主页 / ubuntu / 问题 / 1251157
Accepted
WiGeeky
Asked: 2020-06-18 02:12:29 +0800 CST

如何在 Ubuntu 中将 Docker 与 socks5 一起使用？

  • 772

我一直在尝试通过本地 socks5 代理运行 docker，我尝试将环境变量设置为：

export ALL_PROXY=127.0.0.1:1080

但这并没有什么区别，就好像 Docker 没有阅读它一样，我也尝试将配置放入~/.docker/config.json：

{
 "proxies":
 {
   "default":
   {
     "httpProxy": "socks5://127.0.0.1:1080"
   }
 }
}

但这也不起作用。有什么问题，如何在 Ubuntu 上使用 socks5 代理运行 Docker？

systemd proxy docker

2 个回答

  1. Best Answer

    通过后来的一些研究，我找到了答案，Ubuntu 中的 docker 服务与用户的环境变量无关，但如果将其传递给 docker 服务本身，它就可以工作。

    我通过在/lib/systemd/system/docker.service文件中添加以下行来使其工作，就在之前ExecStart：

    Environment="ALL_PROXY=socks5://127.0.0.1:1080"

    所以我的 docker.service 文件看起来像这样：

    [Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
BindsTo=containerd.service
After=network-online.target firewalld.service containerd.service
Wants=network-online.target
Requires=docker.socket

[Service]
Type=notify
# the default is not to use systemd for cgroups because the delegate issues still
# exists and systemd currently does not support the cgroup feature set required
# for containers run by docker
Environment="ALL_PROXY=socks5://127.0.0.1:1080"
ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
ExecReload=/bin/kill -s HUP $MAINPID
TimeoutSec=0
RestartSec=2
Restart=always

# Note that StartLimit* options were moved from "Service" to "Unit" in systemd 229.
# Both the old, and new location are accepted by systemd 229 and up, so using the old location
# to make them work for either version of systemd.
StartLimitBurst=3

# Note that StartLimitInterval was renamed to StartLimitIntervalSec in systemd 230.
# Both the old, and new name are accepted by systemd 230 and up, so using the old name to make
# this option work for either version of systemd.
StartLimitInterval=60s

# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity

# Comment TasksMax if your systemd version does not support it.
# Only systemd 226 and above support this option.
TasksMax=infinity

# set delegate yes so that systemd does not reset the cgroups of docker containers
Delegate=yes

# kill only the docker process, not all processes in the cgroup
KillMode=process

[Install]
WantedBy=multi-user.target

    这似乎已经为我解决了这个问题，它正在 Ubuntu 20.04 上运行。我认为将其张贴在这里可能会在将来对其他人有所帮助。

    • 4

  2. 另一种解决方案是使用privoxy并将其转发到您的 socks5 代理，以便您可以使用 privoxy 作为 https/http 代理。

    • 1

相关问题