ProHoster > Blog > Pulega > Docker ma mea uma, uma, uma

Docker ma mea uma, uma, uma

TL; DR: O se taʻiala lautele i le faʻatusatusaina o faʻatulagaga mo le faʻaogaina o talosaga i totonu o pusa. Ole gafatia ole Docker ma isi faiga tutusa o le a iloiloina.

Docker ma mea uma, uma, uma

O sina tala'aga o mea na sau ai

История

O le auala ta'uta'ua muamua mo le fa'aesea o se talosaga o le chroot. O le system call o le igoa lava e tasi e mautinoa ai ua suia le root directory - ma faʻamautinoa ai o le polokalama na taʻua ai e naʻo faila i totonu o lena lisi e mafai ona maua. Ae afai e tuʻuina atu i totonu se polokalame aʻa avanoa, e mafai ona "sosola" mai le chroot ma maua le avanoa i le faiga faʻaoga autu. E le gata i lea, i le faaopoopo atu i le suia o le root directory, o isi punaoa (RAM, processor), faʻapea foʻi ma fesoʻotaʻiga, e le faʻatapulaʻaina.

O le isi auala o le fa'agaoioia lea o se faiga fa'agaoioiga atoatoa i totonu o se koneteina, e fa'aaoga ai le faiga o le kernel o le faiga fa'agaoioiga. E eseese igoa o lenei metotia i faiga fa'agaoioiga eseese, ae e tutusa lava le uiga: fa'agaoioia le tele o faiga fa'agaoioiga tuto'atasi, e ta'itasi ma fa'agaoioia le kernel lava e tasi e pei o le faiga fa'agaoioiga autu. E aofia ai le FreeBSD Jails, Solaris Zones, OpenVZ, ma le LXC mo LinuxE le gata ina saunia le vavaeʻeseina e le avanoa o le tisiki, ae faʻapea foʻi ma isi punaoa; ae maise lava, e mafai e pusa taʻitasi ona i ai ni tapulaʻa i le taimi o le CPU, RAM, ma le bandwidth o fesoʻotaʻiga. Pe a faʻatusatusa i le chroot, e sili atu ona faigata le alu ese mai se pusa, talu ai e naʻo le avanoa i totonu o le pusa e mafai e le superuser i totonu ona maua. Peitaʻi, ona o le manaʻoga e faʻafouina le faiga faʻaoga i totonu o le pusa ma le faʻaaogaina o faʻaliliuga tuai o le kernel (talafeagai mo Linux, i se tulaga maualalo FreeBSD) e iai se avanoa e le o se zero e "solia ai" le kernel isolation system ma maua ai le avanoa i le operating system autu.

Nai lo le faʻalauiloaina o se faiga faʻaogaina atoatoa i totonu o se atigipusa (faʻatasi ai ma se faiga amata, pule o pusa, ma isi), e mafai ona e faʻalauiloa vave talosaga, o le mea autu o le tuʻuina atu lea o talosaga ma se avanoa (o le i ai o faletusi talafeagai. ma isi faila). O lenei manatu na avea ma faʻavae mo le faʻapipiʻiina o talosaga virtualization, o le sui sili ona lauiloa ma lauiloa o Docker. Pe a faʻatusatusa i faiga muamua, sili atu ona fetuutuunaʻi faiga faʻaesea, faʻatasi ai ma le faʻapipiʻiina o fesoʻotaiga vavave i le va o koneteina ma le tulaga o talosaga i totonu o le koneteina, na iʻu ai i le mafai ona fausia se siʻosiʻomaga tutusa e tasi mai se numera tele o sapalai faʻaletino mo pusa taʻavale - e aunoa ma le mana'omia o le fa'atonutonuina o punaoa tusi.

Docker

O le Docker o le polokalama sili ona lauiloa mo le teuina o koneteina o talosaga. Ua tusia i le gagana Go ma faʻaaogaina ai agavaʻa o le kernel masani. Linux — cgroups, namespaces, capabilities, ma isi mea faapena, faapea foi ma faila faila a le Aufs ma isi mea faapena e sefe ai le avanoa i le tisiki.

