docker 管理应用程序数据和网络管理

时间 2019-12-14

标签 docker 管理应用程序数据网络管理栏目 Docker 繁體版

原文原文链接

Volume和Bind Mount

Docker提供三种不一样方式将数据从宿主机挂载到容器中：volumes，bind mounts和tmpfsphp

volumes：Docker管理宿主机文件系统的一部分（/var/lib/docker/volumes)html

bind mounts:能够存储在宿主机系统的任意位置mysql

tmpfs：挂载存储在宿主机系统的内存中，而不会写入宿主机的文件系统nginx

Volume #能够多个进程公用一个volume

#建立一个卷
docker volume create nginx-vol
nginx-vol

docker volume ls
DRIVER              VOLUME NAME
local               nginx-vol

docker volume inspect nginx-vol 
[
    {
        "CreatedAt": "2018-09-04T21:33:33-04:00",  #建立时间 "Driver": "local",              #驱动 
        "Labels": {},
        "Mountpoint": "/var/lib/docker/volumes/nginx-vol/_data",                 #挂载点 "Name": "nginx-vol",            #卷名 "Options": {},
        "Scope": "local"
    }
]

#下载一个nginx官方镜像
docker pull nginx
Using default tag: latest
latest: Pulling from library/nginx
be8881be8156: Pull complete 
65206e5c5e2d: Pull complete 
8e029c3e2376: Pull complete 
Digest: sha256:1b109555ad28bb5ec429422ee136c5f5ab5ee6faaeb518836a5c9a3b6436a1bd
Status: Downloaded newer image for nginx:latest

docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
nginx               latest              71c43202b8ac        6 days ago          109MB
centos              7                   5182e96772bf        4 weeks ago         200MB

docker run -dit --name=nginx-test --mount src=nginx-vol,dst=/usr/share/nginx/html nginx
                --name:容器的名字  --mount:挂载   src原卷的名字    dst 挂在到容器中的路径    
docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS               NAMES
3d86928ac689       nginx               "nginx -g 'daemon of…"   4 seconds ago       Up 3 seconds        80/tcp              nginx-test
02e7612375e7        518                 "/bin/bash"              22 minutes ago      Up 22 minutes                           distracted_vil

#向容器中的挂载目录建立文件，查看是否挂载成功
docker exec nginx-test touch /usr/share/nginx/html/wk.html    #向容器建立文件wk.html

docker exec nginx-test ls /usr/share/nginx/html/　　　　　　　 　#查看文件是否建立成功
50x.html
index.html
wk.html ls /var/lib/docker/volumes/nginx-vol/_data/　　　　　　　　　　  #查看本地卷
50x.html  index.html  wk.html

#若是把容器删除,本地的volumes的数据仍然存在,不清空

Bind Mounts

docker run -dit --name nginx-test3 -p 90:80 --mount type=bind,src=/var/lib/docker/volumes/nginx-vol/_data,dst=/usr/share/nginx/html nginx
                                                    #指定类型,将本地本身建立的目录挂载上去

容器部署LNMP网站平台

首先下载一个wordpress博客git

wget https://cn.wordpress.org/wordpress-4.7.4-zh_CN.tar.gz

建立MySQL数据库容器

docker pull mysql:5.6
docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
mysql               5.6                 1f47fade220d        2 hours ago         256MB
nginx               latest              71c43202b8ac        6 days ago          109MB
centos              7                   5182e96772bf        4 weeks ago         200MB

#建立一个自定义网络
docker network create lnmp
b59ca0e58388b0857e79781de00dc8d81fba77d9d9969afd06496f087c86f7ea

docker network ls
NETWORK ID          NAME                DRIVER              SCOPE
f136adf5eb39        bridge              bridge              local
b68e9da0b1e6        host                host                local
b59ca0e58388        lnmp                bridge              local
cf4b2d0b4394        none                null                local

