docker

最新推荐文章于 2025-05-01 14:17:41 发布
最新推荐文章于 2025-05-01 14:17:41 发布
阅读量1k 收藏
点赞数
分类专栏： 运维
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.youkuaiyun.com/hehehechen/article/details/80353750
版权
安装docker 在 rhel7.3
container-selinux-2.21-1.el7.noarch.rpm
docker-ce-18.03.1.ce-1.el7.centos.x86_64.rpm
libsemanage-2.5-8.el7.x86_64.rpm
libsemanage-python-2.5-8.el7.x86_64.rpm
pigz-2.3.4-1.el7.x86_64.rpm
policycoreutils-2.5-17.1.el7.x86_64.rpm
policycoreutils-python-2.5-17.1.el7.x86_64.rpm

docker  默认补不齐需要下载 bash-*
systemctl start docker

[root@server docker]# docker info
Containers: 0
 Running: 0
 Paused: 0
 Stopped: 0
Images: 0
Server Version: 18.03.1-ce
Storage Driver: overlay2
 Backing Filesystem: xfs
 Supports d_type: true
 Native Overlay Diff: false
Logging Driver: json-file
Cgroup Driver: cgroupfs
Plugins:
 Volume: local
 Network: bridge host macvlan null overlay
 Log: awslogs fluentd gcplogs gelf journald json-file logentries splunk syslog
Swarm: inactive
Runtimes: runc
Default Runtime: runc
Init Binary: docker-init
containerd version: 773c489c9c1b21a6d78b5c538cd395416ec50f88
runc version: 4fc53a81fb7c994640722ac585fa9ca548971871
init version: 949e6fa
Security Options:
 seccomp
  Profile: default
Kernel Version: 3.10.0-514.el7.x86_64
Operating System: Red Hat Enterprise Linux Server 7.3 (Maipo)
OSType: linux
Architecture: x86_64
CPUs: 1
Total Memory: 1.797GiB
Name: server
ID: 4BZQ:ZSSB:B2WX:DTSF:A762:4SKK:EUJ5:4FLO:3PZM:CWFB:GLQB:X43E
Docker Root Dir: /var/lib/docker
Debug Mode (client): false
Debug Mode (server): false
Registry: https://index.docker.io/v1/
Labels:
Experimental: false
Insecure Registries:
 127.0.0.0/8
Live Restore Enabled: false

[root@server docker]# docker node

Usage:    docker node COMMAND

Manage Swarm nodes

Options:


Commands:
  demote      Demote one or more nodes from manager in the swarm
  inspect     Display detailed information on one or more nodes
  ls          List nodes in the swarm
  promote     Promote one or more nodes to manager in the swarm
  ps          List tasks running on one or more nodes, defaults to current node
  rm          Remove one or more nodes from the swarm
  update      Update a node

