一个全栈攻城狮的纯技术干货分享 ~
搜索到
5
篇与
的结果
-
实现 docker 跨主机通信（Swarm版） 本文将在云服务器之间实现基于Swarm集群的overlay网络，以达到跨主机通信的目的。docker 的安装教程非常之多，这里不再赘述。环境配置节点名节点IP节点服务dnode010.0.0.11安装 Docker，并初始化Swarm集群dnode110.0.0.12安装 Dockerdnode210.0.0.13安装 Docker配置三台机器，请注意修改hostname为不同的值，防火墙放行如下端口：TCP port 2376 for secure Docker client communication. This port is required for Docker Machine to work. Docker Machine is used to orchestrate Docker hosts.TCP port 2377 is used for communication between the nodes of a Docker Swarm or cluster. It only needs to be opened on manager nodes.UDP port 4789 for overlay network traffic (container ingress networking).TCP and UDP port 7946 for communication among nodes (container network discovery).初始化Swarm集群服务docker swarm init如果没有记住加入集群的token，以下可以重新获取docker swarm join-token worker其他节点分别加入Swarm集群docker swarm join --token SWMTKN-1-tokenxxxxxxx 10.0.0.11:2377在节点上创建网络docker network create --driver overlay --subnet=10.0.2.0/24 --gateway=10.0.2.1 --attachable ovnet分别在不同的节点上创建可以互通的容器docker run -it --rm --network ovnet --ip 10.0.2.5 alpine docker run -it --rm --network ovnet --ip 10.0.2.6 alpine docker run -it --rm --network ovnet --ip 10.0.2.7 alpine -
实现 docker 跨主机通信（Consul版） 本文将在云服务器之间实现基于Consul的overlay网络，以达到跨主机通信的目的。docker 和 consul 的安装教程非常之多，这里不再赘述。环境配置节点名节点IP节点服务consul10.0.0.11安装 Consuldnode110.0.0.12安装 Dockerdnode210.0.0.13安装 Docker配置三台机器，请注意修改hostname为不同的值，防火墙放行如下端口：2376478979468300-830285008600启动一个单节点的Consul服务consul agent -ui -server -bootstrap -data-dir /var/lib/consul -bind 10.0.0.11 -client 10.0.0.11在其他服务器分别启动Docker服务docker daemon -D -g /var/lib/docker -H unix:// -H tcp://0.0.0.0:2376 --cluster-advertise=eth0:2376 --cluster-store=consul://10.0.0.11:8500--cluster-store 指定了consul服务发现地址--cluster-advertise 指定了本机服务注册地址，其中eth0是自己网卡的名称，也可以用本机内网地址10.0.0.x代替等待自动注册服务可以使用浏览器打开http://10.0.0.11:8500查看在节点上创建网络docker network create --driver overlay \ --subnet=10.0.2.0/24 --gateway=10.0.2.1 ovnet为方便部署，也可以将CLI参数写入配置文件cat <<EOF >/etc/consul/server.json { "data_dir": "/var/consul", "server": true, "bootstrap": true, "bind_addr": "{{ GetInterfaceIP \"eth0\" }}", "client_addr": "0.0.0.0", "ui_config": { "enabled": true } } EOF if [ -f /etc/conf.d/docker ]; then opts="--cluster-advertise=eth0:2376 --cluster-store=consul://10.0.0.11:8500" sed -i "s#OPTS=\"\"#OPTS=\"$opts\"#" /etc/conf.d/docker fi完整配置文件请参阅： https://docs.docker.com/engine/reference/commandline/dockerd/#daemon-configuration-file分别在不同的节点上创建可互访的容器docker run -it --rm --network ovnet --ip 10.0.2.5 alpine docker run -it --rm --network ovnet --ip 10.0.2.6 alpine docker run -it --rm --network ovnet --ip 10.0.2.7 alpine
-
Gitlab 保存设置项目时提示500错误 将gitlab转为docker后，发现管理后台保存配置时提示500错误，查看日志/var/log/gitlab/gitlab-rails/production.log对应的错误信息为OpenSSL::Cipher::CipherError查阅官方资料，得知是没有导入原来的加密信息/etc/gitlab/gitlab-secrets.json导致，重置下即可。进入控制台docker exec -it docker bash输入gitlab-rails console，等待进入rails控制台输入ApplicationSetting.current.reset_runners_registration_token!，显示结果为true再次尝试保存操作，已正常如果项目设置也不正常，需进入DB控制台清理更多的Token设置，请参阅官方文献：https://docs.gitlab.com/ee/raketasks/backup_restore.html#when-the-secrets-file-is-lost
