docker服务各个模块

docker容器官网：https://hub.docker.com/

一、centos7.4中指定安装docker版本

1）默认yum源安装的docker版本为docker1.3。性能偏低，不支持k8s。k8s目前只支持docker1.7

谷歌浏览器打开。清华大学镜像网站：https://mirrors4.tuna.tsinghua.edu.cn/

找到docker的镜像源

https://mirrors.tuna.tsinghua.edu.cn/docker-ce/linux/centos/

docker服务各个模块

2）复制该链接地址

cd /etc/yum.repos.d/

wget https://mirrors.tuna.tsinghua.edu.cn/docker-ce/linux/centos/docker-ce.repo

注意该文件的源并不是指向清华源，所以需要修改docker-ce.repo

3）修改源

修改源。修改前面的linux的父目录

vim docker-ce.repo

原来的：baseurl=https://download.docker.com/linux/centos/7/$basearch/stable

原来的：baseurl=https://mirrors.tuna.tsinghua.edu.cn/docker-ce/linux/centos/7/$basearch/stable

vim命令快速修改

:%s@https://download.docker.com/@https://mirrors.tuna.tsinghua.edu.cn/docker-ce/@

docker服务各个模块

回车之后。24 次替换，共 24 行

4）yum安装

[root@Mysql yum.repos.d]# yum repolist

已加载插件：fastestmirror

Loading mirror speeds from cached hostfile

 * base: mirrors.shu.edu.cn

 * extras: mirrors.aliyun.com

 * updates: mirrors.cn99.com

源标识                                                                    源名称                                                                      状态

base//x86_64                                                             CentOS- - Base                                                             ,

docker-ce-stable/x86_64                                                   Docker CE Stable - x86_64

extras//x86_64                                                           CentOS- - Extras

updates//x86_64                                                          CentOS- - Updates                                                           ,

repolist: ,

[root@Mysql yum.repos.d]# yum install docker-ce -y

[root@Mysql yum.repos.d]# docker -v
Docker version 18.09.2, build 6247962

docker服务各个模块

5）创建配置文件

[root@Mysql yum.repos.d]# mkdir -p /etc/docker

[root@Mysql yum.repos.d]# touch /etc/docker/daemon.json

[root@Mysql yum.repos.d]# vim /etc/docker/daemon.json

[root@Mysql yum.repos.d]# cat /etc/docker/daemon.json

{

    "registry-mirrors":["https://registry.docker-cn.com"]

}

6）docker加速器

docker cn

阿里云加速器

中国科技大学

二、docker基础

1）启动docker

systemctl start docker.service    启动服务

docker version  查看版本

docker info        更详细的信息

2）官方寻找nginx的最小稳定镜像文件，进行容器测试

docker服务各个模块

[root@Mysql ~]# docker image pull nginx:1.14-alpine

3）最小的容器测试http网络服务

docker image pull nginx:1.14-alpine        # 下载最小镜像

docker pull busybox

docker image ls

docker image ls --no-trunc

docker ps == docker container ls

docker network ls    显示网络

[root@Mysql ~]# docker images

REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE

nginx               1.14-alpine         66952fd0a8ef         weeks ago         16MB

busybox             latest              3a093384ac30         weeks ago         .2MB

[root@Mysql ~]# docker run --name b1 -it busybox:latest        # 进入最小化的容器，进入shell交互

/ #

/ # mkdir /data/html -p

/ # vi /data/html/index.html

/ # cat /data/html/index.html

hello world

/ # httpd -f -h /data/html/

docker inspect b1 # 查看运行中的容器信息，包括里面的ip地址

[root@Mysql ~]# curl 172.17.0.2

hello world

4）容器内，使用exit，退出容器。容器处于停止状态

/ # exit

[root@Mysql ~]# docker ps

CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES

[root@Mysql ~]# docker ps -a

CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS                     PORTS               NAMES

b3cda629bceb        busybox:latest      "sh"                 minutes ago       Exited ()  seconds ago                       b1

再次启动容器：docker start -i -a b1

5）强制停止容器，删除容器

[root@Mysql ~]# docker kill b1

b1

[root@Mysql ~]# docker ps -a

CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS                        PORTS               NAMES

b3cda629bceb        busybox:latest      "sh"                 minutes ago      Exited ()  seconds ago                       b1

[root@Mysql ~]# docker rm b1

b1

6）docker最小化的运行容器，且只运行一个进程，容器内并不会有存放日志的文件夹。docker logs 容器查看日志

docker run --name web1 -d nginx:1.14-alpine   # -d 后台启动

[root@Mysql ~]# docker ps

CONTAINER ID        IMAGE               COMMAND                  CREATED              STATUS              PORTS               NAMES

8eeeefc3e562        nginx:1.14-alpine   "nginx -g 'daemon of…"   About a minute ago   Up  seconds       /tcp              web1

[root@Mysql ~]# curl 172.17.0.2

<!DOCTYPE html>

<html>

<head>

<title>Welcome to nginx!</title>

<style>

    body {

        width: 35em;

        margin:  auto;

        font-family: Tahoma, Verdana, Arial, sans-serif;

