syslog日志
Mar 13 08:42:41 xxx dockerd[30691]: time=”2022-03-13T08:42:41.928436506Z” level=warning msg=”Error getting v2 registry: Get https://docker.mirrors.ustc.edu.cn/v2/: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)”
Mar 13 08:42:41 xxx dockerd[30691]: time=”2022-03-13T08:42:41.928568283Z” level=info msg=”Attempting next endpoint for pull after error: Get https://docker.mirrors.ustc.edu.cn/v2/: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)”
终端表现
root@xxx:/data1/docker# docker pull redis
Using default tag: latest
Error response from daemon: Get https://registry-1.docker.io/v2/: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
排查记录
1.根据网上的文档，尝试更换了各种地址，发现都无法拉取地址。于是开始自己排查。
2.测试域名解析是能正常解析的
root@xxx:/data1/docker# ping docker.mirrors.ustc.edu.cn
PING mirrors.ustc.edu.cn (202.141.160.110) 56(84) bytes of data.
3.尝试telnet443端口，发现端口不通
root@xxx:/data1/docker# telnet docker.mirrors.ustc.edu.cn 443
Trying 202.141.160.110…
4.此时怀疑是网络的问题，各种检查，发现是这台有问题的机器到目标机器的网络不通，但是内网别的机器正常，所以怀疑可能是防火墙、路由器、服务器路由问题
root@liuyi:/data1/docker# traceroute docker.mirrors.ustc.edu.cn
traceroute to docker.mirrors.ustc.edu.cn (202.141.160.110), 30 hops max, 60 byte packets
1 RT-AC86U-4680 (192.168.50.1) 1.707 ms 1.498 ms 1.403 ms
2 * *
3 * *
4 * *
5 * *
6 * * *
5.经过排查，发现是出问题的这台机器到路由器192.168.50.1的下一跳地址192.168.1.1不通。为什么我知道下一跳是这个IP呢，因为我用别的机器测了下。
root@liuyi:/data1/docker# ping 192.168.1.1
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
6.通过抓包发现只有发出去的包，没有发回来的
root@liuyi:~# tcpdump -vvv|grep -i 192.168.1.1
tcpdump: listening on enp4s0, link-type EN10MB (Ethernet), capture size 262144 bytes
192.168.50.61 > 192.168.1.1: ICMP echo request, id 31374, seq 1, length 64
192.168.50.61 > 192.168.1.1: ICMP echo request, id 31374, seq 2, length 64
192.168.50.61 > 192.168.1.1: ICMP echo request, id 31374, seq 3, length 64
192.168.50.61 > 192.168.1.1: ICMP echo request, id 31374, seq 4, length 64
192.168.50.61 > 192.168.1.1: ICMP echo request, id 31374, seq 5, length 64
192.168.50.61 > 192.168.1.1: ICMP echo request, id 31374, seq 6, length 64
192.168.50.61 > 192.168.1.1: ICMP echo request, id 31374, seq 7, length 64**
解决方案
登录路由器检查，发现是路由器禁用了这台机器访问网络，解除限制后恢复正常。
Original: https://www.cnblogs.com/ly6161/p/ji-lu-yi-cidocker-jing-xiang-la-qu-shi-bai-de-wen.html
Author: 打个酱油6161
Title: 记录一次docker镜像拉取失败的问题
原创文章受到原创版权保护。转载请注明出处：https://www.johngo689.com/610496/
转载文章受原作者版权保护。转载请注明原作者出处！