Pulling Container Images into Azure VM Without Internet

Question

Pulling Container Images into Azure VM Without Internet

Satyam Chauhan 607

Hi,

I have a azure container registry which contains some repositories. I want to pull these repositories images into my azure VM. The VM has RHEL 8 OS and Moby-cli and Moby-engine is installed for running docker commands.

The VM networking is configured to deny internet access and allow only port 5671 for all IPs and port 443 for azure container registry only. Below is the outbound port rules for the VM.

User's image

I am able to login to container registry using docker login command, but when I run the docker pull command it gets stuck and gives timeout error User's image

This VM is configured to run IoT edge runtime without internet. But I am facing issues while doing so. please help how can I resolve this issue.

1 answer

Your answer

Answer 1

Sander van de Velde | MVP 36,951 MVP Volunteer Moderator

Hello @Satyam Chauhan ,

Side-loading containers to an edge device is a common solution to save some bandwidth and data consumption.

Replacing modules can be done. To manipulate the deployment manifest, you need internet access.

Check out this blog post for an example.

The issue you encounter is not directly Azure IoT Edge related. That runtime is unaware of how you manage your containers.

Are you sure the container registry is accessible? Have you tried a 'ping'? Do you have the right credentials?

If the response helped, do "Accept Answer". If it doesn't work, please let us know the progress. All community members with similar issues will benefit by doing so. Your contribution is highly appreciated.

Satyam Chauhan 607 Reputation points

2023-11-06T09:15:30.9233333+00:00

Hi @Sander van de Velde | MVP , Thanks for your response,

Since the server is connected to container registry using site-to-site vpn connectivity, Can I use docker pull command to get the images any how. as side loading will work for my custom modules but for public modules like microsoft/edgeAgent and edgeHub modules is not working with side loading.
Sander van de Velde | MVP 36,951 Reputation points MVP Volunteer Moderator

2023-11-06T09:33:14.2866667+00:00

I have never tried it myself but technically it should be possible to pull the Microsoft edgeAgent and edgeHub modules into your own repository.

From there, you are in control of which edge agent and edge hub modules are distributed to what devices.

This also means you are now responsible for those modules.
Satyam Chauhan 607 Reputation points

2023-11-08T04:13:49.95+00:00
Hi @Sander van de Velde | MVP ,

Using the side loading and by following this article - https://learn.microsoft.com/en-us/azure/iot-edge/production-checklist?view=iotedge-1.4#store-runtime-containers-in-your-private-registry, I am able to get those default modules like edgeAgent and edgeHub into the iot edge server. I am able to see all the images on running command - sudo docker images. But when I run command to see the containers - sudo docker ps -a, it gives only edgeAgent and that also in error state, edgeHub is not visible.

CONTAINER ID S6240cb9109ff IMAGE <custom tag>/azureiotedge-agent:1.4 COMMAND "/bin/sh -c 'exec /a…" CREATED 29 minutes ago STATUS Exited (143) 32 seconds ago PORTS NAME edgeAgent has context menu

And on running - sudo iotedge list, below is the response.

A module runtime error occurred caused by: A module runtime error occurred caused by: timed out

Can you please let me know what could be the possible reason for this, as I am not able to debug.

Thanks
Sander van de Velde | MVP 36,951 Reputation points MVP Volunteer Moderator

2023-11-08T17:26:33.3+00:00

Hello @Satyam Chauhan ,

Please try to figure out what's happening starting with a working solution.

Azure IoT Edge is designed to run without an internet connection.

But it needs an internet connection once (only once) to get the deployment manifest.

Using this manifest, the list of modules to load is picked up.

After that, your device can run without the internet.

Your rhel 8 operating system is not listed as a supported operating system (rhel 7 is listed as tier 2).

The VPN is not helping either.

Please do a few steps back and start with a regular Azure IoT Edge runtime, directly connected to the internet, perhaps running on a proper supported OS.

From there, change one parameter at a time to come to the solution you want to have.

Share via

Pulling Container Images into Azure VM Without Internet

1 answer

Your answer