TL;DR: He ʻatikala nānā - he alakaʻi i ka hoʻohālikelike ʻana i nā kaiapuni no ka holo ʻana i nā noi i loko o nā pahu. E noʻonoʻo ʻia nā mea hiki o Docker a me nā ʻōnaehana like ʻole.
He moʻolelo liʻiliʻi o kahi i hele mai ai
История
ʻO ke ala kaulana mua e hoʻokaʻawale i kahi noi ʻo chroot. Hāʻawi ka ʻōnaehana kelepona o ka inoa hoʻokahi i kahi hoʻololi i ka papa kuhikuhi kumu - no laila e hāʻawi ai i ke komo i ka papahana i kapa ʻia ʻo ia, ke komo wale i nā faila i loko o kēia papa kuhikuhi. Akā inā hāʻawi ʻia ka papahana i nā kuleana superuser i loko, hiki iā ia ke "pakele" mai ka chroot a loaʻa i ka ʻōnaehana hana nui. Eia kekahi, ma ka hoʻololi ʻana i ka papa kuhikuhi kumu, nā kumuwaiwai ʻē aʻe (RAM, processor), a me ke komo ʻana i ka pūnaewele, ʻaʻole i kaupalena ʻia.
ʻO ke ala aʻe, ʻo ia ka hoʻomaka ʻana i kahi ʻōnaehana hana piha i loko o kahi pahu, me ka hoʻohana ʻana i nā hana o ka kernel system operating system. Kapa ʻia kēia ʻano hana ʻokoʻa i nā ʻōnaehana hana like ʻole, akā like ke ʻano - e holo ana i nā ʻōnaehana hana kūʻokoʻa, e holo ana kēlā me kēia mea ma ka kernel hoʻokahi e holo ana i ka ʻōnaehana hana nui. Aia kēia me FreeBSD Jails, Solaris Zones, OpenVZ, a me LXC no Linux. Hāʻawi ʻia ka hoʻokaʻawale ʻana ʻaʻole wale no ka wahi disk, akā no nā kumuwaiwai ʻē aʻe, ʻo ia hoʻi, hiki i kēlā me kēia pahu ke loaʻa nā palena i ka manawa kaʻina hana, RAM, ka bandwidth pūnaewele. Hoʻohālikelike ʻia me ka chroot, ʻoi aku ka paʻakikī o ka waiho ʻana i ka ipu, no ka mea, ʻo ka superuser i loko o ka pahu ke komo wale i loko o ka ipu, akā naʻe, ma muli o ka pono e mālama i ka ʻōnaehana hana i loko o ka ipu a me ka hoʻohana ʻana i ka kernel kahiko. nā mana (e pili ana no Linux, i kahi liʻiliʻi ʻo FreeBSD), ʻaʻohe zero ka hiki ke "haʻihaʻi" i ka ʻōnaehana kaʻawale kernel a loaʻa i ka ʻōnaehana hana nui.
Ma kahi o ka hoʻokuʻu ʻana i kahi ʻōnaehana holoʻokoʻa holoʻokoʻa i loko o kahi pahu (me kahi ʻōnaehana hoʻomaka, kahi luna hoʻonohonoho, a me nā mea ʻē aʻe), hiki ke hoʻokuʻu koke ʻia nā noi, ʻo ka mea nui ka hāʻawi ʻana i nā noi me kēia manawa (ke alo o nā hale waihona puke e pono ai a nā faila ʻē aʻe). Ua lilo kēia manaʻo i kumu no ka virtualization application containerized, ʻo ia ka mea kaulana a kaulana loa ʻo Docker. Ke hoʻohālikelike ʻia me nā ʻōnaehana mua, ʻoi aku ka maʻalahi o ka hoʻokaʻawale ʻana, me ke kākoʻo i kūkulu ʻia no nā ʻupena virtual ma waena o nā ipu a me ka statefulness o ka noi i loko o kahi pahu, ua hopena i ka hiki ke kūkulu i kahi ʻano holistic hoʻokahi mai ka nui o nā kikowaena kino e holo i nā ipu - me ka ʻole. ka pono o ka hooponopono waiwai lima.
Docker
ʻO Docker ka polokalamu containerization palapala noi kaulana loa. Kākau ʻia ma ka ʻōlelo Go, hoʻohana ia i nā mana maʻamau o ka Linux kernel - cgroups, namespaces, capabilities, etc., a me nā ʻōnaehana faila Aufs a me nā mea ʻē aʻe e like me ka mālama ʻana i ka hakahaka disk.
Puna: wikimedia
kuhikuhipuʻuone
Ma mua o ka mana 1.11, ua hana ʻo Docker ma ke ʻano he lawelawe hoʻokahi i hana i nā hana āpau me nā ipu: hoʻoiho i nā kiʻi no nā ipu, hoʻokuʻu i nā ipu, hoʻoponopono i nā noi API. Mai ka mana 1.11, ua hoʻokaʻawale ʻia ʻo Docker i nā ʻāpana he nui e pili ana kekahi i kekahi: containerd, e mālama i ke ola holoʻokoʻa o nā ipu (ka hoʻokaʻawale ʻana i ka wahi disk, hoʻoiho i nā kiʻi, networking, hoʻokuʻu, hoʻokomo a nānā i ke kūlana o nā ipu) a me runC , nā manawa holo pahu, e pili ana i ka hoʻohana ʻana i nā hui cgroup a me nā hiʻohiʻona ʻē aʻe o ka kernel Linux. Ke noho nei ka lawelawe docker, akā i kēia manawa ke lawelawe wale nei i ka hoʻoponopono ʻana i nā noi API i hoʻolaha ʻia i containerd.
Hoʻonoho a hoʻonohonoho ʻana
ʻO kaʻu ala punahele e hoʻokomo ai i ka docker he docker-machine, ʻo ia hoʻi, me ka hoʻonohonoho pololei a me ka hoʻonohonoho ʻana i ka docker ma nā kikowaena mamao (me nā ao like ʻole), hiki iā ʻoe ke hana me nā ʻōnaehana faila o nā kikowaena mamao, a hiki ke holo i nā kauoha like ʻole.
Eia nō naʻe, mai ka makahiki 2018, ʻaʻole i hoʻomohala ʻia ka papahana, no laila e hoʻokomo mākou iā ia ma ke ʻano maʻamau no ka hapa nui o nā hoʻolaha Linux - ma ka hoʻohui ʻana i kahi waihona a me ka hoʻokomo ʻana i nā pūʻulu pono.
