網站容器化升級—各模塊分別運行一個容器

結構圖

容器互通

同主機下同網段的容器互通

# 創建網橋
docker network create --driver bridge blog
# 后邊創建容器時指定網路名即可
--net blog

MySql模塊

容器和資料持久化

# 拉一個mysql鏡像
docker pull mysql:5.6.51
# 后臺運行容器，掛載資料卷（持久化存盤資料），埠暴露，admin密碼，網橋
# 埠暴露給外部時方便連接管理，不暴露也可
# 資料庫的資料全部存在這里  /mydata/mysql_data/data
docker run -dti --name mysql -v /mydata/mysql_data/data:/www/server/data -v /mydata/mysql_data/my.cnf:/etc/mysql/my.cnf -p8881:3306 -e MYSQL_ROOT_PASSWORD=mima --net blog mysql:5.6.51

# 如果出現
^G/usr/local/mysql/bin/mysqld: File './mysql-bin.000007' not found (Errcode: 2)
# 刪掉
mysql-bin.index
# 檔案即可

my.cnf為自定義組態檔

[client]
#password	= your_password
port		= 3306
socket		= /tmp/mysql.sock

[mysqld]
port		= 3306
socket		= /tmp/mysql.sock
datadir = /www/server/data
default_storage_engine = InnoDB
performance_schema_max_table_instances = 400
table_definition_cache = 400
skip-external-locking
key_buffer_size = 32M
max_allowed_packet = 100G
table_open_cache = 128
sort_buffer_size = 768K
net_buffer_length = 4K
read_buffer_size = 768K
read_rnd_buffer_size = 256K
myisam_sort_buffer_size = 8M
thread_cache_size = 16
query_cache_size = 16M
tmp_table_size = 32M
sql-mode=NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES

explicit_defaults_for_timestamp = true
#skip-name-resolve
max_connections = 500
max_connect_errors = 100
open_files_limit = 65535

log-bin=mysql-bin
binlog_format=mixed
server-id = 1
expire_logs_days = 10
slow_query_log=1
slow-query-log-file=/www/server/data/mysql-slow.log
long_query_time=3
#log_queries_not_using_indexes=on


innodb_data_home_dir = /www/server/data
innodb_data_file_path = ibdata1:10M:autoextend
innodb_log_group_home_dir = /www/server/data
innodb_buffer_pool_size = 128M
innodb_log_file_size = 64M
innodb_log_buffer_size = 16M
innodb_flush_log_at_trx_commit = 1
innodb_lock_wait_timeout = 50
innodb_max_dirty_pages_pct = 90
innodb_read_io_threads = 2
innodb_write_io_threads = 2

[mysqldump]
quick
max_allowed_packet = 500M

[mysql]
no-auto-rehash

[myisamchk]
key_buffer_size = 32M
sort_buffer_size = 768K
read_buffer = 2M
write_buffer = 2M

[mysqlhotcopy]
interactive-timeout

查看容器

[root@k8s-node02 mysql]# docker  ps
CONTAINER ID   IMAGE                    COMMAND                  CREATED        STATUS        PORTS                                                                                                                 NAMES
23a9ab87cafb   mysql:5.6.51             "docker-entrypoint.s…"   4 hours ago    Up 4 hours    0.0.0.0:8881->3306/tcp, :::8881->3306/tcp                                                                                 mysql5.6.51

連接mysql資料庫

mysql -uroot -h your_ip -P 8881 -p

redis

docker pull redis:6.2.6
# 只是用來做快取的，不需要其他復雜配置，也無需暴露埠給外部訪問
docker run -itd --name redis --net blog redis:6.2.6

Centos環境

docker pull centos:centos7

# 制作鏡像
docker run -dti --name=blog --net blog  centos7

docker exec -ti dssadas /bin/bash

# 安裝python3和依賴
yum install python3 -y
yum install gcc -y
yum install python3-devel.x86_64 -y

# 安裝django程式的相關依賴包
# 打包之前的  pip3 freeze > requirements.txt
pip3 install -r requirements.txt -i https://mirrors.aliyun.com/pypi/simple/ 

docker commit -p ac337e68a768 docker.io/dachongming/centos7:v1
docker push dachongming/centos7:v1

# 在v3版本中添加gevent模塊
python3 -m pip install --upgrade pip
pip3 install gevent==21.1.2 
-i https://mirrors.aliyun.com/pypi/simple/ 


# 使用
docker pull dachongming/centos7:v3
docker run -dti --name=blog  --net blog -v /mydata/BlogLee:/mydata/BlogLee -p888:80 dachongming/centos7:v3
docker exec -ti dssadas /bin/bash
export LC_ALL=en_US.utf-8
export LANG=en_US.utf-8
cd /mydata/BlogLee/
uwsgi --ini uwsgi.ini
nohup celery -A BlogLee worker -P gevent -c 1000 > celery.log 2>&1 &

NGINX

server
   {
        listen 80;
        # server_name www.liboer.top liboer.top;
        server_name www.liboer.top liboer.top;
        rewrite ^(.*)$ https://$host$1;
        location / {
          # 跳轉到8080
          include uwsgi_params;
          uwsgi_pass 127.0.0.1:888;
        }
        # 靜態檔案
        location /static {
          root /mydata/mysql_data/BlogLee;
        }
    }



#以下屬性中，以ssl開頭的屬性表示與證書配置有關，
server 
    {
    listen 443 ssl;
    #配置HTTPS的默認訪問埠為443，
    #如果未在此處配置HTTPS的默認訪問埠，可能會造成Nginx無法啟動，
    #如果您使用Nginx 1.15.0及以上版本，請使用listen 443 ssl代替listen 443和ssl on，
    server_name liboer.top; #需要將yourdomain.com替換成證書系結的域名，
    root html;
    index index.html index.htm;
    ssl_certificate /www/server/nginx/conf/cert/5388063_liboer.top.pem;  #需要將cert-file-name.pem替換成已上傳的證書檔案的名稱，
    ssl_certificate_key /www/server/nginx/conf/cert/5388063_liboer.top.key; #需要將cert-file-name.key替換成已上傳的證書密鑰檔案的名稱，
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    #表示使用的加密套件的型別，
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #表示使用的TLS協議的型別，
    ssl_prefer_server_ciphers on;
    location / {
	        include uwsgi_params;
	        uwsgi_pass 127.0.0.1:888; #與uwsgi中ip:埠相同
	        uwsgi_send_timeout 600;
	        add_header Content-Security-Policy upgrade-insecure-requests;
	    }
	 # 靜態檔案
    location /static {
          root /mydata/mysql_data/BlogLee;
      }

}