一、实验背景
为了缩减镜像体积，我们一般基于Alpine或者Ubuntu打镜像，但有时CentOS也不失为一个选择。
下面我们演示一下怎么基于CentOS7.x官方镜像，编写Dockerfile打一个nginx镜像。
二、实验环境
操作系统：CentOS7.5 Minimal
IP: 192.168.1.107
三、 安装docker，拉取基础镜像
关闭selinux
# setenforce 0
# sed -i 's/^SELINUX=.*/SELINUX=permissive/g' /etc/selinux/config
安装docker
# yum -y install yum-utils device-mapper-persistent-data lvm2
# yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
# yum list docker-ce --showduplicates | sort -r
# yum -y install docker-ce-18.06.0.ce
# systemctl start docker
# systemctl status docker
# systemctl enable docker
# docker version
设置镜像加速
# curl -sSL https://get.daocloud.io/daotools/set_mirror.sh | sh -s http://f1361db2.m.daocloud.io
# systemctl restart docker
拉取CentOS7.x基础镜像
# docker pull centos:centos7
# docker images
# docker run -it --rm centos:centos7 cat /etc/redhat-release
四、编写Dockerfile
# mkdir /root/nginxDockerfile
# cd /root/nginxDockerfile
# vim Dockerfile
#####################################################
FROM centos:centos7
LABEL maintainer="Michael <michael@foxmail.com>"
ENV NGINX_VERSION 1.15.2
RUN CONFIG="\
--prefix=/usr/share/nginx \
--sbin-path=/usr/sbin/nginx \
--modules-path=/usr/lib64/nginx/modules \
--conf-path=/etc/nginx/nginx.conf \
--error-log-path=/var/log/nginx/error.log \
--http-log-path=/var/log/nginx/access.log \
--http-client-body-temp-path=/var/lib/nginx/tmp/client_body \
--http-proxy-temp-path=/var/lib/nginx/tmp/proxy \
--http-fastcgi-temp-path=/var/lib/nginx/tmp/fastcgi \
--http-uwsgi-temp-path=/var/lib/nginx/tmp/uwsgi \
--http-scgi-temp-path=/var/lib/nginx/tmp/scgi \
--pid-path=/run/nginx.pid \
--lock-path=/run/lock/subsys/nginx \
--user=nginx \
--group=nginx \
--with-file-aio \
--with-ipv6 \
--with-http_auth_request_module \
--with-http_ssl_module \
--with-http_v2_module \
--with-http_realip_module \
--with-http_addition_module \
--with-http_xslt_module=dynamic \
--with-http_image_filter_module=dynamic \
--with-http_geoip_module=dynamic \
--with-http_sub_module \
--with-http_dav_module \
--with-http_flv_module \
--with-http_mp4_module \
--with-http_gunzip_module \
--with-http_gzip_static_module \
--with-http_random_index_module \
--with-http_secure_link_module \
--with-http_degradation_module \
--with-http_slice_module \
--with-http_stub_status_module \
--with-http_perl_module=dynamic \
--with-mail=dynamic \
--with-mail_ssl_module \
--with-pcre \
--with-pcre-jit \
--with-stream=dynamic \
--with-stream_ssl_module \
--with-google_perftools_module \
--with-debug \
--with-ld-opt='-Wl,-E' \
" \
&& groupadd -g 2019 nginx \
&& useradd -u 2019 -g 2019 -s /sbin/nologin nginx \
&& yum -y install \
gcc \
make \
perl \
openssl \
openssl-devel \
pcre-devel \
gd-devel \
zlib-devel \
GeoIP-devel \
libxslt-devel \
perl-ExtUtils-Embed \
gperftools \
curl \
&& curl -fSL https://nginx.org/download/nginx-$NGINX_VERSION.tar.gz -o nginx.tar.gz \
&& mkdir -p /var/lib/nginx/tmp/{client_body,proxy,fastcgi,uwsgi,scgi} \
&& mkdir -p /usr/src \
&& tar -zxC /usr/src -f nginx.tar.gz \
&& rm -f nginx.tar.gz \
&& cd /usr/src/nginx-$NGINX_VERSION \
&& ./configure $CONFIG \
&& make -j$(getconf _NPROCESSORS_ONLN) \
&& make install \
&& mkdir -p /etc/nginx/conf.d /usr/share/nginx/html \
&& rm -rf /usr/src/nginx-$NGINX_VERSION \
&& for rpm in make gcc openssl-devel pcre-devel gd-devel zlib-devel GeoIP-devel libxslt-devel curl; do rpm -e ${rpm} --nodeps; done \
&& rm -rf /var/cache/yum/* \
# forward request and error logs to docker log collector
&& ln -sf /dev/stdout /var/log/nginx/access.log \
&& ln -sf /dev/stderr /var/log/nginx/error.log
STOPSIGNAL SIGTERM
EXPOSE 80
CMD ["nginx", "-g", "daemon off;"]
#####################################################
# docker build -f Dockerfile -t nginx:1.15.2 .
# docker images
关于nginx的编译参数怎么来，我们可以看官方rpm提供了哪些，选择自己需要的参数
# yum -y install epel-release
# nginx -V
五、测试镜像
# docker run -it -d -p 8080:80 nginx:1.15.2
# dokcer ps -a
# ss -tan | grep 8080
浏览器访问: http://192.168.1.107:8080
六、参考
https://nginx.org
http://distfiles.macports.org/nginx
Nginx编译安装
http://www.nginx.cn/install
Nginx使用教程(一)：Nginx编译参数详解
https://www.cnblogs.com/felixzh/p/6283791.html
Dockerfile reference
https://docs.docker.com/v17.09/engine/reference/builder
Best practices for writing Dockerfiles
https://docs.docker.com/develop/develop-images/dockerfile_best-practices
通过Dockerfile构建nginx实例
https://blog.51cto.com/bovin/2162495
使用dockerfile构建nginx镜像
https://www.cnblogs.com/zhhuihui/p/docker_z.html