    }

</style>

</head>

<body>

<h1>Welcome to nginx!</h1>

<p>If you see this page, the nginx web server is successfully installed and

working. Further configuration is required.</p>

<p>For online documentation and support please refer to

<a href="http://nginx.org/">nginx.org</a>.<br/>

Commercial support is available at

<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>

</body>

</html>

docker run --name kvstor1 -d redis:-alpine        # 最小化启动redis

[root@Mysql ~]# docker exec -it kvstor1 /bin/sh

/data # ps

PID   USER     TIME  COMMAND

     redis     : redis-server

    root      : /bin/sh

    root      : ps

[root@Mysql ~]# docker logs web1    查看web1容器的日志

172.17.0.1 - - [/Feb/::: +] "GET / HTTP/1.1"   "-" "curl/7.29.0" "-"

7）容器的保存，删除

docker inspect web1   显示容器的信息

docker commit -p web1    暂停容器，保存镜像

[root@Mysql ~]# docker image ls

REPOSITORY               TAG                 IMAGE ID            CREATED              SIZE

<none>                   <none>              c1d0456bb6ff        About a minute ago   16MB

[root@Mysql ~]# docker tag c1d0456bb6ff test/httpd:v0.-    为保存的容器打标签

[root@Mysql ~]# docker image ls

REPOSITORY               TAG                 IMAGE ID            CREATED             SIZE

test/httpd               v0.-              c1d0456bb6ff         minutes ago       16MB

[root@Mysql ~]# docker tag  test/httpd:v0.- test/httpd:latest        再次创建标签

[root@Mysql ~]# docker image ls

REPOSITORY               TAG                 IMAGE ID            CREATED             SIZE

test/httpd               latest              c1d0456bb6ff         minutes ago       16MB

test/httpd               v0.-              c1d0456bb6ff         minutes ago       16MB

docker image rm test/httpd:latest        删除标签镜像

docker run --name t1 -it test/httpd:v0.-    运行保存的镜像

docker commit -a "1257063655@qq.com" -c 'CMD ["/bin/httpd","-f","-h","/data/html"]' -p web1 test/httpd:v0.

8）容器的分享，打包

传镜像到docker.github

[root@Mysql ~]# docker login -u         登录https://hub.docker.com/

Password:

docker push /httpd        # 将镜像上传到https://hub.docker.com/，需要去官网建立httpd仓库，并且1257063655/httpd 既是本地的镜像名，也是远程的仓库名

https://promotion.aliyun.com/ntms/act/kubernetes.html        阿里镜像

docker save -o myimages.gz test/httpd:v0. test/httpd:v0.-    本地打包2个镜像，合并为一个镜像

[root@Mysql ~]# ls myimages.gz

myimages.gz

docker load -i myimages.gz  另一台机器导入打包的镜像myimages.gz

三、docker网络

1）查看网络（扩展）

yum install bridge-utils -y

[root@Mysql ~]# brctl show

bridge name    bridge id        STP enabled    interfaces

docker0        .02423f80d8e7    no        veth2a1c29a

                            veth32a55df

                            veth90301d9

ip link show

iptables -t nat -vnL

docker network inspect bridge

docker container inspect web1

rpm -q iproute

ip netns

ip netns add r1

ip netns add r2

ip netns list

    r2

    r1

ip netns exec r1 ifconfig

ip netns exec r1 ifconfig -a

iptables -t nat -vnL

2）指定运行的容器的dns，主机文件

docker run --name t1 -it --network bridge -h t1.hostname --dns 114.114.114.114 --dns-search www.com  --add-host web01:172.17.0.3 --rm busybox:latest

    进入容器，退出则删除

    homename =》t1.hostname

    cat /etc/host

        172.17.0.2  t1.hostname

nslookup -type=A www.baidu.com  解析路由网络

3）端口映射等问题。必须掌握

docker run --name myweb --rm -p  test/httpd:v0.

宿组机随机映射一个端口给80

docker inspect myweb

    该内部的通信：curl 172.17.0.2

iptables -t nat -vnL    查看被所有被随机映射的端口

docker port myweb     查看被映射的端口

更多的映射方法

docker run --name myweb --rm -p 192.168.1.5:: test/httpd:v0.

docker run --name myweb --rm -p : test/httpd:v0.

docker run --name myweb --rm -p 192.168.1.5:: test/httpd:v0.

4）容器共享网络，共用同一个ip

容器共享网络的方式,b1和b2共用一个网络。类似于同一个主机运行了2个进程

docker run --name b2 --network container:b1 -it rm busybox

docker run --name b2 --network host -it rm busybox  将宿机的网络给了容器

5) 修改docker内的网络，网卡信息

docker服务各个模块

示例，

docker服务各个模块

重启服务。启动的容器ip网缎为：10.0.0.1的网段的

docker服务各个模块

重启服务后，

docker服务各个模块

6）额外创建新的网关

docker network create -d bridge --subnet "172.26.0.0/16" --gateway "172.26.0.1" mybr0  创建自己的网络网关

docker network ls 查看创建的自己网络

docker run --name t1 -it --net mybr0 busybox:latest  # 运行的容器为自己的网络

问题：同一个宿主机的2个容器在不同的网断怎么通信。

理论上可以直接通信的，防火墙规则。iptables -t nat -vnL 的阻碍

四、docker的持久化存储

docker服务各个模块

1）存储卷的基本使用

第一种，docker自行选择映射路径，不建议。不好区别是谁存储的数据

docker run --name b2 -it -v /data busybox   建立存储卷，容器内的 /data下面的数据会被宿主机保存

docker inspect b2  查看容器信息

        Source": "/var/lib/docker/volumes/25dd2c087543280b9569ff34356330cf72ee74863bb5a0028a08e2802852fa83/_data",  该位置内容与容器内的 data目录已做了关联