Docker ma mea uma, uma, uma
Punavai: wikimedia

atiga

A'o le'i iai le lomiga 1.11, sa fa'agaoioia Docker o se tautua e tasi e taulimaina uma galuega fa'atino a le koneteina: la'uina mai o ata o koneteina, fa'alauiloa koneteina, ma le taulimaina o talosaga API. Amata mai le lomiga 1.11, sa vaevaeina Docker i ni vaega fegalegalea'i: containerd, lea e taulimaina le ta'amilosaga atoa o le olaga o le koneteina (vaevaega o tisiketi, la'uina mai o ata, feso'ota'iga, fa'alauiloa, fa'apipi'iina, ma le mata'ituina o le tulaga o le koneteina), ma le runC, o se siosiomaga fa'agaoioia koneteina e fa'avae i luga o cgroups ma isi foliga o le kernel. LinuxO loʻo tumau pea le tautua a le Docker, ae o lea ua naʻo le faʻagasoloina o talosaga API na tuʻuina atu i le containerd.

Docker ma mea uma, uma, uma

Faʻapipiʻiina ma faʻatulagaina

O laʻu auala e sili ona ou fiafia i ai e faʻapipiʻi ai le docker o le docker-machine, lea, e faaopoopo atu i le faʻapipiʻi saʻo ma le faʻapipiʻiina o le docker i luga o servers mamao (e aofia ai ao eseese), e mafai ai ona galue ma faila faila o sapalai mamao ma e mafai foi ona faʻatautaia tulafono eseese.

Peita'i, talu mai le 2018 e le'i leva ona atia'eina le poloketi, o lea o le a matou fa'apipi'iina ai e fa'aaoga ai le metotia masani mo le tele o tufatufaga. Linux metotia - e ala i le faʻaopoopoina o se fale teu oloa ma le faʻapipiʻiina o afifi talafeagai.

O lenei metotia e faʻaaogaina foi mo le faʻapipiʻiina otometi, mo se faʻataʻitaʻiga faʻaaogaina Ansible poʻo isi faiga tutusa, ae o le a ou le mafaufau i ai i lenei tusiga.

O le fa'apipi'iina o le a faia i le Centos 7, o le a ou faʻaaogaina se masini faʻapitoa e fai ma 'auʻaunaga, mo le faʻapipiʻiina e lava le faʻatinoina o poloaiga o loʻo i lalo:

# yum install -y yum-utils
# yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
# yum install docker-ce docker-ce-cli containerd.io

A maeʻa faʻapipiʻi, e tatau ona e amataina le tautua ma tuʻu i le amataga:

# systemctl enable docker
# systemctl start docker
# firewall-cmd --zone=public --add-port=2377/tcp --permanent

E le gata i lea, e mafai ona e fatuina se vaega faʻapipiʻi, o latou tagata faʻaoga o le a mafai ona galulue faʻatasi ma le docker e aunoa ma le sudo, faʻapipiʻi logging, faʻatagaina le avanoa i le API mai fafo, ma aua nei galo e faʻapipiʻi saʻo le pa puipui (mea uma e le faʻatagaina faʻasaina i faʻataʻitaʻiga o loʻo i luga ma lalo - Na ou faʻaumatia lenei mea mo le faigofie ma le manino), ae o le a ou le faʻamatalaina atili iinei.

O isi vaega

I le faʻaopoopoga i le masini faʻapipiʻi ua taʻua i luga, o loʻo i ai foʻi le resitala o loʻo i luga, o se meafaigaluega mo le teuina o ata mo koneteina, faʻapea foʻi ma le docker compose, o se meafaigaluega mo le faʻaaogaina o talosaga i totonu o koneteina, faila YAML e faʻaaogaina e fausia ma faʻapipiʻi pusa. ma isi mea e feso'ota'i (fa'ata'ita'iga, feso'ota'iga, faiga faila fa'aauau mo le teuina o fa'amaumauga).

