我有一个看起来像这样的构建过程：
1. 推送到 BitBucket 的代码，由 BitBucker Pipelines 拾取
image: node:8.2.1
pipelines:
default:
- step:
name: Push Server to AWS Repository
script:
- docker login -u AWS -p $AWS_ECR_LOGIN https://$AWS_ECR_URL
- docker build -t dev .
- docker tag dev:latest $AWS_ECR_URL/dev:latest
- docker push $AWS_ECR_URL/dev:latest
options:
docker: true
2. BitBucket Pipelines 从 repo 中的 Dockerfile 构建 Docker Image 并将其推送到 Amazon ECR
# BUILD DEV IMAGE and TEST
FROM node:8.2.1 as builder
COPY ./ /user/src/app
WORKDIR /user/src/app
RUN npm install -g grunt-cli --quiet
RUN npm install --quiet
RUN grunt build
# RUN npm test:build
# BUILD APP IMAGE
FROM node:8.2.1
COPY --from=builder /user/src/app/dist /user/src/app/
WORKDIR /user/src/app
RUN npm install -g mongodb-migrations --quiet
RUN npm install --only=prod --quiet
EXPOSE 5000
CMD npm start
3. Jenkins作业监视ECR中的新镜像并远程触发EC2实例拉取并重启docker镜像
let dockerApi = new Docker({
host: DockerIpAddress,
port: process.env.DOCKER_PORT || 2375,
version: 'v1.32' // required when Docker >= v1.13, https://docs.docker.com/engine/api/version-history/
});
dockerApi.createContainer({
Image: IMAGE_NAME,
AttachStdout: true,
AttachStderr: true,
Tty: true,
Env: [`NODE_ENV=${ENV}`],
ExposedPorts: {
"5000/tcp": {},
},
HostConfig:{
PortBindings: {
"5000/tcp": [{
"HostPort": "5000"
}],
},
},
})
问题
到目前为止 - 一切正常！我的 docker 容器正在 ec2 实例上运行。不起作用的是我无法接收任何连接。即使从 ssh 进入 ec2 实例，curl http://localhost:5000也无法正常工作。通过公共 ip 或公共主机从浏览器访问 ec2 实例也不起作用。
IP 表
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy DROP)
target prot opt source destination
DOCKER-ISOLATION all -- anywhere anywhere
ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
DOCKER all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain DOCKER (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere ip-172-17-0-2.ec2.internal tcp dpt:5000
Chain DOCKER-ISOLATION (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere
系统控制
$ sysctl net.ipv4.conf.all.forwarding
net.ipv4.conf.all.forwarding = 1
Docker 中的节点服务器最后一行输出
Server running at: http://localhost:5000