【Docker】Docker学习⑨ - 单机编排之Docker Compose

一、Docker简介

• 参考：【Docker】Dokcer学习① - 简介

二、Docker安装及基础命令介绍

• 参考：【Docker】Docker学习② - Docker安装及基础命令介绍

三、Docker镜像管理

• 参考：【Docker】Docker学习③ - Docker镜像管理

四、Docker镜像与制作

• 参考：【Docker】Docker学习④ - Docker镜像与制作

五、Docker数据管理

• 参考：【Docker】Docker学习⑤ - Docker数据管理

六、网络部分

• 参考：【Docker】Docker学习⑥ - 网络部分

七、Docker仓库之单机Dokcer Registry

• 参考：【Docker】Docker学习⑦ - Docker仓库之单机Dokcer Registry

八、Docker仓库之分布式Harbor

• 参考：【Docker】Docker学习⑧ - Docker仓库之分布式Harbor

九、单机编排之Docker Compose

当在宿主机启动较多的容器的时候，如果都是手动操作会觉得比较麻烦而且容易出错，这个时候推荐使用docker单机编排工具docker compose，Dokcer Compose是docker容器的一种编排服务，docker compose是一个管理多个容器的工具，比如可以解决容器之间的依赖关系，就像启动一个web就必须得先把数据库服务先启动一样，docker compose完全可以替代docker run启动容器。

• github地址：https://github.com/docker/compose

1 基础环境准备

• 1.1 安装python环境及pip命令

	yum install https://mirrors.aliyun.com/epel/epel-release-latest-7.noarch.rpm -yyum install python-pip -ypip install --upgrade pip 

• 1.2 安装docker compose

	pip install docker-compose

• 1.3 验证版本

	docker-compose version

日志：

	[root@gbase8c_private ~]# docker-compose version/usr/lib/python2.7/site-packages/paramiko/transport.py:33: CryptographyDeprecationWarning: Python 2 is no longer supported by the Python core team. Support for it is now deprecated in cryptography, and will be removed in the next release.from cryptography.hazmat.backends import default_backenddocker-compose version 1.26.2, build unknowndocker-py version: 4.4.4CPython version: 2.7.5OpenSSL version: OpenSSL 1.0.2k-fips  26 Jan 2017

• 1.4 查看帮助

	docker-compose --help[root@gbase8c_private ~]# docker-compose --help/usr/lib/python2.7/site-packages/paramiko/transport.py:33: CryptographyDeprecationWarning: Python 2 is no longer supported by the Python core team. Support for it is now deprecated in cryptography, and will be removed in the next release.from cryptography.hazmat.backends import default_backendDefine and run multi-container applications with Docker.Usage:docker-compose [-f <arg>...] [options] [COMMAND] [ARGS...]docker-compose -h|--helpOptions:-f, --file FILE             Specify an alternate compose file(default: docker-compose.yml)-p, --project-name NAME     Specify an alternate project name(default: directory name)-c, --context NAME          Specify a context name--verbose                   Show more output--log-level LEVEL           Set log level (DEBUG, INFO, WARNING, ERROR, CRITICAL)--no-ansi                   Do not print ANSI control characters-v, --version               Print version and exit-H, --host HOST             Daemon socket to connect to--tls                       Use TLS; implied by --tlsverify--tlscacert CA_PATH         Trust certs signed only by this CA--tlscert CLIENT_CERT_PATH  Path to TLS certificate file--tlskey TLS_KEY_PATH       Path to TLS key file--tlsverify                 Use TLS and verify the remote--skip-hostname-check       Don't check the daemon's hostname against thename specified in the client certificate--project-directory PATH    Specify an alternate working directory(default: the path of the Compose file)--compatibility             If set, Compose will attempt to convert keysin v3 files to their non-Swarm equivalent--env-file PATH             Specify an alternate environment fileCommands:build              Build or rebuild servicesconfig             Validate and view the Compose filecreate             Create servicesdown               Stop and remove containers, networks, images, and volumesevents             Receive real time events from containersexec               Execute a command in a running containerhelp               Get help on a commandimages             List imageskill               Kill containerslogs               View output from containerspause              Pause servicesport               Print the public port for a port bindingps                 List containerspull               Pull service imagespush               Push service imagesrestart            Restart servicesrm                 Remove stopped containersrun                Run a one-off commandscale              Set number of containers for a servicestart              Start servicesstop               Stop servicestop                Display the running processesunpause            Unpause servicesup                 Create and start containersversion            Show the Docker-Compose version information