E mafai foi ona faʻaaogaina e faʻapipiʻi ai conveyors mo CICD. O le isi mea manaia o loʻo galue i le faʻapipiʻi mode, o le mea e taʻua o le swarm mode (aʻo leʻi oʻo i le version 1.12 sa taʻua o le docker swarm), lea e mafai ai ona e faʻapipiʻiina se atinaʻe se tasi mai le tele o sapalai mo pusa taʻavale. O loʻo i ai le lagolago mo se fesoʻotaiga vavave i luga o 'auʻaunaga uma, o loʻo i ai se paleni faʻapipiʻiina, faʻapea foʻi ma le lagolago mo mealilo mo pusa.

O faila a le YAML mai le docker compose, faʻatasi ai ma suiga laiti, e mafai ona faʻaogaina mo ia fuifui, faʻatosina atoatoa le tausiga o fuifui laiti ma feololo mo faamoemoega eseese. Mo fuifui tetele, e sili atu le Kubernetes ona o le tau o le tausiga o le faʻaogaina e mafai ona sili atu nai lo le Kubernetes. I le faʻaopoopoga i le runC, e mafai ona e faʻapipiʻi, mo se faʻataʻitaʻiga, o le siosiomaga faʻataunuʻu pusa Kata pusa

Galulue ma Docker

A maeʻa faʻapipiʻi ma faʻatulagaina, o le a matou taumafai e faʻapipiʻi se fuifui lea o le a matou faʻaogaina ai le GitLab ma le Docker Registry mo le au atinaʻe. O le a ou faʻaogaina masini komepiuta e tolu e fai ma 'auʻaunaga, lea o le a ou faʻapipiʻiina ai le tufatufaina atu o le FS GlusterFS o le a ou faʻaaogaina e fai ma faʻamaumauga o le docker, mo se faʻataʻitaʻiga, e faʻagasolo ai se faʻaoga sese o le resitala o le docker. Vaega autu e tamoe: Docker Registry, Postgresql, Redis, GitLab ma le lagolago mo GitLab Runner i luga o le Swarm. Matou te faʻalauiloa Postgresql ma faʻapipiʻi Stolon, o lea e te le manaʻomia ai le faʻaogaina o GlusterFS e teu ai faʻamaumauga Postgresql. O fa'amaumauga taua o lo'o totoe o le a teuina ile GlusterFS.

Ina ia faʻapipiʻi GlusterFS i luga o 'auʻaunaga uma (e taʻua o le node1, node2, node3), e te manaʻomia le faʻapipiʻiina o afifi, faʻatagaina le pa puipui, ma fatuina lisi talafeagai:

# yum -y install centos-release-gluster7
# yum -y install glusterfs-server
# systemctl enable glusterd
# systemctl start glusterd
# firewall-cmd --add-service=glusterfs --permanent
# firewall-cmd --reload
# mkdir -p /srv/gluster
# mkdir -p /srv/docker
# echo "$(hostname):/docker /srv/docker glusterfs defaults,_netdev 0 0" >> /etc/fstab

A maeʻa faʻapipiʻi, galue ile faʻatulagaina o GlusterFS e tatau ona faʻaauau mai le tasi node, mo se faʻataʻitaʻiga node1:

# gluster peer probe node2
# gluster peer probe node3
# gluster volume create docker replica 3 node1:/srv/gluster node2:/srv/gluster node3:/srv/gluster force
# gluster volume start docker

Ona e manaʻomia lea e faʻapipiʻi le voluma e maua (e tatau ona faʻatinoina le poloaiga i luga o sapalai uma):

# mount /srv/docker

O le faʻaogaina o le auala o loʻo faʻatulagaina i luga o se tasi o 'auʻaunaga, o le a avea ma Taʻitaʻi, o isi e tatau ona auai i le fuifui, o lea o le taunuuga o le faʻatinoina o le poloaiga i luga o le server muamua o le a manaʻomia ona kopiina ma faʻatinoina i luga o isi.

