Docker容器之Dockerfile_docker the authenticity of host '' can't be establ-优快云博客

本文链接：https://blog.youkuaiyun.com/weixin_41648905/article/details/109634625

构建SSH镜像

[root@localhost ~]# mkdir sshd
[root@localhost ~]# cd sshd
[root@localhost sshd]# vim Dockerfile
FROM centos
MAINTAINER XXX
RUN yum -y update
run yum -y install openssh* net-tools lsof telnet passwd
run echo '123456' | passwd --stdin root
run sed -i 's/UsePAM yes/UsePAM no/g' /etc/ssh/sshd_config
run ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key
run sed -i '/^session\s\+required\s\+pam_loginuid.so/s/^/#/' /etc/pam.d/sshd	# \s\+ 表示一个或多个空格
run mkdir -p /root/.ssh && chown root.root /root && chmod 700 /root/.ssh
expose 22
CMD ["/usr/sbin/sshd","-D"]		#-D daemon 守护进程

[root@localhost sshd]# docker build -t sshd:new .
Sending build context to Docker daemon  2.048kB
Step 1/11 : FROM centos
 ---> 0d120b6ccaa8
...

[root@localhost sshd]# docker ps -a		#此时并没有新容器，只是创建了镜像
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                 NAMES
2782f6e7c82e        httpd:centos        "/run.sh"                3 hours ago         Up 3 hours          0.0.0.0:111->80/tcp   competent_bose
47bb24c7633e        nginx               "/docker-entrypoint.…"   6 hours ago         Up 6 hours          80/tcp                magical_blackburn

[root@localhost sshd]# docker run -d -P sshd:new 		# -P自动指定一个端口号，不会重复，-p手动指定一个端口。创建容器
c258ab6ebc56b2381286cba9f002b677bdcf3f9b19d1fe486c7bc4e669ba82b8
[root@localhost sshd]# docker ps -a
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                   NAMES
c258ab6ebc56        sshd:new            "/usr/sbin/sshd -D"      38 seconds ago      Up 37 seconds       0.0.0.0:32768->22/tcp   optimistic_montalcini
2782f6e7c82e        httpd:centos        "/run.sh"                3 hours ago         Up 3 hours          0.0.0.0:111->80/tcp     competent_bose
47bb24c7633e        nginx               "/docker-entrypoint.…"   7 hours ago         Up 7 hours          80/tcp                  magical_blackburn

[root@localhost sshd]# ssh localhost -p 32768
The authenticity of host '[localhost]:32768 ([::1]:32768)' can't be established.
RSA key fingerprint is SHA256:a1hlPkfdGBMy77Atsn9j5+XMQfOR/AY8BQA0sEGPmVM.
RSA key fingerprint is MD5:21:6e:c6:0b:0b:82:f1:4e:24:f9:a9:94:67:b2:d4:86.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '[localhost]:32768' (RSA) to the list of known hosts.
root@localhost's password: 
[root@c258ab6ebc56 ~]#

构建systemctl镜像

[root@localhost ~]# mkdir systemctl
[root@localhost ~]# cd systemctl/
[root@localhost systemctl]# vim Dockerfile
FROM sshd:new
ENV container docker
run (cd /lib/systemd/system/sysinit.target.wants/;for i in *; \
do [ $i == \systemd-tmpfiles-setup.service ] || rm -f $i; done); \
rm -f /lib/systemd/system/multi-user.target.wants/*; \
rm -f /etc/systemd/system/*.wants/*; \
rm -f /lib/systemd/system/local-fs.target.wants/*; \
rm -f /lib/systemd/system/sockets.target.wants/*udev*; \
rm -f /lib/systemd/system/sockets.target.wants/*initctl*; \
rm -f /lib/systemd/system/basic.target.wants/*; \
rm -f /lib/systemd/system/anaconda.target.wants/*;
VOLUME [ "/sys/fs/cgroup"]
CMD ["/usr/sbin/init"]

[root@localhost systemctl]# docker build -t systemd:new .
[root@localhost systemctl]# docker run --privileged -it -v /sys/fs/cgroup:/sys/fs/cgroup:ro systemd:new /sbin/init &
[1] 47069