Hoʻohana ʻia kēia ʻano hana no ka hoʻonohonoho ʻana, no ka laʻana, me ka hoʻohana ʻana iā Ansible a i ʻole nā ʻōnaehana like ʻole, akā ʻaʻole wau e noʻonoʻo i kēia ʻatikala.
E hoʻokō ʻia ka hoʻonohonoho ʻana ma Centos 7, e hoʻohana wau i kahi mīkini virtual ma ke ʻano he kikowaena, e hoʻokomo, e holo wale i nā kauoha ma lalo nei:
# yum install -y yum-utils
# yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
# yum install docker-ce docker-ce-cli containerd.ioMa hope o ka hoʻouka ʻana, pono ʻoe e hoʻomaka i ka lawelawe, e hoʻokomo i ka autoload:
# systemctl enable docker
# systemctl start docker
# firewall-cmd --zone=public --add-port=2377/tcp --permanentEia hou, hiki iā ʻoe ke hana i kahi hui docker, hiki i nā mea hoʻohana ke hana me ka docker me ka ʻole sudo, hoʻonohonoho i ka logging, hiki ke komo i ka API mai waho, mai poina e hoʻoponopono maikaʻi i ka pā ahi (ʻo nā mea āpau ʻaʻole i ʻae ʻia. pāpā ʻia i nā hiʻohiʻona ma luna a ma lalo - ua haʻalele wau i kēia no ka maʻalahi a me ka nānā ʻana), akā ʻaʻole wau e hele i nā kikoʻī hou aku ma aneʻi.
Nā hiʻohiʻona ʻē aʻe
Ma waho aʻe o ka mīkini docker ma luna, aia kekahi papa inoa docker, kahi mea hana no ka mālama ʻana i nā kiʻi no nā ipu, a me ka docker compose - kahi mea hana no ka hoʻokaʻawale ʻana i nā noi i loko o nā pahu, hoʻohana ʻia nā faila YAML e kūkulu a hoʻonohonoho i nā ipu a nā mea pili ʻē aʻe (no ka laʻana, nā pūnaewele, nā ʻōnaehana waihona hoʻomau no ka mālama ʻana i ka ʻikepili).
Hiki ke hoʻohana ʻia e hoʻonohonoho i nā paipu no CICD. ʻO kekahi hiʻohiʻona hoihoi e hana ana ma ke ʻano cluster, ka mea i kapa ʻia ʻo swarm mode (ma mua o ka mana 1.12 ua ʻike ʻia ʻo ia ʻo docker swarm), e hiki ai iā ʻoe ke hōʻuluʻulu i kahi ʻōnaehana hoʻokahi mai nā kikowaena e holo i nā ipu. Loaʻa ke kākoʻo no kahi pūnaewele virtual ma luna o nā kikowaena āpau, aia kahi mea kaulike i kūkulu ʻia, a me ke kākoʻo no nā mea huna no nā ipu.
Hiki ke hoʻohana ʻia nā faila YAML mai docker compose no ia mau puʻupuʻu me nā hoʻololi liʻiliʻi, hoʻopiha piha i ka mālama ʻana i nā puʻupuʻu liʻiliʻi a me waena no nā kumu like ʻole. No nā pūʻulu nui, ʻoi aku ka maikaʻi o nā Kubernetes no ka mea hiki ke ʻoi aku ka nui o nā kumukūʻai mālama ʻana i ke ʻano swarm ma mua o nā Kubernetes. Ma waho aʻe o ka runC, ma ke ʻano he hana hoʻokō no nā ipu, hiki iā ʻoe ke hoʻouka, no ka laʻana
Ke hana pū me Docker
Ma hope o ka hoʻonohonoho ʻana a me ka hoʻonohonoho ʻana, e hoʻāʻo mākou e kūkulu i kahi pūʻulu kahi e kau ai mākou iā GitLab a me Docker Registry no ka hui hoʻomohala. Ma ke ʻano he mau kikowaena, e hoʻohana wau i ʻekolu mau mīkini virtual, kahi aʻu e kau ai i ka FS i hāʻawi ʻia ʻo GlusterFS, e hoʻohana wau iā ia ma ke ʻano he waihona docker volumes, no ka laʻana, e holo i kahi mana palekana-palekana o ka papa inoa docker. Nā mea nui e holo: Docker Registry, Postgresql, Redis, GitLab me ke kākoʻo no GitLab Runner ma luna o Swarm. E hoʻokuʻu ʻia ʻo Postgresql me ka clustering , no laila ʻaʻole pono ʻoe e hoʻohana iā GlusterFS e mālama i ka ʻikepili Postgresql. E mālama ʻia ke koena o ka ʻikepili koʻikoʻi ma GlusterFS.
No ka kau ʻana iā GlusterFS ma nā kikowaena āpau (ua kapa ʻia lākou node1, node2, node3), pono ʻoe e hoʻokomo i nā pūʻolo, hiki i ka pā ahi, hana i nā papa kuhikuhi pono:
# yum -y install centos-release-gluster7
# yum -y install glusterfs-server
# systemctl enable glusterd
# systemctl start glusterd
# firewall-cmd --add-service=glusterfs --permanent
# firewall-cmd --reload
# mkdir -p /srv/gluster
# mkdir -p /srv/docker
# echo "$(hostname):/docker /srv/docker glusterfs defaults,_netdev 0 0" >> /etc/fstabMa hope o ka hoʻouka ʻana, pono e hoʻomau ʻia ka hana ma ka hoʻonohonoho ʻana iā GlusterFS mai hoʻokahi node, no ka laʻana node1:
# gluster peer probe node2
# gluster peer probe node3
# gluster volume create docker replica 3 node1:/srv/gluster node2:/srv/gluster node3:/srv/gluster force
# gluster volume start dockerA laila pono ʻoe e kau i ka leo hopena (pono e holo ke kauoha ma nā kikowaena āpau):
# mount /srv/dockerHoʻonohonoho ʻia ke ʻano swarm ma kekahi o nā kikowaena, ʻo ia ke alakaʻi, ʻo ke koena e hui pū i ka pūʻulu, no laila, ʻo ka hopena o ka holo ʻana i ke kauoha ma ke kikowaena mua e pono e kope a hoʻokō ʻia ma ke koena.
ʻO ka hoʻonohonoho cluster mua, holo wau i ke kauoha ma ka node1:
# docker swarm init
Swarm initialized: current node (a5jpfrh5uvo7svzz1ajduokyq) is now a manager.
