Can't get testcontainers-node to work inside GitlabCI using docker:dind as service

[antoniocordasco]

Hi,
I have been trying very hard today and yesterday to get my Testcontainers based test to work inside the gitlab CI but with no success.

I either get:
connect ECONNREFUSED 172.17.0.3:2375

or (when using port 2376 instead of 2375) :
(HTTP code 400) bad parameter - Client sent an HTTP request to an HTTPS server.

I have tried a lot of different combinations of values for the vars: DOCKER_HOST, DOCKER_CERT_PATH, DOCKER_TLS_VERIFY and DOCKER_TLS_CERTDIR, but no luck.

At the moment I have this in my .gitlab-ci.yml
DOCKER_HOST: 'tcp://docker:2376'
DOCKER_DRIVER: overlay2
DOCKER_TLS_CERTDIR: "/certs"
DOCKER_CERT_PATH: "/certs/client"
DOCKER_TLS_VERIFY: 1

I have found discussions about the same issue on google with people saying they managed to fix it, but none of their suggestions worked for me.
Any help would be greatly appreciated

Thank you
Antonio

[LaurentGoderre]

This doesn't sound like it's related to the NodeJs image but with DIND itself perhaps?

[antoniocordasco]

what do you mean by "NodeJs image"? Are you referring to the testcontainers-node module?
I honestly don't know if it's an issue to do with the GitlabCI, or a bug in testcontainers-node, or a problem with the docker:dind image I am using.
I was hoping for some pointers, in case you guys had seen this problem before.

I'd like for example to understand what request is the error "Client sent an HTTP request to an HTTPS server" referring to.
It's kind of hard to debug this in gitlab because I have to make a commit every time, and also cannot edit the testcontainers code.

[yosifkit]

That sounds a lot like the result of docker-library/docker#166. If you keep TLS enabled, then the client connecting to docker needs the client cert. So you need to either disable the automatic TLS so that your testcontainers-node module can connect to the non-tls port, or you need to configure testcontainers-node to use TLS and give it access to the client certificate.

https://github.com/docker-library/docs/tree/fa28720da8df5bbd5d936cc008e362fb6f3ffb38/docker#tls

2376 is the TLS only port that Docker usually listens on when TLS is enabled. This is why you get "Client sent an HTTP request to an HTTPS server" when you try to connect with a client that isn't using TLS (https).

[antoniocordasco]

Apologies. I have actually opened the ticket on the wrong github project.
This was meant for the testcontainers-node project.
Anyway you guys have been very helpful and in the end I managed to get to the bottom of the problem.
Thank you