Docker容器自动启动、网络类型、容器互联、容器跨宿主机通信、docker-compose使用-Day03

1. 重启docker服务，容器全部退出解决办法

1.1 方法1，运行容器时添加参数（推荐使用）

--restart=always
docker run --restart=always

# 例子
[root@docker01 ~]# docker run -d --restart=always nginx-1.16.1:ubuntu 
be32abfee0ff311aafc4fe8366b720b7aee0cb36a2f71c65f38d25fcb49e73d2
[root@docker01 ~]# docker ps -l
CONTAINER ID        IMAGE                 COMMAND                 CREATED             STATUS              PORTS               NAMES
be32abfee0ff        nginx-1.16.1:ubuntu   "/bin/bash /nginx.sh"   4 seconds ago       Up 3 seconds                            dreamy_carson
[root@docker01 ~]# systemctl restart docker
[root@docker01 ~]# docker ps -l  # 这里注意CREATED和STATUS的时间，使用--restart=always重启后，CREATED时间不会清零
CONTAINER ID        IMAGE                 COMMAND                 CREATED             STATUS              PORTS               NAMES
be32abfee0ff        nginx-1.16.1:ubuntu   "/bin/bash /nginx.sh"   37 seconds ago      Up 5 seconds                            dreamy_carso

1.2 方法2，在配置文件添加参数

[root@docker01 ~]# vim /etc/docker/daemon.json
{
  "registry-mirrors": ["https://registry.docker-cn.com"],
  "insecure-registries": ["10.0.0.11:5000"],
  "live-restore": true  # 加在这里

[root@docker01 ~]# systemctl restart docker

# 例子
[root@docker01 ~]# docker run -d nginx-1.16.1:alpine 
82b8143418db23ee034624bb7cea7da1b0811b71b1a94e499f6fcb913adf1e17
[root@docker01 ~]# docker ps -l
CONTAINER ID        IMAGE                 COMMAND                  CREATED             STATUS              PORTS               NAMES
82b8143418db        nginx-1.16.1:alpine   "nginx -g 'daemon of…"   3 seconds ago       Up 3 seconds                            relaxed_lovelace

[root@docker01 ~]# systemctl restart docker
[root@docker01 ~]# docker ps -l  # 这里容器docker后，CREATED和STATUS时间是不会改变的
CONTAINER ID        IMAGE                 COMMAND                  CREATED             STATUS              PORTS               NAMES
82b8143418db        nginx-1.16.1:alpine   "nginx -g 'daemon of…"   2 minutes ago       Up 2 minutes                            relaxed_lovelace

2. Docker网络类型

2.1 四种网络类型

（1）None：不为容器配置任何网络功能，--net=none 
（2）Container：与另一个运行中的容器共享Network Namespace，--net=container:containerID（K8S）
（3）Host：与宿主机共享Network Namespace，--network=host 性能最高，不用使用-p端口映射，直接使用宿主机端口
（4）Bridge：Docker设计的NAT网络模型（默认类型），container:容器id 

2.2 查看docker网络类型

[root@docker01 ~]# docker inspect 82b8143418db|grep -wi -A 1 networks
            "Networks": {
                "bridge": {  # 这就是容器默认使用的网络类型

3. 容器互联

# 默认情况下，容器启动后，容器内部可以与其他容器进行通讯，但是必须要知道对方的IP地址，而容器每次启动时，分配的IP地址都不一样。那么启动容器时可以添加--link参数，而且可以--link多个不同的容器，但是--link是单方向的。

[root@docker01 ~]# docker run -d -p 80:80 nginx-1.16.1:ubuntu 
591749f9d440b9c8703e414b9a17dae2572b73ad56d8eddfd56b635cef6b49d1
[root@docker01 ~]# docker run -d -p 81:80 nginx-1.16.1:ubuntu 
0adf57bb18343986c972b6ab23abacd23f07b1c4897a6fc4c51b7fb0599e425f
[root@docker01 ~]# docker ps 
CONTAINER ID        IMAGE                 COMMAND                 CREATED             STATUS              PORTS                NAMES
0adf57bb1834        nginx-1.16.1:ubuntu   "/bin/bash /nginx.sh"   5 seconds ago       Up 5 seconds        0.0.0.0:81->80/tcp   amazing_brattain
591749f9d440        nginx-1.16.1:ubuntu   "/bin/bash /nginx.sh"   8 seconds ago       Up 8 seconds        0.0.0.0:80->80/tcp   vigorous_brown

[root@docker01 ~]# docker inspect 0adf57bb1834|grep -i ipadd
            "SecondaryIPAddresses": null,
            "IPAddress": "172.17.0.3",
                    "IPAddress": "172.17.0.3",