第二种，手动指定位置，即便删除容器，数据仍在

docker run --name b2 -it  -v /data/volumes/b2:/data busybox

[root@Mysql ~]# docker inspect -f {{.Mounts}} b2    # 过滤查找选项

[{bind  /data/volumes/b2 /data   true rprivate}]

[root@Mysql ~]# docker inspect -f {{.NetworkSettings.IPAddress}} b2

172.17.0.5

多个容器，可以共享同一个存储卷

docker服务各个模块

四、dockerfile语法

1）最简单的Dockerfile语法，制作镜像

[root@Mysql ~]# mkdir img1

[root@Mysql ~]# cd img1/

创建镜像文件Dockerfile文件

[root@Mysql img1]# vim Dockerfile

[root@Mysql img1]# cat Dockerfile

# Description:test image

FROM busybox:latest

MAINTAINER "Test <1257063655@qq.com>"

# LABEL maintainer="1257063655@qq.com"

COPY index.html /data/web/html/            # 注意index.html 需要在当前目录

[root@Mysql img1]# cat index.html

<h1>Busybox httpd server</h1>

<h2>Hello world</h1>

[root@Mysql img1]# docker build -t tinyhttpd:v0.- /root/img1/        # 启动镜像

[root@Mysql img1]# docker image ls |grep tinyhttpd

tinyhttpd                v0.-              080174d7d1a9        About a minute ago   .2MB

编辑被拷贝的index.html

[root@Mysql img1]# cat index.html

<h1>Busybox httpd server</h1>

<h2>Hello world</h1>

根据制作的镜像的启动容器，检验是否有文件

[root@Mysql img1]# docker run --name tinyweb1 --rm tinyhttpd:v0.- cat /data/web/html/index.html

<h1>Busybox httpd server</h1>

<h2>Hello world</h1>

2）镜像文件的修改，新增不同路径的拷贝内容

[root@Mysql img1]# cp -r /etc/yum.repos.d/ ./

[root@Mysql img1]# ls yum.repos.d/

CentOS-Base.repo  CentOS-Debuginfo.repo  CentOS-Media.repo    CentOS-Vault.repo

CentOS-CR.repo    CentOS-fasttrack.repo  CentOS-Sources.repo  docker-ce.repo

[root@Mysql img1]# vim Dockerfile

[root@Mysql img1]# cat Dockerfile

# Description:test image

FROM busybox:latest

MAINTAINER "Test <1257063655@qq.com>"

# LABEL maintainer="1257063655@qq.com"

COPY index.html /data/web/html/

COPY yum.repos.d /etc/yum.repos.d/

[root@Mysql img1]# docker build -t tinyhttpd:v0.- /root/img1/

检验是否被拷贝进去

[root@Mysql img1]# docker run --name tinyweb1 --rm tinyhttpd:v0.- ls /etc/yum.repos.d/

CentOS-Base.repo

CentOS-CR.repo

CentOS-Debuginfo.repo

CentOS-Media.repo

CentOS-Sources.repo

CentOS-Vault.repo

CentOS-fasttrack.repo

docker-ce.repo

3）add用法

docker服务各个模块

以nginx为例

docker服务各个模块

3.1）ADD后面加链接地址，通过链接地址下载

复制其链接地址 http://nginx.org/download/nginx-1.15.8.tar.gz

[root@Mysql img1]# cat Dockerfile

# Description:test image

FROM busybox:latest

MAINTAINER "Test <1257063655@qq.com>"

# LABEL maintainer="1257063655@qq.com"

COPY index.html /data/web/html/

COPY yum.repos.d /etc/yum.repos.d/

ADD http://nginx.org/download/nginx-1.15.8.tar.gz /usr/local/src/

cat Dockerfile

检验add效果

docker run --name tinyweb1 --rm tinyhttpd:v0.- ls /usr/local/src

3.2）ADD加本地文件，本地文件实现拷贝效果

[root@Mysql img1]# cat  Dockerfile

# Description:test image

FROM busybox:latest

MAINTAINER "Test <1257063655@qq.com>"

# LABEL maintainer="1257063655@qq.com"

COPY index.html /data/web/html/

COPY yum.repos.d /etc/yum.repos.d/

# ADD http://nginx.org/download/nginx-1.15.8.tar.gz /usr/local/src/

ADD nginx-1.15..tar.gz /usr/local/src/

[root@Mysql img1]# docker build -t tinyhttpd:v0.- ./

3.3）指明工作目录。WORKDIR

[root@Mysql img1]# cat Dockerfile

# Description:test image

FROM busybox:latest

MAINTAINER "Test <1257063655@qq.com>"

