Mbiri ya vuto lakusamuka kwa docker (docker root)

Osapitilira masiku angapo apitawa, zidasankhidwa pa imodzi mwama seva kuti isamutse docker yosungirako (cholembera pomwe docker imasunga zotengera zonse ndi mafayilo azithunzi) kupita kugawo lina, lomwe.
anali ndi mphamvu zambiri. Ntchitoyi inkawoneka ngati yaing'ono ndipo sinalosere mavuto ...

Poyambira:

1. Imani ndi kupha zotengera zonse za pulogalamu yathu:

docker-compose down

ngati pali zotengera zambiri ndipo zili muzolemba zosiyanasiyana, mutha kuchita izi:

docker rm -f $(docker ps -q)

2. Imitsa daemon ya docker:

systemctl stop docker

3. Sunthani chikwatu kupita komwe mukufuna:

cp -r /var/lib/docker /docker/data/storage

4. Timauza docker daemon kuti ayang'ane m'ndandanda watsopano. Pali zosankha zingapo: gwiritsani ntchito -g mbendera kuloza daemon kunjira yatsopano, kapena ma systemd configs, omwe tidagwiritsa ntchito. Kapena symlink. Sindidzafotokoza zambiri za izi, zili pa intaneti. zonse zolemba zosunthira mizu ya docker kupita kumalo atsopano.

5. Yambitsani docker daemon ndikuwonetsetsa kuti ikuwoneka pamalo oyenera:

systemctl status docker

Mu imodzi mwa mizere yotulutsa tiyenera kuwona:

├─19493 /usr/bin/dockerd --data-root=/docker/data/storage

Tidawonetsetsa kuti chisankhocho chaperekedwa ku daemon, tsopano tiyeni tiwone ngati idayigwiritsa ntchito (zikomo inkvizitor68sl)!

docker info | awk '/Root Dir/ {print $NF}' 

6. Tiyeni tiyambe ntchito yathu:

docker-compose up -d

7. Chongani

Ndipo apa zosangalatsa zimayamba, DBMS, MQ, zonse zili bwino! Nawonso database ili yonse, chilichonse chimagwira ntchito ... kupatula nginx. Tili ndi zomanga zathu za nginx ndi Kerberos ndi ma courtesans. Ndipo kuyang'ana zipika za chidebe kukuwonetsa kuti sikungalembere ku /var/tmp - Chilolezo chatsutsidwa. Ndimakanda makachisi anga ndi zala zanga ndikuyesa kusanthula momwe zinthu zilili... Izi zingatheke bwanji? Chithunzi cha Docker sichinasinthe. Tangosuntha chikwatu. Zinagwira ntchito nthawi zonse, ndipo izi ndi zanu ... Chifukwa choyesera, ndinalowa mu chidebe ndi manja anga ndikusintha ufulu wa bukhu ili, panali muzu, muzu 755, anapereka muzu, muzu 777. Ndipo chirichonse chinayamba ... Lingaliro linayamba kumveka m'mutu mwanga - mtundu wina wachabechabe ... Ndinaganiza, chabwino, mwinamwake sindinaganizirepo kanthu ...

Ndinaganiza kuti tinayamba kukondana ndi ufulu wopeza mafayilo panthawi yakusamutsa. Tidayimitsa kugwiritsa ntchito, daemon ya docker, tichotsa chikwatu chatsopano ndikukopera / var/lib/docker chikwatu pogwiritsa ntchito rsync -a.

Ndikuganiza kuti zonse zili bwino tsopano, tiyeni tikweze pulogalamu ya Docker.

Aaand...vuto linakhalabe... Diso langa linagwedezeka. Ndinathamangira ku console ya makina anga enieni, komwe ndimayesa mayesero osiyanasiyana, ndinali ndi chithunzi cha nginx, ndipo ndinakwera mkati mwa chidebecho, ndipo apa ufulu wa chikwatu cha / var / tmp ndi mizu, mizu 777. monga momwe ndimayenera kukhazikitsa pamanja. Koma zithunzi ndizofanana!

Mafayilo a xfs adagwiritsidwa ntchito kulikonse.

Ndinafananiza kugwiritsa ntchito lamulo

docker inspect my-nginx:12345

Ma hashes onse ndi ofanana, onse amodzi kwa amodzi. Zonse pa seva komanso pamakina anga enieni. Ndinachotsa chithunzi cha nginx chapafupi ndikuchikokanso kuchokera ku registry, chomwe pazifukwa zingapo chili pamakina omwewo. Ndipo vuto ndi lomwelo... Tsopano diso langa lachiwiri likunjenjemera.

Sindikukumbukiranso zomwe zinali m'mutu mwanga, kuwonjezera pa kufuula "AAAAAAAAAA" ndi zina. Inali 4 koloko m'mawa, ndipo code code ya Docker idagwiritsidwa ntchito kumvetsetsa mfundo ya zigawo za hashing. Anatsegula chitini chachitatu cha chakumwa champhamvu. Ndipo pamapeto pake zidandiwonekera kuti hashing amangoganizira za fayilo, zomwe zili mkati mwake, koma OSATI KUPEZA UFULU! Ndiko kuti, mwanjira ina yodabwitsa ufulu wathu watayika, selinux ndi yolemala, acl sikugwiritsidwa ntchito, ndipo palibe chomata.

Ndidachotsa chithunzi chakumaloko, ndikuchotsanso chithunzicho ku registry ya docker ndikuchikankhiranso. Ndipo zonse zinayenda bwino. Zikuoneka kuti pa kusamutsa ufulu anataya, onse mkati fano m'deralo ndi mkati fano atagona kaundula. Monga ndanenera kale, pazifukwa zingapo zinali pa galimoto yomweyo. Ndipo zotsatira zake, mu bukhu limodzi /var/lib/docker.

Ndipo poyembekezera funso ngati adayesa kubwezeranso kuyang'ana kwa docker ku chikwatu chakale - ayi, sanayese, tsoka, mikhalidwe sinalole. Inde, ndipo ndinkafunadi kuti ndizindikire.

Nditalemba nkhaniyi, yankho la vutoli likuwoneka lodziwikiratu kwa ine, koma panthawi yowunikira sizikuwoneka choncho. Moona mtima, ndinafufuza Google ndipo sindinapeze zofanana.

Zotsatira: Ndinathetsa vutoli, sindikumvetsabe chifukwa =(

Ngati wina akudziwa, akuganiza, anali ndi masomphenya okhudza zomwe zingayambitse vutoli, ndidzakhala wokondwa kumva kuchokera kwa inu mu ndemanga!

Source: www.habr.com