Run 'docker node COMMAND --help' for more information on a command.
[root@server docker]# docker load
requested load from stdin, but stdin is empty
[root@server docker]# docker load
requested load from stdin, but stdin is empty
[root@server docker]# docker load -i rhel7.tar
e1f5733f050b: Loading layer  147.1MB/147.1MB
[root@server docker]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
rhel7               latest              0a3eb3fde7fd        3 years ago         140MB
[root@server docker]# docker load -i  ubuntu.tar     把ubuntu.tar包放入docker
454970bd163b: Loading layer  196.8MB/196.8MB
38112156678d: Loading layer  208.9kB/208.9kB
4e1f7c524148: Loading layer  4.608kB/4.608kB
56063ad57855: Loading layer  1.024kB/1.024kB
[root@server docker]# docker load -i  nginx.tar     nginx载入docker
d8bd0657b25f: Loading layer  130.9MB/130.9MB
a582cd499e0f: Loading layer  1.024kB/1.024kB
f5a1ef78853b: Loading layer  1.024kB/1.024kB
605083c53cc5: Loading layer  1.024kB/1.024kB
c95d1af3960d: Loading layer  67.97MB/67.97MB
0a410ba58143: Loading layer  3.584kB/3.584kB
fb6fc13654c9: Loading layer  1.024kB/1.024kB
36b0adefb2f3: Loading layer  1.024kB/1.024kB
[root@server docker]# docker load -i  game2048.tar
011b303988d2: Loading layer   5.05MB/5.05MB
36e9226e74f8: Loading layer  51.46MB/51.46MB
192e9fad2abc: Loading layer  3.584kB/3.584kB
6d7504772167: Loading layer  4.608kB/4.608kB
88fca8ae768a: Loading layer  629.8kB/629.8kB
Loaded image: game2048:latest
[root@server docker]# docker history nginx:latest    查看执行动作
IMAGE               CREATED             CREATED BY                                      SIZE                COMMENT
af4b3d7d5401        2 years ago         /bin/sh -c #(nop) CMD ["nginx" "-g" "daemon …   0B                  
1f13f00bff49        2 years ago         /bin/sh -c #(nop) EXPOSE 443/tcp 80/tcp         0B                  
ca041140639d        2 years ago         /bin/sh -c ln -sf /dev/stdout /var/log/nginx…   22B                 
991d91ef3b7a        2 years ago         /bin/sh -c apt-key adv --keyserver hkp://pgp…   65.4MB              
0b9cb8ba0ed6        2 years ago         /bin/sh -c #(nop) ENV NGINX_VERSION=1.9.12-1…   0B                  
e8ec4c78f0a1        2 years ago         /bin/sh -c #(nop) MAINTAINER NGINX Docker Ma…   0B                  
f50f9524513f        2 years ago         /bin/sh -c #(nop) CMD ["/bin/bash"]             0B                  
61e59900d3c0        2 years ago         /bin/sh -c #(nop) ADD file:b5391cb13172fb513…   125MB               
[root@server docker]# docker run -d nginx.tar
Unable to find image 'nginx.tar:latest' locally
docker: Error response from daemon: Get https://registry-1.docker.io/v2/: dial tcp: lookup registry-1.docker.io on [::1]:53: read udp [::1]:51447->[::1]:53: read: connection refused.
See 'docker run --help'.
[root@server docker]# docker run -d nginx    启动nginx
9bf83c8a2368a8e2bcf03598a79211bbfc7a768e212d169ed56e29ac5d2ade78
[root@server docker]# docker run -d nginx
ac488e0e2a822fb082ebd0c05b3803a768a5358268aab9ad58ad1894bedcad15
[root@server docker]# docker images    查看所有镜像
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
game2048            latest              19299002fdbe        16 months ago       55.5MB
nginx               latest              af4b3d7d5401        2 years ago         191MB
ubuntu              latest              07c86167cdc4        2 years ago         188MB
rhel7               latest              0a3eb3fde7fd        3 years ago         140MB
[root@server docker]# docker ps    列出在运行的容器
CONTAINER ID        IMAGE               COMMAND                  CREATED              STATUS              PORTS               NAMES
ac488e0e2a82        nginx               "nginx -g 'daemon of…"   About a minute ago   Up About a minute   80/tcp, 443/tcp     mystifying_leakey
9bf83c8a2368        nginx               "nginx -g 'daemon of…"   About a minute ago   Up About a minute   80/tcp, 443/tcp     goofy_noyce
[root@server docker]# docker ps -a    显示所有容器
CONTAINER ID        IMAGE               COMMAND                  CREATED              STATUS              PORTS               NAMES
ac488e0e2a82        nginx               "nginx -g 'daemon of…"   About a minute ago   Up About a minute   80/tcp, 443/tcp     mystifying_leakey
9bf83c8a2368        nginx               "nginx -g 'daemon of…"   About a minute ago   Up About a minute   80/tcp, 443/tcp     goofy_noyce
[root@server docker]# docker inspect
"docker inspect" requires at least 1 argument.
See 'docker inspect --help'.

Usage:  docker inspect [OPTIONS] NAME|ID [NAME|ID...] [flags]

Return low-level information on Docker objects
[root@server docker]# yum install -y bridge-utils -y    安装
Loaded plugins: product-id, search-disabled-repos, subscription-manager
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
Resolving Dependencies
--> Running transaction check
---> Package bridge-utils.x86_64 0:1.5-9.el7 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package              Arch           Version              Repository       Size
================================================================================
Installing:
 bridge-utils         x86_64         1.5-9.el7            rhel7.3          32 k

Transaction Summary
================================================================================
Install  1 Package

Total download size: 32 k
Installed size: 56 k
Downloading packages:
bridge-utils-1.5-9.el7.x86_64.rpm                          |  32 kB   00:00     
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Installing : bridge-utils-1.5-9.el7.x86_64                                1/1
  Verifying  : bridge-utils-1.5-9.el7.x86_64                                1/1

Installed:
  bridge-utils.x86_64 0:1.5-9.el7                                               

Complete!
[root@server docker]# brctl show
bridge name    bridge id        STP enabled    interfaces
docker0        8000.02422aea9d96    no        veth4ffca5c
                            veth8bf0f75
[root@server docker]# ping 172.17.0.2
PING 172.17.0.2 (172.17.0.2) 56(84) bytes of data.
64 bytes from 172.17.0.2: icmp_seq=1 ttl=64 time=0.154 ms
64 bytes from 172.17.0.2: icmp_seq=2 ttl=64 time=0.056 ms
^C
--- 172.17.0.2 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 999ms
rtt min/avg/max/mdev = 0.056/0.105/0.154/0.049 ms
[root@server docker]# ping 172.17.0.1`
> ^C
[root@server docker]# ping 172.17.0.1
PING 172.17.0.1 (172.17.0.1) 56(84) bytes of data.
64 bytes from 172.17.0.1: icmp_seq=1 ttl=64 time=0.076 ms
64 bytes from 172.17.0.1: icmp_seq=2 ttl=64 time=0.050 ms
^C
--- 172.17.0.1 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 999ms
rtt min/avg/max/mdev = 0.050/0.063/0.076/0.013 ms
[root@server docker]# curl 172.17.0.2    查看nginx 是否启动
<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>
[root@server docker]# docker
docker                  docker-containerd-shim  docker-proxy
docker-containerd       dockerd                 docker-runc
docker-containerd-ctr   docker-init             
[root@server docker]# docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS               NAMES
ac488e0e2a82        nginx               "nginx -g 'daemon of…"   3 minutes ago       Up 3 minutes        80/tcp, 443/tcp     mystifying_leakey
9bf83c8a2368        nginx               "nginx -g 'daemon of…"   4 minutes ago       Up 3 minutes        80/tcp, 443/tcp     goofy_noyce
[root@server docker]# docker stop 9b        停止nginx     停止只需要前面两位就可以
9b
[root@server docker]# docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS               NAMES
ac488e0e2a82        nginx               "nginx -g 'daemon of…"   4 minutes ago       Up 4 minutes        80/tcp, 443/tcp     mystifying_leakey
[root@server docker]# docker stop ac    如果需要删除容器 需要先停止然后删除
ac
[root@server docker]# docker rm 9b    删除的时候可以直接加头两个字母
9b    
[root@server docker]# docker rm ac
ac
[root@server docker]# docker ps        查看已经z
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
[root@server docker]# docker run -d -p 80:80 --name vm1 nginx    端口映射
489d7785ebfbba59b3b71a5753c8c425568c8891a6f00c94a28333e0466ff74c
[root@server docker]# docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                         NAMES

