Solve the problem of docker pull being reset

This article introduces how to solve the problem of docker pull being reset, and shares it with you. The details are as follows:

For example:

$ docker pull ubuntu:16.04
Trying to pull repository docker.io/library/ubuntu ... 
Get https://registry-1.docker.io/v2/library/ubuntu/manifests/sha256:dd7808d8792c9841d0b460122f1acf0a2dd1f56404f8d1e56298048885e45535: Get https://auth.docker.io/token?scope=repository%3Alibrary%2Fubuntu%3Apull&service=registry.docker.io: read tcp *.*.*.*:41348->50.17.62.194:443: read: connection reset by peer

Cause: It seems that 50.17.62.194 was reset by TCP.

Solution:

1. Find its available IP:

$ dig auth.docker.io
 
; <<>> DiG 9.10.4-P6-RedHat-9.10.4-4.P6.fc25 <<>> auth.docker.io
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7119
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1
 
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;auth.docker.io. IN A
 
;; ANSWER SECTION:
auth.docker.io. 60 IN A 34.193.147.40
auth.docker.io. 60 IN A 50.17.62.194
auth.docker.io. 60 IN A 52.5.246.212
 
;; Query time: 130 msec
;; SERVER: *.*.*.*#53(.*.*.*.*)
;; WHEN: Tue Mar 07 11:03:29 CST 2017
;; MSG SIZE rcvd: 91

2. Change /etc/hosts to force docker.io related domain names to resolve to other available IPs:

# /etc/hosts
34.193.147.40 registry-1.docker.io auth.docker.io

By the way, attach a description of the image and what image providers are currently available

First of all, we need to clarify one question: What is the difference between Mirror and Private Registry?

Explanation copied from daocloud:

There is an essential difference between the two.

Private Registry is an image repository built by developers or enterprises. It is usually used to store Docker images within the enterprise and is used for internal development processes and product release and version control. Mirror is a proxy transit service. The Mirror service we (referring to daocloud) provide directly connects to the official Registry of Docker Hub. There are hundreds of thousands of Docker images of various types on Docker Hub. When using Private Registry, you need to directly type the address of the Private Registry in Docker Pull or Dockerfile, which usually leads to binding with the Private Registry and lack of flexibility. To use the Mirror service, you only need to add the Mirror parameter to the Docker daemon configuration file to transparently access the official Docker Hub globally, avoiding the need to modify the source of the Dockerfile image reference.

Simply put, Mirror is similar to CDN, and its essence is the official cache; Private Registry is similar to private server and has nothing to do with the official. For me, since I want to drag the image on the docker hub, the corresponding one is Mirror. The mirror of yum/apt is a little different. It actually drags the entire official library file to its own server as a mirror (regardless of whether it is useful or not), and synchronizes with the official one regularly. Docker mirror only caches images that have been used.

At present, it is very difficult to access docker hub in China, so it is imperative to use docker mirror. There are currently three companies providing services: ustc, daocloud, and aliyun, which will be introduced one by one below.

Choice Zero: NetEase 163 Docker Image

$ sudo echo "DOCKER_OPTS=\"\$DOCKER_OPTS --registry-mirror=http://hub-mirror.c.163.com\"" >> /etc/default/docker
$ service docker restart

Generally speaking, the pork from NetEase tastes better than the pork on the market.

Option 1: ustc mirror

ustc is a long-established Linux mirror service provider, and has been used since the distant Ubuntu 5.04 version. I mentioned in the blog before that you can use the ustc docker repository image. For usage, please refer to the ustc docker image usage help.

The docker image of ustc has a good speed and I have been happy using it. But today I found that it doesn't work, maybe it is related to this incident. Today I tried to pull ubuntu, it was very slow. It should be pulled directly from docker hub, there was basically no acceleration effect.

One of the advantages of the ustc docker mirror is that it does not require registration and is a public service (this is the ustc I am familiar with).

Option 2: daocloud

DaoCloud also provides a docker accelerator, but unlike ustc, users need to register before using it, and the traffic is limited to 10GB per month. It is relatively simple to use on Linux, and it can be done with one command:

curl -sSL https://get.daocloud.io/daotools/set_mirror.sh | sh -s http://{your_id}.m.daocloud.io

The actual change is /usr/lib/systemd/system/docker.service, adding a –registry-mirror parameter:

ExecStart=/usr/bin/docker-current daemon --registry-mirror=http://{your_id}.m.daocloud.io\

After setting, you need to reload the configuration & restart:

systemctl enable docker; systemctl daemon-reload ; systemctl restart docker

but! Today, I had a very bad experience using DaoCloud's docker accelerator. I could hardly feel the acceleration effect, so I gave up decisively.

Option 3: alicloud

Alibaba Cloud also provides a docker accelerator, but it is more troublesome than ustc: not only do you have to register as an Alibaba Cloud user, you also have to join the developer platform. But after all this last night, I found that the service is really good, with a pull speed of basically 1MB/s (partly because I am also in Hangzhou). The configuration method is similar to daocloud, and a URL is given after the accelerator is activated.

I changed /usr/lib/systemd/system/docker.service directly:

ExecStart=/usr/bin/docker-current daemon --registry-mirror=https://{your_id}.mirror.aliyuncs.com\

Reload config & restart:

systemctl enable docker; systemctl daemon-reload ; systemctl restart docker

When pulling, docker.io is still displayed, but the speed is not docker.io at all.

# docker pull ubuntu
Using default tag: latest
Trying to pull repository docker.io/library/ubuntu ...
latest: Pulling from docker.io/library/ubuntu
cad964aed91d: Pull complete
3a80a22fea63: Pull complete
50de990d7957: Pull complete
61e032b8f2cb: Pull complete
9f03ce1741bf: Pull complete
Digest: sha256:28d4c5234db8d5a634d5e621c363d900f8f241240ee0a6a978784c978fe9c737
Status: Downloaded newer image for docker.io/ubuntu:latest

In summary, although aliyun docker mirror has some unpleasantness, it is indeed the best service at present. Of course, when USTC returns to normal, I will still switch to USTC.

The above is the full content of this article. I hope it will be helpful for everyone’s study. I also hope that everyone will support 123WORDPRESS.COM.