#启动MySQL数据库容器
docker run -dit --name lnmp_mysql --network lnmp -p 3306:3306 --mount src=mysql-vol,dst=/var/lib/mysql -e MYSQL_ROOT_PASSWORD=123456 mysql:5.6 --character-set-server=utf8
71e98322f4c2c12772d36a841b5951e8d01c77205f6d4a13d510b3a1e24cc375
自定义网络lnmp若是不提早建立的话，在启动容器进程时会报错 若是没有提早pull好mysql:5.6那么容器在启动时会自动下载对应镜像
若是没有提早docker volume create mysql-vol，那么容器启动时会自动建立

#查看容器lnmp_mysql的日志输出
docker logs lnmp_mysql
#查看容器里启动的进程
docker top lnmp_mysql

向容器里的Mysql建立一个库

docker exec lnmp_mysql sh -c 'exec mysql -uroot -p"$MYSQL_ROOT_PASSWORD" -e"create database wp"'
Warning: Using a password on the command line interface can be insecure.

在docker宿主机上安装mysql的客户端经过端口映射访问容器内的mysql

#安装mysql客户端
yum -y install mysql
#远程方式链接docker宿主机的3306端口
mysql -h192.168.200.142 -P3306 -uroot -p123456

建立nginx+PHP环境容器

#建立一个网页目录
mkdir -p /www
#下载richarvey/nginx-php-fpm镜像
docker pull richarvey/nginx-php-fpm

docker images
REPOSITORY                TAG                 IMAGE ID            CREATED             SIZE
mysql                     5.6                 1f47fade220d        3 hours ago         256MB
nginx                     latest              71c43202b8ac        6 days ago          109MB
centos                    7                   5182e96772bf        4 weeks ago         200MB
richarvey/nginx-php-fpm   latest              af61232ce682        5 weeks ago         297MB

#启动richarvey/nginx-php-fpm镜像的容器
docker run -dit --name lnmp_web --network lnmp -p 888:80 --mount type=bind,src=/www,dst=/var/www/html richarvey/nginx-php-fpm

docker ps -a
CONTAINER ID        IMAGE                     COMMAND                  CREATED             STATUS              PORTS                                    NAMES
ba41b324a1cd        richarvey/nginx-php-fpm   "docker-php-entrypoi…"   13 seconds ago      Up 13 seconds       443/tcp, 9000/tcp, 0.0.0.0:888->80/tcp   lnmp_web
71e98322f4c2        mysql:5.6                 "docker-entrypoint.s…"   26 minutes ago      Up 26 minutes       0.0.0.0:3306->3306/tcp                   lnmp_mysql
7c62aad40cab        nginx                     "nginx -g 'daemon of…"   2 hours ago         Up 2 hours          0.0.0.0:88->80/tcp                       nginx-test
02e7612375e7        518                       "/bin/bash"              2 hours ago         Up 2 hours                                                   distracted_villani

解压wordpress到网页目录/app/wwwroot下

tar xf wordpress-4.7.4-zh_CN.tar.gz -C /www/

博客wordpress访问测试

192.168.50.169:888/wordpressgithub

若是打不开web

按顺序执行如下命令一遍
systemctl stop firewalld
systemctl stop iptables.service
iptables -F
iptables -P FORWARD ACCEPT
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT

