Docker构建连接Debian软件仓库超时问题求助

错误日志 #

#8 62.09 Ign:2 http://deb.debian.org/debian-security testing-security InRelease
#8 62.10 Ign:3 http://deb.debian.org/debian testing-updates InRelease
#8 63.10 Ign:1 http://deb.debian.org/debian testing InRelease
#8 64.10 Ign:2 http://deb.debian.org/debian-security testing-security InRelease
#8 64.10 Ign:3 http://deb.debian.org/debian testing-updates InRelease
#8 67.11 Err:1 http://deb.debian.org/debian testing InRelease
#8 67.11   Could not connect to deb.debian.org:80 (151.101.62.132), connection timed out
#8 68.10 Err:2 http://deb.debian.org/debian-security testing-security InRelease
#8 68.10   Could not connect to deb.debian.org:80 (146.75.74.132), connection timed out
#8 68.10 Err:3 http://deb.debian.org/debian testing-updates InRelease
#8 68.10   Unable to connect to deb.debian.org:80:

当前Dockerfile片段 #

FROM debian:testing-slim AS build-jni-library
RUN echo "deb http://ftp.us.debian.org/debian/ testing main contrib non-free" > /etc/apt/sources.list
RUN apt update && DEBIAN_FRONTEND=noninteractive apt install -y ...

已知情况 #

• 已更换多个Debian镜像源，问题未解决
• 本地网络连接稳定，无严格防火墙或VPN限制

解决建议 #

• 切换为HTTPS源替代HTTP：Debian仓库支持HTTPS协议，可避免HTTP可能的网络拦截或超时问题。修改sources.list内容为：

  RUN echo "deb https://ftp.us.debian.org/debian/ testing main contrib non-free" > /etc/apt/sources.list
  

  同时建议在安装依赖前先安装apt-transport-https，确保系统支持HTTPS源：

  RUN apt update && DEBIAN_FRONTEND=noninteractive apt install -y apt-transport-https ...
  

• 增加APT超时与重试机制：在apt update前添加配置，延长超时时间并增加重试次数，提升网络容错性：

  RUN echo "Acquire::http::Timeout \"60\"; Acquire::Retries \"3\";" > /etc/apt/apt.conf.d/99timeout
  

• 调整Docker DNS配置：Docker默认使用系统DNS，若DNS解析不稳定可手动指定公共DNS服务器。两种方式：

  1. 临时在构建时指定：

     docker build --build-arg DNS_SERVER=8.8.8.8 .
     

     并在Dockerfile中添加：

     ARG DNS_SERVER
     RUN echo "nameserver $DNS_SERVER" > /etc/resolv.conf
     

  2. 永久修改Docker daemon配置：在/etc/docker/daemon.json中添加：

     {
       "dns": ["8.8.8.8", "1.1.1.1"]
     }
     

     然后重启Docker服务：systemctl restart docker

• 合并RUN指令减少网络连接次数：将修改源、更新索引、安装依赖的指令合并为一个RUN层，避免重复创建网络连接：

  FROM debian:testing-slim AS build-jni-library
  RUN echo "deb https://ftp.us.debian.org/debian/ testing main contrib non-free" > /etc/apt/sources.list && \
      echo "Acquire::http::Timeout \"60\"; Acquire::Retries \"3\";" > /etc/apt/apt.conf.d/99timeout && \
      apt update && \
      DEBIAN_FRONTEND=noninteractive apt install -y apt-transport-https ...
  

• 尝试使用本地镜像缓存：若上述方法仍无效，可先在本地下载所需的Debian包，搭建本地APT源后再进行构建，适合长期在网络受限环境下构建镜像。

内容的提问来源于stack exchange，提问作者Tobi Akinyemi