- 1. OCI Compute\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306b\u3001Docker\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b<\/ul>\n<\/li>\n<\/ul>\n
2. Nginx Docker\u306e\u4f7f\u7528<\/p>\n
2-1. HTTP\u7528
\n2-2. HTTPS\u7528<\/p>\n
3. \u5b9f\u884c\u4e2d\u306e\u30b3\u30f3\u30c6\u30ca\u30fc\u3088\u308aDocker\u30a4\u30e1\u30fc\u30b8\u3092\u4f5c\u6210
\n4. Docker\u30a4\u30e1\u30fc\u30b8\u3092OCI Registry\u306b\u30d7\u30c3\u30b7\u30e5<\/p>\n
\u4ed8\u9332<\/p>\n
Dockerfile (HTTP\u7528)<\/p>\n
![\"image.png\"](\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d139137434c4406bf8f50\/3-0.png\" "\\"\\"")
<\/div>\n1. \u5b89\u88c5 Docker \u3002<\/h1>\n
\u767b\u5f55\u5230Compute\u5b9e\u4f8b\u540e\uff0c\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u5b89\u88c5Docker\u3002<\/p>\n
[<\/span>opc@linux7-9 ~]$ <\/span>sudo <\/span>yum -y<\/span> update\r\n<\u7701\u7565>\r\n[<\/span>opc@linux7-9 ~]$ <\/span>sudo <\/span>yum install<\/span> -y<\/span> docker-engine\r\n<\u7701\u7565>\r\n<\/code><\/pre>\n\u5982\u679c\u8981\u5728Oracle Linux 8\u30019\u4e0a\u8fdb\u884c\u5b89\u88c5\uff0c\u547d\u4ee4\u4e0eOracle Linux 7\u4e0d\u540c\u3002<\/p>\n
sudo <\/span>dnf install<\/span> -y<\/span> dnf-utils zip unzip\r\nsudo <\/span>dnf config-manager --add-repo<\/span>=<\/span>https:\/\/download.docker.com\/linux\/centos\/docker-ce.repo\r\nsudo <\/span>dnf install<\/span> -y<\/span> docker-ce --nobest<\/span>\r\n<\/code><\/pre>\ndocker\u542f\u52a8<\/p>\n
[<\/span>opc@linux7-9 ~]$ <\/span>sudo <\/span>systemctl start docker\r\n[<\/span>opc@linux7-9 ~]$ <\/span>sudo <\/span>systemctl enable <\/span>docker\r\nCreated symlink from \/etc\/systemd\/system\/multi-user.target.wants\/docker.service to \/usr\/lib\/systemd\/system\/docker.service.\r\n<\/code><\/pre>\n\u67e5\u770bDocker\u4fe1\u606f
\nsudo docker info
\nsudo docker version<\/p>\n
2. \u4f7f\u7528Nginx Docker<\/h1>\n\u4e2d\u6587\u8fdb\u884c\u5904\u7406\u901a\u5e38\u4e0d\u662f\u4e00\u4e2a\u597d\u7684\u9009\u62e9\uff0c\u56e0\u4e3a\u5f88\u591a\u82f1\u6587\u672f\u8bed\u5728\u4e2d\u6587\u4e2d\u4f1a\u6709\u4e0d\u540c\u7684\u8868\u8fbe\u65b9\u5f0f\u3002\u4e00\u79cd\u53ef\u80fd\u7684\u7ffb\u8bd1\u662f\uff1a”HTTP\u534f\u8bae\u4f7f\u7528”<\/h2>\n
\u53ea\u9700\u8981\u4e00\u4e2a\u9009\u9879\uff0c\u5c06\u4ee5\u4e0b\u5185\u5bb9\u7528\u4e2d\u6587\u8fdb\u884c\u672c\u5730\u5316\u6539\u5199\uff1a
\n\u4e0b\u8f7d Nginx \u7684\u955c\u50cf\u6587\u4ef6\u3002<\/p>\n
\u547d\u4ee4\u793a\u4f8b\uff1adocker\u62c9\u53d6nginx<\/p>\n
[<\/span>opc@linux7-9 ~]$ <\/span>sudo <\/span>docker pull nginx\r\nUsing default tag: latest\r\nTrying to pull repository docker.io\/library\/nginx ...\r\nlatest: Pulling from docker.io\/library\/nginx\r\n75646c2fb410: Pull complete\r\n<\/span>6128033c842f: Pull complete\r\n<\/span>71a81b5270eb: Pull complete\r\n<\/span>b5fc821c48a1: Pull complete\r\n<\/span>da3f514a6428: Pull complete\r\n<\/span>3be359fed358: Pull complete\r\n<\/span>Digest: sha256:bae781e7f518e0fb02245140c97e6ddc9f5fcf6aecc043dd9d17e33aec81c832\r\nStatus: Downloaded newer image for <\/span>nginx:latest\r\nnginx:latest\r\n[<\/span>opc@linux7-9 ~]$ <\/span>sudo <\/span>docker images\r\nREPOSITORY TAG IMAGE ID CREATED SIZE\r\nnginx latest 7ce4f91ef623 2 days ago 133MB\r\n[<\/span>opc@linux7-9 ~]$<\/span>\r\n<\/code><\/pre>\nNginx\u7684\u542f\u52a8\uff08HTTP\uff09<\/p>\n
