centos基础镜像 15154213303/centos-base:2024-2-24
root@zhaohuakang:centos# cat build-command.sh
#!/bin/bash
TAG=$1
docker build -t 15154213303/centos-base:${TAG} .
docker push 15154213303/centos-base:${TAG}
root@zhaohuakang:centos# cat Dockerfile
FROM centos:7.8.2003
LABEL maintainer="zhaohuakang 2718354047@qq.com"
RUN yum install -y wget && mkdir -p /etc/yum.repos.d/bak && mv /etc/yum.repos.d/*.repo /etc/yum.repos.d/bak/ && wget -O /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-7.repo && wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo && yum clean all && yum makecache && yum install -y vim tree lrzsz gcc gcc-c++ automake pcre pcre-devel zlib zlib-devel openssl openssl-devel iproute net-tools iotop && groupadd www -g 2022 && useradd www -u 2022 -g www && rm -rf /var/cache/yum/* && rm -f /etc/localtime && ln -s /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
root@zhaohuakang:centos# bash build-command.sh 2024-2-24
nginx镜像 15154213303/centos-nginx:1.22
root@zhaohuakang:nginx# cat build.sh
#!/bin/bash
tag=$1
docker build -t 15154213303/centos-nginx:$tag .
docker push 15154213303/centos-nginx:$tag
root@zhaohuakang:nginx# cat Dockerfile
FROM 15154213303/centos-base:2024-2-24
LABEL author=zhaohuakang
ENV NGINX_VERSION=1.22.0
ADD nginx-${NGINX_VERSION}.tar.gz /usr/local
RUN yum -y install gcc make gcc-c++ libtool pcre pcre-devel zlib zlib-devel openssl openssl-devel && \
rm -rf /var/cache/yum/* && \
cd /usr/local/nginx-${NGINX_VERSION} && \
./configure --prefix=/apps/nginx && \
make && make install && \
rm -rf /usr/local/nginx*
COPY nginx.conf /apps/nginx/conf/
VOLUME ["/data/nginx/html"]
EXPOSE 80
CMD /apps/nginx/sbin/nginx -g "daemon off;"
COPY *.html /data/nginx/html/
root@zhaohuakang:nginx# cat index.html
<h1> welcome to docker website </h1>
root@zhaohuakang:nginx# egrep -v "#|^$" nginx.conf
user www;
worker_processes auto;
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
sendfile on;
keepalive_timeout 65;
server {
listen 80;
server_name localhost;
location / {
root /data/nginx/html;
index index.html index.htm;
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
}
}
root@zhaohuakang:nginx# bash build.sh
jdk镜像 15154213303/centos-jdk-base:8u212
root@zhaohuakang:jdk-8u-212# ls
build-command.sh Dockerfile jdk-8u212-linux-x64.tar.gz profile
root@zhaohuakang:jdk-8u-212# cat build-command.sh
#!/bin/bash
docker build -t 15154213303/centos-jdk-base:8u212 .
docker push 15154213303/centos-jdk-base:8u212
root@zhaohuakang:jdk-8u-212# cat Dockerfile
FROM 15154213303/centos-base:2024-2-24
LABEL maintainer="zhaohuakang 2718354047@qq.com"