Muamua seti seti, ou te faʻatautaia le poloaiga ile node1:

# docker swarm init
Swarm initialized: current node (a5jpfrh5uvo7svzz1ajduokyq) is now a manager.

To add a worker to this swarm, run the following command:

    docker swarm join --token SWMTKN-1-0c5mf7mvzc7o7vjk0wngno2dy70xs95tovfxbv4tqt9280toku-863hyosdlzvd76trfptd4xnzd xx.xx.xx.xx:2377

To add a manager to this swarm, run 'docker swarm join-token manager' and follow the instructions.
# docker swarm join-token manager

Matou te kopiina le taunuuga o le poloaiga lona lua ma faʻatino i luga o le node2 ma le node3:

# docker swarm join --token SWMTKN-x-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx-xxxxxxxxx xx.xx.xx.xx:2377
This node joined a swarm as a manager.

I le taimi nei, ua maeʻa le faʻatulagaina muamua o 'auʻaunaga, seʻi o tatou faʻagasolo atu i le faʻatulagaina o tautua;

Muamua, se'i o tatou faia ni feso'ota'iga mo koneteina:

# docker network create --driver=overlay etcd
# docker network create --driver=overlay pgsql
# docker network create --driver=overlay redis
# docker network create --driver=overlay traefik
# docker network create --driver=overlay gitlab

Ona matou faʻailogaina lea o 'auʻaunaga, e manaʻomia lenei mea e faʻapipiʻi ai nisi o tautua i 'auʻaunaga:

# docker node update --label-add nodename=node1 node1
# docker node update --label-add nodename=node2 node2
# docker node update --label-add nodename=node3 node3

O le isi, matou te faia faʻamaumauga mo le teuina o faʻamatalaga etcd, KV teuina, lea e manaʻomia mo Traefik ma Stolon. E tutusa ma Postgresql, o mea nei o le a faʻapipiʻiina i sapalai, o lea matou te faʻatautaia lenei poloaiga i luga o sapalai uma:

# mkdir -p /srv/etcd

Le isi, fatuina se faila e faʻapipiʻi etcd ma faʻaaoga:

00etcd.yml

version: '3.7'

services:
  etcd1:
    image: quay.io/coreos/etcd:latest
    hostname: etcd1
    command:
      - etcd
      - --name=etcd1
      - --data-dir=/data.etcd
      - --advertise-client-urls=http://etcd1:2379
      - --listen-client-urls=http://0.0.0.0:2379
      - --initial-advertise-peer-urls=http://etcd1:2380
      - --listen-peer-urls=http://0.0.0.0:2380
      - --initial-cluster=etcd1=http://etcd1:2380,etcd2=http://etcd2:2380,etcd3=http://etcd3:2380
      - --initial-cluster-state=new
      - --initial-cluster-token=etcd-cluster
    networks:
      - etcd
    volumes:
      - etcd1vol:/data.etcd
    deploy:
      replicas: 1
      placement:
        constraints: [node.labels.nodename == node1]
  etcd2:
    image: quay.io/coreos/etcd:latest
    hostname: etcd2
    command:
      - etcd
      - --name=etcd2
      - --data-dir=/data.etcd
      - --advertise-client-urls=http://etcd2:2379
      - --listen-client-urls=http://0.0.0.0:2379
      - --initial-advertise-peer-urls=http://etcd2:2380
      - --listen-peer-urls=http://0.0.0.0:2380
      - --initial-cluster=etcd1=http://etcd1:2380,etcd2=http://etcd2:2380,etcd3=http://etcd3:2380
      - --initial-cluster-state=new
      - --initial-cluster-token=etcd-cluster
    networks:
      - etcd
    volumes:
      - etcd2vol:/data.etcd
    deploy:
      replicas: 1
      placement:
        constraints: [node.labels.nodename == node2]
  etcd3:
    image: quay.io/coreos/etcd:latest
    hostname: etcd3
    command:
      - etcd
      - --name=etcd3
      - --data-dir=/data.etcd
      - --advertise-client-urls=http://etcd3:2379
      - --listen-client-urls=http://0.0.0.0:2379
      - --initial-advertise-peer-urls=http://etcd3:2380
      - --listen-peer-urls=http://0.0.0.0:2380
      - --initial-cluster=etcd1=http://etcd1:2380,etcd2=http://etcd2:2380,etcd3=http://etcd3:2380
      - --initial-cluster-state=new
      - --initial-cluster-token=etcd-cluster
    networks:
      - etcd
    volumes:
      - etcd3vol:/data.etcd
    deploy:
      replicas: 1
      placement:
        constraints: [node.labels.nodename == node3]

