报错：Docker-TLS远程连接失败

最新推荐文章于 2024-10-16 16:20:40 发布

小肥是只猫

最新推荐文章于 2024-10-16 16:20:40 发布

阅读量1.1k

点赞数 1

本文链接：https://blog.youkuaiyun.com/qq_41786285/article/details/110533313

版权

报错信息：

[root@client1 docker]# docker --tlsverify --tlscacert=ca.pem --tlscert=cert.pem --tlskey=key.pem -H tcp://master:2376 version
Client: Docker Engine - Community
 Version:           19.03.13
 API version:       1.40
 Go version:        go1.13.15
 Git commit:        4484c46d9d
 Built:             Wed Sep 16 17:03:45 2020
 OS/Arch:           linux/amd64
 Experimental:      false
error during connect: Get https://master:2376/v1.40/version: x509: certificate has expired or is not yet valid

提示证书不可用，检查后发现两台主机的时间不同步，导致证书失效。
解决：两台主机都同步阿里云的时间

#安装ntpdate服务
[root@client1 docker]# yum -y install ntpdate
[root@client1 docker]# ntpdate ntp.aliyun.com
 3 Dec 14:08:53 ntpdate[58308]: step time server 203.107.6.88 offset 246351.900684 sec

#查看两台主机当前时间是否同步
[root@client1 docker]# date
2020年 12月 03日 星期四 14:08:59 CST

如果同步失败，检查虚拟机的时间设置，时区选择。

再进行连接，查看版本成功

[root@client1 docker]# docker --tlsverify --tlscacert=ca.pem --tlscert=cert.pem --tlskey=key.pem -H tcp://master:2376 version
Client: Docker Engine - Community
 Version:           19.03.13
 API version:       1.40
 Go version:        go1.13.15
 Git commit:        4484c46d9d
 Built:             Wed Sep 16 17:03:45 2020
 OS/Arch:           linux/amd64
 Experimental:      false

Server: Docker Engine - Community
 Engine:
  Version:          19.03.13
  API version:      1.40 (minimum version 1.12)
  Go version:       go1.13.15
  Git commit:       4484c46d9d
  Built:            Wed Sep 16 17:02:21 2020
  OS/Arch:          linux/amd64
  Experimental:     false
 containerd:
  Version:          1.3.7
  GitCommit:        8fba4e9a7d01810a393d5d25a3621dc101981175
 runc:
  Version:          1.0.0-rc10
  GitCommit:        dc9208a3303feef5b3839f4323d9beb36df0a9dd
 docker-init:
  Version:          0.18.0
  GitCommit:        fec3683