网络管理

容器网络模式

Docker支持5种网络模式sql

bridge ; 默认网络，Docker启动后默认建立一个docker0网桥，默认建立的容器也是添加到这个网桥中docker

host : 容器不会得到一个独立的network namespace，而是与宿主机共用一个数据库

none : 获取独立的network namespace，但不为容器进行任何网络配置

container :与指定的容器使用同一个network namespace，网卡配置也都是相同的

自定义 :自定义网桥，默认与bridge网络同样

bridge网络类型

#安装bridge管理工具
yum -y install bridge-utils
#查看网桥状态
brctl show
bridge name    bridge id        STP enabled    interfaces
br-b59ca0e58388        8000.02427e8ae48b    no        veth34fc3ac
docker0        8000.0242e96ffd31    no        vethbc1ab07
                            vethccc7741
#查看网络类型
docker network ls
NETWORK ID          NAME                DRIVER              SCOPE
78188ea3507b        bridge              bridge              local
b68e9da0b1e6        host                host                local
b59ca0e58388        lnmp                bridge              local
cf4b2d0b4394        none                null #查看容器进程
docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                    NAMES
71e98322f4c2        mysql:5.6           "docker-entrypoint.s…"   3 hours ago         Up 2 minutes        0.0.0.0:3306->3306/tcp   lnmp_mysql
7c62aad40cab        nginx               "nginx -g 'daemon of…"   4 hours ago         Up 2 minutes        0.0.0.0:88->80/tcp       nginx-test
02e7612375e7        518                 "/bin/bash"              5 hours ago         Up 2 minutes                                 distracted_villani
#查看容器lnmp_mysql的网络信息
docker inspect lnmp_mysql | grep -A 15 "Networks"
            "Networks": {
                "lnmp": {                    #网络类型lnmp "IPAMConfig": null,
                    "Links": null,
                    "Aliases": [
                        "71e98322f4c2"
                    ],
                    "NetworkID": "b59ca0e58388b0857e79781de00dc8d81fba77d9d9969afd06496f087c86f7ea",
                    "EndpointID": "c1b8bf54ada9f7d9bb53943b2adcfdab81e33505adaff579f7357307a19dbf37",
                    "Gateway": "172.18.0.1",               #网关172.18.0.1，这就是网桥 br-b59ca0e58388        
                    "IPAddress": "172.18.0.2",             #容器IP172.18.0.2
                    "IPPrefixLen": 16,
                    "IPv6Gateway": "",
                    "GlobalIPv6Address": "",
                    "GlobalIPv6PrefixLen": 0,
                    "MacAddress": "02:42:ac:12:00:02",
#查看容器lnmp_web的网络信息
docker inspect lnmp_web | grep -A 15 "Networks"
            "Networks": {
                "lnmp": {          #网络类型lnmp "IPAMConfig": null,
                    "Links": null,
                    "Aliases": [
                        "ba41b324a1cd"
                    ],
                    "NetworkID": "b59ca0e58388b0857e79781de00dc8d81fba77d9d9969afd06496f087c86f7ea",
                    "EndpointID": "8c050c4cb67b69179316210e19fb129ebb75ae2fe0ce40b929d6d70dd3d628b6",
                    "Gateway": "172.18.0.1",            #网关172.18.0.1，这就是网桥 br-b59ca0e58388         
                    "IPAddress": "172.18.0.3",          #容器IP172.18.0.3
                    "IPPrefixLen": 16,
                    "IPv6Gateway": "",
                    "GlobalIPv6Address": "",
                    "GlobalIPv6PrefixLen": 0,
                    "MacAddress": "02:42:ac:12:00:03",
#查看容器nginx-test的网络信息
docker inspect nginx-test | grep -A 15 "Networks"
            "Networks": {
                "bridge": {
                    "IPAMConfig": null,
                    "Links": null,
                    "Aliases": null,
                    "NetworkID": "78188ea3507be36ff03aedb3e271c3ca5739983ad12020109b7c739318fd736f",
                    "EndpointID": "9d9b3e2f0dcb049cabd874a91743f16a86b9dcf4c1f41b4b6d849ca7a5dc18cb",
                    "Gateway": "172.17.0.1",       #网关172.17.0.1，这就是网桥docker0
                    "IPAddress": "172.17.0.2",     #容器IP172.17.0.2
                    "IPPrefixLen": 16,
                    "IPv6Gateway": "",
                    "GlobalIPv6Address": "",
                    "GlobalIPv6PrefixLen": 0,
                    "MacAddress": "02:42:ac:11:00:02",
                    "DriverOpts": null
                }