\u547d\u4ee4\u793a\u4f8b\uff1adocker\u8fd0\u884c –rm -d -p 8080:80 –name web nginx<\/p>\n
\u53c2\u6570\u542b\u4e49\uff1a
\n–rm\uff1a\u5728\u7ed3\u675f\u65f6\u81ea\u52a8\u5220\u9664\u5bb9\u5668
\n-d\uff1a\u540e\u53f0\u6267\u884c
\n-p\uff1a\u5c06\u5bb9\u5668\u7684\u7aef\u53e3\u516c\u5f00\u7ed9\u4e3b\u673a\uff08\u5916\u90e8\u4f7f\u75288080\u7aef\u53e3\uff09
\n–name\uff1a\u7ed9\u5bb9\u5668\u5206\u914d\u4e00\u4e2a\u540d\u79f0<\/p>\n
[<\/span>opc@linux7-9 ~]$ <\/span>sudo <\/span>docker run --rm<\/span> -d<\/span> -p<\/span> 8080:80 --name<\/span> web nginx\r\n90c2d54d7522af4e8be268640eccd1da65fa1be93210327c885b02bad9c226bc\r\n[<\/span>opc@linux7-9 ~]$ <\/span>sudo <\/span>docker ps -a<\/span>\r\nCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES\r\n90c2d54d7522 nginx \"\/docker-entrypoint.\u2026\"<\/span> 4 seconds ago Up 3 seconds 0.0.0.0:8080->80\/tcp web\r\n[<\/span>opc@linux7-9 ~]$<\/span>\r\n<\/code><\/pre>\n![\"undefined\"](\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d139137434c4406bf8f50\/21-0.png\" "\\"\\"")
<\/div>\n\u505c\u6b62Nginx
\n\u547d\u4ee4\u793a\u4f8b\uff1adocker stop <docker\u540d\u79f0>\uff08\u505c\u6b62\u540e\u5c06\u5220\u9664\u5bb9\u5668\uff09<\/p>\n
[<\/span>opc@linux7-9 ~]$ <\/span>sudo <\/span>docker stop web\r\nweb\r\n[<\/span>opc@linux7-9 ~]$ <\/span>sudo <\/span>docker ps -a<\/span>\r\nCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES\r\n[<\/span>opc@linux7-9 ~]$<\/span>\r\n<\/code><\/pre>\n\u521b\u5efa\u6f14\u793a\u9875\u9762<\/p>\n
[<\/span>opc@linux7-9 ~]$ <\/span>pwd<\/span>\r\n\/home\/opc\r\n[<\/span>opc@linux7-9 ~]$ <\/span>mkdir<\/span> -p<\/span> nginx-demo\/html\r\n[<\/span>opc@linux7-9 ~]$ <\/span>echo<\/span> \"<h1>Hello Nginx<\/h1>\"<\/span> ><\/span> nginx-demo\/html\/index.html\r\n[<\/span>opc@linux7-9 ~]$<\/span>\r\n<\/code><\/pre>\n\u5728\u542f\u52a8Nginx\u65f6\uff0c\u4f7f\u7528”-v”\u53c2\u6570\uff0c\u6302\u8f7d\u672c\u5730\u7684\u6f14\u793a\u9875\u9762\u3002<\/p>\n
[<\/span>opc@linux7-9 ~]$ <\/span>sudo <\/span>docker run --rm<\/span> -d<\/span> -p<\/span> 8080:80 -v<\/span> \/home\/opc\/nginx-demo\/html:\/usr\/share\/nginx\/html --name<\/span> web nginx\r\n416decd04916337009b030dbaaf67c749a86a4c5dafa62003901774abc2a2c1d\r\n[<\/span>opc@linux7-9 ~]$ <\/span>sudo <\/span>docker ps -a<\/span>\r\nCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES\r\n416decd04916 nginx \"\/docker-entrypoint.\u2026\"<\/span> 10 seconds ago Up 8 seconds 0.0.0.0:8080->80\/tcp web\r\n[<\/span>opc@linux7-9 ~]$<\/span>\r\n<\/code><\/pre>\n![\"undefined\"](\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d139137434c4406bf8f50\/28-0.png\" "\\"\\"")