489d7785ebfb        nginx               "nginx -g 'daemon of…"   7 seconds ago       Up 5 seconds        0.0.0.0:80->80/tcp, 443/tcp   vm1





docker 命令安装

docker run -it --name vm1 rhel7:v1    启动镜像
docker start vm1
docker attach vm1    进入
写配置文件 docker.repo
[root@server docker]# cat /etc/yum.repos.d/docker.repo    配置docker 源
[docker]
name=docker
baseurl=ftp://172.25.254.53/pub/docker       
gpgcheck=0
配置文件 supervisord.conf
[root@server docker]# cat supervisord.conf
[supervisord]
nodaemon=true

[program:sshd]
command=/usr/sbin/sshd -D
[program:httpd]
command=/usr/sbin/httpd
配置文件 Dockerfile
[root@server docker]# cat Dockerfile
From rhel7:v1
MAINTAINER xxxxxqq@westos.org
ENV HOSTNAME server3
EXPOSE 22 80
COPY docker.repo /etc/yum.repos.d/docker.repo
RUN yum install -y openssh-server openssh-clients httpd supervisor && ssh-keygen -q -t rsa -f /etc/ssh/ssh_rsa_key -N "" && ssh-keygen -q -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key -N "" && ssh-keygen -q -t ed25519 -f /etc/ssh/ssh_host_ed25519_key -N "" && echo root:westos | chpasswd
VOLUME ["/var/www/html"]
CMD [""/usr/bin/supervisord]




Docker 仓库
[root@server docker]# docker load -i registry-2.3.1.tar        打入docker
[root@server docker]# docker history registry:2.3.1    查看信息
[root@server docker]# docker run -d --name registry -p 5000:5000 -v /opt/registry:/var/lib/registry registry:2.3.1     启动    目录 /var/lib/registry 是仓库存放镜像的位置
8d2cae2e87630181a334a4e4c45b74c1871b69ff8764c2be61b24104e83878fa
[root@server docker]# cd /opt/registry/
[root@server registry]# ls
[root@server registry]# docker tag nginx localhost:5000/nginx:latest    
[root@server registry]# docker push localhost:5000/nginx:latest    推送镜像到 localhost:5000 仓库
[root@server registry]# docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                    NAMES
8d2cae2e8763        registry:2.3.1      "/bin/registry /etc/…"   2 minutes ago       Up 2 minutes        0.0.0.0:5000->5000/tcp   registry
[root@server registry]# cd docker/
[root@server docker]# ls
registry
[root@server docker]# cd registry/
[root@server registry]# s
-bash: s: command not found
[root@server registry]# ls
v2
[root@server docker]# docker images
REPOSITORY             TAG                 IMAGE ID            CREATED             SIZE
rhel7                  v3                  9cee67f06fcc        31 minutes ago      204MB
rhel7                  v2                  8acbcc8d9ffb        3 days ago          166MB
rhel7                  v1                  261ad7f9416f        3 days ago          166MB
game2048               latest              19299002fdbe        16 months ago       55.5MB
nginx                  latest              af4b3d7d5401        2 years ago         191MB
localhost:5000/nginx   latest              af4b3d7d5401        2 years ago         191MB
registry               2.3.1               83139345d017        2 years ago         166MB
ubuntu                 latest              07c86167cdc4        2 years ago         188MB
rhel7                  latest              0a3eb3fde7fd        3 years ago   

删除 nginx    
[root@server docker]# docker rmi localhost:5000/nginx
[root@server docker]# docker rmi nginx
[root@server ~]# docker pull localhost:5000/nginx    拉取镜像到本地
[root@server ~]# docker tag localhost:5000/nginx nginx
[root@server ~]# docker rmi localhost:5000/nginx
[root@server ~]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
rhel7               v3                  9cee67f06fcc        About an hour ago   204MB
rhel7               v2                  8acbcc8d9ffb        3 days ago          166MB
rhel7               v1                  261ad7f9416f        3 days ago          166MB
game2048            latest              19299002fdbe        16 months ago       55.5MB
nginx               latest              af4b3d7d5401        2 years ago         191MB
registry            2.3.1               83139345d017        2 years ago         166MB
ubuntu              latest              07c86167cdc4        2 years ago         188MB
rhel7               latest              0a3eb3fde7fd        3 years ago         14



