如何在 ec2 上启用 docker-compose 安装 - 允许出站 ssh 但不工作？

Question

我确实启用了 sec group-ssh 流量出站规则 通过 ssh 进入我的 ec2 服务器后，我尝试从 docker website:

运行脚本

# Add Docker's official GPG key:
sudo apt-get update
sudo apt-get install ca-certificates curl gnupg
sudo install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
sudo chmod a+r /etc/apt/keyrings/docker.gpg

# Add the repository to Apt sources:
echo \
  "deb [arch="$(dpkg --print-architecture)" signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu \
  "$(. /etc/os-release && echo "$VERSION_CODENAME")" stable" | \
  sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
sudo apt-get update

尝试连接到 ec2 外部但失败。是什么原因？如何解决？

0% [Connecting to us-east-1.ec2.archive.ubuntu.com (3.87.126.146)]

Could not connect to security.ubuntu.com:80 (9
1.189.91.83), connection timed out Could not connect to security.ubuntu.com:80 (1
85.125.190.36), connection timed out Could not connect to security.ubuntu.com:80
(185.125.190.39), connection timed out Could not connect to security.ubuntu.com:8
0 (91.189.91.81), connection timed out Could not connect to security.ubuntu.com:8
0 (91.189.91.82), connection timed out
W: Some index files failed to download. They have been ignored, or old ones used
instead.

Answer 1

确保出站流量设置为从端口 0 到端口 0，目的地为 0.0.0.0/0，或者只需将类型选择为“所有流量”。

如果您只是设置了 ssh 端口，则无法启用出站流量来使用curl或下载任何东西