Ubuntu 22.04 安装Docker
安装依赖包
sudo apt-get install apt-transport-https ca-certificates curl gnupg-agent software-properties-common
添加 Docker 的官方 GPG 密钥
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
添加 Docker 的存储库
sudo add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb\_release -cs) stable"
安装 Docker 引擎
sudo apt-get update
sudo apt-get install docker-ce docker-ce-cli containerd.io
验证 Docker 是否安装成功
sudo docker --version
启动并启用 Docker 服务
sudo systemctl start docker
sudo systemctl enable docker
将用户添加到 Docker 组
为了不每次都使用 sudo 运行 Docker 命令，可以将当前用户添加到 docker 组：
sudo usermod -aG docker $USER
newgrp docker
配置镜像加速器
sudo nano /etc/docker/daemon.json
{
"registry-mirrors": ["https://dockerproxy.cn","https://docker.rainbond.cc","https://docker.udayun.com"]
}
sudo systemctl daemon-reload sudo systemctl restart docker
测试 Docker 安装
$ docker pull hello-world
Using default tag: latest
latest: Pulling from library/hello-world
c1ec31eb5944: Pull complete
Digest: sha256:d211f485f2dd1dee407a80973c8f129f00d54604d2c90732e8e320e5038a0348
Status: Downloaded newer image for hello-world:latest
docker.io/library/hello-world:latest
$ docker run hello-world
Hello from Docker!
This message shows that your installation appears to be working correctly.
To generate this message, Docker took the following steps:
1. The Docker client contacted the Docker daemon.
2. The Docker daemon pulled the "hello-world" image from the Docker Hub.
(amd64)
3. The Docker daemon created a new container from that image which runs the
executable that produces the output you are currently reading.
4. The Docker daemon streamed that output to the Docker client, which sent it
to your terminal.
To try something more ambitious, you can run an Ubuntu container with:
$ docker run -it ubuntu bash
Share images, automate workflows, and more with a free Docker ID:
https://hub.docker.com/
For more examples and ideas, visit:
https://docs.docker.com/get-started/
Docker 编译 rustdesk
git clone https://github.com/rustdesk/rustdesk
cd rustdesk
docker build -t "rustdesk-builder" .
制作Docker镜像时的报错
$ docker build -t "rustdesk-builder" .
[+] Building 167.8s (7/12) docker:default
=> [internal] load build definition from Dockerfile 0.0s
=> => transferring dockerfile: 1.51kB 0.0s
=> [internal] load metadata for docker.io/library/debian:bullseye-slim 3.2s
=> [internal] load .dockerignore 0.0s
=> => transferring context: 2B 0.0s
=> [1/9] FROM docker.io/library/debian:bullseye-slim@sha256:3f9e53602537cc817d96f0ebb131a39bdb16fa8b422137659a9a597e7e3853c1 0.0s
=> [internal] load build context 0.0s
=> => transferring context: 35B 0.0s
=> CACHED [2/9] RUN apt update -y && apt install --yes --no-install-recommends g++ gcc git curl nasm yasm libgtk-3-dev clang libxcb-randr0-de 0.0s
=> ERROR [3/9] RUN git clone --branch 2023.04.15 --depth=1 https://github.com/microsoft/vcpkg && /vcpkg/bootstrap-vcpkg.sh -disableMetrics && /vcpkg/vcpkg --disable-metrics install libvpx libyuv opus aom 164.5s
------
> [3/9] RUN git clone --branch 2023.04.15 --depth=1 https://github.com/microsoft/vcpkg && /vcpkg/bootstrap-vcpkg.sh -disableMetrics && /vcpkg/vcpkg --disable-metrics install libvpx libyuv opus aom:
0.163 Cloning into 'vcpkg'...
164.5 error: RPC failed; curl 28 Failed to connect to github.com port 443: Connection timed out
164.5 fatal: expected flush after ref listing
------
Dockerfile:34
--------------------
33 |
34 | >>> RUN git clone --branch 2023.04.15 --depth=1 https://github.com/microsoft/vcpkg && \
35 | >>> /vcpkg/bootstrap-vcpkg.sh -disableMetrics && \
36 | >>> /vcpkg/vcpkg --disable-metrics install libvpx libyuv opus aom
37 |
--------------------
ERROR: failed to solve: process "/bin/sh -c git clone --branch 2023.04.15 --depth=1 https://github.com/microsoft/vcpkg && /vcpkg/bootstrap-vcpkg.sh -disableMetrics && /vcpkg/vcpkg --disable-metrics install libvpx libyuv opus aom" did not complete successfully: exit code: 128
ssrdog TUN模式
透明代理
透明代理的意思是客户端不需要知道有代理服务器的存在，它改变 request fields（报文）并传送真实 IP。本文中的透明代理是指使用 Clash 的 TUN 模式虚拟出来的一块 TUN 网卡，作为局域网中的网关，从而实现透明代理。
如何判断tun代理是否开启成功
输出结果中应该会有一个类似tun0的设备，表示TUN设备已经被加载, 以下显示TUN没有开启成功
$ ip link show
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp6s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
link/ether 58:11:22:b7:90:07 brd ff:ff:ff:ff:ff:ff
3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT group default
link/ether 02:42:20:66:24:24 brd ff:ff:ff:ff:ff:ff
TUN模式开启报错日志
cat ~/.config/clash-nyanpasu/logs/clash-nyanpasu.2024-10-16.app.log
{"timestamp":"2024-10-16T07:25:59.126565Z","level":"INFO","fields":{"message":"[clash]: ERR [Inbound] start failed error=operation not permitted type=TUN stackType=gvisor inet=198.18.0.1/16\n","log.target":"app","log.module_path":"clash_verge::core::clash::core","log.file":"tauri/src/core/clash/core.rs","log.line":206},"target":"app","filename":"tauri/src/core/clash/core.rs","line_number":206}
Clash Nyanpasun 不显示GUI问题
ubuntu 查看本机显卡型号
o$ sudo lshw -c video
*-display
description: VGA compatible controller
product: GK208B [GeForce GT 710]
vendor: NVIDIA Corporation
physical id: 0
bus info: pci@0000:07:00.0
version: a1
width: 64 bits
clock: 33MHz
capabilities: pm msi pciexpress vga_controller bus_master cap_list rom
configuration: driver=nvidia latency=0
resources: irq:74 memory:fb000000-fbffffff memory:e0000000-e7ffffff memory:e8000000-e9ffffff ioport:e000(size=128) memory:fc000000-fc07ffff
*-graphics
product: simpledrmdrmfb
physical id: 1
logical name: /dev/fb0
capabilities: fb
configuration: depth=32 resolution=2560,1440
查看NVIDIA显卡驱动
$ nvidia-smi
Wed Oct 16 18:20:57 2024
+-----------------------------------------------------------------------------+
| NVIDIA-SMI 470.256.02 Driver Version: 470.256.02 CUDA Version: 11.4 |
|-------------------------------+----------------------+----------------------+
| GPU Name Persistence-M| Bus-Id Disp.A | Volatile Uncorr. ECC |
| Fan Temp Perf Pwr:Usage/Cap| Memory-Usage | GPU-Util Compute M. |
| | | MIG M. |
|===============================+======================+======================|
| 0 NVIDIA GeForce ... Off | 00000000:07:00.0 N/A | N/A |
| 37% 50C P0 N/A / N/A | 286MiB / 1979MiB | N/A Default |