volumes:
  etcd1vol:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: "/srv/etcd"
  etcd2vol:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: "/srv/etcd"
  etcd3vol:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: "/srv/etcd"

networks:
  etcd:
    external: true

# docker stack deploy --compose-file 00etcd.yml etcd

A maeʻa sina taimi, matou siaki pe o le etcd cluster ua i luga:

# docker exec $(docker ps | awk '/etcd/ {print $1}')  etcdctl member list
ade526d28b1f92f7: name=etcd1 peerURLs=http://etcd1:2380 clientURLs=http://etcd1:2379 isLeader=false
bd388e7810915853: name=etcd3 peerURLs=http://etcd3:2380 clientURLs=http://etcd3:2379 isLeader=false
d282ac2ce600c1ce: name=etcd2 peerURLs=http://etcd2:2380 clientURLs=http://etcd2:2379 isLeader=true
# docker exec $(docker ps | awk '/etcd/ {print $1}')  etcdctl cluster-health
member ade526d28b1f92f7 is healthy: got healthy result from http://etcd1:2379
member bd388e7810915853 is healthy: got healthy result from http://etcd3:2379
member d282ac2ce600c1ce is healthy: got healthy result from http://etcd2:2379
cluster is healthy

Matou te fatuina faʻamaumauga mo Postgresql, faʻatino le poloaiga i luga o sapalai uma:

# mkdir -p /srv/pgsql

Le isi, fatuina se faila e faʻapipiʻi Postgresql:

01pgsql.yml

version: '3.7'

