docker www.example.com的本地示例drone.io无法使用treafik子域向本地gitea进行身份验证,请拨tcp：查找无此主机

5sxhfpxr 于 2023-02-07 发布在 Docker

关注(0)|答案(2)|浏览(222)

我尝试使用docker-compose设置gitea和www.example.com的本地示例drone.io。
我将traefik路由用于自定义本地子域docker、localdev、dnsmasq和带有mkcert的本地信任证书，如本文所述：https://medium.com/soulweb-academy/docker-local-dev-stack-with-traefik-https-dnsmasq-locally-trusted-certificate-for-ubuntu-20-04-5f036c9af83d
我在gitea中添加了OAuth2应用程序，并添加了重定向URI https://droneio.docker.localdev/login。客户端ID和客户端密钥添加到docker-compose. yaml中。
当我验证无人机时，最终重定向后会导致错误：
Login Failed. Post "https://gitea.docker.localdev/login/oauth/access_token": dial tcp: lookup gitea.docker.localdev on 127.0.0.11:53: no such host
我只设法得到工作设置使用私人局域网地址与端口，而不是trefik子域。

如何配置Docker以使treafik子域可在这些容器之间访问？

我目前的docker-compose.yaml：

---
version: '3'
services:
  gitea:
    image: gitea/gitea
    environment:
      - SSH_DOMAIN=gitea.docker.localdev
      - SSH_PORT=222
      - SSH_LISTEN_PORT=22
      - ROOT_URL=gitea.docker.localdev

    volumes:
      - ./gitea_data:/data
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.gitea-web.entrypoints=web"
      - "traefik.http.routers.gitea-web.rule=Host(`gitea.docker.localdev`)"
      - "traefik.http.routers.gitea-web.service=gitea-web-svc"
      - "traefik.http.services.gitea-web-svc.loadbalancer.server.port=3000"
      - traefik.http.routers.gitea-http.middlewares=gitea-https
      - traefik.http.middlewares.gitea-https.redirectscheme.scheme=https
      - traefik.http.routers.gitea-https.entrypoints=websecure
      - traefik.http.routers.gitea-https.rule=Host(`gitea.docker.localdev`)
      - traefik.http.routers.gitea-https.tls=true
      - "traefik.tcp.routers.gitea-ssh.rule=HostSNI(`*`)"
      - "traefik.tcp.routers.gitea-ssh.entrypoints=ssh"
      - "traefik.tcp.routers.gitea-ssh.service=gitea-ssh-svc"
      - "traefik.tcp.services.gitea-ssh-svc.loadbalancer.server.port=22"
    networks:
      - web

  droneio:
    image: drone/drone:latest
    container_name: droneio
    restart: unless-stopped
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /etc/timezone:/etc/timezone:ro
      - /var/docker/droneio-data:/data
    environment:
      - DRONE_SERVER_HOST=droneio.docker.localdev
      - DRONE_SERVER_PROTO=https
      - DRONE_RPC_SECRET=4810ef8120663ffa960dfa1d78c5d437
      # Gitea Config
      - DRONE_GITEA_SERVER=https://gitea.docker.localdev/
      - DRONE_GITEA_CLIENT_ID=0828a8c9-02f5-459e-9804-8b37ea0b3eb7
      - DRONE_GITEA_CLIENT_SECRET=gto_p6pydy3m5j6jetbcyz6oqzoslrpil7evsi7xbx5xgwngxywn6scq
      - DRONE_LOGS_PRETTY=true
      - DRONE_LOGS_COLOR=true
      - DRONE_DEBUG=true
      - DRONE_TRACE=true
    labels:
      - traefik.enable=true
      - traefik.http.routers.droneio-http.entrypoints=web
      - traefik.http.routers.droneio-http.rule=Host(`droneio.docker.localdev`)
      - traefik.http.routers.droneio-http.middlewares=droneio-https
      - traefik.http.middlewares.droneio-https.redirectscheme.scheme=https
      - traefik.http.routers.droneio-https.entrypoints=websecure
      - traefik.http.routers.droneio-https.rule=Host(`droneio.docker.localdev`)
      - traefik.http.routers.droneio-https.tls=true
    networks:
      - web
    depends_on:
      - gitea
  drone-runner:
    image: drone/drone-runner-docker:1
    container_name: drone-runner
    restart: unless-stopped
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /etc/timezone:/etc/timezone:ro
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      - DRONE_RPC_PROTO=https
      - DRONE_RPC_HOST=droneio.docker.localdev
      - DRONE_RPC_SECRET=4810ef8120663ffa960dfa1d78c5d437 #  random string generated by openssl rand -hex 16
      - DRONE_RUNNER_CAPACITY=2
      - DRONE_RUNNER_NAME=droneio.docker.localdev
    ports:
      - 3500:3000
    depends_on:
      - droneio

networks:
  web:
    external: true
volumes:
  git:
  db:

docker

来源：https://stackoverflow.com/questions/73776349/local-instance-of-drone-io-cannot-authenticate-with-local-gitea-using-treafik-su

2条答案

按热度按时间

vm0i2vca1#

drone容器没有办法知道gitea容器中发生了什么.这包括任何本地设置的dns记录，因为你没有以全局可用的方式设置这些记录.你需要为你的drone容器添加一种方法来使用gitea容器，包括traefik，作为你的dns解析器.
Docker compose让您使用以下结构来完成此操作：

services:
 droneio:
  dns:
   - 8.8.8.8
   - gitea

赞(0）回复(0）举报 2023-02-07

pbossiut2#

我的工作docker-compose.yaml

---
version: '3'
volumes:
  git:
  db:
services:
  gitea:
    image: gitea/gitea:latest
    ports:
      # - '22:22'
      - '3555:3000'
    restart: unless-stopped
    environment:
      - SSH_DOMAIN=gitea.docker.localdev
      - SSH_PORT=222
      - SSH_LISTEN_PORT=22

    volumes:
      - ${DOCKER_DATA_DIR}/gitea_data:/data
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.gitea-web.entrypoints=web"
      - "traefik.http.routers.gitea-web.rule=Host(`gitea.docker.localdev`)"
      - "traefik.http.routers.gitea-web.service=gitea-web-svc"
      - "traefik.http.services.gitea-web-svc.loadbalancer.server.port=3000"

