Docker部署

发布 : 2016-02-12 分类 : Docker 浏览 :

Docker部署

1.安装Docker

1.1.配置YUM源

1
[root@docker yum.repos.d]# vi rdo-release.repo

Markdown

Markdown

1
2
3
4
5
[root@docker yum.repos.d]# yum clean all
Loaded plugins: fastestmirror
Cleaning repos: base epel extras foreman foreman-plugins openstack-icehouse puppetlabs-deps puppetlabs-products updates
Cleaning up Everything
Cleaning up list of fastest mirrors

Markdown

1
[root@docker yum.repos.d]# yum makecache

Markdown

1.2.安装docker镜像

1
[root@docker ~]# yum -y install docker-io

Markdown

1.2.1.docker启动不成功

1
2
3
查看日志
[root@docker ~]# tail -f /var/log/docker
[root@docker ~]# yum upgrade device-mapper-libs

1.3.启动docker服务

1
[root@docker ~]# service docker start

Markdown

1.4.设置docker开启启动

1
[root@docker ~]# chkconfig docker on

1.5.docker搜索镜像

1
[root@docker ~]# docker search nginx

Markdown

1.6.docker帮助命令

1
[root@docker ~]# docker --help

Markdown

Markdown

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
1、获取镜像
docker pull 镜像路径地址

2、启动容器
docker run -d(后台进程) -p(外部端口和容器端口映射) 8090:80 --name cname imagename

3、容器内进程
docker top 容器名

4、查看容器
docker ps

5、查看镜像
docker images

6、删除镜像容器
docker rm 容器 docker rmi 镜像

7、容器内日志
docker logs

1.7.查看docker镜像

1
[root@docker ~]# docker images

Markdown

1.8.查看在docker容器中安装nginx镜像/拉取镜像

1
[root@docker ~]# docker pull index.tenxcloud.com/docker_library/nginx

Markdown

[root@docker ~]# docker images

Markdown

1.9.docker容器启动

[root@docker ~]# docker run -d -p 8090:80 –name matrix index.tenxcloud.com/docker_library/nginx

Markdown

1.10.查看docker容器

[root@docker ~]# docker ps

Markdown

1.11.查看docker容器版本信息

[root@docker ~]# docker version

Markdown

1.11.在web浏览器中查看nginx是否启动成功

http://192.168.230.15:8090/

Markdown

2.进入Docker容器

[root@docker ~]# docker exec –help

Markdown

[root@docker ~]# docker exec -it matrix /bin/bash

Markdown

root@201aa042ecfb:/# ip a

Markdown

3.Docker容器日志查看

[root@docker ~]# docker logs matrix

Markdown

4.Docker容器内进程

1
[root@docker ~]# docker top matrix

Markdown

[root@docker ~]# brctl show
bridge name bridge id STP enabled interfaces
docker0 8000.3eb355672a06 no vethc2bac4f

Markdown

5.容器详细信息

1
[root@docker ~]# docker inspect matrix

Markdown

5.Docker网络架构

Markdown

1
2
3
4
5
6
7
8
9
10
11
12
13
[root@docker ~]# iptables -t nat -S
-P PREROUTING ACCEPT
-P POSTROUTING ACCEPT
-P OUTPUT ACCEPT
-N DOCKER
-A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER
-A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE
-A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE
-A POSTROUTING -s 172.17.0.1/32 -d 172.17.0.1/32 -p tcp -m tcp --dport 80 -j MASQUERADE
-A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
-A DOCKER ! -i docker0 -p tcp -m tcp --dport 8090 -j DNAT --to-destination 172.17.0.1:80

非-s地址,非其他任何地址,-o docker0出去,进行地址伪装snat

Markdown

1
[root@docker ~]# yum install tcpdump -y

Markdown

1
2
3
[root@docker ~]# brctl show
bridge name bridge id STP enabled interfaces
docker0 8000.3eb355672a06 no vethc2bac4f
1
2
3
4
[root@docker ~]# tcpdump -n -i vethc2bac4f icmp
tcpdump: WARNING: vethc2bac4f: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vethc2bac4f, link-type EN10MB (Ethernet), capture size 65535 bytes

6.镜像制作

6.1.安装Docker:

1
[root@docker ~]# yum -y install docker-io

6.2.启动Docker:

1
[root@docker ~]# service docker start

6.3.安装制作CentOS镜像的工具:

1
[root@docker ~]# yum -y install febootstrap

6.4.制作CentOS镜像文件centos6-image目录

1
2
[root@docker ~]# febootstrap -i bash -i wget -i yum -i iputils -i iproute -i man -i /
vim-minimal -i openssh-server -i openssh-clients -i net-tools centos6 centos6-image http://mirrors.aliyun.com/centos/6/os/x86_64/

Markdown

Markdown

Markdown

1
2
查看内核版本、发行版本号
[root@docker ~]# uname -r

Markdown

6.5.制作Docker镜像,镜像名字是centos6-base

1
2
cd centos6-image && tar -c .|docker import - centos6-base
[root@docker centos6-image]# tar -c .|docker import - centos6-base