To add a worker to this swarm, run the following command:
docker swarm join --token SWMTKN-1-0c5mf7mvzc7o7vjk0wngno2dy70xs95tovfxbv4tqt9280toku-863hyosdlzvd76trfptd4xnzd xx.xx.xx.xx:2377
To add a manager to this swarm, run 'docker swarm join-token manager' and follow the instructions.
# docker swarm join-token managerE kope i ka hopena o ke kauoha ʻelua, e hoʻokō i ka node2 a me ka node3:
# docker swarm join --token SWMTKN-x-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx-xxxxxxxxx xx.xx.xx.xx:2377
This node joined a swarm as a manager.Hoʻopau kēia i ka hoʻonohonoho mua o nā kikowaena, e hoʻomaka kākou e hoʻonohonoho i nā lawelawe, e hoʻokuʻu ʻia nā kauoha e hoʻokō ʻia mai ka node1, ke ʻole i kuhikuhi ʻia.
ʻO ka mea mua, e hana mākou i nā pūnaewele no nā ipu:
# docker network create --driver=overlay etcd
# docker network create --driver=overlay pgsql
# docker network create --driver=overlay redis
# docker network create --driver=overlay traefik
# docker network create --driver=overlay gitlabA laila hōʻailona mākou i nā kikowaena, pono kēia e hoʻopaʻa i kekahi mau lawelawe i nā kikowaena:
# docker node update --label-add nodename=node1 node1
# docker node update --label-add nodename=node2 node2
# docker node update --label-add nodename=node3 node3A laila, hana mākou i nā papa kuhikuhi no ka mālama ʻana i nā ʻikepili etcd, ka waihona KV e pono ai ʻo Traefik a me Stolon. E like me Postgresql, he mau ipu kēia i hoʻopaʻa ʻia i nā kikowaena, no laila e hoʻokō mākou i kēia kauoha ma nā kikowaena āpau:
# mkdir -p /srv/etcdA laila, hana i kahi faila e hoʻonohonoho etcd a hoʻohana iā ia:
00etcd.yml
version: '3.7'
services:
etcd1:
image: quay.io/coreos/etcd:latest
hostname: etcd1
command:
- etcd
- --name=etcd1
- --data-dir=/data.etcd
- --advertise-client-urls=http://etcd1:2379
- --listen-client-urls=http://0.0.0.0:2379
- --initial-advertise-peer-urls=http://etcd1:2380
- --listen-peer-urls=http://0.0.0.0:2380
- --initial-cluster=etcd1=http://etcd1:2380,etcd2=http://etcd2:2380,etcd3=http://etcd3:2380
- --initial-cluster-state=new
- --initial-cluster-token=etcd-cluster
networks:
- etcd
volumes:
- etcd1vol:/data.etcd
deploy:
replicas: 1
placement:
constraints: [node.labels.nodename == node1]
etcd2:
image: quay.io/coreos/etcd:latest
hostname: etcd2
command:
- etcd
- --name=etcd2
- --data-dir=/data.etcd
- --advertise-client-urls=http://etcd2:2379
- --listen-client-urls=http://0.0.0.0:2379
- --initial-advertise-peer-urls=http://etcd2:2380
- --listen-peer-urls=http://0.0.0.0:2380
- --initial-cluster=etcd1=http://etcd1:2380,etcd2=http://etcd2:2380,etcd3=http://etcd3:2380
- --initial-cluster-state=new
- --initial-cluster-token=etcd-cluster
networks:
- etcd
volumes:
- etcd2vol:/data.etcd
deploy:
replicas: 1
placement:
constraints: [node.labels.nodename == node2]
etcd3:
image: quay.io/coreos/etcd:latest
hostname: etcd3
command:
- etcd
- --name=etcd3
- --data-dir=/data.etcd
- --advertise-client-urls=http://etcd3:2379
- --listen-client-urls=http://0.0.0.0:2379
- --initial-advertise-peer-urls=http://etcd3:2380
- --listen-peer-urls=http://0.0.0.0:2380
- --initial-cluster=etcd1=http://etcd1:2380,etcd2=http://etcd2:2380,etcd3=http://etcd3:2380
- --initial-cluster-state=new
- --initial-cluster-token=etcd-cluster
networks:
- etcd
volumes:
- etcd3vol:/data.etcd
deploy:
replicas: 1
placement:
constraints: [node.labels.nodename == node3]
volumes:
etcd1vol:
driver: local
driver_opts:
type: none
o: bind
device: "/srv/etcd"
etcd2vol:
driver: local
driver_opts:
type: none
o: bind
device: "/srv/etcd"
etcd3vol:
driver: local
driver_opts:
type: none
o: bind
device: "/srv/etcd"
networks:
etcd:
external: true# docker stack deploy --compose-file 00etcd.yml etcdMa hope o kekahi manawa, nānā mākou ua piʻi ka hui etcd:
# docker exec $(docker ps | awk '/etcd/ {print $1}') etcdctl member list
ade526d28b1f92f7: name=etcd1 peerURLs=http://etcd1:2380 clientURLs=http://etcd1:2379 isLeader=false
bd388e7810915853: name=etcd3 peerURLs=http://etcd3:2380 clientURLs=http://etcd3:2379 isLeader=false
d282ac2ce600c1ce: name=etcd2 peerURLs=http://etcd2:2380 clientURLs=http://etcd2:2379 isLeader=true
# docker exec $(docker ps | awk '/etcd/ {print $1}') etcdctl cluster-health
member ade526d28b1f92f7 is healthy: got healthy result from http://etcd1:2379
member bd388e7810915853 is healthy: got healthy result from http://etcd3:2379
member d282ac2ce600c1ce is healthy: got healthy result from http://etcd2:2379
cluster is healthyE hana i nā papa kuhikuhi no Postgresql, e hoʻokō i ke kauoha ma nā kikowaena āpau:
# mkdir -p /srv/pgsqlA laila, hana i kahi faila e hoʻonohonoho iā Postgresql:
01pgsql.yml
version: '3.7'
services:
pgsentinel:
image: sorintlab/stolon:master-pg10