加密
[root@server ~]# vi /etc/hosts
172.25.254.215 server2 westos.org
[root@server ~]# ping westos.org
PING server (172.25.254.215) 56(84) bytes of data.
64 bytes from server (172.25.254.215): icmp_seq=1 ttl=64 time=0.042 ms
[root@server ~]# cd /opt/registry/
[root@server registry]# ls
docker
[root@server registry]# rm -fr *

[root@server ~]# mkdir certs
[root@server ~]# ls
anaconda-ks.cfg  certs  doc  docker
[root@server ~]# cd certs/
[root@server certs]# openssl req -newkey rsa:4096 -nodes -sha256 -keyout westos.org.key -x509 -days 365 -out westos.org.crt
Generating a 4096 bit RSA private key
...........................++
...................................................++
writing new private key to 'westos.org.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:CN
State or Province Name (full name) []:shaanxi
Locality Name (eg, city) [Default City]:xi'an
Organization Name (eg, company) [Default Company Ltd]:westos
Organizational Unit Name (eg, section) []:linux
Common Name (eg, your name or your server's hostname) []:westos.org
Email Address []:
[root@server certs]# ls
westos.org.crt  westos.org.key
[root@server ~]# cd docker/
[root@server docker]# ls
Dockerfile  docker.repo  registry-2.3.1.tar  supervisord.conf  web
[root@server certs]# docker run -d --name registry --restart=always -v /root/certs:/certs -e REGISTRY_HTTP_ADDR=0.0.0.0:443 -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/westos.org.crt -e REGISTRY_HTTP_TLS_KEY=/certs/westos.org.key -p 443:443 -v /opt/registry:/var/lib/registry registry:2.3.1
5475ba95b2099d5a7abd148a0696acbf245ce354c37540e623aa12100db2cb39
[root@server certs]# docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                            NAMES
5475ba95b209        registry:2.3.1      "/bin/registry /etc/…"   17 seconds ago      Up 16 seconds       0.0.0.0:443->443/tcp, 5000/tcp   registry
[root@server certs]# iptables -t nat -nL
Chain DOCKER (2 references)
target     prot opt source               destination         
RETURN     all  --  0.0.0.0/0            0.0.0.0/0           
DNAT       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:443 to:172.17.0.2:4

上传下载
开启一台新的虚拟机
在新的虚拟机中安装docker registry-2.3.1.tar 安装bash-*
[root@server certs]# cd /etc/docker/
[root@server docker]# ls
key.json
[root@server docker]# mkdir certs.d
ls[root@server docker]# ls
certs.d  key.json
[root@server docker]# cd certs.d/
[root@server certs.d]# ls
[root@server certs.d]# mkdir westos.org
[root@server certs.d]# ls
westos.org
[root@server certs.d]# cd westos.org/
[root@server westos.org]# ls
[root@server westos.org]# mv /root/certs/westos.org.crt ca.crt
[root@server westos.org]# ls
ca.crt
[root@server westos.org]# pwd
/etc/docker/certs.d/westos.org
[root@server westos.org]# cd
[root@server ~]# cd docker/
[root@server docker]# ls
Dockerfile  docker.repo  registry-2.3.1.tar  supervisord.conf  web
[root@server docker]# cd
[root@server ~]# ls
anaconda-ks.cfg  certs  doc  docker  nginx.tar  rhel7.tar  ubuntu.tar
[root@server ~]# mv certs/ docker/
[root@server ~]# cd docker/
[root@server docker]# ls
certs  Dockerfile  docker.repo  registry-2.3.1.tar  supervisord.conf  web
[root@server docker]# cd certs/
[root@server certs]# ls
westos.org.key
[root@server certs]# cp /etc/docker/
certs.d/  key.json  
[root@server certs]# cp /etc/docker/certs.d/westos.org/ca.crt .
[root@server certs]# mv ca.crt westos.org.crt
[root@server certs]# ls
westos.org.crt  westos.org.key
[root@server certs]# ll
total 8
-rw-r--r-- 1 root root 2009 May  8 02:15 westos.org.crt
-rw-r--r-- 1 root root 3272 May  7 23:50 westos.org.key
[root@server certs]# docker push westos.org/ubuntu    上传
The push refers to repository [westos.org/ubuntu]
5f70bf18a086: Pushed
11083b444c90: Pushed
9468150a390c: Pushed
56abdd66ba31: Pushed
latest: digest: sha256:4e709bde11754c2a27ed6e9b9ba55569647f83903f85cd8107e36162c5579984 size: 1151
[root@server certs]# ls
westos.org.crt  westos.org.key
[root@server certs]# cd /etc/docker/
[root@server docker]# ls
certs.d  key.json
[root@server docker]# cd certs.d/
[root@server certs.d]# ls
westos.org
[root@server certs.d]# cd westos.org/
[root@server westos.org]# ls
ca.crt
[root@server westos.org]# scp ca.crt root@172.25.254.115:/etc/docker/certs.d
root@172.25.254.115's password:
ca.crt                                                 100% 2009     2.0KB/s   00    

