在 /etc/ufw/before.rules 添加 *nat :POSTROUTING ACCEPT [0:0] -A POSTROUTING ! -o docker0 -s 172.17.0.0/16 -j MASQUERADE COMMIT ufw reload ufw allow ssh ufw deny 5000 ufw default deny ufw default allow routed ufw enable ufw insert 1 allow from 192.168.56.1 to any port 5000 cat /etc/docker/daemon.json {"insecure-registries":["192.168.0.11:5000","192.168.56.110:5000","harbor:5000"],"storage-driver":"overlay2","log-opts": {"max-size":"200m", "max-file":"3"},"iptables":false}
https://www.zhaokeli.com/article/8613.html