Docker Example
2.14.1. registry
docker run -d -p 5000:5000 --name registry registry:latest
2.14.1.1. Auth + SSL
iMac:registry neo$ mkdir etc iMac:registry neo$ htpasswd -Bbn neo chen > etc/htpasswd or docker run --entrypoint htpasswd registry:2 -Bbn neo passw0rd > etc/htpasswd
docker run -d \ --restart=always \ --name registry \ -v `pwd`/etc:/usr/local/etc \ -e "REGISTRY_AUTH=htpasswd" \ -e "REGISTRY_AUTH_HTPASSWD_REALM=Registry Realm" \ -e REGISTRY_AUTH_HTPASSWD_PATH=/usr/local/etc/htpasswd \ -e REGISTRY_HTTP_ADDR=0.0.0.0:443 \ -e REGISTRY_HTTP_TLS_CERTIFICATE=/usr/local/etc/domain.cer \ -e REGISTRY_HTTP_TLS_KEY=/usr/local/etc/domaon.key \ -p 443:443 \ registry:2
2.14.2. Example Java - Spring boot with Docker
2.14.2.1. 获取 CentOS 7 镜像
docker pull centos:7
# docker pull centos:7 7: Pulling from library/centos 343b09361036: Pull complete Digest: sha256:bba1de7c9d900a898e3cadbae040dfe8a633c06bc104a0df76ae24483e03c077 Status: Downloaded newer image for centos:7
基于 CentOS 7 运行一个容器
docker run -it --name mycentos docker.io/centos:7 /bin/bash
# docker run -it --name mycentos docker.io/centos:7 /bin/bash
运行后直接进入了容器的shell控制台默认是bash
2.14.2.2. 安装 openjdk
# yum install -y java-1.8.0-openjdk # cat >> /etc/profile.d/java.sh <<'EOF' export JAVA_HOME=/usr/java/default export JAVA_OPTS="-server -Xms2048m -Xmx4096m -Djava.io.tmpdir=/tmp -Djava.security.egd=file:/dev/./urandom -Dfile.encoding=UTF8 -Duser.timezone=GMT+08" export CLASSPATH=$JAVA_HOME/lib:$JAVA_HOME/jre/lib:. export PATH=$PATH:$JAVA_HOME/bin:$JAVA_HOME/jre/bin: EOF # source /etc/profile.d/java.sh
检查Java是否安装成功
# whereis java java: /usr/bin/java /usr/lib/java /etc/java /usr/share/java /usr/share/man/man1/java.1.gz # java -version openjdk version "1.8.0_131" OpenJDK Runtime Environment (build 1.8.0_131-b11) OpenJDK 64-Bit Server VM (build 25.131-b11, mixed mode)
创建应用程序目录
# mkdir -p /www/netkiller.cn/www.netkiller.cn/
推出当前容器
# exit
2.14.2.3. Spring boot 包
复制 jar 文件到Docker容器
docker cp /www/netkiller.cn/www.netkiller.cn/www.netkiller.cn-0.0.1.war mycentos:/usr/local/libexec
2.14.2.4. 启动 Spring boot 项目
启动容器
# docker start mycentos mycentos
进入容器
# docker exec -it mycentos /bin/bash
如果仅仅是测试可以手动启动 Srping boot 项目
# cat >> /root/run.sh <<EOF java -server -Xms2048m -Xmx8192m -jar /usr/local/libexec/www.netkiller.cn-0.0.1.war EOF chmod u+x /root/run.sh
生产环境请使用启动脚本
# curl -s https://raw.githubusercontent.com/oscm/build/master/Application/Spring/service/springbootd -o /etc/init.d/springbootd # chmod +x /etc/init.d/springbootd
编辑启动脚本 /etc/init.d/springbootd 修改下面配置项
############################################## BASEDIR="/www/netkiller.cn/api.netkiller.cn" JAVA_HOME=/srv/java JAVA_OPTS="-server -Xms2048m -Xmx8192m -Djava.security.egd=file:/dev/./urandom" PACKAGE="api.netkiller.cn-0.0.2-release.jar" CONFIG="--spring.config.location=$BASEDIR/application.properties -Dspring.profiles.active=production -Dserver.port=8080 -Dlog.level=info" USER=www ############################################## NAME=springbootd PROG="$JAVA_HOME/bin/java $JAVA_OPTS -jar $BASEDIR/$PACKAGE $CONFIG" LOGFILE=/var/tmp/$NAME.log PIDFILE=/var/tmp/$NAME.pid ACCESS_LOG=/var/tmp/$NAME.access.log ##############################################
你也可以使用 systemd 启动脚本,详见《Netkiller Java 手札》
2.14.2.5. 基于 CentOS 7 制作 spring 镜像
docker commit mycentos springboot:1
# docker commit mycentos springboot:1 sha256:757d92d642d1b5a7b244f6ddf89f24a8d463d154438651c83ba51a644b401782
启动 spring boot 容器
# docker run -d --name springboot -p 80:8080 springboot:1 /root/run.sh
-d: 以守护进程方式启动 --name:指定容器的名称 -p:映射容器8080端口到宿主机的80端口 springboot:1 :上一步制作好的springboot镜像,版本号为1
启动容器
# docker start springboot
停止容器
# docker stop springboot
2.14.3. Redis
http://download.redis.io/redis-stable/redis.conf
http://download.redis.io/redis-stable/sentinel.conf
2.14.3.1. Docker 命令
获取 Redis 镜像
docker pull redis
# docker pull redis Using default tag: latest latest: Pulling from library/redis 10a267c67f42: Pull complete 5b690bc4eaa6: Pull complete 4cdd94354d2a: Pull complete 71c1f30d820f: Pull complete c54584150374: Pull complete d1f9221193a6: Pull complete d45bc46b48e4: Pull complete Digest: sha256:548a75066f3f280eb017a