Univention Bugzilla – Bug 51031
proxy/no_proxy not being considered in /etc/univention/templates/files/etc/systemd/system/docker.service.d/http-proxy.conf
Last modified: 2020-05-06 14:39:59 CEST
The template file /etc/univention/templates/files/etc/systemd/system/docker.service.d/http-proxy.conf is very important because it configures docker's proxy settings. If docker's proxy settings are not right, the installation of apps will fail. Contrary to UCR vars proxy/http_proxy and proxy/https_proxy, proxy/no_proxy is not part of the template. Instead "localhost,127.0.0.1" is being set as a default, if at least one of proxy/http or proxy/https is set. proxy/no_proxy should be part of the template or there should at least be a way to configure it to be included other than changing the template.
A Ticket-Number is required to qualify a Bug as "School Customer Affected". I've pushed this Bug into the ucsschool Trello Backlog.
Typo in last comment: sed 's/ucsschool Trello/appcenter Taiga'
See also https://docs.docker.com/config/daemon/#httphttps-proxy
Somehow the link in my previous comment does not work. Use https://docs.docker.com/config/daemon/systemd/ and see in the section "HTTP/HTTPS proxy"
fix on branch ccastens/51031 https://git.knut.univention.de/univention/ucs/-/tree/ccastens/51031 If ucr variable 'proxy/no_proxy' is set, it's value will be added to the default 'NO_PROXY' part of the environment variable of univention-docker. Example: (ucr var) proxy/no_proxy == 'test,1.2.3.4' (docker env var) HTTPS_PROXY=... NO_PROXY=localhost,127.0.0.1,test,1.2.3.4 'proxy/no_proxy' is still only used when at least one of 'proxy/http' or 'proxy/https' is set. In case ucr variable 'proxy/no_proxy' is not set, 'NO_PROXY' is set to the default value 'localhost,127.0.0.1'.
Merged and built in 4.4-4 Successful build Package: univention-docker Version: 4.0.1-8A~4.4.0.202005041208 Branch: ucs_4.4-0 Scope: errata4.4-4 commit 14c93ec19085614748f3c88c31b0e916a50bdbf4 commit 646578d47e29a75a92b560e501124541e1e08577 commit 5e070b4190f15c32f676daa110e36fcc05948bc4
OK - yaml OK - univention-docker, no_proxy is evaluated in the template ucr get proxy/no_proxy 10.200.7.80,10.200.7.160 more /etc/systemd/system/docker.service.d/http-proxy.conf ... [Service] Environment= "HTTP_PROXY=http://10.200.7.80:3128" "NO_PROXY=localhost,127.0.0.1,10.200.7.80,10.200.7.160"
<http://errata.software-univention.de/ucs/4.4/584.html>