[root@docker01 /opt/dockerfile/web/nginx-ubuntu]# docker exec -it 591749f9d440 /bin/bash
root@591749f9d440:/# curl -I 172.17.0.3  # 这样虽然可以访问，但是很麻烦
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Wed, 09 Dec 2020 09:04:34 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Wed, 09 Dec 2020 06:20:56 GMT
Connection: keep-alive
ETag: "5fd06cc8-264"
Accept-Ranges: bytes

root@591749f9d440:/# 


# 使用--link参数
[root@docker01 ~]# docker rm -f `docker ps -a -q`
0adf57bb1834
591749f9d440

[root@docker01 ~]# docker run --name web01 -d -p 80:80 nginx-1.16.1:ubuntu 
9abc121fa093292d26c2989ee43de72ef3776e6f49059fd7ad18a54edd5e846d

[root@docker01 ~]# docker run --link web01:web02 -d -p 81:80 nginx-1.16.1:ubuntu   # --link 其他容器的名称:自己的名称
0a0a3665c7f08a79b107fb235be28186a25d6d28e71239dbab155af5094e48ac
[root@docker01 ~]# docker ps -l
CONTAINER ID        IMAGE                 COMMAND                 CREATED             STATUS              PORTS                NAMES
0a0a3665c7f0        nginx-1.16.1:ubuntu   "/bin/bash /nginx.sh"   3 seconds ago       Up 2 seconds        0.0.0.0:81->80/tcp   naughty_elbakyan
[root@docker01 ~]# docker exec -it 0a0a3665c7f0 /bin/bash
root@0a0a3665c7f0:/# curl -I web01  # 这样就可以直接访问另一个容器的名称即可，不在需要IP地址
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Wed, 09 Dec 2020 09:10:50 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Wed, 09 Dec 2020 06:20:56 GMT
Connection: keep-alive
ETag: "5fd06cc8-264"
Accept-Ranges: bytes

# 原理如下
root@0a0a3665c7f0:/# cat /etc/hosts
127.0.0.1	localhost
::1	localhost ip6-localhost ip6-loopback
fe00::0	ip6-localnet
ff00::0	ip6-mcastprefix
ff02::1	ip6-allnodes
ff02::2	ip6-allrouters
172.17.0.2	web02 9abc121fa093 web01  # 每次使用--link时，都会做一个解析到hosts文件中
172.17.0.3	0a0a3665c7f0

4. Docker跨主机容器之间的通信（macvlan）

这个演示至少要需要两台虚拟机，这里使用docker01和docker02

4.1 macvlan作用

默认情况下，一个物理网卡，只有一个物理mac地址。而macvlan的作用就是虚拟出多个mac地址。

4.2 创建macvlan网络

# 查看网络类型，默认只有三种网络类型
[root@docker01 ~]# docker network ls
NETWORK ID          NAME                DRIVER              SCOPE
14868a693063        bridge              bridge              local
303047fe0d1b        host                host                local
f58b20c0ab84        none                null                local
6333170d6b1a        wordpress_default   bridge              local

# 两台机器都创建macvlan网络
# create 创建网络
# --driver 创建新的网络类型macvlan
# --subnet 10.0.0.0/24 指定子网范围
# --gateway 10.0.0.254 指定网关
# -o parent=eth0 指定基于eth0网卡，来创建桥接网卡。
# macvlan_1，网络名称

[root@docker01 ~]# docker network create --driver macvlan --subnet 10.0.0.0/24 --gateway 10.0.0.254 -o parent=eth0 macvlan_1
776d26b3f647f8b0e5a4a02da94e1e8be35ee4ea25d1cbe6cbbdeea83eee3f27

[root@docker02 ~]# docker network create --driver macvlan --subnet 10.0.0.0/24 --gateway 10.0.0.254 -o parent=eth0 macvlan_1
7df61ea3061e103eb60334fb54ec1a9dc4dcaf38da10d528575ef6e4153c7a01

4.3 测试

# docker01和docker02进行相同镜像导入操作
[root@docker01 ~]# ll
total 1496
-rw-------. 1 root root    1502 Oct  7 23:37 anaconda-ks.cfg
-rw-r--r--  1 root root 1424896 Nov 24 19:38 docker_busybox.tar.gz
-rw-r--r--  1 root root   98997 Dec  9 10:22 nginx-1.16.1.tar.gz
[root@docker01 ~]# docker load -i docker_busybox.tar.gz 
adab5d09ba79: Loading layer  1.416MB/1.416MB
Loaded image: busybox:latest
[root@docker01 ~]# docker run -it --net macvlan_1 --ip=10.0.0.201 busybox:latest
/ # 

[root@docker02 ~]# docker run -it --net macvlan_1 --ip=10.0.0.202 busybox:latest
/ #