<\/div>\n\u7528curl\u547d\u4ee4\u8fdb\u884c\u786e\u8ba4<\/p>\n
[<\/span>opc@linux7-9 ~]$ <\/span>curl localhost:8080\r\n<h1>Hello Nginx<\/h1>\r\n[<\/span>opc@linux7-9 ~]$<\/span>\r\n<\/code><\/pre>\n2-2. HTTPS\u7684\u4f7f\u7528<\/h2>\n
\u4ece\u5bb9\u5668\u4e2d\u590d\u5236Nginx\u7684\u914d\u7f6e\u3002<\/p>\n
[<\/span>opc@linux7-9 ~]$ <\/span>pwd<\/span>\r\n\/home\/opc\r\n[<\/span>opc@linux7-9 ~]$ <\/span>sudo <\/span>docker cp <\/span>web:\/etc\/nginx .<\/span>\r\n[<\/span>opc@linux7-9 ~]$ <\/span>ll\r\ntotal 4\r\ndrwxr-xr-x. 3 root root 4096 Mar 31 05:24 nginx\r\ndrwxrwxr-x. 3 opc opc 18 Apr 7 08:37 nginx-demo\r\n[<\/span>opc@linux7-9 ~]$<\/span>\r\n<\/code><\/pre>\n\u590d\u5236\u540e\uff0c\u505c\u6b62Nginx\u3002<\/p>\n
[<\/span>opc@linux7-9 ~]$ <\/span>sudo <\/span>docker stop web\r\nweb\r\n[<\/span>opc@linux7-9 ~]$<\/span>\r\n<\/code><\/pre>\n\u4e3a\u4e86\u4f7f\u7528HTTPS\uff0c\u6211\u4eec\u5c06\u4f7f\u7528OpenSSL\u521b\u5efa\u8bc1\u4e66\u3002
\n-keyout: \u79c1\u94a5\u6587\u4ef6
\n-out: \u8bc1\u4e66\u6587\u4ef6
\n\u6267\u884c\u4ee5\u4e0bOpenSSL\u547d\u4ee4\u540e\uff0c\u5c06\u521b\u5efanginx.key\u548cnginx.crt\u6587\u4ef6\u3002<\/p>\n
[<\/span>opc@linux7-9 nginx]$ <\/span>pwd<\/span>\r\n\/home\/opc\/nginx\r\n[<\/span>opc@linux7-9 nginx]$ <\/span>sudo mkdir <\/span>cert\r\n[<\/span>opc@linux7-9 nginx]$ <\/span>cd <\/span>cert\r\n[<\/span>opc@linux7-9 cert]$ <\/span>sudo <\/span>openssl req -x509<\/span> -nodes<\/span> -newkey<\/span> rsa:2048 -keyout<\/span> nginx.key -out<\/span> nginx.crt\r\nGenerating a 2048 bit RSA private key\r\n.........................................................................+++\r\n....+++\r\nwriting new private key to 'nginx.key'<\/span>\r\n-----<\/span>\r\nYou are about to be asked to enter information that will be incorporated\r\ninto your certificate request.\r\nWhat you are about to enter is what is called a Distinguished Name or a DN.\r\nThere are quite a few fields but you can leave some blank\r\nFor some fields there will be a default value,\r\nIf you enter '.'<\/span>, the field will be left blank.\r\n-----<\/span>\r\nCountry Name (<\/span>2 letter code)<\/span> [<\/span>XX]:\r\nState or Province Name (<\/span>full name)<\/span> []<\/span>:\r\nLocality Name (<\/span>eg, city)<\/span> [<\/span>Default City]:\r\nOrganization Name (<\/span>eg, company)<\/span> [<\/span>Default Company Ltd]:\r\nOrganizational Unit Name (<\/span>eg, section)<\/span> []<\/span>:\r\nCommon Name (<\/span>eg, your name or your server's hostname) []:\r\nEmail Address []:\r\n[opc@linux7-9 cert]$ pwd\r\n\/home\/opc\/nginx\/cert\r\n[opc@linux7-9 cert]$ ll\r\ntotal 8\r\n-rw-r--r--. 1 root root 1281 Apr 7 09:37 nginx.crt\r\n-rw-r--r--. 1 root root 1704 Apr 7 09:37 nginx.key\r\n[opc@linux7-9 cert]$\r\n<\/span><\/code><\/pre>\n\u7f16\u8f91\u8bbe\u7f6e\u6587\u4ef6\uff08nginx\/conf.d\/default.conf\uff09\u3002<\/p>\n
