在Ubuntu 20.04上从GCE vm中的GCR拉取

debugcn 发表于 Dev

伊斯普林

我已经有一段时间没有建立GCE堆栈了，我发誓随着时间的推移这会变得越来越困难。因此设置非常简单：空白的ubuntu VM，通过snap安装docker。现在，当我尝试从GCR拉车时，我得到

> docker pull gcr.io/.../image
Using default tag: latest
Error response from daemon: unauthorized: You don't have the needed permissions to perform this operation, and you may have invalid credentials. To authenticate your request, follow the steps in: https://cloud.google.com/container-registry/docs/advanced-authentication

很公平。我检查了我的gcloud命令：

> gcloud auth list
                  Credentialed Accounts
ACTIVE  ACCOUNT
*       [email protected]

To set the active account, run:
    $ gcloud config set account `ACCOUNT`

因此，正确的服务帐户就在那里。在IAM中，它被列为编辑器，并且在很好的情况下，我也添加了存储管理员。现在我跑步

> gcloud auth configure-docker
WARNING: `docker-credential-gcloud` not in system PATH.
gcloud's Docker credential helper can be configured but it will not work until this is corrected.
Adding credentials for all GCR repositories.
WARNING: A long list of credential helpers may cause delays running 'docker build'. We recommend passing the registry name to configure only the registry you are using.
After update, the following will be written to your Docker config file
 located at [/home/y/.docker/config.json]:
 {
  "credHelpers": {
    "gcr.io": "gcloud", 
    "marketplace.gcr.io": "gcloud", 
    "eu.gcr.io": "gcloud", 
    "us.gcr.io": "gcloud", 
    "staging-k8s.gcr.io": "gcloud", 
    "asia.gcr.io": "gcloud"
  }
}

Do you want to continue (Y/n)?  

Docker configuration file updated.

并且根据gcp的文档，该警告很好。gcloud可以用作独立帮助程序的替代方法。但仍然：拉力失败。笨蛋

根据文档，sudo是个坏主意。因此，我尝试将用户添加到docker组中，并且显然与snap发生冲突。我跑了

> sudo addgroup --system docker
> sudo adduser $USER docker
> newgrp docker

> sudo snap disable docker
> sudo snap enable docker

所以现在我可以将docker与我的帐户一起使用了。问题仍然存在。我也尝试了独立的助手

> VERSION=2.0.0
> OS=linux  # or "darwin" for OSX, "windows" for Windows.
> ARCH=amd64  # or "386" for 32-bit OSs, "arm64" for ARM 64.
> curl -fsSL "https://github.com/GoogleCloudPlatform/docker-credential-gcr/releases/download/v${VERSION}/docker-credential-gcr_${OS}_${ARCH}-${VERSION}.tar.gz" | tar xz --to-stdout ./docker-credential-gcr | sudo tee /usr/local/bin/docker-credential-gcr && sudo chmod +x /usr/local/bin/docker-credential-gcr

> docker-credential-gcr configure-docker

我对此进行了很长时间的故障排除，这是怎么回事？

伊斯普林

Snap似乎引起了这里的问题。在辅助程序的特定于快照的配置文件与快速安装gcloud SDK之间的某个位置，发生了错误。我进行了全新安装并仅安装了：

sudo snap remove google-cloud-sdk
sudo apt update; sudo apt upgrade -y
sudo apt install docker.io
sudo curl -L --fail https://github.com/docker/compose/releases/download/1.25.5/run.sh -o /usr/local/bin/docker-compose
sudo chmod +x /usr/local/bin/docker-compose
docker -v
sudo usermod -a -G docker $USER

## new shell
# exit

curl https://sdk.cloud.google.com | bash
gcloud auth configure-docker
. ~/.bashrc
sudo ln -s $(which gcloud) /usr/bin/
gcloud auth configure-docker

本文收集自互联网，转载请注明来源。

如有侵权，请联系[email protected] 删除。