# LABEL maintainer="1257063655@qq.com"

COPY index.html /data/web/html/

COPY yum.repos.d /etc/yum.repos.d/

# ADD http://nginx.org/download/nginx-1.15.8.tar.gz /usr/local/src/

WORKDIR /usr/local/

ADD nginx-1.15..tar.gz ./src/

4）创建存储卷。VOLUME

[root@Mysql img1]# cat Dockerfile

# Description:test image

FROM busybox:latest

MAINTAINER "Test <1257063655@qq.com>"

# LABEL maintainer="1257063655@qq.com"

COPY index.html /data/web/html/

COPY yum.repos.d /etc/yum.repos.d/

# ADD http://nginx.org/download/nginx-1.15.8.tar.gz /usr/local/src/

WORKDIR /usr/local/

ADD nginx-1.15..tar.gz ./src/

VOLUME /data/mysql

docker服务各个模块

5.1）暴露端口,端口仅可被宿主机访问

[root@Mysql img1]# cat Dockerfile

# Description:test image

FROM busybox:latest

MAINTAINER "Test <1257063655@qq.com>"

# LABEL maintainer="1257063655@qq.com"

COPY index.html /data/web/html/

COPY yum.repos.d /etc/yum.repos.d/

# ADD http://nginx.org/download/nginx-1.15.8.tar.gz /usr/local/src/

WORKDIR /usr/local/

ADD nginx-1.15..tar.gz ./src/

VOLUME /data/mysql

EXPOSE /tcp

EXPOSE

检验端口是否可以被外界访问

启动：

docker run --name tinyweb1 --rm tinyhttpd:v0.- /bin/httpd -f -h /data/web/html

docker inspect tinyweb1查看ip

[root@Mysql img1]# curl 172.17.0.6

<h1>Busybox httpd server</h1>

<h2>Hello world</h1>

但暴露的端口也只有宿主机能访问，没有做端口映射

[root@Mysql img1]# docker port tinyweb1   没有查到端口

[root@Mysql img1]# docker kill tinyweb1

5.2）启动时加上 -P

[root@Mysql img1]# docker run --name tinyweb1 --rm -P tinyhttpd:v0.- /bin/httpd -f -h /data/web/html

检查端口

[root@Mysql img1]# docker port tinyweb1
80/tcp -> 0.0.0.0:32768

docker服务各个模块

6.1）环境变量 ENV

COPY index.html ${DOC_ROOT:-/data/web/html/} 如果定义的环境变量没有值，则用后面的

[root@Mysql img1]# cat Dockerfile

# Description:test image

FROM busybox:latest

MAINTAINER "Test <1257063655@qq.com>"

# LABEL maintainer="1257063655@qq.com"

ENV DOC_ROOT /data/web/html/

COPY index.html ${DOC_ROOT:-/data/web/html/}

COPY yum.repos.d /etc/yum.repos.d/

# ADD http://nginx.org/download/nginx-1.15.8.tar.gz /usr/local/src/

WORKDIR /usr/local/

ADD nginx-1.15..tar.gz ./src/

VOLUME /data/mysql

EXPOSE /tcp

6.2）定义多个环境变量

[root@Mysql img1]# cat Dockerfile

# Description:test image

FROM busybox:latest

MAINTAINER "Test <1257063655@qq.com>"

# LABEL maintainer="1257063655@qq.com"

ENV DOC_ROOT=/data/web/html/ \

    WEB_SERVER_PACKAGE="nginx-1.15.8"

COPY index.html ${DOC_ROOT:-/data/web/html/}

COPY yum.repos.d /etc/yum.repos.d/

# ADD http://nginx.org/download/nginx-1.15.8.tar.gz /usr/local/src/

WORKDIR /usr/local/

ADD ${WEB_SERVER_PACKAGE}.tar.gz ./src/

VOLUME /data/mysql

EXPOSE /tcp

6.3)容器运行后输出环境变量

[root@Mysql img1]# docker run --name tinyweb1 --rm -P tinyhttpd:v0.- printenv

PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

HOSTNAME=634ff3a5d399

DOC_ROOT=/data/web/html/

WEB_SERVER_PACKAGE=nginx-1.15.

HOME=/root

运行时，再次传变量，有的原变量会被替换

[root@Mysql img1]# docker run --name tinyweb1 --rm -P -e WEB_SERVER_PACKAGE=nginx-1.15. tinyhttpd:v0.- printenv

PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

HOSTNAME=7dc972609f71

WEB_SERVER_PACKAGE=nginx-1.15.