host网络类型

#启动一个网络类型为host的容器
docker run -dit --name hehe --network host centos:7  /bin/bash
docker ps -a
CONTAINER ID        IMAGE                     COMMAND                  CREATED             STATUS              PORTS                                    NAMES
0b74acb0c57d        centos:7                  "/bin/bash"              3 seconds ago       Up 3 seconds                                                 hehe
ba41b324a1cd        richarvey/nginx-php-fpm   "docker-php-entrypoi…"   3 hours ago         Up 9 minutes        443/tcp, 9000/tcp, 0.0.0.0:888->80/tcp   lnmp_web
71e98322f4c2        mysql:5.6                 "docker-entrypoint.s…"   3 hours ago         Up 14 minutes       0.0.0.0:3306->3306/tcp                   lnmp_mysql
7c62aad40cab        nginx                     "nginx -g 'daemon of…"   4 hours ago         Up 14 minutes       0.0.0.0:88->80/tcp                       nginx-test
02e7612375e7        518                       "/bin/bash"              5 hours ago         Up 14 minutes        docker exec 0b hostname -I
192.168.50.169 172.18.0.1 172.17.0.1

#启动一个网络类型为host的容器
docker run -dit --name hehe --network host centos:7  /bin/bash
 运行一个容器 容器名字hehe 网络类型 host 镜像名 开起一个终端
docker ps -a
CONTAINER ID        IMAGE                     COMMAND                  CREATED             STATUS              PORTS                                    NAMES
0b74acb0c57d        centos:7                  "/bin/bash"              3 seconds ago       Up 3 seconds                                                 hehe
ba41b324a1cd        richarvey/nginx-php-fpm   "docker-php-entrypoi…"   3 hours ago         Up 9 minutes        443/tcp, 9000/tcp, 0.0.0.0:888->80/tcp   lnmp_web
71e98322f4c2        mysql:5.6                 "docker-entrypoint.s…"   3 hours ago         Up 14 minutes       0.0.0.0:3306->3306/tcp                   lnmp_mysql
7c62aad40cab        nginx                     "nginx -g 'daemon of…"   4 hours ago         Up 14 minutes       0.0.0.0:88->80/tcp                       nginx-test
02e7612375e7        518                       "/bin/bash"              5 hours ago         Up 14 minutes       
docker exec 0b hostname -I                    #这就是网络类型为host的容器，ip地址和docker宿主机彻底同样
192.168.50.169 172.18.0.1 172.17.0.1 
docker exec 02 hostname -I                    #网桥类型容器
172.17.0.3#查看容器的ip

none网络类型（用于创建与宿主机的桥接模式）

#启动一个网络类型为none的容器
docker run -dit --name xixi --network none centos:7
d19a66e71c68dd54e889fde9d6efda6b1dfa69cb880a3a6fd9c24136b511856a
#查看容器IP地址
docker exec xixi hostname -I  
查询后发现，什么IP地址都没有，none类型就是暂时不给容器指定网卡

container网络类型

#启动一个容器，网络类型container，使用distracted_villani容器的网卡
docker run -dit --name wawo --network container:distracted_villani centos:7 /bin/bash
52dc72b75e32f98c94ded4a9e491814a5e8de718ca7c5c55d4603236a91c61fb
docker inspect 02 | grep -A 15 "Networks"
            "Networks": {
                "bridge": {
                    "IPAMConfig": null,
                    "Links": null,
                    "Aliases": null,
                    "NetworkID": "78188ea3507be36ff03aedb3e271c3ca5739983ad12020109b7c739318fd736f",
                    "EndpointID": "90a80dfd64372423317d5d35c65b12f3e38a3751806578417190618bb173b5aa",
                    "Gateway": "172.17.0.1",    
                    "IPAddress": "172.17.0.3",
                    "IPPrefixLen": 16,
                    "IPv6Gateway": "",
                    "GlobalIPv6Address": "",
                    "GlobalIPv6PrefixLen": 0,
                    "MacAddress": "02:42:ac:11:00:03",
                    "DriverOpts": null
                }

