如何使用Docker映像在私有模式下运行tezos节点？

Question

如何使用Docker映像在私有模式下运行tezos节点？

- 8
- 261 2019-02-03
我已经使用默认配置的 docker映像来启动并运行我的节点,因此如何将其更改为在私有节点中运行,以便可以运行连接到公共网络的几个哨兵节点,将我的私有节点连接到哨兵节点,以避免公开暴露我的贝克节点.

我已经知道此,所以我需要一个泊坞窗图像的解决方案.

I already have my node up and running using docker images with default configuration, so how can i change it to run in private node so that I can run few sentry nodes connected to public network and then connect my private node to sentry nodes to avoid exposing my baker node publically.

I already know this, so I need a solution using docker images.

baking security private-mode baker docker

1 个回答

投票数

lefessan · Answer 1 · 2019-02-04

6

2019-02-04

使用./mainnet.sh start启动docker节点时,可以添加其他参数,例如--private-mode --peer AAA.BBB.CCC.DDD:PORT(您可能需要指定--peer才能将私有节点连接到公共节点).

感谢您的信息.我已经将我的节点作为公共节点运行.现在,如果我停止节点容器,然后使用专用节点标志启动它,那么对我当前的设置是否会有任何副作用(例如与先前连接的节点的连接失败或其他意外错误),或者我应该很好吗?

Thanks for the information. I already have my node running as public node. Now if i stop the node container and then start it with private node flag, will there be any side effect to my current setup (like connection failure with previously connected node or some other unexpected error) OR i should be good to go?
- 0
- 2019-02-04
- Sachin Tomar
它应该工作,但是您可能会注意到某些连接被拒绝.这没问题,无视他们.

It should work, but you will probably notice some connections being rejected. That's not a problem, disregard them.
- 1
- 2019-02-04
- lefessan
我认为上述配置选项中存在一些语法错误.它应该是--peer=AAA.BBB.CCC.DDD:PORT.一个=代替

I think there is some syntax error in above configuration options. it should be --peer=AAA.BBB.CCC.DDD:PORT . An = instead of
- 0
- 2019-02-05
- Sachin Tomar
我使用了这个命令./mainnet.sh start --private-mode --no-bootstrap-peers --bootstrap-threshold=1 --connections 1 --peer 但是我得到的只是传入的连接被拒绝,但我的节点未连接到我的公共节点.

I used this command ./mainnet.sh start --private-mode --no-bootstrap-peers --bootstrap-threshold=1 --connections 1 --peer But all i get is incoming connections rejected but my node is not getting connected to my public node.
- 0
- 2019-02-14
- Sachin Tomar
您是否还指定了端口,即ˋ-peer host:port`?请注意,如果公共节点已满,它将拒绝您的连接.

Did you also specify the port, ie ˋ—peer host:port` ? Note that, if the public node is already full, it will reject your connection.
- 0
- 2019-02-14
- lefessan
不,我没有指定端口.我需要指定端口8732吗?我怎么知道我的公共节点已经满了?如果我的公共节点已满,该怎么办?

No i did not specify the port. Do i need to specify the port 8732? And how do i know that my public node is already full or not? And what to do if my public node is full?
- 0
- 2019-02-15
- Sachin Tomar
@SachinTomar我遇到了同样的问题.我的私有节点未连接到我的公共节点.而且我的私有节点收到"来自非trused对等方的[privatenode]传入连接被拒绝！"您找到解决方案了吗?

@SachinTomar I'm having the same problem. My private node not connecting to my public node. And my private node getting "[private node] incoming connection from untrused peer rejected!" Did you find a solution?
- 0
- 2019-04-11
- Svante
@Svante是的,我首先使用命令sudo ./mainnet.sh admin-client信任地址:9732将我的私有节点IP和公共节点IP彼此添加到服务器,正如lefessan提到的那样,我在我的服务器中添加了--peer选项启动docker命令./mainnet.sh启动--private-mode --peer <公共IP>:9732您可以忽略"来自不受信任的对等方拒绝的传入连接"消息

@Svante Yes i first add my private node IP and public node IP to each other server using command sudo ./mainnet.sh admin-client trust address :9732 and as mentioned by lefessan i added --peer option in my start docker command ./mainnet.sh start --private-mode --peer :9732 You can ignore the "incoming connection from untrusted peer rejected" messages
- 0
- 2019-04-12
- Sachin Tomar