Docker Componse 项目实践

一、搭建私有仓库

• 支持 HTTPS
• 支持账号登录

首先安装Docker （CentOS7)

# 卸载旧版本
$ yum remove docker \
                  docker-client \
                  docker-client-latest \
                  docker-common \
                  docker-latest \
                  docker-latest-logrotate \
                  docker-logrotate \
                  docker-engine

$ yum install -y yum-utils \
  device-mapper-persistent-data \
  lvm2
$ yum-config-manager \
    --add-repo \
    https://download.docker.com/linux/centos/docker-ce.repo
$ yum install docker-ce docker-ce-cli containerd.io

# 启动服务
$ systemctl start docker

# 设置开机自启动
$ systemctl enable docker

安装 docker-compose

$ curl -L "https://github.com/docker/compose/releases/download/1.25.5/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
$ chmod +x /usr/local/bin/docker-compose
$ ln -s /usr/local/bin/docker-compose /usr/bin/docker-compose
$ docker-compose --version

1. 创建映射目录

$ mkdir -p /docker/registry
$ cd /docker/registry

2. 拷入域名证书

可以去申请免费HTTPS证书 Let's Encrypt

$ mkdir /docker/registry/certs
$ cp mydomain.key mydomain.pem /docker/registry/certs

3. 创建仓库账号

修改指令中的用户名testuser和密码testpassword

$ mkdir /docker/registry/auth
$ docker run \
  --entrypoint htpasswd \
  registry:2 -Bbn testuser testpassword > /docker/registry/auth/htpasswd

4. 启动容器

• 配置 docker-compose.yml

registry:
  restart: always
  image: registry:2
  ports:
    - 5000:5000
  environment:
    REGISTRY_HTTP_TLS_CERTIFICATE: /certs/mydomain.pem
    REGISTRY_HTTP_TLS_KEY: /certs/mydomain.key
    REGISTRY_AUTH: htpasswd
    REGISTRY_AUTH_HTPASSWD_PATH: /auth/htpasswd
    REGISTRY_AUTH_HTPASSWD_REALM: Registry Realm
  volumes:
    - /docker/registry/data:/var/lib/registry
    - /docker/registry/certs:/certs
    - /docker/registry/auth:/auth

• 启动

$ docker-compose up -d

---

二、本地推送版本

1. 编译译成 Linux 可执行文件

$ CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo .

2. 配置 Dockerfile

FROM scratch

ENV APPHOME /app
WORKDIR $APPHOME
COPY demo-api data.json upload.json $APPHOME/
EXPOSE 7770

CMD ["./demo-api", "/data/config.json"]

3. 编译成镜像

$ docker build -t demo-api .

4. 推送镜像到远程

$ docker login mydomain.com:5000
$ docker tag demo-api mydomain.com:5000/demo-api
$ docker push mydomain.com:5000/demo-api

5. 打包前端
   前端是 Vue cli 3 创建的的工程，这里用 nginx 打包成服务镜像

• 创建 nginx.conf 文件

server {
    listen       80;
    server_name  _;

    root /usr/share/nginx/html;
    location / {
        try_files $uri $uri/ /index.html;
    }

    location /api/ {
        rewrite ^/api/(.*)$ /$1 break;
        proxy_pass   http://demo-api:7770;
    }
}

• 创建 Dockerfile 文件 (使用了精简的*-alpine版本)

FROM nginx:1.15.9-alpine

COPY dist /usr/share/nginx/html
COPY nginx.conf /etc/nginx/conf.d/default.conf
EXPOSE 80

CMD ["nginx", "-g", "daemon off;"]

• 编译过程同demo-api

---

三、远程部署版本

1. 拉取镜像

$ docker login mydomain.com:5000
$ docker pull mydomain.com:5000/demo-api
$ docker pull mydomain.com:5000/demo-html

2. 创建数据挂载目录

$ mkdir -p /docker/demo
$ cd /docker/demo

3. 创建项目配置文件

$ vim demo-api/config.json

4. 配置 docker-compose.yml

• redis容器务必配置--appendonly yes否则数据不会落到挂载目录上，重建容器数据会丢失

version: "3"
services:
  demo-html:
    image: mydomain.com:5000/demo-html
    ports:
      - "8070:80"
    volumes:
      - ./demo-html/nginx.conf:/etc/nginx/conf.d/default.conf
    environment:
      - VIRTUAL_HOST=ticket.mydomain.com
    networks:
      - demo

  demo-api:
    image: mydomain.com:5000/demo-api
    restart: always
    ports:
      - "7770:7770"
    volumes:
      - ./demo-api:/data
    environment:
      - VIRTUAL_HOST=ticket-api.mydomain.com
    depends_on:
      - mariadb
      - redis
    networks:
      - demo
    command: ./demo-api /data/config.json

  mariadb:
    image: mariadb:10.3
    restart: always
    volumes:
      - ./mysql:/var/lib/mysql
    environment:
      MYSQL_ROOT_PASSWORD: root
      MYSQL_DATABASE: demo
      MYSQL_USER: demo
      MYSQL_PASSWORD: demo
    networks:
      demo:
        aliases:
          - mariadb
    command: mysqld --character-set-server=utf8mb4 --collation-server=utf8mb4_bin

  redis:
    image: redis:5.0
    restart: always
    volumes:
      - ./redis:/data
    networks:
      demo:
        aliases:
          - redis
    command: redis-server --appendonly yes --requirepass release

networks: demo:

注意：docker容器默认是UTC时间，如果需要指定为与主机一致，可以通过额外挂载时间配置文件来实现

volumes:
      - /etc/localtime:/etc/localtime:ro
      - /etc/timezone:/etc/timezone:ro

5. 启动组合

$ docker-compose up -d

6. 宿主机器配置 Nginx 域名反向代理

# 已省略SSL配置部分

# 前端HTML
server {
    listen       443 ssl;
    server_name  ticket.mydomain.com;

    location / {
        proxy_pass http://127.0.0.1:8070;
    }
}

# 后端API
server {
    listen       443 ssl;
    server_name  ticket-api.mydomain.com;

    location / {
        proxy_pass   http://127.0.0.1:7770;
    }

    allow all;
}

---

四、后续更新

1. 本地打新版本

$ CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo .
$ docker build -t demo-api .
$ docker tag demo-api mydomain.com:5000/demo-api
$ docker push mydomain.com:5000/demo-api

2. 远程拉取并更新（差量）

$ docker login mydomain.com:5000
$ docker-compose pull
$ docker-compose up -d

---

3. 项目中创建 Makefile，集成命令简化操作

all: image tag

# 生成镜像
image:
    # 1. 编译成Linux可执行文件
    CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo .

    # 2. 删除Docker悬挂的镜像
    docker image prune -f

    # 3. 编译Docker镜像
    docker build -t demo-api .

    # 4. 删除可执行文件
    rm demo-api

# 发版并推送
tag:
    # 1. 登录到私有仓库
    docker login -u=ma --password-stdin < ./Password mydomain.com:5000

    # 2. 发版
    docker tag demo-api:latest mydomain.com:5000/demo-api

    # 3. 推送到远程仓库
    docker push mydomain.com:5000/demo-api:latest

$ make image
$ make tag
$ make