services:
  pgsentinel:
    image: sorintlab/stolon:master-pg10
    command:
      - gosu
      - stolon
      - stolon-sentinel
      - --cluster-name=stolon-cluster
      - --store-backend=etcdv3
      - --store-endpoints=http://etcd1:2379,http://etcd2:2379,http://etcd3:2379
      - --log-level=debug
    networks:
      - etcd
      - pgsql
    deploy:
      replicas: 3
      update_config:
        parallelism: 1
        delay: 30s
        order: stop-first
        failure_action: pause
  pgkeeper1:
    image: sorintlab/stolon:master-pg10
    hostname: pgkeeper1
    command:
      - gosu
      - stolon
      - stolon-keeper
      - --pg-listen-address=pgkeeper1
      - --pg-repl-username=replica
      - --uid=pgkeeper1
      - --pg-su-username=postgres
      - --pg-su-passwordfile=/run/secrets/pgsql
      - --pg-repl-passwordfile=/run/secrets/pgsql_repl
      - --data-dir=/var/lib/postgresql/data
      - --cluster-name=stolon-cluster
      - --store-backend=etcdv3
      - --store-endpoints=http://etcd1:2379,http://etcd2:2379,http://etcd3:2379
    networks:
      - etcd
      - pgsql
    environment:
      - PGDATA=/var/lib/postgresql/data
    volumes:
      - pgkeeper1:/var/lib/postgresql/data
    secrets:
      - pgsql
      - pgsql_repl
    deploy:
      replicas: 1
      placement:
        constraints: [node.labels.nodename == node1]
  pgkeeper2:
    image: sorintlab/stolon:master-pg10
    hostname: pgkeeper2
    command:
      - gosu
      - stolon 
      - stolon-keeper
      - --pg-listen-address=pgkeeper2
      - --pg-repl-username=replica
      - --uid=pgkeeper2
      - --pg-su-username=postgres
      - --pg-su-passwordfile=/run/secrets/pgsql
      - --pg-repl-passwordfile=/run/secrets/pgsql_repl
      - --data-dir=/var/lib/postgresql/data
      - --cluster-name=stolon-cluster
      - --store-backend=etcdv3
      - --store-endpoints=http://etcd1:2379,http://etcd2:2379,http://etcd3:2379
    networks:
      - etcd
      - pgsql
    environment:
      - PGDATA=/var/lib/postgresql/data
    volumes:
      - pgkeeper2:/var/lib/postgresql/data
    secrets:
      - pgsql
      - pgsql_repl
    deploy:
      replicas: 1
      placement:
        constraints: [node.labels.nodename == node2]
  pgkeeper3:
    image: sorintlab/stolon:master-pg10
    hostname: pgkeeper3
    command:
      - gosu
      - stolon 
      - stolon-keeper
      - --pg-listen-address=pgkeeper3
      - --pg-repl-username=replica
      - --uid=pgkeeper3
      - --pg-su-username=postgres
      - --pg-su-passwordfile=/run/secrets/pgsql
      - --pg-repl-passwordfile=/run/secrets/pgsql_repl
      - --data-dir=/var/lib/postgresql/data
      - --cluster-name=stolon-cluster
      - --store-backend=etcdv3
      - --store-endpoints=http://etcd1:2379,http://etcd2:2379,http://etcd3:2379
    networks:
      - etcd
      - pgsql
    environment:
      - PGDATA=/var/lib/postgresql/data
    volumes:
      - pgkeeper3:/var/lib/postgresql/data
    secrets:
      - pgsql
      - pgsql_repl
    deploy:
      replicas: 1
      placement:
        constraints: [node.labels.nodename == node3]
  postgresql:
    image: sorintlab/stolon:master-pg10
    command: gosu stolon stolon-proxy --listen-address 0.0.0.0 --cluster-name stolon-cluster --store-backend=etcdv3 --store-endpoints http://etcd1:2379,http://etcd2:2379,http://etcd3:2379
    networks:
      - etcd
      - pgsql
    deploy:
      replicas: 3
      update_config:
        parallelism: 1
        delay: 30s
        order: stop-first
        failure_action: rollback

volumes:
  pgkeeper1:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: "/srv/pgsql"
  pgkeeper2:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: "/srv/pgsql"
  pgkeeper3:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: "/srv/pgsql"

secrets:
  pgsql:
    file: "/srv/docker/postgres"
  pgsql_repl:
    file: "/srv/docker/replica"

networks:
  etcd:
    external: true
  pgsql:
    external: true

Matou te gaosia mea lilo ma faʻaoga le faila:

# </dev/urandom tr -dc 234567890qwertyuopasdfghjkzxcvbnmQWERTYUPASDFGHKLZXCVBNM | head -c $(((RANDOM%3)+15)) > /srv/docker/replica
# </dev/urandom tr -dc 234567890qwertyuopasdfghjkzxcvbnmQWERTYUPASDFGHKLZXCVBNM | head -c $(((RANDOM%3)+15)) > /srv/docker/postgres
# docker stack deploy --compose-file 01pgsql.yml pgsql

A maeʻa sina taimi (silasila i le gaioiga o le poloaiga au'aunaga tufuga lso loʻo i luga uma auaunaga) matou te amataina le vaega Postgresql:

# docker exec $(docker ps | awk '/pgkeeper/ {print $1}') stolonctl --cluster-name=stolon-cluster --store-backend=etcdv3 --store-endpoints=http://etcd1:2379,http://etcd2:2379,http://etcd3:2379 init

Siaki le saunia o le vaega Postgresql:

# docker exec $(docker ps | awk '/pgkeeper/ {print $1}') stolonctl --cluster-name=stolon-cluster --store-backend=etcdv3 --store-endpoints=http://etcd1:2379,http://etcd2:2379,http://etcd3:2379 status
=== Active sentinels ===