command:
- gosu
- stolon
- stolon-sentinel
- --cluster-name=stolon-cluster
- --store-backend=etcdv3
- --store-endpoints=http://etcd1:2379,http://etcd2:2379,http://etcd3:2379
- --log-level=debug
networks:
- etcd
- pgsql
deploy:
replicas: 3
update_config:
parallelism: 1
delay: 30s
order: stop-first
failure_action: pause
pgkeeper1:
image: sorintlab/stolon:master-pg10
hostname: pgkeeper1
command:
- gosu
- stolon
- stolon-keeper
- --pg-listen-address=pgkeeper1
- --pg-repl-username=replica
- --uid=pgkeeper1
- --pg-su-username=postgres
- --pg-su-passwordfile=/run/secrets/pgsql
- --pg-repl-passwordfile=/run/secrets/pgsql_repl
- --data-dir=/var/lib/postgresql/data
- --cluster-name=stolon-cluster
- --store-backend=etcdv3
- --store-endpoints=http://etcd1:2379,http://etcd2:2379,http://etcd3:2379
networks:
- etcd
- pgsql
environment:
- PGDATA=/var/lib/postgresql/data
volumes:
- pgkeeper1:/var/lib/postgresql/data
secrets:
- pgsql
- pgsql_repl
deploy:
replicas: 1
placement:
constraints: [node.labels.nodename == node1]
pgkeeper2:
image: sorintlab/stolon:master-pg10
hostname: pgkeeper2
command:
- gosu
- stolon
- stolon-keeper
- --pg-listen-address=pgkeeper2
- --pg-repl-username=replica
- --uid=pgkeeper2
- --pg-su-username=postgres
- --pg-su-passwordfile=/run/secrets/pgsql
- --pg-repl-passwordfile=/run/secrets/pgsql_repl
- --data-dir=/var/lib/postgresql/data
- --cluster-name=stolon-cluster
- --store-backend=etcdv3
- --store-endpoints=http://etcd1:2379,http://etcd2:2379,http://etcd3:2379
networks:
- etcd
- pgsql
environment:
- PGDATA=/var/lib/postgresql/data
volumes:
- pgkeeper2:/var/lib/postgresql/data
secrets:
- pgsql
- pgsql_repl
deploy:
replicas: 1
placement:
constraints: [node.labels.nodename == node2]
pgkeeper3:
image: sorintlab/stolon:master-pg10
hostname: pgkeeper3
command:
- gosu
- stolon
- stolon-keeper
- --pg-listen-address=pgkeeper3
- --pg-repl-username=replica
- --uid=pgkeeper3
- --pg-su-username=postgres
- --pg-su-passwordfile=/run/secrets/pgsql
- --pg-repl-passwordfile=/run/secrets/pgsql_repl
- --data-dir=/var/lib/postgresql/data
- --cluster-name=stolon-cluster
- --store-backend=etcdv3
- --store-endpoints=http://etcd1:2379,http://etcd2:2379,http://etcd3:2379
networks:
- etcd
- pgsql
environment:
- PGDATA=/var/lib/postgresql/data
volumes:
- pgkeeper3:/var/lib/postgresql/data
secrets:
- pgsql
- pgsql_repl
deploy:
replicas: 1
placement:
constraints: [node.labels.nodename == node3]
postgresql:
image: sorintlab/stolon:master-pg10
command: gosu stolon stolon-proxy --listen-address 0.0.0.0 --cluster-name stolon-cluster --store-backend=etcdv3 --store-endpoints http://etcd1:2379,http://etcd2:2379,http://etcd3:2379
networks:
- etcd
- pgsql
deploy:
replicas: 3
update_config:
parallelism: 1
delay: 30s
order: stop-first
failure_action: rollback
volumes:
pgkeeper1:
driver: local
driver_opts:
type: none
o: bind
device: "/srv/pgsql"
pgkeeper2:
driver: local
driver_opts:
type: none
o: bind
device: "/srv/pgsql"
pgkeeper3:
driver: local
driver_opts:
type: none
o: bind
device: "/srv/pgsql"
secrets:
pgsql:
file: "/srv/docker/postgres"
pgsql_repl:
file: "/srv/docker/replica"
networks:
etcd:
external: true
pgsql:
external: trueHoʻopuka mākou i nā mea huna, hoʻopili i ka faila:
# </dev/urandom tr -dc 234567890qwertyuopasdfghjkzxcvbnmQWERTYUPASDFGHKLZXCVBNM | head -c $(((RANDOM%3)+15)) > /srv/docker/replica
# </dev/urandom tr -dc 234567890qwertyuopasdfghjkzxcvbnmQWERTYUPASDFGHKLZXCVBNM | head -c $(((RANDOM%3)+15)) > /srv/docker/postgres
# docker stack deploy --compose-file 01pgsql.yml pgsqlI kekahi manawa ma hope (e nānā i ka puka o ke kauoha lawelawe docker lsua ala aʻe nā lawelawe āpau) hoʻomaka i ka pūʻulu Postgresql:
# docker exec $(docker ps | awk '/pgkeeper/ {print $1}') stolonctl --cluster-name=stolon-cluster --store-backend=etcdv3 --store-endpoints=http://etcd1:2379,http://etcd2:2379,http://etcd3:2379 initKe nānā nei i ka mākaukau o ka pūʻulu Postgresql:
# docker exec $(docker ps | awk '/pgkeeper/ {print $1}') stolonctl --cluster-name=stolon-cluster --store-backend=etcdv3 --store-endpoints=http://etcd1:2379,http://etcd2:2379,http://etcd3:2379 status
=== Active sentinels ===
ID LEADER
26baa11d false
74e98768 false
a8cb002b true
=== Active proxies ===
ID
4d233826
9f562f3b
b0c79ff1
=== Keepers ===
UID HEALTHY PG LISTENADDRESS PG HEALTHY PG WANTEDGENERATION PG CURRENTGENERATION
pgkeeper1 true pgkeeper1:5432 true 2 2
pgkeeper2 true pgkeeper2:5432 true 2 2
pgkeeper3 true pgkeeper3:5432 true 3 3
=== Cluster Info ===
Master Keeper: pgkeeper3
===== Keepers/DB tree =====
pgkeeper3 (master)
├─pgkeeper2
└─pgkeeper1
Hoʻonohonoho mākou i ka traefik e wehe i ke komo i nā pahu mai waho:
03traefik.yml
version: '3.7'
services:
traefik:
image: traefik:latest
command: >
--log.level=INFO
--providers.docker=true
--entryPoints.web.address=:80
--providers.providersThrottleDuration=2
--providers.docker.watch=true
--providers.docker.swarmMode=true
--providers.docker.swarmModeRefreshSeconds=15s
--providers.docker.exposedbydefault=false
--accessLog.bufferingSize=0
--api=true
--api.dashboard=true
--api.insecure=true
networks:
- traefik
ports:
- 80:80
volumes:
- /var/run/docker.sock:/var/run/docker.sock
deploy:
replicas: 3
placement:
constraints:
- node.role == manager
preferences:
- spread: node.id
labels:
- traefik.enable=true
- traefik.http.routers.traefik.rule=Host(`traefik.example.com`)
- traefik.http.services.traefik.loadbalancer.server.port=8080
- traefik.docker.network=traefik
networks:
traefik:
external: true# docker stack deploy --compose-file 03traefik.yml traefikHoʻomaka mākou i Redis Cluster, no kēia hana mākou i kahi papa kuhikuhi mālama ma nā nodes a pau:
# mkdir -p /srv/redis05redis.yml
version: '3.7'
services:
redis-master:
image: 'bitnami/redis:latest'
networks:
- redis
ports:
- '6379:6379'
environment:
- REDIS_REPLICATION_MODE=master
- REDIS_PASSWORD=xxxxxxxxxxx
deploy:
mode: global
restart_policy:
condition: any
volumes:
- 'redis:/opt/bitnami/redis/etc/'
redis-replica:
image: 'bitnami/redis:latest'
networks:
- redis
ports:
- '6379'
depends_on:
- redis-master
environment:
- REDIS_REPLICATION_MODE=slave
- REDIS_MASTER_HOST=redis-master
- REDIS_MASTER_PORT_NUMBER=6379
- REDIS_MASTER_PASSWORD=xxxxxxxxxxx
- REDIS_PASSWORD=xxxxxxxxxxx
deploy:
mode: replicated
replicas: 3
update_config:
parallelism: 1
delay: 10s
restart_policy:
condition: any
redis-sentinel:
image: 'bitnami/redis:latest'
networks:
- redis
ports:
- '16379'
depends_on:
- redis-master
- redis-replica
entrypoint: |
bash -c 'bash -s <<EOF
"/bin/bash" -c "cat <<EOF > /opt/bitnami/redis/etc/sentinel.conf
port 16379
dir /tmp
sentinel monitor master-node redis-master 6379 2
sentinel down-after-milliseconds master-node 5000
sentinel parallel-syncs master-node 1
sentinel failover-timeout master-node 5000
sentinel auth-pass master-node xxxxxxxxxxx
sentinel announce-ip redis-sentinel
sentinel announce-port 16379
EOF"
"/bin/bash" -c "redis-sentinel /opt/bitnami/redis/etc/sentinel.conf"
EOF'
deploy:
mode: global
restart_policy:
condition: any
volumes:
redis:
driver: local
driver_opts:
type: 'none'
o: 'bind'
device: "/srv/redis"
networks:
redis:
external: true# docker stack deploy --compose-file 05redis.yml redisHoʻohui i ka Docker Registry:
06registry.yml
version: '3.7'
services:
registry:
image: registry:2.6
networks:
- traefik
volumes:
- registry_data:/var/lib/registry
deploy:
replicas: 1
placement:
constraints: [node.role == manager]
restart_policy:
condition: on-failure
labels:
- traefik.enable=true
- traefik.http.routers.registry.rule=Host(`registry.example.com`)
- traefik.http.services.registry.loadbalancer.server.port=5000
- traefik.docker.network=traefik
volumes:
registry_data:
driver: local
driver_opts:
type: none
o: bind
device: "/srv/docker/registry"
networks:
traefik:
external: true# mkdir /srv/docker/registry
# docker stack deploy --compose-file 06registry.yml registryA ʻo ka hope - GitLab:
08gitlab-runner.yml
version: '3.7'
services:
gitlab:
image: gitlab/gitlab-ce:latest
networks:
- pgsql
- redis
- traefik
- gitlab
ports:
- 22222:22
environment:
GITLAB_OMNIBUS_CONFIG: |
postgresql['enable'] = false
redis['enable'] = false
gitlab_rails['registry_enabled'] = false
gitlab_rails['db_username'] = "gitlab"
gitlab_rails['db_password'] = "XXXXXXXXXXX"
gitlab_rails['db_host'] = "postgresql"
gitlab_rails['db_port'] = "5432"
gitlab_rails['db_database'] = "gitlab"
gitlab_rails['db_adapter'] = 'postgresql'
gitlab_rails['db_encoding'] = 'utf8'
gitlab_rails['redis_host'] = 'redis-master'
gitlab_rails['redis_port'] = '6379'
gitlab_rails['redis_password'] = 'xxxxxxxxxxx'
gitlab_rails['smtp_enable'] = true
gitlab_rails['smtp_address'] = "smtp.yandex.ru"
gitlab_rails['smtp_port'] = 465
gitlab_rails['smtp_user_name'] = "[email protected]"
gitlab_rails['smtp_password'] = "xxxxxxxxx"
gitlab_rails['smtp_domain'] = "example.com"
gitlab_rails['gitlab_email_from'] = '[email protected]'
gitlab_rails['smtp_authentication'] = "login"
gitlab_rails['smtp_tls'] = true
gitlab_rails['smtp_enable_starttls_auto'] = true
gitlab_rails['smtp_openssl_verify_mode'] = 'peer'
external_url 'http://gitlab.example.com/'
gitlab_rails['gitlab_shell_ssh_port'] = 22222
volumes:
- gitlab_conf:/etc/gitlab
- gitlab_logs:/var/log/gitlab
- gitlab_data:/var/opt/gitlab
deploy:
mode: replicated
replicas: 1
placement:
constraints:
- node.role == manager
labels:
- traefik.enable=true
- traefik.http.routers.gitlab.rule=Host(`gitlab.example.com`)
