Google cloud platform 使用自定义docker图像连接到Google Cloud AI平台笔记本实例，结果显示；“拒绝连接”；

我正试图在谷歌云AI平台上推出一款使用自定义图像的笔记本电脑。我遵循了这里描述的实践：

因此，要构建和推动docker形象：

gcloud auth configure-docker
export PROJECT=$(gcloud config list project --format "value(core.project)")
docker build . -f Dockerfile -t "gcr.io/${PROJECT}/my-custom-image:latest"
docker push "gcr.io/${PROJECT}/my-custom-image:latest"

但是，当尝试使用此映像连接到笔记本实例时

gcloud compute --project "myproject" ssh --zone "myzone" "custom-test" -- -L 8080:localhost:8080

我明白了

即使我只使用基本图像而不做任何更改，也会发生这种情况，例如 Dockerfile：

FROM gcr.io/deeplearning-platform-release/base-cpu:latest

如果我直接基于

gcr.io/deeplearning platform release/base cpu:latest

启动笔记本实例，我就能够按预期连接到它

编辑1： 从串行端口1日志：

May  9 16:51:31 custom-test GCEGuestAgent[673]: 2020-05-09T16:51:31.7524Z GCEGuestAgent Info: Updating keys for user MYUSER.
[  206.144111] google_guest_agent[673]: 2020/05/09 16:51:33 logging client: rpc error: code = PermissionDenied desc = The caller does not have permission
May  9 16:51:33 custom-test google_guest_agent[673]: 2020/05/09 16:51:33 logging client: rpc error: code = PermissionDenied desc = The caller does not have permission
May  9 16:53:25 custom-test ntpd[707]: kernel reports TIME_ERROR: 0x41: Clock Unsynchronized

May  9 18:04:36 custom-test systemd[1]: Started Session 4 of user MYUSER.
May  9 18:04:36 custom-test GCEGuestAgent[673]: 2020-05-09T18:04:36.5636Z GCEGuestAgent Info: Updating keys for user MYUSER.
May  9 18:04:37 custom-test google_guest_agent[673]: 2020/05/09 18:04:37 logging client: rpc error: code = PermissionDenied desc = The caller does not have permission
[ 4590.862794] google_guest_agent[673]: 2020/05/09 18:04:37 logging client: rpc error: code = PermissionDenied desc = The caller does not have permission

似乎是权限错误，但我不确定为什么我没有权限部署从同一帐户推送的映像。它是否与自定义测试ntpd[707]有关：内核报告时间\u错误：0x41：时钟未同步

编辑2： 现在，大约一个小时后，我可以连接了（不做任何更改）。但是当访问

localhost:8080

时，我得到：

channel 4: open failed: connect failed: Connection refused
channel 3: open failed: connect failed: Connection refused

作为附加控制台中的输出

从串行端口1日志：

May  9 16:51:31 custom-test GCEGuestAgent[673]: 2020-05-09T16:51:31.7524Z GCEGuestAgent Info: Updating keys for user MYUSER.
[  206.144111] google_guest_agent[673]: 2020/05/09 16:51:33 logging client: rpc error: code = PermissionDenied desc = The caller does not have permission
May  9 16:51:33 custom-test google_guest_agent[673]: 2020/05/09 16:51:33 logging client: rpc error: code = PermissionDenied desc = The caller does not have permission
May  9 16:53:25 custom-test ntpd[707]: kernel reports TIME_ERROR: 0x41: Clock Unsynchronized

May  9 18:04:36 custom-test systemd[1]: Started Session 4 of user MYUSER.
May  9 18:04:36 custom-test GCEGuestAgent[673]: 2020-05-09T18:04:36.5636Z GCEGuestAgent Info: Updating keys for user MYUSER.
May  9 18:04:37 custom-test google_guest_agent[673]: 2020/05/09 18:04:37 logging client: rpc error: code = PermissionDenied desc = The caller does not have permission
[ 4590.862794] google_guest_agent[673]: 2020/05/09 18:04:37 logging client: rpc error: code = PermissionDenied desc = The caller does not have permission

编辑3： 将映像作为VM启动会导致：

[   26.315675] konlet-startup[535]: 2020/05/09 19:34:57 Launching user container 'gcr.io/myproject/my-custom-image:latest'
[   26.315713] konlet-startup[535]: 2020/05/09 19:34:57 Configured container 'instance-1-test' will be started with name 'klt-instance-1-test-azmb'.
[   26.315740] konlet-startup[535]: 2020/05/09 19:34:57 Pulling image: 'gcr.io/myproject/my-custom-image:latest'
[   26.839555] konlet-startup[535]: 2020/05/09 19:34:57 Error: Failed to start container: Error response from daemon: {"message":"pull access denied for gcr.io/myproject/my-custom-image, repository does not exist or may require 'docker login': denied: Permission denied for \"latest\" from request \"/v2/myproject/my-custom-image/manifests/latest\". "}
[   26.839839] konlet-startup[535]: 2020/05/09 19:34:57 Saving welcome script to profile.d

---

尝试在命令中添加更多详细信息，这可能会给出更多提示：

gcloud compute--project“myproject”ssh--zone“myzone”“custom test”--L8080:localhost:8080--verbosity=debug

我还有一些其他问题：1。能否运行命令“gcloud container images list”此信息将有助于确定问题是否与您对存储库的访问有关。2.您是否可以使用虚拟机中的“docker login”再次进行身份验证并尝试再次提取映像？这将有助于确定问题是否与docker身份验证有关。3.您还可以尝试使用“docker run”命令手动创建容器，并告诉我它是否有效。如果没有，请指定您得到的错误。尝试在命令中添加更多详细信息，这可能会给出更多提示：

gcloud compute--project“myproject”ssh--zone“myzone”“custom test”--L8080:localhost:8080--verbosity=debug

我还有一些其他问题：1。能否运行命令“gcloud container images list”此信息将有助于确定问题是否与您对存储库的访问有关。2.您是否可以使用虚拟机中的“docker login”再次进行身份验证并尝试再次提取映像？这将有助于确定问题是否与docker身份验证有关。3.您还可以尝试使用“docker run”命令手动创建容器，并告诉我它是否有效。如果没有，您可以指定得到的错误。