# ping测试
/ # ping 10.0.0.202 -c 3
PING 10.0.0.202 (10.0.0.202): 56 data bytes
64 bytes from 10.0.0.202: seq=0 ttl=64 time=0.435 ms
64 bytes from 10.0.0.202: seq=1 ttl=64 time=1.197 ms
64 bytes from 10.0.0.202: seq=2 ttl=64 time=1.341 ms

--- 10.0.0.202 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max = 0.435/0.991/1.341 ms

/ # ping 10.0.0.201 -c 3
PING 10.0.0.201 (10.0.0.201): 56 data bytes
64 bytes from 10.0.0.201: seq=0 ttl=64 time=0.479 ms
64 bytes from 10.0.0.201: seq=1 ttl=64 time=4.287 ms
64 bytes from 10.0.0.201: seq=2 ttl=64 time=1.245 ms

--- 10.0.0.201 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max = 0.479/2.003/4.287 ms

5. Docker跨宿主机容器通信之overlay

该模式需要三台机器，两台docker，一台consul

该模式不用手动指定ip地址，使用时会自动分配IP。
该模式会有一个专门的数据库来集中存储管理IP地址。

5.1 启动consul容器

consul操作

[root@consol ~]# docker pull consul
[root@consul ~]# docker run -d -h consul --name=consul -p 8500:8500 -e CONSUL_BIND_INTERFACE=eth0 consul # -h，设置容器主机名，--name,设置容器名
9924d1a5ec4c35c2935947cec73f4863f1153b6e8643b2ce3e8e3c9b877cac01
[root@consul ~]# docker ps -l
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                                                                      NAMES
9924d1a5ec4c        consul              "docker-entrypoint.s…"   3 seconds ago       Up 3 seconds        8300-8302/tcp, 8301-8302/udp, 8600/tcp, 8600/udp, 0.0.0.0:8500->8500/tcp   consul

浏览器访问

5.2 更新docker01、docker02配置文件

[root@docker01 ~]# vim /etc/docker/daemon.json
{
  "registry-mirrors": ["https://registry.docker-cn.com"],
  "insecure-registries": ["10.0.0.11:5000"],
  "hosts":["tcp://0.0.0.0:2376","unix:///var/run/docker.sock"],  # 添加的配置
  "cluster-store": "consul://10.0.0.13:8500",  # 添加的配置
  "cluster-advertise": "10.0.0.11:2376"  # 添加的配置
}

# 这里直接重启docker会报错，需要更改docker启动文件，把/usr/lib/systemd/system/docker.service文件中的ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock，改成ExecStart=/usr/bin/dockerd --containerd=/run/containerd/containerd.sock
# 然后再重启docker
[root@docker01 ~]# systemctl daemon-reload
[root@docker01 ~]# systemctl restart docker

# docker02配置
[root@docker02 ~]# vim /etc/docker/daemon.json
{
  "registry-mirrors": ["https://hub-mirror.c.163.com"],
   "insecure-registries": ["10.0.0.11:5000"],
  "hosts":["tcp://0.0.0.0:2376","unix:///var/run/docker.sock"],
  "cluster-store": "consul://10.0.0.13:8500",
  "cluster-advertise": "10.0.0.12:2376"
}

# 这里直接重启docker会报错，需要更改docker启动文件，把/usr/lib/systemd/system/docker.service文件中的ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock，改成ExecStart=/usr/bin/dockerd --containerd=/run/containerd/containerd.sock
[root@docker02 ~]# vim /usr/lib/systemd/system/docker.service

# 然后再重启docker
[root@docker02 ~]# systemctl daemon-reload
[root@docker02 ~]# systemctl restart docker

浏览器查看

5.3 创建overlay网络

任意一个node节点操作

[root@docker02 ~]# docker network create -d overlay --subnet 172.16.1.0/24 --gateway 172.16.1.254 ol1  # 跟宿主机不同网段，ol1为网络名称，该命令执行后，会自动同步到其他节点
bc485f18c541c9fb8e7d2127e55ffc6e7eb480a50e85f053cd1ce6d2593bc168

[root@docker01 ~]# docker network ls
NETWORK ID          NAME                DRIVER              SCOPE
3e20c61cde5d        bridge              bridge              local
e679a51fa5c5        host                host                local
7df61ea3061e        macvlan_1           macvlan             local
6a766fea9687        none                null                local
bc485f18c541        ol1                 overlay             global  # 新创建的overlay

5.4 创建容器测试

[root@docker01 ~]# docker run -it --network ol1 --name oldboy01 busybox /bin/sh
/ # 

[root@docker02 ~]# docker run -it --network ol1 --name oldboy02 busybox /bin/sh
/ # ping oldboy01 -c 3
PING oldboy01 (172.16.1.2): 56 data bytes
64 bytes from 172.16.1.2: seq=0 ttl=64 time=0.444 ms
64 bytes from 172.16.1.2: seq=1 ttl=64 time=0.457 ms
64 bytes from 172.16.1.2: seq=2 ttl=64 time=0.325 ms