docker inspect wawo | grep -A 15 "Networks"
            "Networks": {}              #test4容器并无本身的网络设置
        }
    }
]

docker exec wawo hostname -I            #test4没有网络设置却有IP地址和test容器彻底同样 172.17.0.3

桥接宿主机网络与配置固定IP地址

创建网桥桥接到宿主机网络

#构建一个永久生效的网桥br0
vim /etc/sysconfig/network-scripts/ifcfg-eth0          #在配置文件末尾加入BRIDGE=br0
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=dhcp
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=eth0
UUID=704ca798-b347-40df-a13d-c521eadd8929
DEVICE=eth0
ONBOOT=yes
IPV6_PRIVACY=no
BRIDGE=br0
 
vim /etc/sysconfig/network-scripts/ifcfg-br0     #添加br0配置文件
TYPE=Bridge
BOOTPROTO=static
DEVICE=br0
ONBOOT=yes
IPADDR=192.168.50.169
NETMASK=255.255.255.0
GATEWAY=192.168.50.2
DNS1=192.168.50.2

service network restart                #重启网卡

#查看网卡IP
ifconfig eth0
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500                     　　　　    #eth0网卡已经没有IP地址了
        inet6 fe80::20c:29ff:fe01:60fa  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:01:60:fa  txqueuelen 1000  (Ethernet)
        RX packets 6143  bytes 818283 (799.1 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 3527  bytes 520564 (508.3 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

ifconfig br0
br0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.50.169  netmask 255.255.255.0  broadcast 192.168.50.255 #网桥br0代替了eth0
        inet6 fe80::20c:29ff:fe01:60fa  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:01:60:fa  txqueuelen 1000  (Ethernet)
        RX packets 261  bytes 18191 (17.7 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 122  bytes 29032 (28.3 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

brctl show
bridge name             bridge id        STP enabled    interfaces
br-b59ca0e58388        8000.02427e8ae48b    no        
br0                    8000.000c290160fa    no           eth0        #网桥br0，桥接在了真实的物理网卡eth0上
　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　veth1pl3506
docker0                8000.0242e96ffd31    no           vethccc7741

经过pipework工具配置容器固定IP

pipework工具下载地址：https://github.com/jpetazzo/pipework.git

#解压安装pipework工具
yum -y install unzip

unzip pipework-master.zip 
Archive:  pipework-master.zip
ae42f1b5fef82b3bc23fe93c95c345e7af65fef3
   creating: pipework-master/
 extracting: pipework-master/.gitignore  
  inflating: pipework-master/LICENSE  
  inflating: pipework-master/README.md  
  inflating: pipework-master/docker-compose.yml  
   creating: pipework-master/doctoc/
  inflating: pipework-master/doctoc/Dockerfile  
  inflating: pipework-master/pipework  
  inflating: pipework-master/pipework.spec

mv pipework-master /usr/local/

ln -s /usr/local/pipework-master/pipework /usr/local/bin/ 
#创建网络类型为none的容器，并经过pipework配置固定ip地址
docker run -dit --name gaga --net none centos:5 /bin/bash
 
pipework br0 gaga 192.168.50.28/24@192.168.50.2   #设置容器固定IP为192.168.200.199网关192.168.200.2

docker exec gaga hostname -I          #查看容器gaga的IP 192.168.50.28

[root@wk ~]# docker exec -it gaga /bin/bash #进入容器gaga
[root@d19a66e71c68 /]# ping www.baidu.com　　　　　　　　#在容器内ping外网能ping通
PING www.a.shifen.com (119.75.213.61) 56(84) bytes of data.
64 bytes from 127.0.0.1 (119.75.213.61): icmp_seq=1 ttl=128 time=2.94 ms
64 bytes from 127.0.0.1 (119.75.213.61): icmp_seq=2 ttl=128 time=4.95 ms

在windos上ping容器gaga