在ARM64主机（Apple Silicon Machine）上运行AMD64 Docker-In-Docker（DIND）容器

Question

我正在尝试在ARM64主机（Apple Silicon）上运行AMD64 Docker-In-Docker（DIND）容器，因为在此DIND上运行的某些图像仅为AMD64（例如MySQL-5.7）。

在带有Apple芯片的Mac上运行此命令：

docker run --platform linux/amd64 --privileged --name dind docker:dind

错误消息获取：

......
time="2022-04-16T04:28:03.742307088Z" level=info msg="Loading containers: start."
time="2022-04-16T04:28:03.757473421Z" level=warning msg="Running iptables --wait -t nat -L -n failed with message: `iptables v1.8.7 (legacy): can't initialize iptables table `nat': iptables who? (do you need to insmod?)\nPerhaps iptables or your kernel needs to be upgraded.`, error: exit status 3"
time="2022-04-16T04:28:03.973541463Z" level=info msg="stopping event stream following graceful shutdown" error="<nil>" module=libcontainerd namespace=moby
time="2022-04-16T04:28:03.974672671Z" level=info msg="stopping healthcheck following graceful shutdown" module=libcontainerd
time="2022-04-16T04:28:03.975118338Z" level=info msg="stopping event stream following graceful shutdown" error="context canceled" module=libcontainerd namespace=plugins.moby
failed to start daemon: Error initializing network controller: 
error obtaining controller instance: failed to create NAT chain DOCKER: 
iptables failed: iptables -t nat -N DOCKER: iptables v1.8.7 (legacy):
can't initialize iptables table `nat': iptables who?
(do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
 (exit status 3)

Docker版本的输出

Server: Docker Desktop 4.7.0 (77141)
 Engine:
  Version:          20.10.14
  API version:      1.41 (minimum version 1.12)
  Go version:       go1.16.15
  Git commit:       87a90dc
  Built:            Thu Mar 24 01:45:44 2022
  OS/Arch:          linux/arm64
  Experimental:     false
 containerd:
  Version:          1.5.11
  GitCommit:        3df54a852345ae127d1fa3092b95168e4a88e2f8
 runc:
  Version:          1.0.3
  GitCommit:        v1.0.3-0-gf46b6ba
 docker-init:
  Version:          0.19.0
  GitCommit:        de40ad0

Answer 1

在Github问了同样的问题，并得到了答案
https://github.com/docker.com/docker/docker/for-mac/issues/6284

基本上没有直接解决方案：

这是不可能的。仿真层不支持IP路由功能。

但是您可以这样做：

在ARM主机上，使用ARM64 dind，

docker run --privileged --name dind docker:dind

然后运行mysql：5.7容器（仅具有linux/amd64架构）代码> - 平台linux/amd64

docker run --platform linux/amd64 --name some-mysql -e MYSQL_ROOT_PASSWORD=foopass -p3306:3306 -d mysql:5.7

等效地，您可以docker pull - platform linux/amd64 mysql：5.7首先，然后docker run note - 平台标志。