ADD jdk-8u212-linux-x64.tar.gz /usr/local/src
RUN ln -sv /usr/local/src/jdk1.8.0_212 /usr/local/jdk
ADD profile /etc/profile
ENV JAVA_HOME /usr/local/jdk
ENV JRE_HOME $JAVA_HOME/jre
ENV CLASSPATH $JAVA_HOME/lib/:$JRE_HOME/lib/
ENV PATH $PATH:$JAVA_HOME/bin
root@zhaohuakang:jdk-8u-212# cat profile
# /etc/profile
# System wide environment and startup programs, for login setup
# Functions and aliases go in /etc/bashrc
# It's NOT a good idea to change this file unless you know what you
# are doing. It's much better to create a custom.sh shell script in
# /etc/profile.d/ to make custom changes to your environment, as this
# will prevent the need for merging in future updates.
pathmunge () {
case ":${PATH}:" in
*:"$1":*)
;;
*)
if [ "$2" = "after" ] ; then
PATH=$PATH:$1
else
PATH=$1:$PATH
fi
esac
}
if [ -x /usr/bin/id ]; then
if [ -z "$EUID" ]; then
# ksh workaround
EUID=`/usr/bin/id -u`
UID=`/usr/bin/id -ru`
fi
USER="`/usr/bin/id -un`"
LOGNAME=$USER
MAIL="/var/spool/mail/$USER"
fi
# Path manipulation
if [ "$EUID" = "0" ]; then
pathmunge /usr/sbin
pathmunge /usr/local/sbin
else
pathmunge /usr/local/sbin after
pathmunge /usr/sbin after
fi
HOSTNAME=`/usr/bin/hostname 2>/dev/null`
HISTSIZE=1000
if [ "$HISTCONTROL" = "ignorespace" ] ; then
export HISTCONTROL=ignoreboth
else
export HISTCONTROL=ignoredups
fi
export PATH USER LOGNAME MAIL HOSTNAME HISTSIZE HISTCONTROL
# By default, we want umask to get set. This sets it for login shell
# Current threshold for system reserved uid/gids is 200
# You could check uidgid reservation validity in
# /usr/share/doc/setup-*/uidgid file
if [ $UID -gt 199 ] && [ "`/usr/bin/id -gn`" = "`/usr/bin/id -un`" ]; then
umask 002
else
umask 022
fi
for i in /etc/profile.d/*.sh /etc/profile.d/sh.local ; do
if [ -r "$i" ]; then
if [ "${-#*i}" != "$-" ]; then
. "$i"
else
. "$i" >/dev/null
fi
fi
done
unset i
unset -f pathmunge
export JAVA_HOME=/usr/local/jdk
export TOMCAT_HOME=/apps/tomcat
export PATH=$JAVA_HOME/bin:$JAVA_HOME/jre/bin:$TOMCAT_HOME/bin:$PATH
export CLASSPATH=.$CLASSPATH:$JAVA_HOME/lib:$JAVA_HOME/jre/lib:$JAVA_HOME/lib/tools.jar
root@zhaohuakang:jdk-8u-212# bash build-command.sh
tomcat基础镜像 15154213303/tomcat-centos-base:v8.5.65
root@zhaohuakang:tomcat-base-8.5.65# ls
apache-tomcat-8.5.65.tar.gz build-command.sh Dockerfile
root@zhaohuakang:tomcat-base-8.5.65# cat build-command.sh
#!/bin/bash
docker build -t 15154213303/tomcat-centos-base:v8.5.65 .
docker push 15154213303/tomcat-centos-base:v8.5.65
root@zhaohuakang:tomcat-base-8.5.65# cat Dockerfile
FROM 15154213303/centos-jdk-base:8u212
LABEL maintainer="zhaohuakang 2718354047@qq.com"
ADD apache-tomcat-8.5.65.tar.gz /apps
RUN ln -sv /apps/apache-tomcat-8.5.65 /apps/tomcat
root@zhaohuakang:tomcat-base-8.5.65# bash build-command.sh
tomcat业务镜像1 15154213303/tomcat-m43:app1
root@zhaohuakang:tomcat# ls
build-command.sh Dockerfile myapp myapp.tar.gz run_tomcat.sh server.xml
root@zhaohuakang:tomcat# chmod +x run_tomcat.sh
root@zhaohuakang:tomcat# cat build-command.sh
#!/bin/bash
docker build -t 15154213303/tomcat-m43:app1 .
docker push 15154213303/tomcat-m43:app1
root@zhaohuakang:tomcat# cat build-command.sh
#!/bin/bash
docker build -t 15154213303/tomcat-m43:app1 .