2 从docker compose启动单个容器

目录可以在任意目录，推荐放在有意义的位置（/usr/local/docker-compos）

• 2.1 一个容器的docker compose文件
  设置一个yml格式的配置文件，因此要注意前后缩进

	vim /usr/local/docker-compos/docker-compose.yml[root@gbase8c_private docker-compose]# cat docker-compose.yml web1:image: 192.168.56.199/nginx/nginx:v1expose:- 80- 443ports:- "80:80"- "443:443"

• 2.2 启动容器
  必须要在docker compose文件所在的目录执行：

	docker-compose up #前台启动[root@gbase8c_private docker-compose]# docker-compose up/usr/lib/python2.7/site-packages/paramiko/transport.py:33: CryptographyDeprecationWarning: Python 2 is no longer supported by the Python core team. Support for it is now deprecated in cryptography, and will be removed in the next release.from cryptography.hazmat.backends import default_backendCreating docker-compose_web1_1 ... doneAttaching to docker-compose_web1_1web1_1  | /docker-entrypoint.sh: /docker-entrypoint.d/ is not empty, will attempt to perform configurationweb1_1  | /docker-entrypoint.sh: Looking for shell scripts in /docker-entrypoint.d/web1_1  | /docker-entrypoint.sh: Launching /docker-entrypoint.d/10-listen-on-ipv6-by-default.shweb1_1  | 10-listen-on-ipv6-by-default.sh: info: Getting the checksum of /etc/nginx/conf.d/default.confweb1_1  | 10-listen-on-ipv6-by-default.sh: info: Enabled listen on IPv6 in /etc/nginx/conf.d/default.confweb1_1  | /docker-entrypoint.sh: Launching /docker-entrypoint.d/20-envsubst-on-templates.shweb1_1  | /docker-entrypoint.sh: Launching /docker-entrypoint.d/30-tune-worker-processes.shweb1_1  | /docker-entrypoint.sh: Configuration complete; ready for start upweb1_1  | 2023/12/17 14:41:21 [notice] 1#1: using the "epoll" event methodweb1_1  | 2023/12/17 14:41:21 [notice] 1#1: nginx/1.21.5web1_1  | 2023/12/17 14:41:21 [notice] 1#1: built by gcc 10.2.1 20210110 (Debian 10.2.1-6) web1_1  | 2023/12/17 14:41:21 [notice] 1#1: OS: Linux 3.10.0-1160.71.1.el7.x86_64web1_1  | 2023/12/17 14:41:21 [notice] 1#1: getrlimit(RLIMIT_NOFILE): 1048576:1048576web1_1  | 2023/12/17 14:41:21 [notice] 1#1: start worker processesweb1_1  | 2023/12/17 14:41:21 [notice] 1#1: start worker process 29web1_1  | 2023/12/17 14:41:21 [notice] 1#1: start worker process 30^CGracefully stopping... (press Ctrl+C again to force)Stopping docker-compose_web1_1 ... done

• 2.3 web访问测试
• 2.4 后台启动服务
  容器在启动的时候，会给容器自定义一个名称

	docker-compose up -d

日志：

	[root@gbase8c_private docker-compose]# docker-compose up -dStarting docker-compose_web1_1 ... done  #容器名称

• 2.5 自定义容器名称

	[root@gbase8c_private docker-compose]# cat docker-compose.yml 
web1:image: 192.168.56.199/nginx/nginx:v1expose:- 80- 443container_name: nginx-web1   #自定义容器名称ports:- "80:80"- "443:443"

日志：

	[root@gbase8c_private docker-compose]# docker-compose stopStopping docker-compose_web1_1 ... done[root@gbase8c_private docker-compose]# docker ps -aCONTAINER ID        IMAGE                                      COMMAND                  CREATED             STATUS                      PORTS               NAMES72aed697d033        192.168.56.199/nginx/nginx:v1              "/docker-entrypoint.…"   9 minutes ago       Exited (0) 13 seconds ago                       docker-compose_web1_1[root@gbase8c_private docker-compose]# docker-compose up -dRecreating docker-compose_web1_1 ... done[root@gbase8c_private docker-compose]# docker ps -aCONTAINER ID        IMAGE                                      COMMAND                  CREATED             STATUS                    PORTS                                      NAMESf1033c073624        192.168.56.199/nginx/nginx:v1              "/docker-entrypoint.…"   2 seconds ago       Up 2 seconds              0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp   nginx-web1[root@gbase8c_private docker-compose]# 

