Linux 1.2.1客户端 本地docker+hosts解决

[MijazzChan]

需要其他客户端的可以查看: #48

我正在使用的方案是:

• Windows 客户端: 设置里http代理至局域网一台服务器, docker镜像 nondanee/unblockneteasemusic:latest, 带-p 8887拉起容器即可. docker正常映射+防火墙暴露就行. 不需要证书.

• iOS客户端: 自签证书后 Issue48-自签证书 信任证书, 配合Shadowsocks规则(music.163.com -> PROXY, music.126.net -> PROXY). 利用v2ray的Routing和Outbound转发至docker内的服务. 有公网ip+ddns, 用v2ray向外暴露vmess当跳板.

{
                    "type": "field",
                    "outboundTag": "netease",
                    "domain": [
                        "music.163.com",
                        "music.126.net"
                    ]
}

{
            "tag": "netease",
            "protocol": "http",
            "settings":{
                "servers": [
                    {
                        "address": "docker.container.ip.or.host",
                        "port": "your.listen.port.here"
                    }
                ]
            },
            "streamSettings": null,
            "mux": null
}

这里的docker需要加RUN CMD参数-p port1:port2 -e https://music.163.com, 且要-v path/to/server.crt:/usr/src/app/server.crt:ro -v path/to/server.key:/usr/src/app/server.key:ro 把证书绑上.

• Linux 客户端(1.2.1)

  Linux manjaro 5.9.16-1-MANJARO 绑静态ip的话, 方便做/etc/hosts, 创建一个新的docker network, 给一个subnet

  sudo docker network create --driver=bridge --subnet=172.18.0.0/24 dockerbr18
  sudo docker network ls
  #输出
  NETWORK ID     NAME         DRIVER    SCOPE
  204bddea61fe   bridge       bridge    local
  4fd2583def16   dockerbr18   bridge    local
  861d752f7647   host         host      local
  6ff2f7b9a665   none         null      local

  我本人不是docker-compose的粉丝. 所以

  sudo docker run -d --net dockerbr18 --ip 172.18.0.2 -v /etc/unblocknetease-docker/cert/server.crt:/usr/src/app/server.crt:ro -v /etc/unblocknetease-docker/cert/server.key:/usr/src/app/server.key:ro --name unblocknetease --restart on-failure nondanee/unblockneteasemusic -p 80:443 -e https://music.163.com -f 59.111.181.38

  此时你ping 172.18.0.2已经会有echo了. 再设一下宿主机的/etc/hosts

  #/etc/hosts
  172.18.0.2    music.126.net
  172.18.0.2    music.163.com
  172.18.0.2    interface.music.163.com

  再尝试ping music.163.net

  ping music.163.com
  #输出
  PING music.163.com (172.18.0.2) 56(84) bytes of data.
  64 bytes from music.163.com (172.18.0.2): icmp_seq=1 ttl=64 time=0.063 ms

  再根据» [SOLVED] Can I trust self-signed SSL certificate?

  sudo trust anchor /etc/unblocknetease-docker/cert/ca.crt

  直接正常启动网易云即可, --ignore-certificate-errors 在我这里貌似可有可无. 祭出检测专用Jay Chou.

[MijazzChan]

感谢作者 @nondanee 以及各位Contributors.