所有公共映像拉取均失败，并显示“摘要SHA256的文件系统层验证失败" [英] All public image pulls fail with “filesystem layer verification failed for digest sha256”

问题描述

我已经在至少5种不同版本的Linux上尝试过这种方法，并且总是碰壁:

I've tried this on at least 5 different versions of Linux and always hit the same wall:

我可以使用docker成功运行hello-world.但是每当我尝试拉出任何其他映像(例如ubuntu，nginx)时，它都会并行拉出碎片，然后以文件系统层验证失败而告终.有没有人看到这个问题或可以提供建议?

I can use docker to run hello-world successfully. But whenever I try to pull any other image (e.g. ubuntu, nginx) it pulls the pieces in parallel and then ends up with the filesystem layer verification failure. Has anyone seen this problem or can offer advice?

组件:

• 作为Virtual Box VM的CentOS 7.3.1611(3.10.0-514.el7.x86_64)
• Docker 1.10.3
• xfs文件系统

配置步骤(CentOS):

Configuration steps (CentOS):

  # yum install docker  

  # systemctl start docker
  # systemctl status docker
  # systemctl enable docker

  # docker run hello-world  (works)
  # docker pull ubuntu      (fails)

^{注意:如果我尝试手动存在冲突，则Yum不会安装docker 1.12.}

当前问题:

1. Virtualbox来宾主机中的docker是否存在问题?

1. Are there issues with docker in a Virtualbox guest host?

Docker是否需要指定类型的文件系统?

Does Docker require a specify type of filesystem?

我在某处阅读了一条注释，该注释在尝试拉多个时失败(Hello-world是一个单独的块)，但我不能验证一下.有没有我可以尝试的小图像?

I read a comment somewhere that fails when trying to pull multiple pieces in parallel (hello-world is a single chunk), but I can't verify that. Is there another tiny image I can try?

我看到的唯一问题与AWS有关，并且我没有使用AWS.可以这是SHA关键问题吗?

The only issues I've seen relate to AWS and I'm not using AWS. Could it be a SHA key issue?

回答评论:注意:我可以运行hello-world示例和busybox.都是一层.不确定是否与它有关.sudo docker pull debian使用默认标签:最新尝试拉存储库docker.io/library/debian ...最新:从docker.io/library/debian中拉出75a822cd7888:验证校验和摘要sha256的文件系统层验证失败:75a822cd7888e394c49828b951061402d31745f596b1f502758570f2d0ee79e2摘要sha256:75a822cd7888e394c49828b951061402d31745f596b1f502758570f2d0ee79e2的文件系统层验证失败

Answer to comment: Note: I can run the hello-world example and busybox. The are both one layer. Not sure if that has anything to do with it.sudo docker pull debian Using default tag: latest Trying to pull repository docker.io/library/debian ... latest: Pulling from docker.io/library/debian 75a822cd7888: Verifying Checksum filesystem layer verification failed for digest sha256:75a822cd7888e394c49828b951061402d31745f596b1f502758570f2d0ee79e2 filesystem layer verification failed for digest sha256:75a822cd7888e394c49828b951061402d31745f596b1f502758570f2d0ee79e2

推荐答案

事实证明这是Virtualbox的错误.这是有道理的，因为我尝试使用的每台计算机都是Virtualbox VM(请参阅原始帖子).在研究通过wget手动下载文件的变通方法时，wget在所有计算机上都出现错误.几秒钟的下载过程中引发"SSL3_GET_RECORD:解密失败或Mac记录不良".谷歌搜索表明，当VM的网络类型设置为桥接"时，这是Virtualbox中的已知错误(无论如何，截至2014年).解决方案是将VM中的网络类型设置为NAT.

This turned out to be a Virtualbox bug. It makes sense, since every machine I was trying this on was a Virtualbox VM (see original post). In investigating a work-around to download the pieces manually via wget, wget was getting errors on all machines. Downloads over a few seconds were throwing "SSL3_GET_RECORD:decryption failed or bad record mac". Googling that showed that this is a known (as of 2014 anyway) bug in Virtualbox when the VM's network type is set to Bridged. The solution is to set the network type in the VM to NAT.

这篇关于所有公共映像拉取均失败，并显示“摘要SHA256的文件系统层验证失败"的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！