      - traefik.http.routers.gitea-http.middlewares=gitea-https
      - traefik.http.middlewares.gitea-https.redirectscheme.scheme=https

      - traefik.http.routers.gitea-https.entrypoints=websecure
      - traefik.http.routers.gitea-https.rule=Host(`gitea.docker.localdev`)
      - traefik.http.routers.gitea-https.tls=true

      - "traefik.tcp.routers.gitea-ssh.rule=HostSNI(`*`)"
      - "traefik.tcp.routers.gitea-ssh.entrypoints=ssh"
      - "traefik.tcp.routers.gitea-ssh.service=gitea-ssh-svc"
      - "traefik.tcp.services.gitea-ssh-svc.loadbalancer.server.port=22"
    networks:
      - web
    dns:
      - 8.8.8.8
      - 000.000.0.000 # change it to local LAN adress
      - 1.1.1.1
      - gitea
    extra_hosts:
      - "gitea.docker.localdev:000.000.0.000" # change it to local LAN adress
      - "droneio.docker.localdev:000.000.0.000" # change it to local LAN adress
  droneio:
    image: drone/drone:latest
    container_name: droneio
    restart: unless-stopped
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /etc/timezone:/etc/timezone:ro
      - ${DOCKER_DATA_DIR}/droneio-data:/data

    environment:
      - DRONE_SERVER_HOST=droneio.docker.localdev
      - DRONE_SERVER_PROTO=https
      - DRONE_RPC_SECRET=4810ef8120663ffa960dfa1d78c5d437
      # Gitea Config
      - DRONE_GITEA_SERVER=https://gitea.docker.localdev/
      - DRONE_GITEA_CLIENT_ID=${DRONE_GITEA_CLIENT_ID}
      - DRONE_GITEA_CLIENT_SECRET=${DRONE_GITEA_CLIENT_SECRET}
      - DRONE_GITEA_SKIP_VERIFY=true
      - DRONE_LOGS_PRETTY=true
      - DRONE_LOGS_COLOR=true
      - DRONE_DEBUG=true
      - DRONE_OPEN=true
      - DRONE_TRACE=true
      - DRONE_NETWORK=default

    depends_on:
      - gitea
    labels:
      - traefik.enable=true
      - traefik.http.routers.droneio-http.entrypoints=web
      - traefik.http.routers.droneio-http.rule=Host(`droneio.docker.localdev`)
      - traefik.http.routers.droneio-http.middlewares=droneio-https
      - traefik.http.middlewares.droneio-https.redirectscheme.scheme=https
      - traefik.http.routers.droneio-https.entrypoints=websecure
      - traefik.http.routers.droneio-https.rule=Host(`droneio.docker.localdev`)
      - traefik.http.routers.droneio-https.tls=true

    networks:
      - web
    dns:
      - 8.8.8.8
      - 000.000.0.000 # change it to local LAN adress
      - 1.1.1.1
      - gitea

  drone-runner:
    image: drone/drone-runner-docker:latest
    container_name: drone-runner
    restart: unless-stopped
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /etc/timezone:/etc/timezone:ro
      - /var/run/docker.sock:/var/run/docker.sock
    ports:
      - "3556:3000"
    labels:
      - traefik.enable=true
      - traefik.http.routers.dronerunner-http.entrypoints=web
      - traefik.http.routers.dronerunner-http.rule=Host(`dronerunner.docker.localdev`)
      - traefik.http.routers.dronerunner-http.middlewares=dronerunner-https
      - traefik.http.middlewares.dronerunner-https.redirectscheme.scheme=https
      - traefik.http.routers.dronerunner-https.entrypoints=websecure
      - traefik.http.routers.dronerunner-https.rule=Host(`dronerunner.docker.localdev`)
      - traefik.http.routers.dronerunner-https.tls=true
    depends_on:
      - droneio
      # - gitea
    networks:
      - web

    dns:
      - 8.8.8.8
      - 000.000.0.000 # change it to local LAN adress
      - 1.1.1.1
      - gitea

    environment:
      - DRONE_RPC_PROTO=https
      - DRONE_RPC_HOST=droneio.docker.localdev
      - DRONE_RPC_SECRET=4810ef8120663ffa960dfa1d78c5d437 # PRC SECRET random string generated by openssl rand -hex 16
      - DRONE_RUNNER_CAPACITY=2
      - DRONE_RPC_SKIP_VERIFY=true
      - DRONE_DEBUG=true
      - DRONE_RUNNER_NAME=drone-runner-docker
      - DRONE_RUNNER_NETWORKS=web,proxy

networks:
  proxy:
    external: true
  web:
    external: true

并且这些别名应该添加到traefik的docker-compose.yaml中

services:
  traefik:
    ...
    ...
    networks:
      # Define the network on which traefik is going to operate.
      proxy:
        aliases:
          - gitea.docker.localdev
          - droneio.docker.localdev
      web:

赞(0）回复(0）举报 2023-02-07

我来回答

docker www.example.com的本地示例drone.io无法使用treafik子域向本地gitea进行身份验证,请拨tcp：查找无此主机

2条答案

相关问题

热门标签

最新问答