DOC_ROOT=/data/web/html/

HOME=/root

7.1）制作镜像时RUN 命令

[root@Mysql img1]# cat Dockerfile

# Description:test image

FROM busybox:latest

MAINTAINER "Test <1257063655@qq.com>"

# LABEL maintainer="1257063655@qq.com"

ENV DOC_ROOT=/data/web/html/ \

    WEB_SERVER_PACKAGE="nginx-1.15.8.tar.gz"

COPY index.html ${DOC_ROOT:-/data/web/html/}

COPY yum.repos.d /etc/yum.repos.d/

ADD http://nginx.org/download/${WEB_SERVER_PACKAGE} /usr/local/src/

WORKDIR /usr/local/

# ADD ${WEB_SERVER_PACKAGE} ./src/

VOLUME /data/mysql/

EXPOSE /tcp

RUN cd /usr/local/src && \

    tar xf ${WEB_SERVER_PACKAGE}

7.2）命令测试

[root@Mysql img1]# cat Dockerfile

# Description:test image

FROM busybox:latest

MAINTAINER "Test <1257063655@qq.com>"

# LABEL maintainer="1257063655@qq.com"

ENV DOC_ROOT=/data/web/html/ \

    WEB_SERVER_PACKAGE="nginx-1.15.8.tar.gz"

COPY index.html ${DOC_ROOT:-/data/web/html/}

COPY yum.repos.d /etc/yum.repos.d/

# ADD http://nginx.org/download/${WEB_SERVER_PACKAGE} /usr/local/src/

WORKDIR /usr/local/

ADD ${WEB_SERVER_PACKAGE} ./src/

VOLUME /data/mysql/

EXPOSE /tcp

RUN cd /usr/local/src && \

    mv nginx-1.15. nginx

[root@Mysql img1]# docker build -t tinyhttpd:v0.2.1 ./

Sending build context to Docker daemon  .051MB

Step / : FROM busybox:latest

 ---> 3a093384ac30

Step / : MAINTAINER "Test <1257063655@qq.com>"

 ---> Using cache

 ---> c04c090e9e40

Step / : ENV DOC_ROOT=/data/web/html/     WEB_SERVER_PACKAGE="nginx-1.15.8.tar.gz"

 ---> Using cache

 ---> 6832ee6cc92e

Step / : COPY index.html ${DOC_ROOT:-/data/web/html/}

 ---> Using cache

 ---> 45c2e54c0d74

Step / : COPY yum.repos.d /etc/yum.repos.d/

 ---> Using cache

 ---> 348917f42afe

Step / : WORKDIR /usr/local/

 ---> Using cache

 ---> df3d710f5ac9

Step / : ADD ${WEB_SERVER_PACKAGE} ./src/

 ---> Using cache

 ---> 83c0b4f691e4

Step / : VOLUME /data/mysql/

 ---> Using cache

 ---> c13d38f9b94b

Step / : EXPOSE /tcp

 ---> Using cache

 ---> 7bd7c1d365cf

Step / : RUN cd /usr/local/src &&     mv nginx-1.15. nginx

 ---> Running in 35f4b3aae6a1

Removing intermediate container 35f4b3aae6a1

 ---> 41413a7ce98a

Successfully built 41413a7ce98a

Successfully tagged tinyhttpd:v0.2.1

7.3）根据命令yum安装nginx

FROM centos

RUN yum -y install epel-release && yum makecache && yum install nginx -y

8.1）CMD命令的使用

[root@Mysql img2]# cat Dockerfile

FROM busybox

LABEL maintainer="My <1257063655.qq.com>" app="httpd"

ENV WEB_DOC_ROOT="/data/web/html"

RUN mkdir -p $WEB_DOC_ROOT && \

    echo '<h1>hello world,httpd server</h1>' > ${WEB_DOC_ROOT}/index.html

CMD /bin/httpd -f -h ${WEB_DOC_ROOT}

[root@Mysql img2]# docker build -t tinyhttpd:v0.- ./

查看制作镜像的详细信息

docker image inspect tinyhttpd:v0.2-1

运行

docker run --name tinyweb2 -it --rm -P tinyhttpd:v0.2-1

查看

[root@Mysql ~]# docker exec -it tinyweb2 /bin/sh

/ #

/ # ps

PID   USER     TIME  COMMAND

     root      : /bin/httpd -f -h /data/web/html

     root      : /bin/sh

    root      : ps

9）不会被覆盖的运行命令。ENTRYPOINT

[root@Mysql img2]# cat Dockerfile

FROM busybox

LABEL maintainer="My <1257063655.qq.com>" app="httpd"

ENV WEB_DOC_ROOT="/data/web/html"

RUN mkdir -p $WEB_DOC_ROOT && \

    echo '<h1>hello world,httpd server</h1>' > ${WEB_DOC_ROOT}/index.html

# CMD /bin/httpd -f -h ${WEB_DOC_ROOT}

# CMD ["/bin/sh","-c","/bin/httpd","-f","-h ${WEB_DOC_ROOT}"] # 有问题，不建议用

ENTRYPOINT /bin/httpd -f -h ${WEB_DOC_ROOT}

启动容器。docker run --name tinyweb2 -it --rm -P tinyhttpd:v0.2-3 ls /data/ 后面接的命令不会覆盖制作镜像用的命令。后面接的命令会被当做参数传给它

10) 脚本启动nginx。使用传参的方法

10.1）编辑脚本文件

[root@Mysql img3]# cat entrypoint.sh

#!/bin/sh

#

cat > /etc/nginx/conf.d/www.conf <<EOF

server {

    server_name ${HOSTNAME};

    listen ${IP:-0.0.0.0}:${PORT:-};

    root ${NGX_DOC_ROOT:-/usr/share/nginx/html};