[<\/span>opc@linux7-9 conf.d]$ <\/span>pwd<\/span>\r\n\/home\/opc\/nginx\/conf.d\r\n[<\/span>opc@linux7-9 conf.d]$ <\/span>sudo <\/span>vi default.conf\r\n<\/code><\/pre>\n\u6211\u5c06\u628a\u4ee5\u4e0b\u5185\u5bb9\u6dfb\u52a0\u5230\u6700\u540e\u3002<\/p>\n
server {<\/span>\r\n listen 443 ssl;<\/span>\r\n server_name localhost;<\/span>\r\n ssl on;<\/span>\r\n ssl_certificate \/etc\/nginx\/cert\/nginx.crt;<\/span>\r\n ssl_certificate_key \/etc\/nginx\/cert\/nginx.key;<\/span>\r\n ssl_session_timeout 3m;<\/span>\r\n ssl_ciphers HIGH:!aNULL:!MD5;<\/span>\r\n ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;<\/span>\r\n ssl_prefer_server_ciphers on;<\/span>\r\n location \/ {<\/span>\r\n root \/usr\/share\/nginx\/html;<\/span>\r\n index index.html index.htm;<\/span>\r\n }<\/span>\r\n}<\/span>\r\n<\/code><\/pre>\n\u4f7f\u7528\u65b0\u5bb9\u5668\u91cd\u65b0\u542f\u52a8Nginx\u3002
\n\u6dfb\u52a0\u53c2\u6570\u7684\u542b\u4e49\uff1a
\n\u516c\u5f00HTTPS\u7aef\u53e3\uff088081\u2192443\uff09\u3002
\n\u6302\u8f7d\u672c\u5730\u6587\u4ef6\u3002<\/p>\n
[<\/span>opc@linux7-9 conf.d]$ <\/span>sudo <\/span>docker run --rm<\/span> -d<\/span> -p<\/span> 8080:80 -p<\/span> 8081:443 \\<\/span>\r\n\\><\/span> -v<\/span> \/home\/opc\/nginx-demo\/html:\/usr\/share\/nginx\/html -v<\/span> \/home\/opc\/nginx:\/etc\/nginx \\<\/span>\r\n\\><\/span> --name<\/span> web nginx\r\ne7024bb33c29f1fd99f77586b443d4597eb4784d569f43b5cc83a7fcb60d41da\r\n[<\/span>opc@linux7-9 conf.d]$ <\/span>sudo <\/span>docker ps -a<\/span>\r\nCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES\r\ne7024bb33c29 nginx \"\/docker-entrypoint.\u2026\"<\/span> 12 seconds ago Up 11 seconds 0.0.0.0:8080->80\/tcp, 0.0.0.0:8081->443\/tcp web\r\n[<\/span>opc@linux7-9 conf.d]$<\/span>\r\n<\/code><\/pre>\n![\"undefined\"](\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d139137434c4406bf8f50\/44-1.png\" "\\"\\"")
<\/div>\n\u5728\u4f7f\u7528curl\u547d\u4ee4\u8fdb\u884c\u786e\u8ba4<\/p>\n
[<\/span>opc@linux7-9 ~]$ <\/span>curl https:\/\/localhost:8081 -k<\/span>\r\n<h1>Hello Nginx<\/h1>\r\n[<\/span>opc@linux7-9 ~]$<\/span>\r\n<\/code><\/pre>\n
\n3. \u521b\u5efaDocker\u955c\u50cf\u4e8e\u8fd0\u884c\u4e2d\u7684\u5bb9\u5668\u3002<\/h1>\n
\u505c\u6b62\u4e0a\u8ff0\u793a\u4f8b\u4e2d\u4f7f\u7528\u7684\u5bb9\u5668\uff0c\u5e76\u521b\u5efa\u4e00\u4e2a\u65b0\u7684\u5bb9\u5668\u3002<\/p>\n
[<\/span>opc@linux7-9 ~]$ <\/span>sudo <\/span>docker stop web\r\nweb\r\n[<\/span>opc@linux7-9 ~]$ <\/span>sudo <\/span>docker ps -a<\/span>\r\nCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES\r\n[<\/span>opc@linux7-9 ~]$<\/span>\r\n<\/code><\/pre>\n\u5728\u521b\u5efa\u65b0\u7684\u5bb9\u5668\u65f6\uff0c\u8fd9\u6b21\u4e0d\u4f7f\u7528”-v”\uff08\u6302\u8f7d\uff09\u9009\u9879\u3002\uff08HTTP\/HTTPS\u7aef\u53e3\u7684\u516c\u5f00\u65b9\u5f0f\u4e0e\u4e0a\u8ff0\u76f8\u540c\u3002\uff09<\/p>\n
[<\/span>opc@linux7-9 ~]$ <\/span>sudo <\/span>docker run