- traefik.http.services.gitlab.loadbalancer.server.port=80
- traefik.docker.network=traefik
gitlab-runner:
image: gitlab/gitlab-runner:latest
networks:
- gitlab
volumes:
- gitlab_runner_conf:/etc/gitlab
- /var/run/docker.sock:/var/run/docker.sock
deploy:
mode: replicated
replicas: 1
placement:
constraints:
- node.role == manager
volumes:
gitlab_conf:
driver: local
driver_opts:
type: none
o: bind
device: "/srv/docker/gitlab/conf"
gitlab_logs:
driver: local
driver_opts:
type: none
o: bind
device: "/srv/docker/gitlab/logs"
gitlab_data:
driver: local
driver_opts:
type: none
o: bind
device: "/srv/docker/gitlab/data"
gitlab_runner_conf:
driver: local
driver_opts:
type: none
o: bind
device: "/srv/docker/gitlab/runner"
networks:
pgsql:
external: true
redis:
external: true
traefik:
external: true
gitlab:
external: true# mkdir -p /srv/docker/gitlab/conf
# mkdir -p /srv/docker/gitlab/logs
# mkdir -p /srv/docker/gitlab/data
# mkdir -p /srv/docker/gitlab/runner
# docker stack deploy --compose-file 08gitlab-runner.yml gitlabʻO ke kūlana hope o ka pūpū a me nā lawelawe:
# docker service ls
ID NAME MODE REPLICAS IMAGE PORTS
lef9n3m92buq etcd_etcd1 replicated 1/1 quay.io/coreos/etcd:latest
ij6uyyo792x5 etcd_etcd2 replicated 1/1 quay.io/coreos/etcd:latest
fqttqpjgp6pp etcd_etcd3 replicated 1/1 quay.io/coreos/etcd:latest
hq5iyga28w33 gitlab_gitlab replicated 1/1 gitlab/gitlab-ce:latest *:22222->22/tcp
dt7s6vs0q4qc gitlab_gitlab-runner replicated 1/1 gitlab/gitlab-runner:latest
k7uoezno0h9n pgsql_pgkeeper1 replicated 1/1 sorintlab/stolon:master-pg10
cnrwul4r4nse pgsql_pgkeeper2 replicated 1/1 sorintlab/stolon:master-pg10
frflfnpty7tr pgsql_pgkeeper3 replicated 1/1 sorintlab/stolon:master-pg10
x7pqqchi52kq pgsql_pgsentinel replicated 3/3 sorintlab/stolon:master-pg10
mwu2wl8fti4r pgsql_postgresql replicated 3/3 sorintlab/stolon:master-pg10
9hkbe2vksbzb redis_redis-master global 3/3 bitnami/redis:latest *:6379->6379/tcp
l88zn8cla7dc redis_redis-replica replicated 3/3 bitnami/redis:latest *:30003->6379/tcp
1utp309xfmsy redis_redis-sentinel global 3/3 bitnami/redis:latest *:30002->16379/tcp
oteb824ylhyp registry_registry replicated 1/1 registry:2.6
qovrah8nzzu8 traefik_traefik replicated 3/3 traefik:latest *:80->80/tcp, *:443->443/tcpHe aha hou aʻe e hiki ke hoʻomaikaʻi? E ʻoluʻolu e hoʻonohonoho iā Traefik e hana me nā pahu https, e hoʻohui i ka hoʻopunipuni tls no Postgresql a me Redis. Akā ma ka laulā, hiki iā ʻoe ke hāʻawi iā ia i nā mea hoʻomohala ma ke ʻano he PoC. E nānā kākou i nā koho ʻē aʻe iā Docker.
ʻO Podman
ʻO kekahi ʻenekini kaulana loa no ka holo ʻana i nā ipu i hui pū ʻia e nā pods (pods, pūʻulu o nā ipu i hoʻonohonoho pū ʻia). ʻAʻole like me Docker, ʻaʻole ia e koi i kekahi lawelawe e holo i nā ipu, hana ʻia nā hana āpau ma o ka waihona libpod. Ua kākau pū ʻia ma Go, pono i kahi runtime kūpono OCI e holo i nā ipu e like me runC.
ʻO ka hana ʻana me Podman ma ke ʻano maʻamau e like me Docker, i ka nui e hiki ai iā ʻoe ke hana e like me kēia (i ʻōlelo ʻia e nā mea he nui i hoʻāʻo, me ka mea kākau o kēia ʻatikala):
$ alias docker=podmana hiki iā ʻoe ke hoʻomau i ka hana. Ma keʻano laulā, he mea hoihoi loa ke kūlana me Podman, no ka mea, inā i hana nā ʻano mua o Kubernetes me Docker, a laila mai ka makahiki 2015, ma hope o ka hoʻohālikelike ʻana i ka honua ipu (OCI - Open Container Initiative) a me ka hoʻokaʻawale ʻana iā Docker i containerd a me runC, kahi ʻē aʻe i Ke kūkulu ʻia nei ʻo Docker e holo ma Kubernetes: CRI-O. ʻO Podman ma kēia ʻano he mea ʻē aʻe i Docker, i kūkulu ʻia ma luna o nā kumumanaʻo o Kubernetes, me ka hui pū ʻana o ka pahu, akā ʻo ka pahuhopu nui o ka papahana ʻo ia ka holo ʻana i nā pahu Docker-style me ka ʻole o nā lawelawe ʻē aʻe. No nā kumu maopopo, ʻaʻohe mode swarm, no ka mea, ʻōlelo maopopo nā mea hoʻomohala inā makemake ʻoe i kahi hui, e lawe iā Kubernetes.
Kāu Mau Koho Paʻamau
No ka hoʻouka ʻana ma Centos 7, hoʻāla wale i ka waihona Extras, a laila hoʻokomo i nā mea āpau me ke kauoha:
# yum -y install podmanNā hiʻohiʻona ʻē aʻe
Hiki iā Podman ke hana i nā ʻāpana no systemd, no laila e hoʻonā i ka pilikia o ka hoʻomaka ʻana i nā pahu ma hope o ka hoʻomaka ʻana o kahi kikowaena. Hoʻohui ʻia, ʻōlelo ʻia ʻo systemd e hana pololei e like me ka pid 1 i loko o ka pahu. No ke kūkulu ʻana i nā ipu, aia kahi mea hana buildah ʻokoʻa, aia pū kekahi mau mea hana ʻekolu - nā analogues o docker-compose, e hana pū ana i nā faila hoʻonohonoho Kubernetes-kūpono, no laila maʻalahi ka hoʻololi ʻana mai Podman a Kubernetes.
Ke hana nei me Podman
No ka mea, ʻaʻohe mode swarm (manaʻo ʻia e hoʻololi iā Kubernetes inā makemake ʻia kahi hui), e hōʻuluʻulu mākou iā ia i loko o nā pahu ʻokoʻa.