在server3 中
[root@server3 certs.d]# cd /etc/docker/
[root@server3 docker]# mkdir certs.d
[root@server3 docker]# cd certs.d/
[root@server3 certs.d]# ls
[root@server3 certs.d]# pwd
/etc/docker/certs.d
[root@server3 certs.d]# ls
ca.crt
[root@server3 certs.d]# pwd
/etc/docker/certs.d
[root@server3 certs.d]# mkdir westos.org
[root@server3 certs.d]# mv ca.crt westos.org/
[root@server3 certs.d]# ls
westos.org
[root@server3 certs.d]# cd westos.org/
[root@server3 westos.org]# ls
ca.crt
[root@server3 westos.org]# pwd
/etc/docker/certs.d/westos.org
[root@server3 ~]# docker ps
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES

[root@server3 ~]# docker pull westos.org/ubuntu    下载
Using default tag: latest
latest: Pulling from ubuntu
257507fcd746: Pull complete
cd03f9b52ed8: Pull complete
493709ab45b5: Pull complete
4f4fb700ef54: Pull complete
Digest: sha256:4e709bde11754c2a27ed6e9b9ba55569647f83903f85cd8107e36162c5579984
Status: Downloaded newer image for westos.org/ubuntu:latest
[root@server3 ~]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
registry            2.3.1               83139345d017        2 years ago         166MB
westos.org/ubuntu   latest              07c86167cdc4        2 years ago         188MB

[root@server3 ~]# curl --cacert /etc/docker/certs.d/westos.org/ca.crt https://westos.org/v2/_catalog
{"repositories":["ubuntu"]}
[root@server3 ~]# cd /etc/pki/
[root@server3 pki]# ls
CA        consumer     java   product          rpm-gpg  tls
ca-trust  entitlement  nssdb  product-default  rsyslog
[root@server3 pki]# cd ca-trust/
[root@server3 ca-trust]# ls
ca-legacy.conf  extracted  README  source
[root@server3 ca-trust]# cd source/
[root@server3 source]# ls
anchors  blacklist  ca-bundle.legacy.crt  README
[root@server3 source]# cd anchors/
[root@server3 anchors]# ls
[root@server3 anchors]# pwd
/etc/pki/ca-trust/source/anchors
[root@server3 anchors]# cp /etc/docker/certs.d/westos.org/ca.crt .
[root@server3 anchors]# mv ca.crt westos.org.crt
[root@server3 anchors]# update-ca-trust
[root@server3 anchors]# curl https://westos.org/v2/_catalog
{"repositories":["ubuntu"]}

加密
[root@server docker]#docker kill registry
[root@server ~]# cp docker/certs/* certs/
[root@server docker]# docker run -d --name registry --restart=always -v /root/certs:/certs -v /root/auth:/auth -e REGISTRY_HTTP_ADDR=0.0.0.0:443 -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/westos.org.crt -e REGISTRY_HTTP_TLS_KEY=/certs/westos.org.key -e REGISTRY_AUTH=htpasswd -e "REGISTRY_AUTH_HTPASSWD_REALM=Registry Realm" -e REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd -p 443:443 -v /opt/registry:/var/lib/registry registry:2.3.1
216a587a83332efd7db504cb096bda5e6fb581ccc89f697295dc8312b65be0c4
[root@server ~]# docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                            NAMES
cc473a5e3d8c        registry:2.3.1      "/bin/registry /etc/…"   10 seconds ago      Up 8 seconds        0.0.0.0:443->443/tcp, 5000/tcp   registry
[root@server ~]#
[root@server ~]# docker run --entrypoint htpasswd registry:2.3.1 -Bbn qq westos > auth/htpasswd[root@server ~]# docker login westos.org
Username: qq
Password:
Login Succeeded


负载均衡

[root@server2 ~]# docker kill registry
registry
[root@server2 ~]# docker rm registry
registry
[root@server2 ~]# docker load -i haproxy.tar
[root@server2 ~]# file docker-compose-Linux-x86_64-1.16.1
[root@server2 ~]# mv docker-compose-Linux-x86_64-1.16.1 /usr/local/sbin
[root@server2 sbin]# ls
docker-compose-Linux-x86_64-1.16.1
[root@server2 sbin]# chmod +x docker-compose-Linux-x86_64-1.16.1
[root@server2 sbin]# ln -s docker-compose-Linux-x86_64-1.16.1 docker-compose
[root@server2 sbin]# docker
docker                              docker-containerd-shim
docker-compose                      dockerd
docker-compose-Linux-x86_64-1.16.1  docker-init
docker-containerd                   docker-proxy
docker-containerd-ctr               docker-runc
[root@server2 ~]# cd docker/
[root@server2 docker]# ls
123  certs  Dockerfile  docker.repo  registry-2.3.1.tar  supervisord.conf  web
[root@server2 docker]# mkdir compose/
[root@server2 docker]# cd compose/
[root@server2 compose]# mkdir haproxy
[root@server2 compose]# vim docker-compose.yml

apache:
    build: ./web
    expose:
        - 80

nginx:
    image: nginx
    expose:
        - 80
haproxy:
    image: haproxy
    volumes:
        - ./haproxy/haproxy.cfg:/usr/local/etc/haproxy/haproxy.cfg:ro
    links:
        - apache
        - nginx
    ports:
        - "80:80"
    expose:
        - "80"

