用于私有 dockerhub 映像的 Dockerrun.aws.json 文件

Question

我正在尝试将使用 Docker 构建的 rails 应用程序部署到 Elastic Beanstalk 的多容器服务。我的 Dockerrun.aws.json 目前看起来像：

{
  "AWSEBDockerrunVersion": 2,
  "volumes": [
    {
      "name": "myapp",
      "host": {
        "sourcePath": "/var/app/current"
      }
    },
    {
      "name": "myapp-redis",
      "host": {
        "sourcePath": "/var/app/current/myapp-redis"
      }
    },
    {
      "name": "myapp-postgres",
      "host": {
        "sourcePath": "/var/app/current/myapp-postgres"
      }
    }
  ],
  "authentication": {
    "bucket": "myapp",
    "key": "config.json"
  },
  "containerDefinitions": [
    {
      "name": "redis",
      "image": "redis:3.0.5",
      "environment": [
        {
          "name": "Container",
          "value": "redis"
        }
      ],
      "portMappings": [
        {
          "hostPort": 6379,
          "containerPort": 6379
        }
      ],
      "essential": true,
      "memory": 128,
      "mountPoints": [
        {
          "sourceVolume": "myapp-redis",
          "containerPath": "/var/lib/redis/data",
          "readOnly": false
        }
      ]
    },
    {
      "name": "postgres",
      "image": "postgres:9.4.5",
      "environment": [
        {
          "name": "Container",
          "value": "postgres"
        }
      ],
      "portMappings": [
        {
          "hostPort": 5432,
          "containerPort": 5432
        }
      ],
      "essential": true,
      "memory": 128,
      "mountPoints": [
        {
          "sourceVolume": "myapp-postgres",
          "containerPath": "/var/lib/postgresql/data",
          "readOnly": false
        }
      ]
    },
    {
      "name": "myapp",
      "image": "myrepo/myapp:latest",
      "environment": [
        {
          "name": "Container",
          "value": "myapp"
        }
      ],
      "essential": true,
      "memory": 128,
      "mountPoints": [
        {
          "sourceVolume": "myapp",
          "containerPath": "/myapp",
          "readOnly": false
        }
      ]
    }
  ]
}

我的config.json 文件位于存储桶myapp/config.json 中，格式如下：

{
  "https://index.docker.io/v1/": {
    "auth": "mylongauthtokenhere",
    "email": "me@myemail.com"
  }
}

当我指向 "image": "myrepo/myapp:latest", 行的公共存储库时，此设置有效，但是当我尝试使用此配置进行初始化时，我收到错误：err="Error: image myrepo/myapp:latest not found" 和 ERROR [Instance: i-913b2004] Command failed on instance. Return code: 1 Output: 'Failed to start ECS task after retrying 2 times.'

我还尝试了几种不同的方式配置 config.json，但没有成功。对此的任何帮助将不胜感激！

Answer 1

更新：OP 找到了所需的特定角色。这 aws-elasticbeanstalk-ec2-role 需要 AmazonS3ReadOnlyAccess 政策。

EB 通过服务角色运行。这些角色需要被授予适当的权限才能出去并从 S3 中获取凭证文件：http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/concepts-roles.html

另外，我猜你在本地使用 Docker 1.7 或更高版本。

Docker 1.7+ 登录会生成一个凭证文件config.json，如下所示：

{
 "auths" :
 {
    "server" :
   {
      "auth" : "auth_token",
      "email" : "email"
    }
   }
 } 

Elastic Beanstalk 过去只需要像这样的旧配置对象格式：

 {
    "server" :
   {
      "auth" : "auth_token",
      "email" : "email"
    }
   }

注意到缺少的外部身份验证块了吗？

或者，如果您在 OP EB 中指出使用的是 docker 1.9.1，则 ElasticBeanstalk 期待更新的格式。

您可以尝试编辑此文件并重新上传到 EB。详情见本页底部：http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/create_deploy_docker.container.console.html#docker-images-private