}

EOF

exec "$@"

entrypoint.sh

10.2）编辑首页文件

[root@Mysql img3]# cat index.html

<h1>

Hello world,study python

</h1>

index.html

10.3）编辑Dockerfile文件

[root@Mysql img3]# cat Dockerfile

FROM nginx:1.14-alpine

LABEL maintainer="my <125.7063655@qq.com>"

ENV NGX_DOC_ROOT="/data/web/html/"

ADD index.html ${NGX_DOC_ROOT}

ADD entrypoint.sh /bin/

CMD ["/usr/sbin/nginx","-g","daemon off;"]

ENTRYPOINT ["/bin/entrypoint.sh"]

10.4)启动容器检验

启动

[root@Mysql img3]# docker run --name myweb1 --rm -P myweb:v0.-

进入容器

[root@Mysql img3]# docker exec -it myweb1 /bin/sh

/ # cat /etc/nginx/conf.d/www.conf

server {

    server_name 0e107f492212;

    listen 0.0.0.0:;

    root /data/web/html;

}

/ # cat /data/web/html

<h1>

Hello world,study python

</h1>

/ # netstat -tnl

Active Internet connections (only servers)

Proto Recv-Q Send-Q Local Address           Foreign Address         State

tcp               0.0.0.0:              0.0.0.0:*               LISTEN

--------

/ # wget -O - -q localhost  本地明

<!DOCTYPE html>

<html>

<head>

<title>Welcome to nginx!</title>

<style>

    body {

        width: 35em;

        margin:  auto;

        font-family: Tahoma, Verdana, Arial, sans-serif;

    }

</style>

</head>

<body>

<h1>Welcome to nginx!</h1>

<p>If you see this page, the nginx web server is successfully installed and

working. Further configuration is required.</p>

<p>For online documentation and support please refer to

<a href="http://nginx.org/">nginx.org</a>.<br/>

Commercial support is available at

<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>

</body>

</html>

-------------------------

/ # wget -O - -q 0e107f492212

<h1>

Hello world,study python

</h1>

/ # netstat -tnl
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN

10.5）启动容器时再增加端口参数，测试

添加端口

[root@Mysql img3]# docker run --name myweb1 --rm -P -e "PORT=8080"  myweb:v0.-

/ # [root@Mysql img3]# docker exec -it myweb1 /bin/sh

/ # netstat -tnl

Active Internet connections (only servers)

Proto Recv-Q Send-Q Local Address           Foreign Address         State

tcp               0.0.0.0:            0.0.0.0:*               LISTEN

tcp               0.0.0.0:              0.0.0.0:*               LISTEN

11）健康检查。HEALTHCHECK 健康检查，不太清楚。

[root@Mysql img3]# cat Dockerfile

FROM nginx:1.14-alpine

LABEL maintainer="my <125.7063655@qq.com>"

ENV NGX_DOC_ROOT="/data/web/html/"

ADD index.html ${NGX_DOC_ROOT}

ADD entrypoint.sh /bin/

EXPOSE /tcp

HEALTHCHECK --start-period=3s CMD wget -o - -q http://${IP:-0.0.0.0}:${PORT:-80}/

CMD ["/usr/sbin/nginx","-g","daemon off;"]

ENTRYPOINT ["/bin/entrypoint.sh"]

12.1) ARG常量传参的用法

[root@Mysql img3]# cat Dockerfile

FROM nginx:1.14-alpine

ARG author="my <125.7063655@qq.com>"

LABEL maintainer="${author}"

ENV NGX_DOC_ROOT="/data/web/html/"

ADD index.html ${NGX_DOC_ROOT}

ADD entrypoint.sh /bin/

EXPOSE /tcp

HEALTHCHECK --start-period=3s CMD wget -o - -q http://${IP:-0.0.0.0}:${PORT:-80}/

CMD ["/usr/sbin/nginx","-g","daemon off;"]

ENTRYPOINT ["/bin/entrypoint.sh"]

替换定义的常量

docker build -t myweb:v0.- ./

替换定义的默认值 author="pony <pony@qq.com>"

docker build --build-arg author="pony <pony@qq.com>"  -t myweb:v0.- ./

13）ONBUILD 。根据ONBUILD 创建的镜像，其他dockerfile引用此镜像创建镜像时，会触发执行ONBUILD 里面的指令

FROM nginx:1.14-alpine

ARG author="my <125.7063655@qq.com>"

LABEL maintainer="${author}"

ENV NGX_DOC_ROOT="/data/web/html/"

ADD index.html ${NGX_DOC_ROOT}

ADD entrypoint.sh /bin/

EXPOSE /tcp

HEALTHCHECK --start-period=3s CMD wget -o - -q http://${IP:-0.0.0.0}:${PORT:-80}/

ONBUILD ADD  http://repo.webtatic.com/yum/el6/latest.rpm /usr/local/src/

CMD ["/usr/sbin/nginx","-g","daemon off;"]

ENTRYPOINT ["/bin/entrypoint.sh"]

14）GitHub里面有很大dockerfile文件

docker服务各个模块

五、resistry使用

docker服务各个模块

[root@Mysql img3]# yum info docker-registry

已加载插件：fastestmirror

Loading mirror speeds from cached hostfile

 * base: mirrors.shu.edu.cn

 * extras: mirrors.aliyun.com

 * updates: mirrors.aliyun.com

可安装的软件包

名称    ：docker-registry

架构    ：x86_64

版本    ：0.9.