-
快速创建 TLS 证书并部署到 Docker 服务 将下方代码保存为certbot.sh，修改头部变量后，上传到装有openssl组件的linux服务器上运行即可。#!/bin/sh # export PASSWORD="密码" export COUNTRY="CN" export STATE="省" export CITY="市" export ORGANIZATION="公司名称" export ORGANIZATIONAL_UNIT="Dev" export COMMON_NAME="域名" export EMAIL="电子邮件地址" export HOST_NAME="$COMMON_NAME" export IP=`ping $HOST_NAME -c 1 | sed '1{s/[^(]*(//;s/).*//;q}'` export DIR="cert-$HOST_NAME" # Workspace [ -d $DIR ] || mkdir -p $DIR echo "PASSWORD: $PASSWORD" > $DIR/!nfo.txt echo "HOST_NAME: $HOST_NAME" >> $DIR/!nfo.txt echo "HOST_IP: $IP" >> $DIR/!nfo.txt # Generate CA openssl genrsa -aes256 -passout "pass:$PASSWORD" -out "$DIR/ca-key.pem" 4096 openssl req -new -x509 -days 3650 -key "$DIR/ca-key.pem" -sha256 -out "$DIR/ca.pem" -passin "pass:$PASSWORD" -subj "/C=$COUNTRY/ST=$STATE/L=$CITY/O=$ORGANIZATION/OU=$ORGANIZATIONAL_UNIT/CN=$COMMON_NAME/emailAddress=$EMAIL" # Generate Server Certs openssl genrsa -out "$DIR/server-key.pem" 4096 openssl req -subj "/CN=$HOST_NAME" -sha256 -new -key "$DIR/server-key.pem" -out $DIR/server.csr echo "subjectAltName = DNS:$HOST_NAME,IP:$IP,IP:127.0.0.1" > $DIR/server.cnf echo "extendedKeyUsage = serverAuth" >> $DIR/server.cnf openssl x509 -req -days 3650 -sha256 -in $DIR/server.csr -passin "pass:$PASSWORD" -CA "$DIR/ca.pem" -CAkey "$DIR/ca-key.pem" -CAcreateserial -out "$DIR/server-cert.pem" -extfile $DIR/server.cnf # Generate Client Certs openssl genrsa -out "$DIR/client-key.pem" 4096 openssl req -subj '/CN=client' -new -key "$DIR/client-key.pem" -out $DIR/client.csr echo "extendedKeyUsage = clientAuth" > $DIR/client.cnf openssl x509 -req -days 3650 -sha256 -in $DIR/client.csr -passin "pass:$PASSWORD" -CA "$DIR/ca.pem" -CAkey "$DIR/ca-key.pem" -CAcreateserial -out "$DIR/client-cert.pem" -extfile $DIR/client.cnf # Modify Certs Permission chmod 0400 $DIR/*-key.pem chmod 0444 $DIR/ca.pem $DIR/*-cert.pem # Remove Temporary Files rm -f $DIR/*.csr $DIR/*.cnf如果需要部署到Docker服务，请继续# Install To Docker Daemon mkdir -p /etc/docker/certs.d cp $DIR/ca.pem /etc/docker/certs.d/ cp $DIR/server-*.pem /etc/docker/certs.d/ cat <<EOF >/etc/docker/daemon.json { "tlsverify": true, "tlscacert": "/etc/docker/certs.d/ca.pem", "tlscert": "/etc/docker/certs.d/server-cert.pem", "tlskey": "/etc/docker/certs.d/server-key.pem", "hosts": ["tcp://0.0.0.0:2376", "unix:///var/run/docker.sock"] } EOF # Modify Systemd Service if [ -f /lib/systemd/system/docker.service ]; then sed -i 's#\["tcp:#\["fd://", "tcp:#' /etc/docker/daemon.json sed -i 's# -H fd://##' /lib/systemd/system/docker.service systemctl daemon-reload && systemctl restart docker fi特别注意在systemd系统上-H已设置，因此无法使用hosts键来添加侦听地址，请参阅 https://docs.docker.com/install/linux/linux-postinstall/#configuring-remote-access-with-systemd-unit-file
-
