crictl can't pull images with proxy

[hmtai]

when I pull an image with crictl, like

crictl pull docker.io/library/alpine:latest

There was an error:

FATA[0030] pulling image failed: rpc error: code = Unknown desc = failed to resolve image "docker.io/library/alpine:latest": failed to do request: Head https://registry-1.docker.io/v2/library/alpine/manifests/latest: dial tcp 35.169.231.249:443: i/o timeout

crictl version info:

Version:  0.1.0
RuntimeName:  containerd
RuntimeVersion:  v1.1.0
RuntimeApiVersion:  v1alpha2

I have already exported http_proxy on my machine, and other commands like wget, curl works well, ctr also woks well, like:

ctr images pull docker.io/library/alpine:latest

[Random-Liu]

ctr does use golang HTTP_PROXY. https://github.com/containerd/containerd/blob/master/cmd/ctr/commands/resolver.go#L88 It supports client side proxy config.

For crictl we can't support it on the client side, because CRI doesn't have a proxy parameter. However, we can support containerd daemon level HTTP_PROXY config.

I'll do it.

[feiskyer]

For crictl we can't support it on the client side, because CRI doesn't have a proxy parameter. However, we can support containerd daemon level HTTP_PROXY config.

Agreed. crictl doesn't need proxy because it only talks to local runtime's unix socket while the image is actually pulled in runtimes.

[hmtai]

@Random-Liu Thanks a lot:)

[Random-Liu]

Close.

[sipasing]

Is there any update on this or any PR that fixed this ?

[sipasing]

Never mind.. setting containerd service file as mentioned here containerd/cri#834 worked for me.