发布    ：.el7

大小    ： k

源    ：extras//x86_64

简介    ： Registry server for Docker

网址    ：https://github.com/docker/docker-registry

协议    ： ASL 2.0

描述    ： Registry server for Docker (hosting/delivering of repositories and images).

yum info docker-registry

1）在服务端安装resistry 私有仓库

[root@Mysql img3]# yum info docker-registry

[root@Mysql img3]# yum install docker-registry -y    安装

[root@Mysql img3]# rpm -ql docker-distribution        查看安装生成的文件

/etc/docker-distribution/registry/config.yml        主配置文件

/usr/bin/registry

/usr/lib/systemd/system/docker-distribution.service

/usr/share/doc/docker-distribution-2.6.

/usr/share/doc/docker-distribution-2.6./AUTHORS

/usr/share/doc/docker-distribution-2.6./CONTRIBUTING.md

/usr/share/doc/docker-distribution-2.6./LICENSE

/usr/share/doc/docker-distribution-2.6./MAINTAINERS

/usr/share/doc/docker-distribution-2.6./README.md

/var/lib/registry

[root@Mysql registry]# systemctl start docker-distribution        启动服务

[root@Mysql registry]# netstat -lntup|grep registry

tcp6              :::                 :::*                    LISTEN      /registry

yum install docker-registry -y

2）推送文件，拉取文件测试

[root@Centos7pvz2 ~]# docker images

REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE

nginx               1.14-alpine         8a2fb25a19f5         days ago          16MB

[root@Centos7pvz2 ~]# docker tag nginx:1.14-alpine pvz2.test.com:/nginx:1.15-alpine    # 打标记为自己的仓库镜像

[root@Centos7pvz2 ~]# docker images

REPOSITORY                  TAG                 IMAGE ID            CREATED             SIZE

pvz2.test.com:/nginx  1.15-alpine         8a2fb25a19f5         days ago            16MB

nginx                     1.14-alpine         8a2fb25a19f5         days ago            16MB

[root@Centos7pvz2 ~]# cat /etc/docker/daemon.json         # 修改docker拉取服务信息

{

    "registry-mirrors": ["https://4mii0w1b.mirror.aliyuncs.com","https://registry.docker-cn.com"],

    "insecure-registries": ["pvz2.test.com:5000"]

}

[root@Centos7pvz2 ~]# systemctl restart docker  重启docker

[root@Centos7pvz2 ~]# cat /etc/hosts    # 配置主机解析文件

192.168.10.28 pvz2.test.com

[root@Centos7pvz2 ~]# docker push pvz2.test.com:/nginx:1.15-alpine    # 将本地镜像推向仓库

The push refers to repository [pvz2.test.com:/nginx]

076c58d2644f: Pushed

b2cbae4b8c15: Pushed

5ac9a5170bf2: Pushed

a464c54f93a9: Pushed

1.15-alpine: digest: sha256:a3a0c4126587884f8d3090efca87f5af075d7e7ac8308cffc09a5a082d5f4760 size: 

另一台机器拉取镜像

[root@node02 ~]# cat /etc/docker/daemon.json

{

    "registry-mirrors": ["https://4mii0w1b.mirror.aliyuncs.com","https://registry.docker-cn.com"],

    "insecure-registries": ["pvz2.test.com:5000"]

}

[root@Centos7pvz2 ~]# systemctl restart docker

[root@Centos7pvz2 ~]# cat /etc/hosts    # 配置主机解析文件

192.168.10.28 pvz2.test.com

[root@node02 ~]# docker pull pvz2.test.com:/nginx:1.15-alpine    # 拉取镜像

1.15-alpine: Pulling from nginx

bdf0201b3a05: Pull complete

3d0a573c81ed: Pull complete

8129faeb2eb6: Pull complete

3dc99f571daf: Pull complete

Digest: sha256:a3a0c4126587884f8d3090efca87f5af075d7e7ac8308cffc09a5a082d5f4760

Status: Downloaded newer image for pvz2.test.com:/nginx:1.15-alpine

[root@node02 ~]#

3）服务端可查看客户端推送过来的镜像文件

[root@Centos7pvz2 ~]# ll /var/lib/registry/docker/registry/v2/repositories/

总用量

drwxr-xr-x  root root  4月   : nginx

六、单机多容器编排

docker服务各个模块

七、harbor安装（仓库网站安装）

1）安装说明

)官网

https://github.com/goharbor/harbor

）安装说明

https://github.com/goharbor/harbor/blob/master/docs/installation_guide.md

）下载安装包

https://storage.googleapis.com/harbor-releases/release-1.7.0/harbor-offline-installer-v1.7.4.tgz

docker服务各个模块

2）修改配置文件

docker服务各个模块

3）启动服务 ./install.sh 需要docker-compose(1.7.1以上的版本)

docker服务各个模块

3.1 ）安装docker-compose。注意该安装方式版本为 docker-compose version 1.24.0, build 0aa5906 。经过测试，也可以运行

docker服务各个模块

./install.sh结束后，80端口和443端口被监听

docker服务各个模块

4）访问 http://192.168.10.28/harbor/sign-in

docker服务各个模块

用户：admin

密码：harbor12345 / Harbor12345 官方文档有说明（harbor.cfg）

登录进来。先创建用户管理，仓库管理

5）创建用户

docker服务各个模块

6）创建仓库

docker服务各个模块

7）切换账号，新建项目

docker服务各个模块

8）推送docker镜像文件

[root@Centos7pvz2 harbor]# cat /etc/docker/daemon.json

{

    "registry-mirrors": ["https://4mii0w1b.mirror.aliyuncs.com","https://registry.docker-cn.com"],