3 从docker compose启动多个容器

• 3.1 编辑docker-compose文件

	cat docker-compose.yml
web1:image: 192.168.56.199/nginx/nginx:v1expose:- 80- 443container_name: nginx-web1 ports:- "80:80"- "443:443"
web2:  #每个容器一个IDimage: 192.168.56.199/nginx/nginx:v1expose:- 80- 443container_name: nginx-web2 ports:- "81:80"- "444:443"

日志：

	[root@gbase8c_private docker-compose]# docker-compose stopStopping nginx-web1 ... done[root@gbase8c_private docker-compose]# docker ps -aCONTAINER ID        IMAGE                                      COMMAND                  CREATED             STATUS                     PORTS               NAMESf1033c073624        192.168.56.199/nginx/nginx:v1              "/docker-entrypoint.…"   5 minutes ago       Exited (0) 6 seconds ago                       nginx-web1[root@gbase8c_private docker-compose]# docker-compose up -dStarting nginx-web1 ... doneCreating nginx-web2 ... done[root@gbase8c_private docker-compose]# docker psCONTAINER ID        IMAGE                           COMMAND                  CREATED             STATUS              PORTS                                      NAMES341ed2cbd17d        192.168.56.199/nginx/nginx:v1   "/docker-entrypoint.…"   51 seconds ago      Up 50 seconds       0.0.0.0:81->80/tcp, 0.0.0.0:444->443/tcp   nginx-web2f1033c073624        192.168.56.199/nginx/nginx:v1   "/docker-entrypoint.…"   6 minutes ago       Up 50 seconds       0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp   nginx-web1

• 3.2 web访问测试

4 定义数据卷挂载

• 4.1 创建数据目录和文件

mkdir -p /data/nginx
echo "Test Nginx Volume" > /data/nginx/index.html

• 4.2 编辑compose配置文件

cat docker-compose.yml
web1:image: jack/nginx-1.22.1:v1expose:- 80- 443container_name: nginx-web1 volumes:- /data/nginx:/usr/local/nginx/htmlports:- "80:80"- "443:443"
web2:  #每个容器一个IDimage: jack/nginx-1.22.1:v1expose:- 80- 443container_name: nginx-web2 ports:- "81:80"- "444:443"

• 4.3 重启容器

docker-compose stop
docker-compose up -d

• 4.4 登录验证Web访问

• 4.5 其他常用命令

##重启单个指定容器
docker-compose restart web1
##重启所有容器
docker-compose restart
##停止和启动单个容器
docker-compose stop web1
docker-compose start web1
##停止和启动所有容器
docker-compose stop
docker-compose start

5 实现单机版的HA+NGINX+TOMCAT

5.1 制作haproxy镜像

• 5.1.1 编辑Dockerfile文件

cd /opt/dockerfile/web/haproxy
cat Dockerfile
#My Dockerfile
From docker.io/centos:latest
MAINTAINER chengk "[e-mail]"#Yum Setting
RUN rpm -ivh http://mirrors.aliyun.com/epel/epel-release-latest-8.noarch.rpm
#以下为centos8需要
RUN sed -i -e "s|mirrorlist=|#mirrorlist=|g" /etc/yum.repos.d/CentOS-*
RUN sed -i -e "s|#baseurl=http://mirror.centos.org|baseurl=http://vault.centos.org|g" /etc/yum.repos.d/CentOS-*RUN yum install gcc gcc-c++ pcre pcre-devel openssl openssl-devel make vim wget tree lrzsz  automake  zlib zlib-devel  iproute net-tools iotop -y
ADD haproxy-1.8.31.tar.gz /usr/local/src/
RUN cd /usr/local/src/haproxy-1.8.31 && make TARGET=linux2628 USE_PCRE=1 USE_OPENSSL=1 USE_ZLIB=1 PREFIX=/usr/local/haproxy && make install PREFIX=/usr/local/haproxy
RUN cp /usr/local/src/haproxy-1.8.31/examples/haproxy.init  /etc/init.d/haproxy
RUN cp /usr/local/src/haproxy-1.8.31/haproxy /usr/sbin/haproxy
ADD haproxy.service /usr/lib/systemd/system/haproxy.service
ADD haproxy /etc/sysconfig/haproxy
ADD run_haproxy.sh /root/script/run_haproxy.sh
ADD haproxy.cfg /etc/haproxy/haproxy.cfg
RUN chmod a+x /root/script/run_haproxy.shCMD ["/root/script/run_haproxy.sh"]
EXPOSE 80 9999