[root@server2 compose]# mkdir web
[root@server2 compose]# cd ..
[root@server2 docker]# cp Dockerfile compose/web/
[root@server2 web]# vim Dockerfile
From rhel7:v1
MAINTAINER xxxxxqq@westos.org
ENV HOSTNAME apache
EXPOSE 80
RUN yum install -y httpd
COPY index.html /var/www/html/index.html
CMD ["/usr/sbin/httpd","-D","FOREGROUND"]

[root@server2 compose]# cd web/
[root@server2 web]# ls
Dockerfile
[root@server2 web]# vim index.html

www.westos.html

[root@server2 web]# cd ..
[root@server2 compose]# cd haproxy/
[root@server2 haproxy]# vime haproxy.cfg

global
    log 127.0.0.1 local0
defaults
    log global
    mode http
    option httplog
    option dontlognull
    timeout connect 5000ms
    timeout client 50000ms
    timeout server 50000ms
    stats uri /status
frontend balancer
    bind 0.0.0.0:80
    default_backend web_backends
backend web_backends
    balance roundrobin
    server web1 apache:80 check
    server web2 nginx:80 check
[root@server2 compose]# docker-compose up --build
Building apache
Step 1/7 : From rhel7:v1
 ---> 261ad7f9416f
Step 2/7 : MAINTAINER xxxxxqq@westos.org
 ---> Using cache
 ---> 0ba9efacce82
Step 3/7 : ENV HOSTNAME apache
 ---> Using cache
 ---> 242468c59c9c
Step 4/7 : EXPOSE 80
 ---> Using cache
 ---> 1c19c57d9278
Step 5/7 : RUN yum install -y httpd
 ---> Using cache
 ---> 4c71d8eed3fb
Step 6/7 : COPY index.html /var/www/html/index.html
 ---> Using cache
 ---> 8f2ed4a3e141
Step 7/7 : CMD ["/usr/sbin/httpd","-D","FOREGROUND"]
 ---> Using cache
 ---> 078134619654
Successfully built 078134619654
Successfully tagged compose_apache:latest
compose_apache_1 is up-to-date
compose_nginx_1 is up-to-date
Starting compose_haproxy_1 ...
Starting compose_haproxy_1 ... done
Attaching to compose_apache_1, compose_nginx_1, compose_haproxy_1
apache_1   | AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.17.0.2. Set the 'ServerName' directive globally to suppress this message
haproxy_1  | <7>haproxy-systemd-wrapper: executing /usr/local/sbin/haproxy -p /run/haproxy.pid -f /usr/local/etc/haproxy/haproxy.cfg -Ds
^CGracefully stopping... (press Ctrl+C again to force)
Stopping compose_haproxy_1 ... done
Stopping compose_nginx_1   ... done
Stopping compose_apache_1  ... done
[root@server2 compose]# docker-compose start
Starting apache  ... done
Starting nginx   ... done
Starting haproxy ... done
[root@server2 compose]# docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                NAMES
70d0463390d2        haproxy             "/docker-entrypoint.…"   13 minutes ago      Up 45 seconds       0.0.0.0:80->80/tcp   compose_haproxy_1
9a161c7df7b7        nginx               "nginx -g 'daemon of…"   13 minutes ago      Up 46 seconds       80/tcp, 443/tcp      compose_nginx_1
feb9b0db4181        compose_apache      "/usr/sbin/httpd -D …"   13 minutes ago      Up 46 seconds       80/tcp               compose_apache_1




docker集群
创建
开启两台新的docker虚拟机 安装nginx
在主机上执行
[root@server2 ~]# docker swarm init
Swarm initialized: current node (tu147q51zis8us5bte43pvuvr) is now a manager.

To add a worker to this swarm, run the following command:

    docker swarm join --token SWMTKN-1-4w4luqu291eb7ztwqfc4un0b2ek4mmvfeasp6m2djt4790uu1r-a5btizkp36716rkh49eeyuhp8 172.25.254.215:2377

To add a manager to this swarm, run 'docker swarm join-token manager' and follow the instructions.

在 另外两台虚拟机中复制    docker swarm join --token
[root@server ~]# docker swarm join --token SWMTKN-1-4w4luqu291eb7ztwqfc4un0b2ek4mmvfeasp6m2djt4790uu1r-a5btizkp36716rkh49eeyuhp8 172.25.254.215:2377
This node joined a swarm as a worker.

[root@server3 ~]# docker swarm join --token SWMTKN-1-4w4luqu291eb7ztwqfc4un0b2ek4mmvfeasp6m2djt4790uu1r-a5btizkp36716rkh49eeyuhp8 172.25.254.215:2377
This node joined a swarm as a worker.

