254.201:8080: write: connection reset by peer" wrz 01 10:28:57 CI dockerd[10907]: time="2017-09-01T10:28:57.837608810+02:00" level=error msg="Upload failed, retrying: received unexpected HTTP status: 502 Server Hangup" wrz 01 10:29:26 CI dockerd[10907]: time="2017-09-01T10:29:26.160819971+02:00" level=error msg="Upload failed, retrying: read tcp 10.87.65.33:55048->10.152.254.201:8080: read: connection reset by peer" wrz 01 10:29:26 CI dockerd[10907]: time="2017-09-01T10:29:26.247001138+02:00" level=error msg="Upload failed, retrying: write tcp 10.87.65.33:55050->10.152.254.201:8080: write: connection reset by peer" wrz 01 10:29:26 CI dockerd[10907]: time="2017-09-01T10:29:26.345532227+02:00" level=error msg="Upload failed, retrying: write tcp 10.87.65.33:55056->10.152.254.201:8080: write: connection reset by peer" wrz 01 10:29:26 CI dockerd[10907]: time="2017-09-01T10:29:26.532987146+02:00" level=error msg="Upload failed, retrying: write tcp 10.87.65.33:55052->10.152.254.201:8080: write: connection reset by peer" wrz 01 10:30:04 CI dockerd[10907]: time="2017-09-01T10:30:04.385713563+02:00" level=error msg="Upload failed, retrying: received unexpected HTTP status: 502 Server Hangup" wrz 01 10:30:06 CI dockerd[10907]: time="2017-09-01T10:30:06.191469609+02:00" level=error msg="Upload failed, retrying: read tcp 10.87.65.33:55070->10.152.254.201:8080: read: connection reset by peer" wrz 01 10:30:06 CI dockerd[10907]: time="2017-09-01T10:30:06.215756304+02:00" level=error msg="Upload failed, retrying: write tcp 10.87.65.33:55072->10.152.254.201:8080: write: connection reset by peer" wrz 01 10:30:06 CI dockerd[10907]: time="2017-09-01T10:30:06.352755861+02:00" level=error msg="Upload failed, retrying: write tcp 10.87.65.33:55074->10.152.254.201:8080: write: connection reset by peer" wrz 01 10:30:06 CI dockerd[10907]: time="2017-09-01T10:30:06.599892629+02:00" level=error msg="Upload failed, retrying: write tcp 10.87.65.33:55076->10.152.254.201:8080: write: connection reset by peer" wrz 01 10:30:51 CI dockerd[10907]: time="2017-09-01T10:30:51.246752156+02:00" level=error msg="Upload failed: write tcp 10.87.65.33:55092->10.152.254.201:8080: write: connection reset by peer" wrz 01 10:30:51 CI dockerd[10907]: time="2017-09-01T10:30:51.246859375+02:00" level=error msg="Attempting next endpoint for push after error: write tcp 10.87.65.33:55092->10.152.254.201:8080: write: connection reset by peer"

最满意答案

您是否有企业防火墙或需要使用HTTP代理的东西？ 看起来HTTP_PROXY可能会在此设置中的某处设置（在Docker端），因为正在尝试写入10.152.254.201:8080这不是您的Artifactory地址。 这看起来像是一个在8080上运行的HTTP代理。鉴于你的两台机器似乎在同一个子网上，我假设你不希望HTTP代理集为它们之间的流量。 使用Artifactory的初始身份验证也因此失败：

time="2017-09-01T10:27:54.827236788+02:00" level=error msg="Attempting next endpoint for push after error: Get https://10.87.65.7:5000/v2/: Tunnel or SSL Forbidden"

如果您搜索该隧道或SSL Forbidden消息，您会发现很多人都在谈论HTTP代理/防火墙问题。

Do you have a corporate firewall or something that requires the use of an HTTP Proxy? It looks like HTTP_PROXY may be set somewhere in this setup (on the Docker side) as the writes are being attempted to 10.152.254.201:8080 which is not your Artifactory address. That looks like a probably HTTP proxy running on 8080. Given your two machines seem to be on the same subnet, I assume you don't want the HTTP proxy set for traffic between them. The initial authentication with Artifactory fails because of this as well:

time="2017-09-01T10:27:54.827236788+02:00" level=error msg="Attempting next endpoint for push after error: Get https://10.87.65.7:5000/v2/: Tunnel or SSL Forbidden"

If you search on that Tunnel or SSL Forbidden message you will find many people talking about HTTP proxy/firewall issues.