docker push 15154213303/tomcat-m43:app1
root@zhaohuakang:tomcat# cat Dockerfile
#magedu m43 tomcat app1
FROM 15154213303/tomcat-centos-base:v8.5.65
LABEL maintainer="jack 2973707860@qq.com"
ADD run_tomcat.sh /apps/tomcat/bin/run_tomcat.sh
ADD server.xml /apps/tomcat/conf/server.xml
ADD myapp.tar.gz /data/tomcat/webapps
RUN chown www.www /data /apps -R
EXPOSE 8080 8443
CMD ["/apps/tomcat/bin/run_tomcat.sh"]
root@zhaohuakang:tomcat# cat run_tomcat.sh
#!/bin/bash
su - www -c "/apps/tomcat/bin/catalina.sh start"
tail -f /etc/hosts
root@zhaohuakang:tomcat# cat server.xml
<?xml version="1.0" encoding="UTF-8"?>
<!--
Licensed to the Apache Software Foundation (ASF) under one or more
contributor license agreements. See the NOTICE file distributed with
this work for additional information regarding copyright ownership.
The ASF licenses this file to You under the Apache License, Version 2.0
(the "License"); you may not use this file except in compliance with
the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<!-- Note: A "Server" is not itself a "Container", so you may not
define subcomponents such as "Valves" at this level.
Documentation at /docs/config/server.html
-->
<Server port="8005" shutdown="SHUTDOWN">
<Listener className="org.apache.catalina.startup.VersionLoggerListener" />
<!-- Security listener. Documentation at /docs/config/listeners.html
<Listener className="org.apache.catalina.security.SecurityListener" />
-->
<!--APR library loader. Documentation at /docs/apr.html -->
<Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
<!-- Prevent memory leaks due to use of particular java/javax APIs-->
<Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" />
<Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
<Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener" />
<!-- Global JNDI resources
Documentation at /docs/jndi-resources-howto.html
-->
<GlobalNamingResources>
<!-- Editable user database that can also be used by
UserDatabaseRealm to authenticate users
-->
<Resource name="UserDatabase" auth="Container"
type="org.apache.catalina.UserDatabase"
description="User database that can be updated and saved"
factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
pathname="conf/tomcat-users.xml" />
</GlobalNamingResources>
<!-- A "Service" is a collection of one or more "Connectors" that share
a single "Container" Note: A "Service" is not itself a "Container",
so you may not define subcomponents such as "Valves" at this level.
Documentation at /docs/config/service.html
-->
<Service name="Catalina">
<!--The connectors can use a shared executor, you can define one or more named thread pools-->
<!--
<Executor name="tomcatThreadPool" namePrefix="catalina-exec-"
maxThreads="150" minSpareThreads="4"/>
-->
<!-- A "Connector" represents an endpoint by which requests are received
and responses are returned. Documentation at :
Java HTTP Connector: /docs/config/http.html
Java AJP Connector: /docs/config/ajp.html
APR (HTTP/AJP) Connector: /docs/apr.html
Define a non-SSL/TLS HTTP/1.1 Connector on port 8080
-->
<Connector port="8080" protocol="HTTP/1.1"
connectionTimeout="20000"
redirectPort="8443" />
<!-- A "Connector" using the shared thread pool-->
<!--
<Connector executor="tomcatThreadPool"
port="8080" protocol="HTTP/1.1"
connectionTimeout="20000"
redirectPort="8443" />
-->
<!-- Define an SSL/TLS HTTP/1.1 Connector on port 8443
This connector uses the NIO implementation. The default
SSLImplementation will depend on the presence of the APR/native
library and the useOpenSSL attribute of the
AprLifecycleListener.
Either JSSE or OpenSSL style configuration may be used regardless of
the SSLImplementation selected. JSSE style configuration is used below.
-->
<!--
<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
maxThreads="150" SSLEnabled="true">
<SSLHostConfig>
<Certificate certificateKeystoreFile="conf/localhost-rsa.jks"
type="RSA" />
</SSLHostConfig>
</Connector>
-->
<!-- Define an SSL/TLS HTTP/1.1 Connector on port 8443 with HTTP/2
This connector uses the APR/native implementation which always uses
OpenSSL for TLS.