• 5.1.2 准备服务启动脚本

cat haproxy.service
[Unit]
Description=HAProxy Load Balancer
After=syslog.target network.target
SourcePath=/etc/init.d/haproxy
[Service]
EnvironmentFile=/etc/sysconfig/haproxy
ExecStart=/etc/init.d/haproxy start
ExecStop=/etc/init.d/haproxy stop
ExecReload=/etc/init.d/haproxy reload[Install]
WantedBy=multi-user.target

• 5.1.3 前台启动脚本

cat run_haproxy.sh
#!/bin/bash
/usr/sbin/haproxy -f /etc/haproxy/haproxy.cfg -p /run/haproxy.pid
tail -f /etc/hosts

• 5.1.4 haproxy参数文件

cat haproxy
OPTIONS=""

• 5.1.5 准备压缩包及其他文件

-rw-r--r-- 1 root root     858 1月  19 20:04 Dockerfile
-rw-r--r-- 1 root root     301 1月  19 20:05 haproxy.service
-rw-r--r-- 1 root root      94 1月  19 20:05 run_haproxy.sh
-rw-r--r-- 1 root root      11 1月  19 20:05 haproxy
-rw-r--r-- 1 root root    2523 1月  19 20:06 CentOS-Base.repo
-rw-r--r-- 1 root root     951 1月  19 20:06 epel.repo
-rw-r--r-- 1 root root 2219503 1月  19 20:07 haproxy-1.8.31.tar.gz

• 5.1.6 执行构建镜像

docker build -t 192.168.56.199/centos/centos_haproxy_1.8.31 /opt/dockerfile/web/haproxy/
docker rm -f `docker ps -a -q`
docker rmi 192.168.56.199/centos/centos_haproxy_1.8.31:v1
docker tag 192.168.56.199/centos/centos_haproxy_1.8.31:latest 192.168.56.199/centos/centos_haproxy_1.8.31:v1

5.2 准备nginx镜像

5.3 准备tomcat镜像

5.4 编辑docker compose 文件及环境准备

• 5.4.1 编辑docker compose文件

cat docker-compose.yml
nginx-web1:image: jack/nginx-1.22.1:v1expose:- 80- 443container_name: nginx-web1 volumes:- /data/nginx:/usr/local/nginx/html- /usr/local/nginx/conf/nginx.conf:/usr/local/nginx/conf/nginx.conflinks:- tomcat-web1- tomcat-web2
nginx-web2:  image: jack/nginx-1.22.1:v1expose:- 80- 443container_name: nginx-web2 volumes:- /usr/local/nginx/conf/nginx.conf:/usr/local/nginx/conf/nginx.conflinks:- tomcat-web1- tomcat-web2
tomcat-web1:container_name: tomcat-web1image: tomcat-web:app1user: rootcommand: /apps/tomcat/bin/run_tomcat.shvolumes: - /apps/tomcat/webapps/SalesManager:/apps/tomcat/webapps/SalesManagerexpose:- 8080- 8443
tomcat-web2:container_name: tomcat-web2image: tomcat-web:app1user: rootcommand: /apps/tomcat/bin/run_tomcat.shvolumes: - /apps/tomcat/webapps/SalesManager:/apps/tomcat/webapps/SalesManagerexpose:- 8080- 8443
haproxy-web1:container_name: haproxy-web1image: 192.168.56.199/centos/centos_haproxy_1.8.31:v1command: /root/script/run_haproxy.shvolumes:- /etc/haproxy/haproxy.cfg:/etc/haproxy/haproxy.cfgports:- "9999:9999"- "80:80"links:- nginx-web1- nginx-web2

• 5.4.2 准备nginx静态页面

cat /data/nginx/index.html
Test Nginx Volme

• 5.4.3 准备nginx 配置文件

#本地路径和nginx路径都是/usr/local/nginx/conf/nginx.conf
grep -v "#" /usr/local/nginx/conf/nginx.conf
user nginx;
worker_processes auto;
daemon off;
events {worker_connections  1024;
}
http {include       mime.types;default_type  application/octet-stream;sendfile        on;keepalive_timeout  65;upstream tomcat_webserver{server tomcat-web1:8080;server tomcat-web2:8080;}server {listen       80;server_name  localhost;location / {root   html;index  index.html index.htm;}location /SalesManager {proxy_pass http://tomcat_webserver;proxy_set_header Host $host;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;proxy_set_header X-Real-IP $remote_addr;	}error_page   500 502 503 504  /50x.html;location = /50x.html {root   html;}}
}