E hoʻouka i ka podman-compose:
# yum -y install python3-pip
# pip3 install podman-composeHe ʻokoʻa iki ka faila config no podman, no ka laʻana, pono mākou e neʻe i kahi ʻāpana volumes i ka ʻāpana lawelawe.
gitlab-podman.yml
version: '3.7'
services:
gitlab:
image: gitlab/gitlab-ce:latest
hostname: gitlab.example.com
restart: unless-stopped
environment:
GITLAB_OMNIBUS_CONFIG: |
gitlab_rails['gitlab_shell_ssh_port'] = 22222
ports:
- "80:80"
- "22222:22"
volumes:
- /srv/podman/gitlab/conf:/etc/gitlab
- /srv/podman/gitlab/data:/var/opt/gitlab
- /srv/podman/gitlab/logs:/var/log/gitlab
networks:
- gitlab
gitlab-runner:
image: gitlab/gitlab-runner:alpine
restart: unless-stopped
depends_on:
- gitlab
volumes:
- /srv/podman/gitlab/runner:/etc/gitlab-runner
- /var/run/docker.sock:/var/run/docker.sock
networks:
- gitlab
networks:
gitlab:# podman-compose -f gitlab-runner.yml -d upKa hopena o ka hana:
# podman ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
da53da946c01 docker.io/gitlab/gitlab-runner:alpine run --user=gitlab... About a minute ago Up About a minute ago 0.0.0.0:22222->22/tcp, 0.0.0.0:80->80/tcp root_gitlab-runner_1
781c0103c94a docker.io/gitlab/gitlab-ce:latest /assets/wrapper About a minute ago Up About a minute ago 0.0.0.0:22222->22/tcp, 0.0.0.0:80->80/tcp root_gitlab_1E ʻike kākou i ka mea e hana ai no systemd a me kubernetes, no kēia pono mākou e ʻike i ka inoa a i ʻole id o ka pod:
# podman pod ls
POD ID NAME STATUS CREATED # OF CONTAINERS INFRA ID
71fc2b2a5c63 root Running 11 minutes ago 3 db40ab8bf84bKubernetes:
# podman generate kube 71fc2b2a5c63
# Generation of Kubernetes YAML is still under development!
#
# Save the output of this file and use kubectl create -f to import
# it into Kubernetes.
#
# Created with podman-1.6.4
apiVersion: v1
kind: Pod
metadata:
creationTimestamp: "2020-07-29T19:22:40Z"
labels:
app: root
name: root
spec:
containers:
- command:
- /assets/wrapper
env:
- name: PATH
value: /opt/gitlab/embedded/bin:/opt/gitlab/bin:/assets:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
- name: TERM
value: xterm
- name: HOSTNAME
value: gitlab.example.com
- name: container
value: podman
- name: GITLAB_OMNIBUS_CONFIG
value: |
gitlab_rails['gitlab_shell_ssh_port'] = 22222
- name: LANG
value: C.UTF-8
image: docker.io/gitlab/gitlab-ce:latest
name: rootgitlab1
ports:
- containerPort: 22
hostPort: 22222
protocol: TCP
- containerPort: 80
hostPort: 80
protocol: TCP
resources: {}
securityContext:
allowPrivilegeEscalation: true
capabilities: {}
privileged: false
readOnlyRootFilesystem: false
volumeMounts:
- mountPath: /var/opt/gitlab
name: srv-podman-gitlab-data
- mountPath: /var/log/gitlab
name: srv-podman-gitlab-logs
- mountPath: /etc/gitlab
name: srv-podman-gitlab-conf
workingDir: /
- command:
- run
- --user=gitlab-runner
- --working-directory=/home/gitlab-runner
env:
- name: PATH
value: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
- name: TERM
value: xterm
- name: HOSTNAME
- name: container
value: podman
image: docker.io/gitlab/gitlab-runner:alpine
name: rootgitlab-runner1
resources: {}
securityContext:
allowPrivilegeEscalation: true
capabilities: {}
privileged: false
readOnlyRootFilesystem: false
volumeMounts:
- mountPath: /etc/gitlab-runner
name: srv-podman-gitlab-runner
- mountPath: /var/run/docker.sock
name: var-run-docker.sock
workingDir: /
volumes:
- hostPath:
path: /srv/podman/gitlab/runner
type: Directory
name: srv-podman-gitlab-runner
- hostPath:
path: /var/run/docker.sock
type: File
name: var-run-docker.sock
- hostPath:
path: /srv/podman/gitlab/data
type: Directory
name: srv-podman-gitlab-data
- hostPath:
path: /srv/podman/gitlab/logs
type: Directory
name: srv-podman-gitlab-logs
- hostPath:
path: /srv/podman/gitlab/conf
type: Directory
name: srv-podman-gitlab-conf
status: {}systemd:
# podman generate systemd 71fc2b2a5c63
# pod-71fc2b2a5c6346f0c1c86a2dc45dbe78fa192ea02aac001eb8347ccb8c043c26.service
# autogenerated by Podman 1.6.4
# Thu Jul 29 15:23:28 EDT 2020
[Unit]
Description=Podman pod-71fc2b2a5c6346f0c1c86a2dc45dbe78fa192ea02aac001eb8347ccb8c043c26.service
Documentation=man:podman-generate-systemd(1)
Requires=container-781c0103c94aaa113c17c58d05ddabf8df4bf39707b664abcf17ed2ceff467d3.service container-da53da946c01449f500aa5296d9ea6376f751948b17ca164df438b7df6607864.service
Before=container-781c0103c94aaa113c17c58d05ddabf8df4bf39707b664abcf17ed2ceff467d3.service container-da53da946c01449f500aa5296d9ea6376f751948b17ca164df438b7df6607864.service
[Service]
Restart=on-failure
ExecStart=/usr/bin/podman start db40ab8bf84bf35141159c26cb6e256b889c7a98c0418eee3c4aa683c14fccaa
ExecStop=/usr/bin/podman stop -t 10 db40ab8bf84bf35141159c26cb6e256b889c7a98c0418eee3c4aa683c14fccaa
KillMode=none
Type=forking
PIDFile=/var/run/containers/storage/overlay-containers/db40ab8bf84bf35141159c26cb6e256b889c7a98c0418eee3c4aa683c14fccaa/userdata/conmon.pid