Markdown

1
[root@docker centos6-image]# docker images

Markdown

1
[root@docker centos6-image]# docker run -it --name matriximage centos6-base /bin/bash

Markdown

Markdown

6.6.自动化生成镜像

1
2
3
4
[root@docker centos6-image]# cd
[root@docker ~]# mkdir dockerfile
[root@docker ~]# cd dockerfile
[root@docker dockerfile]# vi Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
#Dockerfile
FROM centos6-base
MAINTAINER matrix
RUN ssh-keygen -q -N "" -t dsa -f /etc/ssh/ssh_host_dsa_key
RUN ssh-keygen -q -N "" -t rsa -f /etc/ssh/ssh_host_rsa_key
RUN sed -ri 's/sessionrequired pam_loginuid.so/#sessionrequired pam_loginuid.so/g' /etc/pam.d/sshd
RUN mkdir -p /root/.ssh && chown root.root /root && chmod 700 /root/.ssh
RUN echo 'root:123456' | chpasswd
RUN mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup
RUN wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-6.repo
RUN wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-6.repo
RUN yum clean all
ENV LANG en_US.UTF-8
ENV LC_ALL en_US.UTF-8
ADD run.sh /run.sh
RUN chmod 777 /run.sh
EXPOSE 22
EXPOSE 80
CMD ["/run.sh"]
#End

Markdown

1
2
3
[root@docker dockerfile]# vi run.sh
#!/bin/bash
/usr/sbin/sshd -D

Markdown

Markdown

6.7.制作可以ssh登陆的Docker镜像,名字是centos6-ssh

1
2
3
[root@docker dockerfile]# docker build -t centos6-ssh .
经过前面的六个步骤,一个可以登陆的本地docker镜像就制作好了。
用户名是:root,密码是:123456

Markdown

1
[root@docker dockerfile]# docker images

Markdown

1
2
[root@docker dockerfile]# docker run -d -p 8888:22 --name ssh01 centos6-ssh
9e50796c90b376eb474a79b5c17727df3df6c91f0596c5a60bab06fba22aef65

Markdown

1
2
3
4
5
6
7
8
9
[root@docker dockerfile]# ssh --help
usage: ssh [-1246AaCfgKkMNnqsTtVvXxYy] [-b bind_address] [-c cipher_spec]
[-D [bind_address:]port] [-e escape_char] [-F configfile]
[-I pkcs11] [-i identity_file]
[-L [bind_address:]port:host:hostport]
[-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port]
[-R [bind_address:]port:host:hostport] [-S ctl_path]
[-W host:port] [-w local_tun[:remote_tun]]
[user@]hostname [command]

Markdown

1
2
3
[root@docker dockerfile]# ssh -p 8888 root@127.0.0.1
root@127.0.0.1's password:
-bash-4.1#

Markdown

1
[root@docker dockerfile]# docker save index.tenxcloud.com/docker_library/nginx > nginx.tar.gz

Markdown

1
[root@docker dockerfile]# ls

Markdown

1
[root@docker dockerfile]# ls -alh

Markdown

1
[root@docker dockerfile]# docker load -i nginx.tar.gz

Markdown

1
[root@docker dockerfile]# docker ps

Markdown

1
[root@docker dockerfile]# docker export --help

Markdown

1
2
3
4
5
6
7
8
9
10
11
12
13
14
[root@docker dockerfile]# docker export --help

Usage: docker export [OPTIONS] CONTAINER

Export a filesystem as a tar archive (streamed to STDOUT by default)

--help=false Print usage
-o, --output= Write to a file, instead of STDOUT
You have new mail in /var/spool/mail/root

[root@docker dockerfile]# docker export -o redis.tar.gz ssh01
[root@docker dockerfile]# ls
Dockerfile nginx.tar.gz redis.tar.gz run.sh
You have new mail in /var/spool/mail/root

Markdown

6.8.制作个redis镜像

1
2
3
4
5
[root@docker dockerfile]# mkdir redis
[root@docker dockerfile]# cd r
redis/redis.tar.gz run.sh
[root@docker dockerfile]# cd redis
[root@docker redis]# vi Dockerfile
1
2
3
4
5
FROM centos6-ssh
RUN yum install -y redis
RUN sed -ri 's/bind 0.0.0.0/bind 127.0.0.1/g' /etc/redis.conf
EXPOSE 6379
CMD ["redis-server"]

Markdown

1
[root@docker redis]# docker build -t redis01 .

Markdown

1
[root@docker redis]# docker images

Markdown

1
2
[root@docker redis]# docker run -d -p 7878:6379 --name redismatrix redis01
913f14b5404f75675d60b053abbcae50889ba2f9b1ab281aa07e6d5a4454d88e

Markdown

1
[root@docker redis]# docker ps

Markdown

本文作者 : Matrix
原文链接 : https://matrixsparse.github.io/2016/02/12/Docker部署/
版权声明 : 本博客所有文章除特别声明外,均采用 CC BY-NC-SA 4.0 许可协议。转载请注明出处!

知识 & 情怀 | 二者兼得

微信扫一扫, 向我投食

微信扫一扫, 向我投食

支付宝扫一扫, 向我投食

支付宝扫一扫, 向我投食

留下足迹