Ubuntu 安装 Docker/Redmine/GitLab 教程 兴趣所致，使用Docker部署下Redmine和GitLab，体验下Docker的魅力。一、安装Docker二、安装Redmie地址 http://192.168.1.15账号 admin密码 admin三、安装Gitlab地址 http://192.168.1.16账号 root密码 5iveL!fe集成安装脚本PS1：安全起见，以下绑定的地址均为本地IP，无法对外提供服务，如需部署到服务器请酌情修改。PS2：也可以安装 rinetd 软件包，实现任意端口转发。请下载下面的集成安装脚本，修改password和email参数后，一键安装Redmine/GitLab吧~#!/bin/bash # # Author rehiy <[email protected]> # Website http://www.rehiy.com/post/1811 # Refs https://github.com/sameersbn/docker-gitlab # Refs https://github.com/sameersbn/docker-redmine # if [ ! `which docker` ]; then wget -qO- https://get.docker.com/ | sh fi docker network create --subnet=192.168.1.0/24 docker1 docker pull sameersbn/redis:latest docker pull sameersbn/mysql:latest docker pull sameersbn/gitlab:latest docker pull sameersbn/redmine:latest docker run --name app-redis -d \ --net docker1 --ip 192.168.1.11 \ --volume /srv/app-redis:/var/lib/redis \ sameersbn/redis:latest docker run --name app-mysql -d \ --net docker1 --ip 192.168.1.12 \ --env 'MYSQL_CHARSET=utf8' \ --env 'MYSQL_COLLATION=utf8_general_ci' \ --env 'DB_REMOTE_ROOT_NAME=root' \ --env 'DB_REMOTE_ROOT_PASS=password' \ --volume /srv/app-mysql:/var/lib/mysql \ sameersbn/mysql:latest MYSQL_CHARSET="DEFAULT CHARACTER SET utf8 COLLATE utf8_unicode_ci" cat > /opt/app-mysql/init.sql <<EOF CREATE USER 'gitlab'@'%.%.%.%' IDENTIFIED BY 'password'; CREATE DATABASE IF NOT EXISTS gitlabhq_production ${MYSQL_CHARSET}; GRANT ALL PRIVILEGES ON \`gitlabhq_production\`.* TO 'gitlab'@'%.%.%.%'; CREATE USER 'redmine'@'%.%.%.%' IDENTIFIED BY 'password'; CREATE DATABASE IF NOT EXISTS redmine_production ${MYSQL_CHARSET}; GRANT ALL PRIVILEGES ON \`redmine_production\`.* TO 'redmine'@'%.%.%.%'; EOF sleep 30 docker exec -it app-mysql mysql "-e source /var/lib/mysql/init.sql" rm -rf /opt/app-mysql/init.sql docker run --name app-redmine -d \ --net docker1 --ip 192.168.1.15 \ --env 'REDMINE_PORT=80' \ --env 'REDMINE_RELATIVE_URL_ROOT=/redmine' \ --env 'SMTP_DOMAIN=rehiy.com' \ --env 'SMTP_HOST=smtp.exmail.qq.com' \ --env 'SMTP_PORT=587' \ --env '[email protected]' \ --env 'SMTP_PASS=YOURPASS' \ --env='DB_ADAPTER=mysql2' \ --env 'DB_HOST=192.168.1.12' \ --env='DB_NAME=redmine_production' \ --env 'DB_USER=redmine' \ --env 'DB_PASS=password' \ --volume /opt/app-redmine:/home/redmine/data \ sameersbn/redmine:latest docker run --name app-gitlab -d \ --net docker1 --ip 192.168.1.16 \ --env 'GITLAB_SSH_PORT=22' \ --env 'GITLAB_PORT=80' \ --env 'GITLAB_HOST=test.rehiy.com' \ --env 'GITLAB_RELATIVE_URL_ROOT=/gitlab' \ --env '[email protected]' \ --env 'GITLAB_EMAIL_DISPLAY_NAME=Vmlu Team' \ --env 'GITLAB_SECRETS_DB_KEY_BASE=your-db-key-base' \ --env 'GITLAB_SECRETS_SECRET_KEY_BASE=your-secert-key-base' \ --env 'GITLAB_SECRETS_OTP_KEY_BASE=your-opt-key-base' \ --env 'GITLAB_USERNAME_CHANGE=false' \ --env 'UNICORN_TIMEOUT=120' \ --env 'SMTP_DOMAIN=rehiy.com' \ --env 'SMTP_HOST=smtp.exmail.qq.com' \ --env 'SMTP_PORT=587' \ --env '[email protected]' \ --env 'SMTP_PASS=your-mail-pasowrd' \ --env 'REDIS_HOST=192.168.1.11' \ --env 'REDIS_PORT=6379' \ --env 'DB_ADAPTER=mysql2' \ --env 'DB_HOST=192.168.1.12' \ --env 'DB_NAME=gitlabhq_production' \ --env 'DB_USER=gitlab' \ --env 'DB_PASS=password' \ --volume /opt/app-gitlab:/home/git/data \ sameersbn/gitlab:latest #sudo aptitude install -y rinetd #sudo echo "12.34.56.78 22 192.168.1.16 22" >>/etc/rinetd.conf