[Install]
WantedBy=multi-user.target
# container-da53da946c01449f500aa5296d9ea6376f751948b17ca164df438b7df6607864.service
# autogenerated by Podman 1.6.4
# Thu Jul 29 15:23:28 EDT 2020
[Unit]
Description=Podman container-da53da946c01449f500aa5296d9ea6376f751948b17ca164df438b7df6607864.service
Documentation=man:podman-generate-systemd(1)
RefuseManualStart=yes
RefuseManualStop=yes
BindsTo=pod-71fc2b2a5c6346f0c1c86a2dc45dbe78fa192ea02aac001eb8347ccb8c043c26.service
After=pod-71fc2b2a5c6346f0c1c86a2dc45dbe78fa192ea02aac001eb8347ccb8c043c26.service
[Service]
Restart=on-failure
ExecStart=/usr/bin/podman start da53da946c01449f500aa5296d9ea6376f751948b17ca164df438b7df6607864
ExecStop=/usr/bin/podman stop -t 10 da53da946c01449f500aa5296d9ea6376f751948b17ca164df438b7df6607864
KillMode=none
Type=forking
PIDFile=/var/run/containers/storage/overlay-containers/da53da946c01449f500aa5296d9ea6376f751948b17ca164df438b7df6607864/userdata/conmon.pid
[Install]
WantedBy=multi-user.target
# container-781c0103c94aaa113c17c58d05ddabf8df4bf39707b664abcf17ed2ceff467d3.service
# autogenerated by Podman 1.6.4
# Thu Jul 29 15:23:28 EDT 2020
[Unit]
Description=Podman container-781c0103c94aaa113c17c58d05ddabf8df4bf39707b664abcf17ed2ceff467d3.service
Documentation=man:podman-generate-systemd(1)
RefuseManualStart=yes
RefuseManualStop=yes
BindsTo=pod-71fc2b2a5c6346f0c1c86a2dc45dbe78fa192ea02aac001eb8347ccb8c043c26.service
After=pod-71fc2b2a5c6346f0c1c86a2dc45dbe78fa192ea02aac001eb8347ccb8c043c26.service
[Service]
Restart=on-failure
ExecStart=/usr/bin/podman start 781c0103c94aaa113c17c58d05ddabf8df4bf39707b664abcf17ed2ceff467d3
ExecStop=/usr/bin/podman stop -t 10 781c0103c94aaa113c17c58d05ddabf8df4bf39707b664abcf17ed2ceff467d3
KillMode=none
Type=forking
PIDFile=/var/run/containers/storage/overlay-containers/781c0103c94aaa113c17c58d05ddabf8df4bf39707b664abcf17ed2ceff467d3/userdata/conmon.pid
[Install]
WantedBy=multi-user.targetʻO ka mea pōʻino, ma waho o ka holo ʻana i nā ipu, ʻaʻohe mea ʻē aʻe i hana ʻia no systemd (e like me ka hoʻomaʻemaʻe ʻana i nā ipu kahiko ke hoʻomaka hou ʻia kēlā lawelawe), no laila pono ʻoe e hoʻohui iā ʻoe iho.
Ma ke kumu, ua lawa ʻo Podman e hoʻāʻo i nā ipu, e hoʻololi i nā hoʻonohonoho kahiko no ka docker-compose, a laila hele i Kubernetes, inā pono, ma kahi hui, a i ʻole e kiʻi i kahi koho maʻalahi e hoʻohana iā Docker.
rkt
ʻO ka papahana ma kahi o ʻeono mahina i hala aku nei ma muli o ke kūʻai ʻana o RedHat iā ia, no laila ʻaʻole wau e noʻonoʻo i ka kikoʻī. Ma keʻano laulā, waiho i kahi manaʻo maikaʻi loa, akā i hoʻohālikelike ʻia me Docker, a ʻoi aku hoʻi iā Podman, ua like ia me kahi hui. Aia kekahi mahele CoreOS i kūkulu ʻia ma luna o ka rkt (ʻoiai ua loaʻa mua iā Docker), akā ua pau ia ma hope o ke kūʻai ʻana o RedHat.
Flash
Nā mea hou aku , ka mea kākau i makemake wale e kūkulu a holo i nā ipu. Ma ka hoʻoholoʻana i nā palapala a me nā code,ʻaʻole i hahai ka mea kākau i nā kūlana, akā ua hoʻoholo wale e kākau i kāna hoʻokō pono'ī,ʻo ia, ma keʻano, ua hanaʻo ia.
haʻina
ʻO ke kūlana me Kubernetes he mea hoihoi loa ia: ma ka lima hoʻokahi, me Docker, hiki iā ʻoe ke hōʻuluʻulu i kahi hui (ma ke ʻano swarm), me kahi hiki iā ʻoe ke holo i nā wahi hana no nā mea kūʻai aku, ʻoiaʻiʻo loa kēia no nā hui liʻiliʻi (3-5 poʻe. ), a i ʻole me kahi haʻahaʻa holoʻokoʻa liʻiliʻi, a i ʻole ka makemake ʻole e hoʻomaopopo i ka paʻakikī o ka hoʻonohonoho ʻana i nā Kubernetes, me nā ukana kiʻekiʻe.
ʻAʻole hāʻawi ʻo Podman i ka hoʻohālikelike piha, akā loaʻa iā ia kahi pōmaikaʻi koʻikoʻi - ka hoʻohālikelike me Kubernetes, me nā mea hana hou (buildah a me nā mea ʻē aʻe). No laila, e hoʻokokoke au i ke koho o kahi mea hana no ka hana penei: no nā hui liʻiliʻi, a i ʻole me ka palena kālā - Docker (me kahi ʻano swarm hiki), no ka hoʻomohala ʻana iaʻu iho ma kahi localhost pilikino - Podman comrades, a no nā mea ʻē aʻe. - Kubernetes.
ʻAʻole maopopo iaʻu ʻaʻole e loli ke kūlana me Docker i ka wā e hiki mai ana, ma hope o nā mea a pau, he mau paionia lākou, a ke hoʻomau lohi nei lākou i kēlā me kēia pae, akā ʻo Podman, me kāna mau hemahema (hana wale nō ma Linux, ʻaʻohe clustering, hui. a ʻo nā hana ʻē aʻe he mau hoʻoholo a nā ʻaoʻao ʻekolu) ʻoi aku ka maopopo o ka wā e hiki mai ana, no laila ke kono nei au i nā mea a pau e kūkākūkā i kēia mau ʻike ma nā ʻōlelo.
PS Ma ʻAukake 3, hoʻomaka mākou "kahi e hiki ai iā ʻoe ke aʻo hou e pili ana i kāna hana. E nānā mākou i kāna mau mea hana a pau: mai nā abstractions kumu a i nā ʻāpana pūnaewele, nā nuances o ka hana ʻana me nā ʻōnaehana hana like ʻole a me nā ʻōlelo hoʻonohonoho. E kamaʻāina ʻoe i ka ʻenehana a hoʻomaopopo i kahi a pehea e hoʻohana ai iā Docker. E kaʻana like mākou i nā hihia hoʻomaʻamaʻa maikaʻi loa.
ʻO ke kumu kūʻai mua ma mua o ka hoʻokuʻu ʻana: 5000 rubles. Hiki ke loaʻa ka papahana "Docker Video Course". .
Source: www.habr.com