在主上查看
[root@server2 ~]# docker node ls
ID                            HOSTNAME            STATUS              AVAILABILITY        MANAGER STATUS      ENGINE VERSION
wty04ne8pf395nbfyatzztecy     server              Ready               Active                                  18.03.1-ce
tu147q51zis8us5bte43pvuvr *   server2             Ready               Active              Leader              18.03.1-ce
3q0gls87whqbri0akqfnde4kj     server3             Ready               Active                                  18.03.1-ce

集群的负载均衡和健康检查
[root@server2 ~]# docker service create --name web --publish 80:80 --replicas 4 nginx    创建
image nginx:latest could not be accessed on a registry to record
its digest. Each node will access nginx:latest independently,
possibly leading to different nodes running different
versions of the image.

t2jn0oy9xm26ope8kq2gjsyg9
overall progress: 4 out of 4 tasks
1/4: running   
2/4: running   
3/4: running   
4/4: running   
verify: Service converged
[root@server2 ~]# docker service ps web
ID                  NAME                IMAGE               NODE                DESIRED STATE       CURRENT STATE            ERROR               PORTS
nruhdq9u0xdv        web.1               nginx:latest        server              Running             Running 17 seconds ago                       
rubyv4c1umli        web.2               nginx:latest        server3             Running             Running 19 seconds ago                       
95csfktrtlfa        web.3               nginx:latest        server2             Running             Running 20 seconds ago                       
6t9nb5cl9uni        web.4               nginx:latest        server              Running             Running 16 seconds ago                   

用图形显示
在主上
[root@server2 ~]# docker load -i visualizer.tar
[root@server2 ~]# docker service create --name=viz --publish=8080:8080/tcp --constraint=node.role==manager --mount=type=bind,src=/var/run/docker.sock,dst=/var/run/docker.sock dockersamples/visualizer    

[root@server2 ~]# docker service create --name=vi4 --publish=8282:8080/tcp --constraint=node.role==manager --mount=type=bind,src=/var/run/docker.sock,dst=/var/run/docker.sock dockersamples/visualizer

image dockersamples/visualizer:latest could not be accessed on a registry to record
its digest. Each node will access dockersamples/visualizer:latest independently,
possibly leading to different nodes running different
versions of the image.
twyu39boy31eoprvnbwam0izt
overall progress: 1 out of 1 tasks
1/1: running   
verify: Service converged
[root@server2 ~]# docker service scale web=10    创建删除都用这个
web scaled to 10
overall progress: 10 out of 10 tasks
1/10: running   
2/10: running   
3/10: running   
4/10: running   
5/10: running   
6/10: running   
7/10: running   
8/10: running   
9/10: running   
10/10: running   
verify: Service converged

在浏览去中执行 172.25.254.215：8282 查看
在server 中stop掉 docker
[root@server ~]# systemctl stop docker
在次刷新web 看状态


挂载
[root@server2 ~]# docker service create --name web --replicas 3 -p 80:80 --mount     type=bind,source=/root/web,target=/usr/share/nginx/html nginx
创建一个文件位web 本地文件 目录地址/root/web nginx 的html 文件
image nginx:latest could not be accessed on a registry to record
its digest. Each node will access nginx:latest independently,
possibly leading to different nodes running different
versions of the image.

y1rl2ibgakfclxjej8wdndr1c
overall progress: 3 out of 3 tasks
1/3: running   
2/3: running   
3/3: running   
verify: Service converged


        