    "insecure-registries": ["pvz2.test.com"]

}

[root@Centos7pvz2 harbor]# systemctl restart docker

[root@Centos7pvz2 harbor]# docker tag goharbor/harbor-db:v1.7.4 pvz2.test.com/devel/harbor-db:v1.7.4

[root@Centos7pvz2 harbor]# docker tag goharbor/harbor-adminserver:v1.7.4 pvz2.test.com/devel/harbor-adminserver:v1.7.4

[root@Centos7pvz2 harbor]# docker image ls|grep pvz2.test.com/devel

pvz2.test.com/devel/harbor-adminserver   v1.7.4              5706c65d65dc         weeks ago         .3MB

pvz2.test.com/devel/harbor-db            v1.7.4              08d163f732f3         weeks ago         136MB

[root@Centos7pvz2 harbor]# docker login pvz2.test.com  登录服务器

[root@Centos7pvz2 harbor]# docker push pvz2.test.com/devel/harbor-adminserver:v1.7.4

[root@Centos7pvz2 harbor]# docker push pvz2.test.com/devel/harbor-db:v1.7.4

docker服务各个模块

查看服务端，文件存储的路径

docker服务各个模块

暂停容器服务

docker服务各个模块

继续运行

docker服务各个模块

docker资源

docker服务各个模块

启动测试，256M内存，2个进程

docker服务各个模块

docke stats 能查看容器资源

八、最终环节，应用实战

最终章。dokerfiles实战应用

docker服务各个模块

1）快速构建基础镜像

cat Dockerfile

#Docker from CentOS

# Base images

FROM centos

# who

MAINTAINER Mr.Cao 11111qq.com

# EPEL

add epel.repo /etc/yum.repos.d/

# Base pkg

RUN yum install -y wget mysql-devel supervisor git redis tree net-tools sudo psmisc && yum clean all

docker build -t test/centos:base .

构建基础的Dockerfile

1.2）基于基础镜像创建python环境

cat Dockerfile

FROM test/centos:base

MAINTAINER Mr.Cao 11111qq.com

RUN yum install -y  python-devel python-pip supervisor

RUN pip install --upgrade pip

docker build -t test/python .

2）基于ssh管理的基础镜像

cat Dockerfile

#Docker from CentOS

# Base images

FROM centos

# who

MAINTAINER Mr.Cao 11111qq.com

# EPEL

add epel.repo /etc/yum.repos.d/

# Base pkg

RUN yum install -y openssh-clients openssl-devel openssh-server wget mysql-devel supervisor git redis tree net-tools sudo psmisc && yum clean all

# For SSHD

RUN ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key

RUN ssh-keygen -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key

RUN echo "root:helloworld" | chpasswd

docker build -t test/centos-ssh:base .

2.1）基于ssh的Python环境

cat Dockerfile

FROM test/centos-ssh

MAINTAINER Mr.Cao 11111qq.com

RUN yum install -y  python-devel python-pip supervisor

RUN pip install --upgrade pip

docker build -t test/python-ssh .

3）基于Python环境运行app

docker服务各个模块

supervisord.conf文件修改

docker服务各个模块

3.1) 编辑文件过程

================================================

cat app.py

from flask import Flask

app = Flask(__name__)

@app.route('/')

def hello():

    return 'hello world'

if __name__ == '__main__':

    app.run(host="0.0.0.0",debug=True)

==================

cat requirements.txt

flask

===================

cat app-supervisor.ini

[program:shop-api]

command=/usr/bin/python2. /opt/app.py

process_name=%(program_name)s

autostart=true

user=www

stdout_logfile=/tmp/app.log

stderr_logfile=/tmp/app.error

[program:sshd]

command=/usr/sbin/sshd -D

process_name=%(program_name)s

autostart=true

==================

cat Dockerfile

FROM test/python-ssh

MAINTAINER Mr.Cao 11111qq.com

RUN useradd -s /sbin/nologin -M www

ADD app.py /opt/app.py

ADD requirements.txt /opt/

ADD supervisord.conf /etc/supervisord.conf

ADD app-supervisor.ini /etc/supervisord.d/

RUN /usr/bin/pip2. install /opt/requirements.txt

# Port

EXPOSE  

# CMD

CMD ["/usr/bin/supervisord","-c","/etc/supervisord.conf"]

===============================================================

3.2）制作镜像，并启动应用服务

docker build -t test/hello-api .

docker run --name hello-api -d -p : -p : test/hello-api

ssh服务可这样进入服务

docker服务各个模块

秒客网

docker服务各个模块

相关文章