| | | N/A |
+-------------------------------+----------------------+----------------------+
+-----------------------------------------------------------------------------+
| Processes: |
| GPU GI CI PID Type Process name GPU Memory |
| ID ID Usage |
|=============================================================================|
| No running processes found |
+-----------------------------------------------------------------------------+
GK208B [GeForce GT 710] 最新驱动是: 传统GPU超级新版本(470.xx 系列): 470.256.02
ubuntu查看系统推荐的驱动
$ ubuntu-drivers devices
== /sys/devices/pci0000:00/0000:00:03.1/0000:07:00.0 ==
modalias : pci:v000010DEd0000128Bsv00001458sd000036F7bc03sc00i00
vendor : NVIDIA Corporation
model : GK208B [GeForce GT 710]
driver : nvidia-driver-390 - distro non-free
driver : nvidia-driver-470 - distro non-free recommended
driver : nvidia-driver-470-server - distro non-free
driver : nvidia-driver-418-server - distro non-free
driver : nvidia-driver-450-server - distro non-free
driver : xserver-xorg-video-nouveau - distro free builtin
Clash.Nyanpasu_2.0.0-alpha+d87b0e5_amd64.AppImage 报错
$ sudo ./Clash.Nyanpasu_2.0.0-alpha+d87b0e5_amd64.AppImage
[sudo] lxg 的密码：
KMS: DRM_IOCTL_MODE_CREATE_DUMB failed: 权限不够
Failed to create GBM buffer of size 800x642: 权限不够
解决方案
sudo WEBKIT_DISABLE_DMABUF_RENDERER=1 ./Clash.Nyanpasu_2.0.0-alpha+d87b0e5_amd64.AppImage
开启TUN模式后构建docker镜像仍然报错
报错问题-1
=> ERROR [3/9] RUN git clone --branch 2023.04.15 --depth=1 https://github.com/microsoft/vcpkg && /vcpkg/bootstrap-vcpkg.sh -disableMetrics && /vcpkg/vcpkg --disable-metrics install libvpx libyuv opus aom 69.2s
6.132
6.132 Turn off this advice by setting config variable advice.detachedHead to false
6.132
6.632 Downloading vcpkg-glibc...
69.14 curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to github.com:443
问题原因: VPN代理导致本地网络异常
解决方案-1
查看VPN代理端口号, 执行如下步骤:
- Dockerfile 中修改系统的源到国内镜像
在Dockerfile的RUN apt update之前插入两行：
RUN sed -i "s/deb.debian.org/mirrors.163.com/g" /etc/apt/sources.list
RUN sed -i "s/security.debian.org/mirrors.163.com/g" /etc/apt/sources.list
- Dockerfile 中加入代理的 env
在User root后插入两行
ENV http_proxy=http://host:port
ENV https_proxy=http://host:port
- docker build 命令后面加上 proxy 参数
docker build -t "rustdesk-builder" . --network host --build-arg HTTP_PROXY=http://127.0.0.1:7890 --build-arg HTTPS_PROXY=http://127.0.0.1:7890
报错问题-2
=> ERROR [ 5/11] RUN git clone --branch 2023.04.15 --depth=1 https://github.com/microsoft/vcpkg && /vcpkg/bootstrap-vcpkg.sh -disableMetrics && /vcpkg/vcpkg --disable-metrics install libvpx libyuv opus aom 61.1s
------
> [ 5/11] RUN git clone --branch 2023.04.15 --depth=1 https://github.com/microsoft/vcpkg && /vcpkg/bootstrap-vcpkg.sh -disableMetrics && /vcpkg/vcpkg --disable-metrics install libvpx libyuv opus aom:
0.059 Cloning into 'vcpkg'...
61.04 fatal: unable to access 'https://github.com/microsoft/vcpkg/': gnutls_handshake() failed: The TLS connection was non-properly terminated.