Either JSSE or OpenSSL style configuration may be used. OpenSSL style
configuration is used below.
-->
<!--
<Connector port="8443" protocol="org.apache.coyote.http11.Http11AprProtocol"
maxThreads="150" SSLEnabled="true" >
<UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" />
<SSLHostConfig>
<Certificate certificateKeyFile="conf/localhost-rsa-key.pem"
certificateFile="conf/localhost-rsa-cert.pem"
certificateChainFile="conf/localhost-rsa-chain.pem"
type="RSA" />
</SSLHostConfig>
</Connector>
-->
<!-- Define an AJP 1.3 Connector on port 8009 -->
<!--
<Connector protocol="AJP/1.3"
address="::1"
port="8009"
redirectPort="8443" />
-->
<!-- An Engine represents the entry point (within Catalina) that processes
every request. The Engine implementation for Tomcat stand alone
analyzes the HTTP headers included with the request, and passes them
on to the appropriate Host (virtual host).
Documentation at /docs/config/engine.html -->
<!-- You should set jvmRoute to support load-balancing via AJP ie :
<Engine name="Catalina" defaultHost="localhost" jvmRoute="jvm1">
-->
<Engine name="Catalina" defaultHost="localhost">
<!--For clustering, please take a look at documentation at:
/docs/cluster-howto.html (simple how to)
/docs/config/cluster.html (reference documentation) -->
<!--
<Cluster className="org.apache.catalina.ha.tcp.SimpleTcpCluster"/>
-->
<!-- Use the LockOutRealm to prevent attempts to guess user passwords
via a brute-force attack -->
<Realm className="org.apache.catalina.realm.LockOutRealm">
<!-- This Realm uses the UserDatabase configured in the global JNDI
resources under the key "UserDatabase". Any edits
that are performed against this UserDatabase are immediately
available for use by the Realm. -->
<Realm className="org.apache.catalina.realm.UserDatabaseRealm"
resourceName="UserDatabase"/>
</Realm>
<Host name="localhost" appBase="/data/tomcat/webapps" unpackWARs="false" autoDeploy="false">
<!-- SingleSignOn valve, share authentication between web applications
Documentation at: /docs/config/valve.html -->
<!--
<Valve className="org.apache.catalina.authenticator.SingleSignOn" />
-->
<!-- Access log processes all example.
Documentation at: /docs/config/valve.html
Note: The pattern used is equivalent to using pattern="common" -->
<Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
prefix="localhost_access_log" suffix=".txt"
pattern="%h %l %u %t "%r" %s %b" />
</Host>
</Engine>
</Service>
</Server>
root@zhaohuakang:tomcat# ll myapp
total 12
drwxr-xr-x 2 root root 4096 Apr 14 2021 ./
drwxr-xr-x 5 root root 4096 Feb 24 23:18 ../
-rw-r--r-- 1 root root 41 Apr 14 2021 index.jsp
root@zhaohuakang:tomcat# bash build-command.sh
启动访问
docker run -d -p 8080:8080 15154213303/tomcat-m43:app1
http://10.0.0.10:8080/myapp/
tomcat业务镜像2 15154213303/tomcat-m43:app2 拿jpress为例子，如果要去掉访问路径参考
https://blog.51cto.com/dayu/5798598 就是把war包变成ROOT.war
server.xml和之前的有区别
<Host name="localhost" appBase="/data/tomcat/webapps" unpackWARs="true" autoDeploy="false">
root@zhaohuakang:tomcat-app2# ls
build-command.sh Dockerfile jpress-v4.0.7.war run_tomcat.sh server.xml
root@zhaohuakang:tomcat-app2# chmod +x run_tomcat.sh
root@zhaohuakang:tomcat-app2# cat build-command.sh
#!/bin/bash
docker build -t 15154213303/tomcat-m43:app2 .
