利用Dockerfile制作nginx、tomcat、sshd，systemctl和MySQL镜像

一、构建sshd镜像

[root@localhost ~]# mkdir sshd
[root@localhost ~]# cd sshd/          
[root@localhost sshd]# vim Dockerfile
FROM centos:7                        #选择基础镜像centos7
MAINTAINER Ths is my object          #镜像作者信息
RUN yum -y update                    #更新系统yum源
RUN yum -y install openssh* net-tools Isof telnet passwd  #安装openssh、网络工具、远程连接、密码等工具 
RUN echo '123456' | passwd --stdin root        #设置容器中的root密码
RUN sed -i 's/UsePAM yes/UsePAM no/g' /etc/ssh/sshd_config    #关闭ssh的pam认证
RUN ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key            #创建非对称秘钥对  
RUN sed -i '/^session\s\+required\s\+pam_loginuid.so/s/^/#/' /etc/pam.d/sshd   #关闭ssh的pam会话模块
RUN mkdir -p /root/.ssh && chown root:root /root && chmod 700 /root/.ssh      #创建ssh的工作目录并且设置权限
EXPOSE 22                          #暴露22号端口      
CMD ["/usr/sbin/sshd" , "-D"]      #以守护进程的方式开启ssh 
[root@localhost sshd]# docker build -t sshd:new .    #生成镜像
省略.....
[root@localhost ~]# docker run -d -P sshd:new         ##用生成的镜像创建容器并且生成端口号
bc57b7560d209e2ded13f57441c589204fbdb929c84424bfaa0ea33b778b9aa4
[root@localhost ~]# docker ps -a
CONTAINER ID        IMAGE               COMMAND               CREATED             STATUS              PORTS                   NAMES
bc57b7560d20        sshd:new            "/usr/sbin/sshd -D"   2 seconds ago       Up 1 second         0.0.0.0:32774->22/tcp   romantic_moore
[root@localhost ~]# ssh localhost -p 32774   ##验证，登录本地root目录
The authenticity of host '[localhost]:32774 ([::1]:32774)' can't be established.
RSA key fingerprint is SHA256:7gX0NXCEqZ2BeP94K+LPohOdOWs3CV89xdA5jpU59eA.
RSA key fingerprint is MD5:26:d9:db:13:d4:0b:4e:61:89:51:e7:c8:d2:0b:6b:63.
Are you sure you want to continue connecting (yes/no)? yes    ##输入yes
Warning: Permanently added '[localhost]:32774' (RSA) to the list of known hosts.
root@localhost's password:        ##刚刚在容器里创建的密码
[root@bc57b7560d20 ~]# 

二、制作systemctl镜像

[root@localhost ~]# mkdir systemctl
[root@localhost ~]# cd systemctl/
[root@localhost systemctl]# vim Dockerfile
FROM sshd:new                     #基于之前创建的sshd:new的镜像
ENV container docker              #设置环境变量 container和docker
RUN (cd /lib/systemd/system/sysinit.target.wants/; for i in * ; do [ $i == \     ##执行先到指定目录，进行for循环遍历目录下所有文件并删除指定的文件。之后进行一系列的删除
systemd-tmpfiles-setup.service ] || rm -f $i; done); \
rm -f /lib/systemd/system/multi-user.target.wants/*; \
rm -f /etc/systemd/system*.wants/*; \
rm -f /lib/systemd/system/local-fs.target.wants/*; \
rm -f /lib/systemd/system/sockets.target.wants/*udev*; \
rm -f /lib/systemd/system/sockets.target.wants/*initctl*; \
rm -f /lib/systemd/system/basic.target.wants/*; \
rm -f /lib/systemd/system/anaconda.target.wants/*;
VOLUME [ "/sys/fs/cgroup" ]         #创建一个挂载卷
CMD [ "/usr/sbin/init" ]            #执行初始化命令

#privileged container内的root拥有真正的root权限。否则，container内的root只是外部的一个普通用户权限。
[root@localhost systemctl]# docker run --privileged -it -v     /sys/fs/cgroup:/sys/fs/cgroup:ro systemd:new /sbin/init &     
[1] 13160
[root@localhost systemctl]# docker ps -a  ##查看容器
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
300a6171061e        systemd:new         "/sbin/init"        30 seconds ago      Up 29 seconds       22/tcp              tender_yonath
[root@localhost systemctl]# docker exec -it 300a6171061e bash   #进入容器
[root@300a6171061e /]# systemctl status sshd    ##可以用关于systemctl的命令了
● sshd.service - OpenSSH server daemon
   Loaded: loaded (/usr/lib/systemd/system/sshd.service; disabled; vendor preset: enabled)
   Active: inactive (dead)
     Docs: man:sshd(8)
           man:sshd_config(5)
 