-v 创建数据卷
ro:read only

[root@localhost systemctl]# docker ps -a
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                   NAMES
ef8ba652a8eb        systemd:new         "/sbin/init"             39 seconds ago      Up 37 seconds       22/tcp                  nice_kepler
c258ab6ebc56        sshd:new            "/usr/sbin/sshd -D"      About an hour ago   Up About an hour    0.0.0.0:32768->22/tcp   optimistic_montalcini
2782f6e7c82e        httpd:centos        "/run.sh"                4 hours ago         Up 4 hours          0.0.0.0:111->80/tcp     competent_bose
47bb24c7633e        nginx               "/docker-entrypoint.…"   8 hours ago         Up 8 hours          80/tcp                  magical_blackburn

[root@localhost systemctl]# docker exec -it ef8ba652a8eb bash
[root@ef8ba652a8eb /]# systemctl status sshd
[root@ef8ba652a8eb /]# systemctl start sshd	#可以用systemctl管理sshd服务了

[root@localhost ~]# mkdir dir1
[root@localhost ~]# docker run -d -v /root/dir1/:/data1 --name web1 systemd:new
7638db5e744526d23648ef823f9a9ea49e72e9cb85633bb2e29e1db0a515c22b
[root@localhost ~]# docker ps -a
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                   NAMES
7638db5e7445        systemd:new         "/usr/sbin/init"         10 seconds ago      Up 9 seconds        22/tcp                  web1
ef8ba652a8eb        systemd:new         "/sbin/init"             22 minutes ago      Up 21 minutes       22/tcp                  nice_kepler
c258ab6ebc56        sshd:new            "/usr/sbin/sshd -D"      About an hour ago   Up About an hour    0.0.0.0:32768->22/tcp   optimistic_montalcini
2782f6e7c82e        httpd:centos        "/run.sh"                5 hours ago         Up 5 hours          0.0.0.0:111->80/tcp     competent_bose
47bb24c7633e        nginx               "/docker-entrypoint.…"   8 hours ago         Up 8 hours          80/tcp                  magical_blackburn
[root@localhost ~]# docker exec -it 7638db5e7445 bash
[root@7638db5e7445 /]# ls
bin  data1  dev  etc  home  lib  lib64	lost+found  media  mnt	opt  proc  root  run  sbin  srv  sys  tmp  usr	var

nginx

[root@localhost nginx]# vim Dockfile
FROM centos:7
MAINTAINER The is nginx <wwj>
RUN yum -y update
RUN yum install -y proc-devel gcc gcc-c++ zlib zlib-devel make openssl-devel wget
RUN useradd -M -s /sbin/nologin nginx
ADD nginx-1.12.0.tar.gz /usr/local/src
WORKDIR /usr/local/src
WORKDIR nginx-1.12.0/
RUN ./configure \
--prefix=/usr/local/nginx \
--user=nginx \
--group=nginx \
--with-http_stub_status_module && make && make install
ENV PATH /usr/local/nginx/sbin:$PATH
EXPOSE 80
EXPOSE 443
RUN echo "daemon off;">>/usr/local/nginx/conf/nginx.conf
ADD run.sh /run.sh
RUN chmod 755 /run.sh
CMD ["/run.sh"]

[root@localhost nginx]# vim run.sh
#!/bin/bash
/usr/local/nginx/sbin/nginx

[root@localhost nginx]# docker build -t nginx:new1 .
docker run -d -P nginx:centos

tomcat

[root@localhost tomcat]# vim Dockerfile 
FROM centos:7
maintainer xxx
run yum update
run yum -y install java
ADD apache-tomcat-8.5.23.tar.gz /usr/local/src
WORKDIR /usr/local/src
run mv apache-tomcat-8.5.23/ /usr/local/tomcat8
expose 8080
run ln -s /usr/local/tomcat8/bin/startup.sh /usr/bin/tomcatup
ADD run.sh /run.sh
RUN chmod 755 /run.sh
#CMD ["/run.sh"]
ENTRYPOINT ["/usr/local/tomcat8/bin/catalina.sh","run"]

