告诉 HN：由于足球赛事 Cloudflare 封锁，在西班牙 Docker pull 失败
4 分•作者: littlecranky67•4 个月前
我花了1个多小时调试为什么我本地托管的 GitLab Runner 无法创建流水线。GitLab 作业输出在尝试拉取 Docker 镜像时，只会显示奇怪的 TLS 错误。在调试 GitLab 和 Runner 之后，我意识到过了一会儿，我甚至无法在我的机器上以 root 身份运行 "docker pull <image>"：
> 错误拉取镜像配置：下载失败，尝试次数=6：tls：无法验证证书：x509：证书对任何名称都无效，但希望匹配 docker-images-prod.6aa30f8b08e16409b46e0173d6de2f56.r2.cloudflarestorage.com
起初，我责怪了 tailscale、DNS 配置以及所有其他东西。直到我将上述 URL 复制到我笔记本电脑的浏览器中，才收到一个网站横幅：
> 根据巴塞罗那第 6 商业法院于 2024 年 12 月 18 日作出的判决，在由西班牙职业足球联盟和 Telefónica Audiovisual Digital, S.L.U. 提起的普通诉讼（商业事务第 249.1.4 条）-1005/2024-H 的框架内，禁止访问此 IP 地址。
https://www.laliga.com/noticias/nota-informativa-en-relacion-con-el-bloqueo-de-ips-durante-las-ultimas-jornadas-de-laliga-ea-sports-vinculadas-a-las-practicas-ilegales-de-cloudflare
对于那些不懂西班牙语的人来说：这意味着正在进行足球比赛，并且在此期间，该特定主机被阻止。这简直是疯了。我想这意味着我的 GitLab 流水线在足球比赛期间将无法运行。谢谢你，西班牙。
查看原文
I just spent 1h+ debugging why my locally-hosted gitlab runner would fail to create pipelines. The gitlab job output would just display weird TLS errors when trying to pull a docker images. After debugging gitlab and the runner, I realized after a while I could not even run "docker pull <image>" on my machine as root:<p>> error pulling image configuration: download failed after attempts=6: tls: failed to verify certificate: x509: certificate is not valid for any names, but wanted to match docker-images-prod.6aa30f8b08e16409b46e0173d6de2f56.r2.cloudflarestorage.com<p>First blaming tailscale, dns configuration and all other stuff. Until I just copied that above URL into my browser on my laptop, and received a website banner:<p>> El acceso a la presente dirección IP ha sido bloqueado en cumplimiento de lo dispuesto en la Sentencia de 18 de diciembre de 2024, dictada por el Juzgado de lo Mercantil nº 6 de Barcelona en el marco del procedimiento ordinario (Materia mercantil art. 249.1.4)-1005/2024-H instado por la Liga Nacional de Fútbol Profesional y por Telefónica Audiovisual Digital, S.L.U.
https://www.laliga.com/noticias/nota-informativa-en-relacion-con-el-bloqueo-de-ips-durante-las-ultimas-jornadas-de-laliga-ea-sports-vinculadas-a-las-practicas-ilegales-de-cloudflare<p>For those non-spanish speakers: It means there is football match on, and during that time that specific host is blocked. This is just plain madness. I guess that means my gitlab pipelines will not run when football is on. Thank you, Spain.