三、构建nginx镜像

[root@localhost ~]# mkdir nginx
[root@localhost ~]# cd nginx/
[root@localhost nginx]# vim Dockerfile
FROM centos:7                         #选择基础镜像centos7                
MAINTAINER this is nginx object       #镜像作者信息
RUN yum -y update                     #更新yum环境 
RUN yum -y install pcre-devel zlib-devel gcc gcc-c++ make   #安装编译工具 
RUN useradd -M -s /sbin/nologin nginx                  #添加一个无家目录和无法登陆的nginx用户
ADD nginx-1.12.2.tar.gz /usr/local/src                 #将源码包解压到/usr/local/src目录下 
WORKDIR /usr/local/src                                 #进入/usr/local/src                   
WORKDIR nginx-1.12.2                                   #进入nginx-1.12.2
RUN ./configure \                                      #开始配置，编译安装
--prefix=/usr/local/nginx \
--user=nginx \
--group=nginx \
--with-http_stub_status_module && make && make install
ENV PATH /usr/local/nginx/sbin:$PATH                  #设置环境变量
EXPOSE 80                                             #开放端口号
EXPOSE 443
RUN echo "daemon off;" >> /usr/local/nginx/conf/nginx.conf  ##关闭以守护进程的形式启动nginx，不加这句话到配置文件中容器无法正常运行！！！
ADD run.sh /run.sh               #添加启动脚本
RUN chmod 755 /run.sh
CMD [ "/run.sh" ]                #开启容器时运行启动脚本
[root@localhost nginx]# docker build -t nginx:new .   ##创建镜像
[root@localhost nginx]# docker run -d --name nginx1 -p 1000:80 nginx:new  ##用镜像创建容器
6b50e04890afe90e9a4f20c9942110779e39afff4b376c5467abb7757e37df32
[root@localhost nginx]# docker ps -a
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS                            PORTS                           NAMES
6b50e04890af        nginx:new           "/run.sh"                16 seconds ago      Up 15 seconds                     443/tcp, 0.0.0.0:1000->80/tcp   nginx1

四、制作tomcat镜像

[root@localhost ~]# mkdir tomcat
[root@localhost ~]# cd tomcat/
[root@localhost tomcat]# vim Dockerfile
FROM centos:7      ##基于基础镜像
MAINTAINER this is tomcat     ##作者信息
ADD jdk-8u91-linux-x64.tar.gz /usr/local/src      ##添加jdk到/usr/local/src目录中
WORKDIR /usr/local/src/                           #进入工作目录，并安装jdk  
RUN mv jdk1.8.0_91 /usr/local/java      
ENV JAVA_HOME /usr/local/java                     #添加环境变量      
ENV JAVA_BIN /usr/local/java/bin
ENV JRE_HOME /usr/local/java/jre
ENV PATH $PATH:/usr/local/java/bin:/usr/local/java/jre/bin
ENV CLASSPATH /usr/local/java/jre/bin:/usr/local/java/lib:/usr/local/java/jre/lib/charsets.jar
ADD apache-tomcat-8.5.16.tar.gz /usr/local/      #解压tomcat源码包
WORKDIR /usr/local/
RUN mv apache-tomcat-8.5.16 /usr/local/tomcat8   #修改tomcat的名称便于管理  
EXPOSE 8080                                      #开启tomcat容器内部的8080端口
ENTRYPOINT ["/usr/local/tomcat8/bin/catalina.sh","run"]    #使用ENTRYPOINT启动tomcat
[root@localhost tomcat]# ll    ##把需要的软件导入
总用量 186324
-rw-r--r--. 1 root root   9417469 11月 21 11:17 apache-tomcat-8.5.16.tar.gz
-rw-r--r--. 1 root root       573 11月 27 05:06 Dockerfile
-rw-r--r--. 1 root root 181367942 10月 27 04:23 jdk-8u91-linux-x64.tar.gz
[root@localhost tomcat]# docker build -t tomcat:new .   ##创建镜像
[root@localhost tomcat]# docker run -d --name tomcat1 -p 1314:8080 tomcat:new  ##基于镜像创建容器
b9a3d212e84fad86a52b0635c93d0714ada335a74727ffb71e9e0e955732166d
[root@localhost tomcat]# docker ps -a
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS                        PORTS                           NAMES
b9a3d212e84f        tomcat:new          "/usr/local/tomcat8/…"   11 seconds ago      Up 10 seconds                 0.0.0.0:1314->8080/tcp          tomcat1