------
Dockerfile:36
--------------------
35 |
36 | >>> RUN git clone --branch 2023.04.15 --depth=1 https://github.com/microsoft/vcpkg && \
37 | >>> /vcpkg/bootstrap-vcpkg.sh -disableMetrics && \
38 | >>> /vcpkg/vcpkg --disable-metrics install libvpx libyuv opus aom
39 |
--------------------
ERROR: failed to solve: process "/bin/sh -c git clone --branch 2023.04.15 --depth=1 https://github.com/microsoft/vcpkg && /vcpkg/bootstrap-vcpkg.sh -disableMetrics && /vcpkg/vcpkg --disable-metrics install libvpx libyuv opus aom" did not complete successfully: exit code: 128
解决方案-2
修改容器系统中的 cargo 源，在RUN ./rustup.sh -y后插入下面代码
RUN echo '[source.crates-io]' > ~/.cargo/config.toml \
&& echo 'registry = "https://mirrors.sjtug.sjtu.edu.cn/git/crates.io-index"' >> ~/.cargo/config.toml \
&& echo '# 上海交通大学镜像源' >> ~/.cargo/config.toml \
&& echo "replace-with = 'sjtu'" >> ~/.cargo/config.toml \
&& echo '# 上海交通大学' >> ~/.cargo/config.toml \
&& echo '[source.sjtu]' >> ~/.cargo/config.toml \
&& echo 'registry = "https://mirrors.sjtug.sjtu.edu.cn/git/crates.io-index"' >> ~/.cargo/config.toml \
&& echo '' >> ~/.cargo/config.toml
docker 镜像制作成功日志
$ docker build -t "rustdesk-builder" . --network host --build-arg HTTP_PROXY=http://127.0.0.1:7890 --build-arg HTTPS_PROXY=http://127.0.0.1:7890
[+] Building 101.5s (15/16) docker:default
[+] Building 101.7s (15/16) docker:default [+] Building 101.8s (15/16) docker:default [+] Building 102.0s (15/16) docker:default [+] Building 102.1s (15/16) docker:default [+] Building 102.3s (15/16) docker:default [+] Building 102.4s (15/16) docker:default [+] Building 102.6s (15/16) docker:default [+] Building 102.7s (15/16) docker:default [+] Building 102.9s (15/16) docker:default [+] Building 103.0s (15/16) docker:default [+] Building 103.2s (15/16) docker:default [+] Building 103.3s (15/16) docker:default [+] Building 103.5s (15/16) docker:default [+] Building 103.6s (15/16) docker:default [+] Building 103.6s (16/16) FINISHED docker:default => [internal] load build definition from Dockerfile 0.0s => => transferring dockerfile: 2.24kB 0.0s => [internal] load metadata for docker.io/library/debian:bullseye-slim 0.5s => [internal] load .dockerignore 0.0s => => transferring context: 2B 0.0s => [ 1/12] FROM docker.io/library/debian:bullseye-slim@sha256:610b4c7ad241e66f6e2f9791e3abdf0cc107a69238ab21bf9b4695d51fd6366a 0.0s => [internal] load build context 0.0s => => transferring context: 35B 0.0s => CACHED [ 2/12] RUN sed -i "s/deb.debian.org/mirrors.163.com/g" /etc/apt/sources.list 0.0s => CACHED [ 3/12] RUN sed -i "s/security.debian.org/mirrors.163.com/g" /etc/apt/sources.list 0.0s => CACHED [ 4/12] RUN apt update -y && apt install --yes --no-install-recommends g++ gcc git curl nasm yasm libgtk-3-dev clang libxcb-randr0- 0.0s => [ 5/12] RUN git clone --branch 2023.04.15 --depth=1 https://github.com/microsoft/vcpkg && /vcpkg/bootstrap-vcpkg.sh -disableMetrics && /vcpkg/vcpkg --disable-metrics install libvpx libyuv opus aom 84.1s => [ 6/12] RUN groupadd -r user && useradd -r -g user user --home /home/user && mkdir -p /home/user/rustdesk && chown -R user: /home/user && echo "user ALL=(ALL) NOPASSWD:ALL" | sudo tee /etc/sudoers.d 0.1s => [ 7/12] WORKDIR /home/user 0.0s => [ 8/12] RUN curl -LO https://raw.githubusercontent.com/c-smile/sciter-sdk/master/bin.lnx/x64/libsciter-gtk.so 1.5s => [ 9/12] RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs > rustup.sh && chmod +x rustup.sh && ./rustup.sh -y 12.7s => [10/12] RUN echo '[source.crates-io]' > ~/.cargo/config && echo 'registry = "https://mirrors.sjtug.sjtu.edu.cn/git/crates.io-index"' >> ~/.cargo/config && echo '# 替换成你偏好的镜像源' >> ~/.cargo/con 0.1s2] COPY ./entrypoint.sh / 0.2s
=> [11/12] COPY ./entrypoint.sh / 0.2s
=> exporting to image 4.3s
=> => exporting layers 4.3s
=> => writing image sha256:4926961534aa07dcc3c575d7f844bd3909ed05979af6df4ecefd643bdfc510ff 0.0s
=> => naming to docker.io/library/rustdesk-builder
构建应用程序
编译命令
docker run --rm -it --network host -v $PWD:/home/user/rustdesk -v rustdesk-git-cache:/home/user/.cargo/git -v rustdesk-registry-cache:/home/user/.cargo/registry -e PUID="$(id -u)" -e PGID="$(id -g)" rustdesk-builder
编译生成目录
docker/rustdesk/target/debug$ tree -L 1
.