--- oldboy01 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max = 0.325/0.408/0.457 ms
/ # 

6. docker-compose（单机版的容器编排工具）

通过docker-compose，可以一次性启动多个容器。

6.1 docker-compose结构介绍

version: '3'  # api版本,官方有3个版本，1、2、3，不同版本的语法不一致

services: # 声明服务，也就是要启动多少个容器
db:  # 服务 1
image: mysql:5.7  # 使用的镜像
volumes:  # 持久化
- db_data:/var/lib/mysql # 挂载的目录
restart: always  # 容器停止后自动启动
environment:  # 启动后的环境变量
MYSQL_ROOT_PASSWORD: somewordpress
MYSQL_DATABASE: wordpress
MYSQL_USER: wordpress
MYSQL_PASSWORD: wordpress

wordpress:  # 服务 2 
depends_on:
- db
image: wordpress:latest
volumes:
- web_data:/var/www/html
ports:  # 端口映射
- "80"  # 随机端口映射到容器的80
restart: always
environment:
WORDPRESS_DB_HOST: db:3306
WORDPRESS_DB_USER: wordpress
WORDPRESS_DB_PASSWORD: wordpress
volumes:  # 全局声明持久化，把上面的两个数据库再次全局声明一次
db_data:
web_data:

6.2 安装docker-compose(需要epel源)

[root@docker01 ~]# yum install -y docker-compose
[root@docker01 ~]# mkdir /data/docker-compose -p
[root@docker01 ~]# cd /data/docker-compose/
[root@docker01 /data/docker-compose]# 
[root@docker01 /data/docker-compose]# mkdir wordpress
[root@docker01 /data/docker-compose]# cd wordpress

6.3 编辑并使用

[root@docker01 /data/docker-compose/wordpress]# vim docker-compose.yaml  # 这个名称跟dockerfile一样都是固定的，yaml也可以写成yml。
version: '3'

services:
  db:
    image: mysql:5.7
    volumes:
      - db_data:/var/lib/mysql
    restart: always
    environment:
      MYSQL_ROOT_PASSWORD: somewordpress
      MYSQL_DATABASE: wordpress
      MYSQL_USER: wordpress
      MYSQL_PASSWORD: wordpress

  wordpress:
    depends_on:
      - db
    image: wordpress:latest
    volumes:
      - web_data:/var/www/html
    ports:
      - "80"
    restart: always
    environment:
      WORDPRESS_DB_HOST: db:3306
      WORDPRESS_DB_USER: wordpress
      WORDPRESS_DB_PASSWORD: wordpress
volumes:
  db_data:
  web_data:

# 前台运行
[root@docker01 /data/docker-compose/wordpress]# docker-compose up  # 后台运行在up 后面加上-d即可
## ………………省略部分输出
wordpress_1  | AH00558: apache2: Could not reliably determine the server's fully qualified domain name, using 172.18.0.3. Set the 'ServerName' directive globally to suppress this message
wordpress_1  | AH00558: apache2: Could not reliably determine the server's fully qualified domain name, using 172.18.0.3. Set the 'ServerName' directive globally to suppress this message
wordpress_1  | [Thu Dec 10 06:59:08.702632 2020] [mpm_prefork:notice] [pid 1] AH00163: Apache/2.4.38 (Debian) PHP/7.4.13 configured -- resuming normal operations
wordpress_1  | [Thu Dec 10 06:59:08.702822 2020] [core:notice] [pid 1] AH00094: Command line: 'apache2 -D FOREGROUND'

[root@docker01 /data/docker-compose/wordpress]# docker ps 
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                   NAMES
5c10b4b501be        wordpress:latest    "docker-entrypoint.s…"   3 minutes ago       Up 52 seconds       0.0.0.0:32770->80/tcp   wordpress_wordpress_1
98f0a3cf8604        mysql:5.7           "docker-entrypoint.s…"   3 minutes ago       Up 52 seconds       3306/tcp, 33060/tcp     wordpress_db_1
[root@docker01 /data/docker-compose/wordpress]# docker-compose ps
        Name                       Command               State           Ports        
--------------------------------------------------------------------------------------
wordpress_db_1          docker-entrypoint.sh mysqld      Up      3306/tcp, 33060/tcp
wordpress_wordpress_1   docker-entrypoint.sh apach ...   Up      0.0.0.0:32770->80/tcp    # 这里做的是随机端口映射。访问的时候要带上端口

浏览器访问

6.4 docker-compose 基本操作

前台启动：docker-compose up
后台启动：docker-compose up -d
启动单个容器：docker-compose start 容器名
查看启动的容器：docker-compose ps
停止所有容器：docker-compose stop
停止单个：docker-compose stop 容器名
停止并删除所有容器：docker-compose down
查看帮助：docker-compose -h