docker push 15154213303/tomcat-m43:app2
root@zhaohuakang:tomcat-app2# cat Dockerfile
FROM 15154213303/tomcat-centos-base:v8.5.65
LABEL maintainer="jack 2973707860@qq.com"
ADD run_tomcat.sh /apps/tomcat/bin/run_tomcat.sh
ADD server.xml /apps/tomcat/conf/server.xml
ADD jpress-v4.0.7.war /data/tomcat/webapps/jpress.war
RUN chown www.www /data /apps -R
EXPOSE 8080 8443
CMD ["/apps/tomcat/bin/run_tomcat.sh"]
root@zhaohuakang:tomcat-app2# cat run_tomcat.sh
#!/bin/bash
su - www -c "/apps/tomcat/bin/catalina.sh start"
tail -f /etc/hosts
root@zhaohuakang:tomcat-app2# cat server.xml
<Host name="localhost" appBase="/data/tomcat/webapps" unpackWARs="true" autoDeploy="false">
root@zhaohuakang:tomcat-app2# bash build-command.sh
启动容器访问
docker run -ti -d 8080:8080 15154213303/tomcat-m43:app2
http://10.0.0.10:8080/jpress
haproxy镜像
root@zhaohuakang:haproxy# ls
build-command.sh Dockerfile haproxy-2.2.11.tar.gz haproxy.cfg run_haproxy.sh
root@zhaohuakang:haproxy# chmod +x run_haproxy.sh
root@zhaohuakang:haproxy# cat build-command.sh
#!/bin/bash
docker build -t 15154213303/haproxy:v2.2.11 .
docker push 15154213303/haproxy:v2.2.11
root@zhaohuakang:haproxy# cat Dockerfile
FROM 15154213303/centos-base:2024-2-24
LABEL maintainer="jack 2973707860@qq.com"
RUN yum install libtermcap-devel ncurses-devel libevent-devel readline-devel gcc gcc-c++ glibc glibc-devel pcre pcre-devel openssl openssl-devel systemd-devel net-tools vim iotop bc zip unzip zlib-devel lrzsz tree screen lsof tcpdump wget ntpdate -y
ADD haproxy-2.2.11.tar.gz /usr/local/src
RUN cd /usr/local/src/haproxy-2.2.11 && make ARCH=x86_64 TARGET=linux-glibc USE_PCRE=1 USE_OPENSSL=1 USE_ZLIB=1 USE_SYSTEMD=1 USE_CPU_AFFINITY=1 PREFIX=/apps/haproxy && make install PREFIX=/apps/haproxy && cp haproxy /usr/sbin/ && mkdir /apps/haproxy/run -p
ADD run_haproxy.sh /apps/haproxy/bin/run_haproxy.sh
ADD haproxy.cfg /etc/haproxy/haproxy.cfg
EXPOSE 80 9999
CMD ["/apps/haproxy/bin/run_haproxy.sh"]
root@zhaohuakang:haproxy# cat haproxy.cfg
global
chroot /apps/haproxy
#stats socket /var/lib/haproxy/haproxy.sock mode 600 level admin
uid 99
gid 99
daemon
nbproc 1
pidfile /apps/haproxy/run/haproxy.pid
log 127.0.0.1 local3 info
defaults
option http-keep-alive
option forwardfor
mode http
timeout connect 300000ms
timeout client 300000ms
timeout server 300000ms
listen stats
mode http
bind 0.0.0.0:9999
stats enable
log global
stats uri /haproxy-status
stats auth haadmin:123456
listen web_port
bind 0.0.0.0:80
mode http
log global
balance roundrobin
server web1 10.0.0.10:8080 check inter 3000 fall 2 rise 5
root@zhaohuakang:haproxy# cat run_haproxy.sh
#!/bin/bash
/apps/haproxy/sbin/haproxy -f /etc/haproxy/haproxy.cfg
tail -f /etc/hosts
root@zhaohuakang:haproxy# bash build-command.sh
启动访问
root@zhaohuakang:haproxy# docker run -d -p 80:80 15154213303/haproxy:v2.2.11
http://10.0.0.10/jpress
