vagrant搭建虚拟机在本地无法访问

joshuazm 2020-06-17 06:21:10 UTC #1

最近在mac电脑上使用vagrant搭建虚拟机，使用的box为centos7.8。Vagrantfile配置私有网络【如下】，在本地通过ip无法访问？

 config.vm.network "private_network", ip: "192.168.33.10"

→ vagrant reload
==> default: Attempting graceful shutdown of VM...
==> default: Clearing any previously set forwarded ports...
==> default: Clearing any previously set network interfaces...
==> default: Preparing network interfaces based on configuration...
default: Adapter 1: nat
default: Adapter 2: hostonly
==> default: Forwarding ports...
default: 22 (guest) => 2222 (host) (adapter 1)
==> default: Running 'pre-boot' VM customizations...
==> default: Booting VM...
==> default: Waiting for machine to boot. This may take a few minutes...
default: SSH address: 127.0.0.1:2222
default: SSH username: vagrant
default: SSH auth method: private key
==> default: Machine booted and ready!
==> default: Checking for guest additions in VM...
default: The guest additions on this VM do not match the installed version of
default: VirtualBox! In most cases this is fine, but in rare cases it can
default: prevent things such as shared folders from working properly. If you see
default: shared folder errors, please make sure the guest additions within the
default: virtual machine match the version of VirtualBox you have installed on
default: your host and reload your VM.
default:
default: Guest Additions Version: 5.2.42
default: VirtualBox Version: 6.1
==> default: Configuring and enabling network interfaces...
==> default: Mounting shared folders...
default: /vagrant => /Users/michael/Desktop/vagrant
==> default: Machine already provisioned. Run vagrant provision or use the --provision
==> default: flag to force provisioning. Provisioners marked to run always will still run.

→ ping 192.168.33.10
PING 192.168.33.10 (192.168.33.10): 56 data bytes
64 bytes from 192.168.33.10: icmp_seq=0 ttl=64 time=0.367 ms
64 bytes from 192.168.33.10: icmp_seq=1 ttl=64 time=0.502 ms
64 bytes from 192.168.33.10: icmp_seq=2 ttl=64 time=0.362 ms
64 bytes from 192.168.33.10: icmp_seq=3 ttl=64 time=0.277 ms
64 bytes from 192.168.33.10: icmp_seq=4 ttl=64 time=0.630 ms

通过192.168.33.10/index.html无法访问。浩哥，这个是什么原因？

wanghao 2020-06-17 06:50:57 UTC #2

确定给虚拟机安装的 nginx 已经启动了吗？

joshuazm 2020-06-17 06:53:22 UTC #3

nginx是启动的，active

wanghao 2020-06-17 06:54:41 UTC #4

你是在本地电脑上访问的你的 web 服务器对吧。访问的时候，地址确定是 http 而不是 https 吗？你也可以在命令行用 curl 命令测试一下，比如 curl http://192.168.33.10

joshuazm 2020-06-17 06:58:17 UTC #5

[vagrant@centos7 ~]$ sudo curl http://192.168.33.10

403 Forbidden

nginx/1.16.1

wanghao 2020-06-17 07:00:08 UTC #6

提示 403，这应该是个权限问题。你可以观察一下 nginx 的错误日志，看看上面写了一些什么。执行：

tail /var/log/nginx/error.log

wanghao 2020-06-17 07:00:47 UTC #7

还有你执行的这个 curl 命令不应该是在虚拟机上执行，而是在你自己的电脑上执行，这个 curl 可以把它想成一个客户端，用这个客户端请求你的 web 服务器。

joshuazm 2020-06-17 07:01:57 UTC #8

[vagrant@centos7 ~]$ sudo tail /var/log/nginx/error.log
2020/06/17 06:57:48 [error] 1156#0: *1 "/vagrant/www/index.html" is forbidden (13: Permission denied), client: 192.168.33.10, server: 192.168.33.10, request: "GET / HTTP/1.1", host: "192.168.33.10"
2020/06/17 06:57:59 [error] 1157#0: *2 "/vagrant/www/index.html" is forbidden (13: Permission denied), client: 192.168.33.10, server: 192.168.33.10, request: "GET / HTTP/1.1", host: "192.168.33.10"

wanghao 2020-06-17 07:03:38 UTC #9

观察这个错误日志，我们就知道了 nginx 在访问 /vagrant/www/index.html 这个文件的时候被拒绝了。这有可能是 selinux 的事儿，可以暂时把它关掉。你可以先确定是否运行了 selinux，执行：

getenforce

如果返回 enforced 说明 selinux 正在运行，你可以执行下面命令关掉 selinux：

sudo setenforce 0

joshuazm 2020-06-17 07:13:13 UTC #10

[vagrant@centos7 ~]$ sudo getenforce
Enforcing
[vagrant@centos7 ~]$ sudo setenforce 0
[vagrant@centos7 ~]$ sudo getenforce
Permissive
浩哥，执行完需要重启么？我重启后进去执行sudo getenforce 还是enforcing

wanghao 2020-06-17 07:13:54 UTC #11

应该不用重启，你看看能访问吧。

joshuazm 2020-06-17 07:17:40 UTC #12

还是访问不了。【私有网络地址 http://192.168.33.10/index.html】

wanghao 2020-06-17 07:19:18 UTC #13

那还是权限问题，先确定 selinux 已经被关掉了，然后再去访问。

joshuazm 2020-06-17 07:27:08 UTC #14

是关闭的。貌似可能还有其他方面的原因。
[vagrant@centos7 ~]$ sudo getenforce
Permissive

joshuazm 2020-06-17 07:28:25 UTC #15

虚拟机我配置是私有网络。应该跟我的网络环境没关系的吧

wanghao 2020-06-17 07:28:38 UTC #16

那你可以修改一下运行 nginx 服务的用户，把用户换成 vagrant。

sudo vi /etc/nginx/nginx.conf

user vagrant

然后重新启动一下 nginx，再试一下。

wanghao 2020-06-17 07:29:06 UTC #17

你的网络环境应该没问题。如果有问题，你在错误日志里也不会有显示。

wanghao 2020-06-17 07:29:24 UTC #18

你在本地电脑上的浏览器，访问你的 web 服务，页面是什么样的？是显示 403 吗？

joshuazm 2020-06-17 07:36:47 UTC #19

浩哥，找到原因啦。应该防火墙没有开通web服务的80端口。执行下面命令可以访问啦
[vagrant@centos7 ~]$ sudo /sbin/iptables -I INPUT -p tcp --dport 80 -j ACCEPT

wanghao 2020-06-17 07:37:45 UTC #20

哦 ~ 还有个防火墙，你把它关了吧，在本地测试不用这东西。应该是 firewalld 这个服务，把它关掉。