从docker使用本地ssh端口转发

Question

null

sudo ssh -N -L 0.0.0.0:443:ipinfo.io:443  [e-mail]

127.0.0.1 ipinfo.io

FROM alpine


RUN apk add curl 

RUN curl https://ipinfo.io/ip

因此，ipinfo.io发生的事情可以在环回中解决，但不会通过ssh隧道。如何从docker调用ipinfo.io，使其通过ssh隧道？

附：我用的是macOS High Sierra

Answer 1

以下是我为让它工作所做的事情：

1. 使用ipinfo.io的IP地址，而不是使用ssh命令中的主机名

sudo ssh -g -N -L 0.0.0.0:443:216.239.38.21:443 [e-mail]

FROM alpine


RUN apk add curl
RUN cat /etc/hosts

RUN curl -v https://ipinfo.io/ip

docker build --add-host ipinfo.io:172.17.0.1 -t test:0.0.1 .

Step 3/4 : RUN cat /etc/hosts
 ---> Running in b7384b27c1a5
127.0.0.1       localhost
::1     localhost ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
172.17.0.1      ipinfo.io
172.17.0.2      b7384b27c1a5
Removing intermediate container b7384b27c1a5
 ---> 2a8b062984b8
Step 4/4 : RUN curl -v https://ipinfo.io/ip
 ---> Running in 0fa2c413ab2c
Trying 172.17.0.1:443...
* TCP_NODELAY set
* Connected to ipinfo.io (172.17.0.1) port 443 (#0)
...
> GET /ip HTTP/2
> Host: ipinfo.io
> User-Agent: curl/7.66.0
> Accept: */*
>
...
< HTTP/2 200
< date: Fri, 20 Mar 2020 15:27:12 GMT
< content-type: text/html; charset=utf-8
< content-length: 14
< access-control-allow-origin: *
< x-frame-options: DENY
< x-xss-protection: 1; mode=block
< x-content-type-options: nosniff
< referrer-policy: strict-origin-when-cross-origin
< via: 1.1 google
<
37.42.143.111
...

我认为可能需要在sshd_config中启用gatewayports，并重新启动sshd，这样才能工作。