docker+mongodb的安装，密码认证

下载

[root@k8s-master2 ~]# docker pull mongo:4.2.2
4.2.2: Pulling from library/mongo
5c939e3a4d10: Pull complete
c63719cdbe7a: Pull complete
19a861ea6baf: Pull complete
651c9d2d6c4f: Pull complete
85155c6d5fac: Pull complete
85fb0780fd97: Pull complete
85b3b1a901f5: Pull complete
6a882e007bb6: Pull complete
f7806503a70f: Pull complete
e23d5068c270: Pull complete
7b092576a143: Pull complete
cbac198434de: Pull complete
af4e4bd07dc4: Pull complete
Digest: sha256:772374c6b41f564d35e703078cc0bc145a2001aa026815689f2068860eebc701
Status: Downloaded newer image for mongo:4.2.2
docker.io/library/mongo:4.2.2

运行

　　五账户密码，不需要认证

[root@k8s-master2 ~]# docker run --name mongo --restart=always -p 27017:27017 -v /data/mongodb:/data/db -d mongo:4.2.2
8f4be7421f0b68524d795dbd00ac1eea11cce59d1df9557aa2815fa645d53193
[root@k8s-master2 ~]# docker ps
CONTAINER ID        IMAGE                     COMMAND                  CREATED             STATUS              PORTS                                                                    NAMES
8f4be7421f0b        mongo:4.2.2               "docker-entrypoint.s…"   3 seconds ago       Up 2 seconds        0.0.0.0:27017->27017/tcp                                                 elated_williamson

　　有账户密码，需要认证

//容器默认启动命令是mongod,我们认证需要修改启动命为mongod --auth
[root@mysql-129 ~]# docker run --name mongo --restart=always -p 27017:27017 -v /data/mongodb:/data/db -e MONGO_INITDB_ROOT_USERNAME=admin -e MONGO_INITDB_ROOT_PASSWORD=123456  -d mongo:4.2.2 mongod --auth
c18427def2059349c3a84786b99bb955ddd70f21bef833aa4ec44c7d1e19a184

　　进入容器

[root@k8s-master2 ~]# docker exec -it 8f4be7421f0b bash
root@8f4be7421f0b:/# mongo --version
MongoDB shell version v4.2.2
git version: a0bbbff6ada159e19298d37946ac8dc4b497eadf
OpenSSL version: OpenSSL 1.1.1  11 Sep 2018
allocator: tcmalloc
modules: none
build environment:
    distmod: ubuntu1804
    distarch: x86_64
    target_arch: x86_64

　　无密码进入数据库

root@8f4be7421f0b:/# mongo
MongoDB shell version v4.2.2
connecting to: mongodb://127.0.0.1:27017/?compressors=disabled&gssapiServiceName=mongodb
Implicit session: session { "id" : UUID("1a41d6b4-a387-445d-95a6-57a608290813") }
MongoDB server version: 4.2.2
Welcome to the MongoDB shell.
For interactive help, type "help".
For more comprehensive documentation, see
        http://docs.mongodb.org/
Questions? Try the support group
        http://groups.google.com/group/mongodb-user
Server has startup warnings:
2020-01-17T01:17:43.520+0000 I  STORAGE  [initandlisten]
2020-01-17T01:17:43.520+0000 I  STORAGE  [initandlisten] ** WARNING: Using the XFS filesystem is strongly recommended with the WiredTiger storage engine
2020-01-17T01:17:43.520+0000 I  STORAGE  [initandlisten] **          See http://dochub.mongodb.org/core/prodnotes-filesystem
2020-01-17T01:17:44.357+0000 I  CONTROL  [initandlisten]
2020-01-17T01:17:44.357+0000 I  CONTROL  [initandlisten] ** WARNING: Access control is not enabled for the database.
2020-01-17T01:17:44.357+0000 I  CONTROL  [initandlisten] **          Read and write access to data and configuration is unrestricted.
2020-01-17T01:17:44.357+0000 I  CONTROL  [initandlisten]
2020-01-17T01:17:44.357+0000 I  CONTROL  [initandlisten]
2020-01-17T01:17:44.357+0000 I  CONTROL  [initandlisten] ** WARNING: /sys/kernel/mm/transparent_hugepage/enabled is 'always'.
2020-01-17T01:17:44.357+0000 I  CONTROL  [initandlisten] **        We suggest setting it to 'never'
2020-01-17T01:17:44.358+0000 I  CONTROL  [initandlisten]
2020-01-17T01:17:44.358+0000 I  CONTROL  [initandlisten] ** WARNING: /sys/kernel/mm/transparent_hugepage/defrag is 'always'.
2020-01-17T01:17:44.358+0000 I  CONTROL  [initandlisten] **        We suggest setting it to 'never'
2020-01-17T01:17:44.358+0000 I  CONTROL  [initandlisten]
---
Enable MongoDB's free cloud-based monitoring service, which will then receive and display
metrics about your deployment (disk utilization, CPU, operation statistics, etc).

The monitoring data will be available on a MongoDB website with a unique URL accessible to you
and anyone you share the URL with. MongoDB may use this information to make product
improvements and to suggest MongoDB products and deployment options to you.

To enable free monitoring, run the following command: db.enableFreeMonitoring()
To permanently disable this reminder, run the following command: db.disableFreeMonitoring()
---

> help
        db.help()                    help on db methods
        db.mycoll.help()             help on collection methods
        sh.help()                    sharding helpers
        rs.help()                    replica set helpers
        help admin                   administrative help
        help connect                 connecting to a db help
        help keys                    key shortcuts
        help misc                    misc things to know
        help mr                      mapreduce

        show dbs                     show database names
        show collections             show collections in current database
        show users                   show users in current database
        show profile                 show most recent system.profile entries with time >= 1ms
        show logs                    show the accessible logger names
        show log [name]              prints out the last segment of log in memory, 'global' is default
        use <db_name>                set current database
        db.foo.find()                list objects in collection foo
        db.foo.find( { a : 1 } )     list objects in foo where a == 1
        it                           result of the last line evaluated; use to further iterate
        DBQuery.shellBatchSize = x   set default number of items to display on shell
        exit                         quit the mongo shell
> show dbs;
admin   0.000GB
config  0.000GB
local   0.000GB

　　需要密码认证

在连接期间进行身份验证
使用-u <username>，-p <password>和--authenticationDatabase <database>命令行选项启动一个mongo shell：

mongo --port 27017 -u "admin" -p "123456" --authenticationDatabase "admin"

　　连接后验证
将 mongo shell 连接到 mongodb，也就是先连接，后验证用户身份

mongo

use admin
db.auth("admin", "123456" )