├── build
├── deps
├── examples
├── incremental
├── liblibrustdesk.a
├── liblibrustdesk.d
├── liblibrustdesk.rlib
├── liblibrustdesk.so
├── libsciter-gtk.so
├── naming
├── naming.d
├── rustdesk
└── rustdesk.d
DockerFile
FROM debian:bullseye-slim
WORKDIR /
ARG DEBIAN_FRONTEND=noninteractive
RUN sed -i "s/deb.debian.org/mirrors.163.com/g" /etc/apt/sources.list
RUN sed -i "s/security.debian.org/mirrors.163.com/g" /etc/apt/sources.list
RUN apt update -y && \
apt install --yes --no-install-recommends \
g++ \
gcc \
git \
curl \
nasm \
yasm \
libgtk-3-dev \
clang \
libxcb-randr0-dev \
libxdo-dev \
libxfixes-dev \
libxcb-shape0-dev \
libxcb-xfixes0-dev \
libasound2-dev \
libpam0g-dev \
libpulse-dev \
make \
cmake \
unzip \
zip \
sudo \
libgstreamer1.0-dev \
libgstreamer-plugins-base1.0-dev \
ca-certificates \
ninja-build && \
rm -rf /var/lib/apt/lists/*
RUN git clone --branch 2023.04.15 --depth=1 https://github.com/microsoft/vcpkg && \
/vcpkg/bootstrap-vcpkg.sh -disableMetrics && \
/vcpkg/vcpkg --disable-metrics install libvpx libyuv opus aom
RUN groupadd -r user && \
useradd -r -g user user --home /home/user && \
mkdir -p /home/user/rustdesk && \
chown -R user: /home/user && \
echo "user ALL=(ALL) NOPASSWD:ALL" | sudo tee /etc/sudoers.d/user
WORKDIR /home/user
RUN curl -LO https://raw.githubusercontent.com/c-smile/sciter-sdk/master/bin.lnx/x64/libsciter-gtk.so
USER user
RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs > rustup.sh && \
chmod +x rustup.sh && \
./rustup.sh -y
RUN echo '[source.crates-io]' > ~/.cargo/config.toml \
&& echo 'registry = "https://github.com/rust-lang/crates.io-index"' >> ~/.cargo/config.toml \
&& echo '# 中科大镜像源' >> ~/.cargo/config.toml \
&& echo "replace-with = 'ustc'" >> ~/.cargo/config.toml \
&& echo '# 中科大' >> ~/.cargo/config.toml \
&& echo '[source.ustc]' >> ~/.cargo/config.toml \
&& echo 'registry = "https://mirrors.ustc.edu.cn/crates.io-index"' >> ~/.cargo/config.toml \
&& echo '' >> ~/.cargo/config.toml
USER root
ENV http_proxy=http://127.0.0.1:7890
ENV https_proxy=http://127.0.0.1:7890
ENV HOME=/home/user
COPY ./entrypoint.sh /
ENTRYPOINT ["/entrypoint.sh"]
