Docker 制做定制asp.netcore 的容器

时间 2019-11-05

标签 docker 制做定制 asp.netcore asp netcore 容器栏目 Docker 繁體版

原文原文链接

上文Windows docker k8s asp.net core 的k8swebap镜像只是一个asp.net core程序，在实际生产中咱们但愿容器中还有一些其余程序，好比ssh 和telegraf。html

利用Dockerfile文件

只是网上比较推荐的一种方式，Dockerfile包含建立镜像所须要的所有指令，基于在Dockerfile中的指令，咱们可使用Docker build命令来建立镜像，经过减小镜像和容器的建立过程来简化部署。这里咱们以 asp.net core 添加ssh服务为例：python

1.编译并发布项目(这里用发布后的文件):git

2.首先建立一个sshd_config 文件以下：github

Port 22
#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::

#HostKey /etc/ssh/ssh_host_rsa_key
#HostKey /etc/ssh/ssh_host_ecdsa_key
#HostKey /etc/ssh/ssh_host_ed25519_key

# Ciphers and keying
#RekeyLimit default none

# Logging
#SyslogFacility AUTH
#LogLevel INFO

# Authentication:

#LoginGraceTime 2m
PermitRootLogin yes
#StrictModes yes
#MaxAuthTries 6
#MaxSessions 10

#PubkeyAuthentication yes

# Expect .ssh/authorized_keys2 to be disregarded by default in future.
#AuthorizedKeysFile    .ssh/authorized_keys .ssh/authorized_keys2

#AuthorizedPrincipalsFile none

#AuthorizedKeysCommand none
#AuthorizedKeysCommandUser nobody

# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
#HostbasedAuthentication no
# Change to yes if you don't trust ~/.ssh/known_hosts for
# HostbasedAuthentication
#IgnoreUserKnownHosts no
# Don't read the user's ~/.rhosts and ~/.shosts files
#IgnoreRhosts yes

# To disable tunneled clear text passwords, change to no here!
#PasswordAuthentication yes
#PermitEmptyPasswords no

# Change to yes to enable challenge-response passwords (beware issues with
# some PAM modules and threads)
ChallengeResponseAuthentication no

# Kerberos options
#KerberosAuthentication no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
#KerberosGetAFSToken no

# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes
#GSSAPIStrictAcceptorCheck yes
#GSSAPIKeyExchange no

UsePAM yes

#AllowAgentForwarding yes
#AllowTcpForwarding yes
#GatewayPorts no
X11Forwarding yes
#X11DisplayOffset 10
#X11UseLocalhost yes
#PermitTTY yes
PrintMotd no
#PrintLastLog yes
#TCPKeepAlive yes
#UseLogin no
#PermitUserEnvironment no
#Compression delayed
#ClientAliveInterval 0
#ClientAliveCountMax 3
#UseDNS no
#PidFile /var/run/sshd.pid
#MaxStartups 10:30:100
#PermitTunnel no
#ChrootDirectory none
#VersionAddendum none

# no default banner path
#Banner none

# Allow client to pass locale environment variables
AcceptEnv LANG LC_*

# override default of no subsystems
Subsystem    sftp    /usr/lib/openssh/sftp-server

# Example of overriding settings on a per-user basis
#Match User anoncvs
#    X11Forwarding no
#    AllowTcpForwarding no
#    PermitTTY no
#    ForceCommand cvs server

3.建立Dockerfile文件以下：web

FROM microsoft/dotnet:2.1-aspnetcore-runtime
WORKDIR /app
COPY . .
EXPOSE 22 80
 
RUN apt-get update -y && apt-get upgrade -y && apt-get install -y \
  openssh-server \
  && rm -rf /var/lib/apt/lists/*
 
RUN echo 'root:Harbor12345' | chpasswd
RUN mkdir /var/run/sshd
 
COPY sshd_config /etc/ssh/sshd_config
 
ENTRYPOINT ["/bin/bash", "-c", "/usr/sbin/sshd && dotnet k8sWebApi.dll"]

4.制做镜像biang验证docker

docker build -t k8swebapi . #自做镜像
docker  run  --rm -p8081:80 -p2222:22 k8swebapi  #启动docker 实例
docker exec 649c hostname -I  #查看容器ip
ssh root@172.17.0.2 #在宿主计算机上进入容器

在宿主进入容器以下：ubuntu

在普通的计算机上进入容器如：api

手动修改容器镜像

这里咱们以asp.net core 添加 telegraf 为例。首先咱们须要一个含有asp.net core的容器。这里咱们修改上面的Dockerfile文件以下：bash

FROM microsoft/dotnet:2.1-aspnetcore-runtime
WORKDIR /app
EXPOSE 22 
 
RUN apt-get update -y && apt-get upgrade -y && apt-get install -y \
  openssh-server \
  && rm -rf /var/lib/apt/lists/*
 
RUN echo 'root:Harbor12345' | chpasswd
RUN mkdir /var/run/sshd
 
COPY sshd_config /etc/ssh/sshd_config
 
CMD ["/usr/sbin/sshd", "-D"]

而后制做镜像并启动实例并发

docker build -t aspnetcore2.1 .  #制做镜像
docker run -d -p2222:22 --name aspcor2.1  aspnetcore2.1 #启动容器

进入容器后安装telagraf

apt-get update 
apt-get install apt-transport-https
apt-get install curl
apt-get install sudo
apt-get install gnupg2 &&  apt-get install gnupg1
cat <<EOF | sudo tee /etc/apt/sources.list.d/influxdata.list
deb https://repos.influxdata.com/ubuntu bionic stable
EOF
sudo curl -sL https://repos.influxdata.com/influxdb.key | sudo apt-key add -
sudo apt-get update
sudo apt-get -y install telegraf

修改配置如图：

而后启动服务制做新的镜像

sudo service telegraf start
sudo systemctl enable --now telegraf
docker commit aspcor2.1 192.168.100.3:80/repo-test/aspcore2.1

这里咱们能够在influxdb里面验证telegraf的数据，而后关闭relegraf 服务，安装service和lsof

再次提交镜像 docker commit aspcor2.1 192.168.100.3:80/repo-test/aspcore2.1 （实际先前那一次不须要提交）

最后修改程序的Dockerfile以下：（备注一下，若是写成 ENTRYPOINT ["/bin/bash", "-c", "/usr/sbin/sshd && /usr/bin/telegraf && dotnet k8sWebApi.dll"] 或有问题的）

FROM  192.168.100.3:80/repo-test/aspcore2.1
WORKDIR /app
COPY . .
EXPOSE  80 22
 
CMD ["/usr/bin/telegraf", "-D"]
ENTRYPOINT ["/bin/bash", "-c", "/usr/sbin/sshd && dotnet k8sWebApi.dll"]

docker build -t k8swebapi .
docker  run --rm -p8081:80 -p2222:22 k8swebapi

简单总结一下，其实网上你们肌肤都推荐用Dockerfile来制做镜像，可是我我的比较推荐手动自做镜像，先看2个图吧

Dockerfile制做镜像（比较耗时，须要联网下载相关的软件，而且要求相对较高，验证的方式只能启动容器来验证）：

手动安装（在引入docker开发，我相信必定会有私有仓库，因此这里的镜像制做很是快，只须要从本地下载镜像就能够，不须要下载其余软件，制做初始镜像比较麻烦，可是相对简单，验证也很方便）：

参考

Installing Telegraf

ubuntu docker inflxudb(安装使用备份还原以及python编码) telegraf Grafana

hklcf/debian-ssh-docker