五、制作MySQL镜像

1、创建目录并编写Dockerfile文件

[root@docker mysql]# vim Dockerfile 
FROM centos:7
MAINTAINER this is mysql-centos
RUN  yum -y install ncurses bison cmake gcc ncurses-devel gcc-c++ make
RUN useradd mysql -M -s /sbin/nologin
ADD mysql-boost-5.7.20.tar.gz /usr/local/src
WORKDIR /usr/local/src/mysql-5.7.20
RUN cmake \
-DCMAKE_INSTALL_PREFIX=/usr/local/mysql \
-DMYSQL_UNIX_ADDR=/usr/local/mysql/mysql.sock \
-DSYSCONFDIR=/etc \
-DSYSTEMD_PID_DIR=/usr/local/mysql \
-DDEFAULT_CHARSET=utf8 \
-DDEFAULT_COLLATION=utf8_general_ci \
-DWITH_INNOBASE_STORAGE_ENGINE=1 \
-DWITH_ARCHIVE_STORAGE_ENGINE=1 \
-DWITH_BLACKHOLE_STORAGE_ENGINE=1 \
-DWITH_PERFSCHEMA_STORAGE_ENGINE=1 \
-DMYSQL_DATADIR=/usr/local/mysql/data \
-DWITH_BOOST=boost \
-DWITH_SYSTEMD=1
RUN make && make install
RUN chown -R mysql:mysql /usr/local/mysql/
RUN rm -rf /etc/my.cnf
ADD my.cnf /etc/
RUN chown mysql.mysql /etc/my.cnf
ENV PATH /usr/local/mysql/bin:/usr/local/mysql/lib:$PATH
RUN /usr/local/mysql/bin/mysqld \
--initialize-insecure \
--user=mysql \
--basedir=/usr/local/mysql \
--datadir=/usr/local/mysql/data
RUN cp /usr/local/mysql/usr/lib/systemd/system/mysqld.service /lib/systemd/system/
EXPOSE 3306
RUN echo -e "#!bin/sh  \nsystemctl enable mysqld" >/run.sh
RUN chmod 755 /run.sh
RUN sh /run.sh
CMD ["init"]

2、编写mysql配置文件

[root@docker mysql]# vim my.cnf 
default-character-set=utf8
socket = /usr/local/mysql/mysql.sock

[mysql]
port = 3306
default-character-set=utf8
socket=/usr/local/mysql/mysql.sock

[mysqld]
user = mysql
basedir = /usr/local/mysql
datadir=/usr/local/mysql/data
port = 3306
character_set_server=utf8
pid-file = /usr/local/mysql/mysqld.pid
socket = /usr/local/mysql/mysql.sock
server-id = 1

sql_mode=NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES,NO_AUTO_CREATE_USER,NO_AUTO_VALUE_ON_ZERO,NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_BY_ZERO,PIPES_AS_CONCAT,ANSI_QUOTES

3、生成镜像

[root@docker mysql]# docker run -d -P --privileged mysqld:new
6860174a05539e34521ef0e30d2dd3ac557f6f5fe550fa27f02ecb731489003c
[root@docker mysql]# docker ps -a
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS                      PORTS                     NAMES
6860174a0553        mysqld:new          "/run.sh"           8 seconds ago       Up 8 seconds                0.0.0.0:32768->3306/tcp   cranky_herschel

4、进入镜像中mysql数据库，进行验证

[root@docker mysql]# docker exec -it 6860174a0553 /bin/bash
[root@6860174a0553 mysql-5.7.20]# mysql -uroot -p
mysql> grant all privileges on *.* to 'root'@'%' identified by '123456';
Query OK, 0 rows affected, 1 warning (0.00 sec)

mysql> grant all privileges on *.* to 'root'@'localhost' identified by '123456'; 
Query OK, 0 rows affected, 1 warning (0.00 sec)

mysql> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| mysql              |
| performance_schema |
| sys                |
+--------------------+
4 rows in set (0.00 sec)

mysql> create database school;     '添加school数据库'
Query OK, 1 row affected (0.00 sec)

mysql> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| school             |
| mysql              |
| performance_schema |
| sys                |
+--------------------+
5 rows in set (0.00 sec)

5、其它节点安装mariadb进行测试

[root@docker ~]# yum install mariadb* -y
[root@docker ~]# systemctl start mariadb.service 

6、连接数据库

[root@docker ~]# mysql -h 20.0.0.16 -uroot -P 32768 -p
MySQL [(none)]> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| mysql              |
| performance_schema |
| sys                |
+--------------------+
4 rows in set (0.00 sec)

7、数据库数据同步

MySQL [(none)]> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| cllt               |
| mysql              |
| performance_schema |
| sys                |
+--------------------+
5 rows in set (0.00 sec)