[root@localhost tomcat]# docker build -t tomcat:centos .
[root@localhost tomcat]# docker run -d -P tomcat:centos
[root@localhost tomcat]# docker ps -a
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                                           NAMES
369849fb74f0        tomcat:centos       "/usr/local/tomcat8/…"   19 minutes ago      Up 19 minutes       0.0.0.0:32774->8080/tcp                         relaxed_hugle
e8d40015c624        nginx:new           "/run.sh"                About an hour ago   Up About an hour    0.0.0.0:32770->80/tcp, 0.0.0.0:32769->443/tcp   beautiful_brattain

mysql

 vim Dockerfile
FROM centos:7
maintainer xxx
run yum update
run yum -y install ncurses ncurses-devel bison cmake gcc gcc-c++ make pcre-devel expat-devel perl apr-util-devel zlib-devel bison
run useradd -s /sbin/nologin  mysql
ADD mysql-boost-5.7.20.tar.gz /usr/local/src
WORKDIR /usr/local/src
WORKDIR mysql-5.7.20
run cmake \
-DCMAKE_INSTALL_PREFIX=/usr/local/mysql \
-DMYSQL_UNIX_ADDR=/usr/local/mysql/mysql.sock \
-DSYSCONFDIR=/etc \
-DSYSTEMD_PID_DIR=/usr/local/mysql \
-DDEFAULT_CHARSET=utf8  \
-DDEFAULT_COLLATION=utf8_general_ci \
-DWITH_INNOBASE_STORAGE_ENGINE=1 \
-DWITH_ARCHIVE_STORAGE_ENGINE=1 \
-DWITH_BLACKHOLE_STORAGE_ENGINE=1 \
-DWITH_PERFSCHEMA_STORAGE_ENGINE=1 \
-DMYSQL_DATADIR=/usr/local/mysql/data \
-DWITH_BOOST=boost \
-DWITH_SYSTEMD=1
run make -j2 && make install
RUN rm -rf /etc/my.cnf
ADD my.cnf /etc
run chown -R mysql:mysql /usr/local/mysql/
run chown mysql:mysql /etc/my.cnf
ENV PATH=/usr/local/mysql/bin:/usr/local/mysql/lib:$PATH
WORKDIR /usr/local/mysql/
run bin/mysqld --initialize-insecure --user=mysql --basedir=/usr/local/mysql --datadir=/usr/local/mysql/data
run cp /usr/local/mysql/usr/lib/systemd/system/mysqld.service /usr/lib/systemd/system/
EXPOSE 3306
ADD run.sh /run.sh
RUN chmod 755 /run.sh
RUN sh /run.sh
CMD ["init"]

vim my.cnf
[client]
port = 3306
default-character-set=utf8
socket = /usr/local/mysql/mysql.sock
[mysql]
port = 3306
default-character-set=utf8
socket = /usr/local/mysql/mysql.sock
[mysqld]
user = mysql
basedir = /usr/local/mysql
datadir = /usr/local/mysql/data
port = 3306
character_set_server=utf8
pid-file = /usr/local/mysql/mysqld.pid
socket = /usr/local/mysql/mysql.sock
server-id = 1
#skip-grant-tables
sql_mode=NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES,NO_AUTO_CREATE_USER,NO_AUTO_VALUE_ON_ZERO,NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_BY_ZERO,PIPES_AS_CONCAT,ANSI_QUOTES

vim run.sh
#!/bin/bash
systemctl enable mysqld

上传软件包mysql-boost-5.7.20.tar.gz

docker build -t mysql:mysql .
docker run --name=123 -d -P --privileged mysql:mysql
docker exec -it 4709562d328a /bin/bash

登陆mysql

mysql
grant all privileges on *.* to 'root'@'%' identified by '123123';
grant all privileges on *.* to 'root'@'localhost' identified by '123123';

宿主机上yum安装mysql后,远程登陆mysql

mysql -h 192.168.100.100 -u root -P 32770 -p123123