• 5.4.4 准备tomcat页面文件

ll /apps/tomcat/webapps/SalesManager
cat /apps/tomcat/webapps/SalesManager/showhost.jsp
<%@page import="java.util.Enumeration"%>
<br />
host:<%try{out.println(""+java.net.InetAddress.getLocalHost().getHostName());}catch(Exception e){}%>
<br />
<%request.getSession().setAttribute("t1","t2");%>
<%Enumeration en = request.getHeaderNames();while(en.hasMoreElements()){String hd = en.nextElement().toString();out.println(hd+":"+request.getHeader(hd));out.println("<br />");}%>

5.5 启动容器

日志：

	[root@gbase8c_private docker-compose]# docker-compose up -d/usr/lib/python2.7/site-packages/paramiko/transport.py:33: CryptographyDeprecationWarning: Python 2 is no longer supported by the Python core team. Support for it is now deprecated in cryptography, and will be removed in the next release.from cryptography.hazmat.backends import default_backendCreating tomcat-web1 ... doneCreating tomcat-web2 ... doneCreating nginx-web2  ... doneCreating nginx-web1  ... doneCreating haproxy-web1 ... done[root@gbase8c_private docker-compose]# docker ps -aCONTAINER ID        IMAGE                                            COMMAND                  CREATED             STATUS              PORTS                                        NAMES679cadcf5244        192.168.56.199/centos/centos_haproxy_1.8.31:v1   "/root/script/run_ha…"   5 seconds ago       Up 4 seconds        0.0.0.0:80->80/tcp, 0.0.0.0:9999->9999/tcp   haproxy-web1d7bd6746c7ee        jack/nginx-1.22.1:v1                             "nginx"                  6 seconds ago       Up 4 seconds        80/tcp, 443/tcp                              nginx-web1fb3df1f58075        jack/nginx-1.22.1:v1                             "nginx"                  6 seconds ago       Up 4 seconds        80/tcp, 443/tcp                              nginx-web2f0d87107431b        tomcat-web:app1                                  "/apps/tomcat/bin/ru…"   7 seconds ago       Up 5 seconds        8009/tcp, 8080/tcp, 8443/tcp                 tomcat-web26424d08ff212        tomcat-web:app1                                  "/apps/tomcat/bin/ru…"   7 seconds ago       Up 5 seconds        8009/tcp, 8080/tcp, 8443/tcp                 tomcat-web1[root@gbase8c_private docker-compose]# docker-compose logs -f/usr/lib/python2.7/site-packages/paramiko/transport.py:33: CryptographyDeprecationWarning: Python 2 is no longer supported by the Python core team. Support for it is now deprecated in cryptography, and will be removed in the next release.from cryptography.hazmat.backends import default_backendAttaching to haproxy-web1, nginx-web1, nginx-web2, tomcat-web2, tomcat-web1tomcat-web1     | Tomcat started.tomcat-web1     | 127.0.0.1	localhosttomcat-web1     | ::1	localhost ip6-localhost ip6-loopbacktomcat-web1     | fe00::0	ip6-localnettomcat-web1     | ff00::0	ip6-mcastprefixtomcat-web1     | ff02::1	ip6-allnodestomcat-web1     | ff02::2	ip6-allrouterstomcat-web1     | 10.10.0.2	6424d08ff212tomcat-web1     | 1.1.1.1 abc.test.comhaproxy-web1    | 127.0.0.1	localhosthaproxy-web1    | ::1	localhost ip6-localhost ip6-loopbackhaproxy-web1    | fe00::0	ip6-localnethaproxy-web1    | ff00::0	ip6-mcastprefixtomcat-web2     | Tomcat started.haproxy-web1    | ff02::1	ip6-allnodeshaproxy-web1    | ff02::2	ip6-allrouterstomcat-web2     | 127.0.0.1	localhosthaproxy-web1    | 10.10.0.5	nginx-web1 d7bd6746c7eehaproxy-web1    | 10.10.0.4	nginx-web2 fb3df1f58075haproxy-web1    | 10.10.0.6	679cadcf5244tomcat-web2     | ::1	localhost ip6-localhost ip6-loopbacktomcat-web2     | fe00::0	ip6-localnettomcat-web2     | ff00::0	ip6-mcastprefixtomcat-web2     | ff02::1	ip6-allnodestomcat-web2     | ff02::2	ip6-allrouterstomcat-web2     | 10.10.0.3	f0d87107431btomcat-web2     | 1.1.1.1 abc.test.com