docker封装镜像

一、docker镜像的封装（httpd服务）

vim dvd.repo

[rhel7] name=rhel7 baseurl=http://172.25.20.250/rhel7.3 gpgcheck=0

vim Dockerfile

FROM rhel7 EXPOSE 80 COPY dvd.repo /etc/yum.repos.d/dvd.repo RUN rpmdb --rebuilddb && yum install -y httpd && yum clean all CMD ["/usr/sbin/httpd","-D","FOREGROUND"]

[root@foundation20 web]# docker build -t rhel7:v1 .

二、docker镜像的封装（sshd服务）

vim Dockerfile

FROM rhel7 EXPOSE 22 COPY dvd.repo /etc/yum.repos.d/dvd.repo RUN rpmdb --rebuilddb && yum install -y openssh-server openssh-clients && yum clean all&& ssh-keygen -q -t rsa -f /etc/ssh/ssh_host_rsa_key -N "" && ssh-keygen -q -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key -N "" && ssh-keygen -q -t ecdsa -f /etc/ssh/ssh_host_ed25519_key -N "" && echo root:westos | chpasswd CMD ["/usr/sbin/sshd","-D"]

vim dvd.repo

[rhel7] name=rhel7 baseurl=http://172.25.20.250/rhel7.3 gpgcheck=0

docker build -t rhel7:v2 .

三、docker镜像的封装（通过supervisord,将httpd和sshd结合起来）

vim dvd.repo

[dvd] name=rhel7.0 baseurl=http://172.25.254.250/rhel7.0/x86_64/dvd/ gpgcheck=0 [docker] name=docker baseurl=http://172.25.254.20/docker gpgcheck=0

vim Dockerfile

FROM rhel7 EXPOSE 80 22 COPY dvd.repo /etc/yum.repos.d/dvd.repo COPY supervisord.conf /etc/supervisord.conf RUN rpmdb --rebuilddb && yum install -y httpd openssh-server supervisor && yum clean all && ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key -N "" -q && ssh-keygen -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key -N "" -q && ssh-keygen -t ed25519 -f /etc/ssh/ssh_host_ed25519_key -N "" -q && echo root:westos | chpasswd CMD ["/usr/bin/supervisord"]

vim supervisord.conf

[supervisord] nodaemon=true [program:httpd] command=/usr/sbin/httpd [program:sshd] command=/usr/sbin/sshd -D

docker build -t rhel7:v3 .

三、docker镜像的封装(nginx)

vim Dockerfile

FROM rhel7 EXPOSE 80 ADD nginx-1.14.0.tar.gz /mnt COPY dvd.repo /etc/yum.repos.d/dvd.repo RUN rpmdb --rebuilddb && yum install -y gcc pcre-devel openssl-devel make && cd /mnt/nginx-1.14.0 && sed -i 's/CFLAGS="$CFLAGS -g"/#CFLAGS="$CFLAGS -g"/g' auto/cc/gcc && ./configure --prefix=/usr/local/nginx --with-http_ssl_module --with-http_stub_status_module --with-threads --with-file-aio && make && make install && cd .. && rm -fr /mnt/nginx-1.14.0 && yum remove gcc pcre-devel openssl-devel make -y && yum clean all FROM rhel7 COPY --from=build /usr/local/nginx /usr/local/nginx CMD ["/usr/local/nginx/sbin/nginx","-g","daemon off;"]

vim dvd.repo

[dvd] name=rhel7.0 baseurl=http://172.25.254.250/rhel7.2 gpgcheck=0

docker build -t rhel7:v4 .

 

vim Dockerfile

FROM nginx as base # https://en.wikipedia.org/wiki/List_of_tz_database_time_zones ARG TIME_ZONE RUN mkdir -p /opt/var/cache/nginx && \ cp -a --parents /usr/lib/nginx /opt && \ cp -a --parents /usr/share/nginx /opt && \ cp -a --parents /var/log/nginx /opt && \ cp -aL --parents /var/run /opt && \ cp -a --parents /etc/nginx /opt && \ cp -a --parents /etc/passwd /opt && \ cp -a --parents /etc/group /opt && \ cp -a --parents /usr/sbin/nginx /opt && \ cp -a --parents /lib/x86_64-linux-gnu/libpcre.so.* /opt && \ cp -a --parents /lib/x86_64-linux-gnu/libz.so.* /opt && \ cp -a --parents /lib/x86_64-linux-gnu/libc.so.* /opt && \ cp -a --parents /lib/x86_64-linux-gnu/libdl.so.* /opt && \ cp -a --parents /lib/x86_64-linux-gnu/libpthread.so.* /opt && \ cp -a --parents /lib/x86_64-linux-gnu/libcrypt.so.* /opt && \ cp -a --parents /usr/lib/x86_64-linux-gnu/libssl.so.* /opt && \ cp -a --parents /usr/lib/x86_64-linux-gnu/libcrypto.so.* /opt && \ cp /usr/share/zoneinfo/${TIME_ZONE:-ROC} /opt/etc/localtime FROM gcr.io/distroless/base COPY --from=base /opt / EXPOSE 80 ENTRYPOINT ["nginx", "-g", "daemon off;"]

vim dvd.repo

[dvd] name=rhel7.0 baseurl=http://172.25.254.250/rhel7.2 gpgcheck=0

docker build -t rhel7:v5 .