Docker（八）：Docker Compose（容器编排） 管理多容器应用—实战案例演示
✨ 欢迎来到【Seal ^_^ 的优快云博客】！✨
09-13 6万+
🟢 Docker（八）：Docker Compose（容器编排） 管理多容器应用—实战案例演示
Docker（十七）：Docker Swarm（集群搭建） —实现容器编排的利器
✨ 欢迎来到【Seal ^_^ 的优快云博客】！✨
03-26 4万+
🟢 Docker（十七）：Docker Swarm（集群搭建） —实现容器编排的利器
TODO
djph26741的博客
06-15 224
5^92ed5b2061032e4400000001^117.94.153.11^122.112.221.212^57594^11399 122.112.221.2125^1b635b20646a2e3b00000001^124.226.40.98^122.112.221.74^8761^1478 122.112.221.745^0ed85b20620d2e1e00000003^11...
【docker】离线环境导入镜像2大坑
一劍傾城
09-15 2253
这篇文章主要是记录在使用 docker load 命令的过程中遇到的坑，因为在网络上没有找到相关的资料，所以记录下来，祭奠我浪费的6个小时。 首先，需求是在一个无外网环境中导入 docker images，一个可行的方法是将可用的镜像打包成 tar 包，然后传输到需要的地方，再重新将 tar 包导入到 docker 中。 镜像转文件的命令是： docker save image &gt...
policycoreutils-python-2.5-29.el17.x86_64 安装解决方案
最新发布
gitblog_06727的博客
05-01 306
policycoreutils-python-2.5-29.el17.x86_64 安装解决方案 【下载地址】policycoreutils-python-2.5-29.el17.x86_64安装解决方案 本仓库提供了一个关键RPM包，帮助用户在安装Docker时解决常见的依赖问题。当系统提示缺少`policycoreu...
docker搭建及使用、常用问题总结
jiangxiaobo666的博客
05-23 1450
前言 安装资料 参考资料：Docker 教程 参考资料：Centos7下安装Docker 镜像加速 鉴于国内网络问题，后续拉取 Docker 镜像十分缓慢，我们可以需要配置加速器来解决，我使用的是网易的镜像地址：http://hub-mirror.c.163.com。 新版的 Docker 使用 /etc/docker/daemon.json（Linux） 或者 %programdata%\doc...
Window环境下 海康视频RTMP推流方法
11-03
Window环境下 海康视频RTMP推流方法，使用到的工具。希望能够帮到大家。
container-selinux-2.9-4下载地址
一路奔跑94的博客
10-15 6805
container-selinux-2.9-4下载地址 http://rpm.pbone.net/index.php3/stat/4/idpl/40704222/dir/centos_7/com/container-selinux-2.9-4.el7.noarch.rpm.html https://centos.pkgs.org/7/centos-extras-x86_64/container...
Docker之网络配置
热门推荐
2401_84152109的博客
04-30 60万+
小编也是很有感触，如果一直都是在中小公司，没有接触过大型的互联网架构设计的话，只靠自己看书去提升可能一辈子都很难达到高级架构师的技术和认知高度。向厉害的人去学习是最有效减少时间摸索、精力浪费的方式。我们选择的这个行业就一直要持续的学习，又很吃青春饭。虽然大家可能经常见到说程序员年薪几十万，但这样的人毕竟不是大部份，要么是有名校光环，要么是在阿里华为这样的大企业。年龄一大，更有可能被裁。送给每一位想学习Java小伙伴，用来提升自己。
docker入门(利用docker部署web应用)
仰望星空
05-26 42万+
前言:本课程是在慕课网上学习 第一个docker化的java应用 课程时所做的笔记,供本人复习之用 目录 第一章 什么是docker 1.1 docker的发展史 1.2 docker国内应用史 1.3 什么是Docker 第二章 了解docker 2.1 docker思想 2.1.1 集装箱 2.1.2 标准化 2.1.3 隔离 2.2 docker解决的问题 2.2.1...
【Docker】掌握 Docker魔法：Windows 11 平台上的完美容器部署终极指南
寸铁的博客
03-04 10万+
【Docker】掌握 Docker魔法：Windows 11 平台上的完美容器部署终极指南 一文搞懂什么是 Docker？分析容器的工作原理、容器的架构、Docker的优势、使用 Docker的原因。 全程手把手教你Docker的安装与使用，配置阿里云镜像加速、容器常用命令！
container-selinux
qq_39942956的博客
08-07 1647
rpm包下载：https://centos.pkgs.org/ wget http://mirror.centos.org/altarch/7/extras/aarch64/Packages/container-selinux-2.107-3.el7.noarch.rpm rpm -ivh ./container-selinux-2.107-3.el7.noarch.rpm --nodeps --force
如何寻找论文代码
⛄
08-01 5万+
如何寻找论文代码 一.关联代码的网页 二.搜索的建议 三.求真尊 四.常用网页
[docker]docker命令 docker inspect
毛台
05-12 2679
docker inspect Estimated reading time: 2 minutes Description Return low-level information on Docker objects Usage docker inspect [OPTIONS] NAME|ID [NAME|ID...] Options Name, shor
笨办法之docker批量删除image与container
qianqian_0825的博客
04-03 3498
一、前提： 1.要删除image， 必须该image下没有container 2.要删除container，必须使该container处于stop状态 正文： 二、说自己成功的笨办法 1）批量停止container： sudo docker ps -a | awk '{print $1}'| grep -v CONTAINER | xargs sudo docker stop 2）批...
docker 导出导入镜像解决离线安装镜像问题
Weirdo_zhu的博客
04-19 1229
使用docker images 查看镜像文件 docker save eb40dcf64078> /{导出位置}/mydjango-save-1016.tar 将镜像保存为本地文件，其中eb40dcf64078为image id 将保存到本地的文件上传到不能pull的服务器上，网络是相通的我这里直接使用的是scp命令 使用load方法加载刚才上传的tar文件 docker load < /{文件位置}/mydjango-save-1016...
docker（十六）：docker-swarm开启服务以及动态拓展服务节点
小蚯蚓的博客
07-12 2379
一、 实现功能 swarm创建服务，将服务部署到docker集群上，保证集群的正常运行和可扩展化运行。 二、 service创建 1. 帮助 [vagrant@swarm-manager ~]$ docker service Usage: docker service COMMAND Manage services Commands: create ...
docker基础入门一：docker安装&镜像下载&根据镜像创建容器
撸起袖子加油干
10-30 2669
一、安装准备： #卸载旧的版本： yum list installed |grep docker yum -y remove ... #卸载后将保留/var/lib/docker的内容（镜像、容器等）。 Rm -rf /var/lib/docker 1、安装依赖软件包 yum install -y yum-tuils device-mapper-persistent-d...
使用 DockerFile 构建镜像遇到"docker build" requires exactly 1 argument(s). See 'docker build --help'.的问题
weixin_42506776的博客
05-16 8183
在该docker文件下 指令：docker build -t docker . 执行docker build命令，docker就会根据Dockerfile里你定义好的命令进行构建新的镜像。 但是出现了： “docker build” requires exactly 1 argument(s). See ‘docker build --help’. Usage: docker build [OP...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值