ID      LEADER
26baa11d    false
74e98768    false
a8cb002b    true

=== Active proxies ===

ID
4d233826
9f562f3b
b0c79ff1

=== Keepers ===

UID     HEALTHY PG LISTENADDRESS    PG HEALTHY  PG WANTEDGENERATION PG CURRENTGENERATION
pgkeeper1   true    pgkeeper1:5432         true     2           2
pgkeeper2   true    pgkeeper2:5432          true            2                   2
pgkeeper3   true    pgkeeper3:5432          true            3                   3

=== Cluster Info ===

Master Keeper: pgkeeper3

===== Keepers/DB tree =====

pgkeeper3 (master)
├─pgkeeper2
└─pgkeeper1

Matou te faʻatulagaina traefik e tatala avanoa i pusa mai fafo:

03traefik.yml

version: '3.7'

services:
  traefik:
    image: traefik:latest
    command: >
      --log.level=INFO
      --providers.docker=true
      --entryPoints.web.address=:80
      --providers.providersThrottleDuration=2
      --providers.docker.watch=true
      --providers.docker.swarmMode=true
      --providers.docker.swarmModeRefreshSeconds=15s
      --providers.docker.exposedbydefault=false
      --accessLog.bufferingSize=0
      --api=true
      --api.dashboard=true
      --api.insecure=true
    networks:
      - traefik
    ports:
      - 80:80
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    deploy:
      replicas: 3
      placement:
        constraints:
          - node.role == manager
        preferences:
          - spread: node.id
      labels:
        - traefik.enable=true
        - traefik.http.routers.traefik.rule=Host(`traefik.example.com`)
        - traefik.http.services.traefik.loadbalancer.server.port=8080
        - traefik.docker.network=traefik

networks:
  traefik:
    external: true

# docker stack deploy --compose-file 03traefik.yml traefik

Matou te faʻalauiloaina Redis Cluster, e faia lenei mea matou te fatuina se lisi teu oloa i luga o nodes uma:

# mkdir -p /srv/redis

05redis.yml

version: '3.7'

services:
  redis-master:
    image: 'bitnami/redis:latest'
    networks:
      - redis
    ports:
      - '6379:6379'
    environment:
      - REDIS_REPLICATION_MODE=master
      - REDIS_PASSWORD=xxxxxxxxxxx
    deploy:
      mode: global
      restart_policy:
        condition: any
    volumes:
      - 'redis:/opt/bitnami/redis/etc/'

  redis-replica:
    image: 'bitnami/redis:latest'
    networks:
      - redis
    ports:
      - '6379'
    depends_on:
      - redis-master
    environment:
      - REDIS_REPLICATION_MODE=slave
      - REDIS_MASTER_HOST=redis-master
      - REDIS_MASTER_PORT_NUMBER=6379
      - REDIS_MASTER_PASSWORD=xxxxxxxxxxx
      - REDIS_PASSWORD=xxxxxxxxxxx
    deploy:
      mode: replicated
      replicas: 3
      update_config:
        parallelism: 1
        delay: 10s
      restart_policy:
        condition: any

  redis-sentinel:
    image: 'bitnami/redis:latest'
    networks:
      - redis
    ports:
      - '16379'
    depends_on:
      - redis-master
      - redis-replica
    entrypoint: |
      bash -c 'bash -s <<EOF
      "/bin/bash" -c "cat <<EOF > /opt/bitnami/redis/etc/sentinel.conf
      port 16379
      dir /tmp
      sentinel monitor master-node redis-master 6379 2
      sentinel down-after-milliseconds master-node 5000
      sentinel parallel-syncs master-node 1
      sentinel failover-timeout master-node 5000
      sentinel auth-pass master-node xxxxxxxxxxx
      sentinel announce-ip redis-sentinel
      sentinel announce-port 16379
      EOF"
      "/bin/bash" -c "redis-sentinel /opt/bitnami/redis/etc/sentinel.conf"
      EOF'
    deploy:
      mode: global
      restart_policy:
        condition: any

volumes:
  redis:
    driver: local
    driver_opts:
      type: 'none'
      o: 'bind'
      device: "/srv/redis"

networks:
  redis:
    external: true

# docker stack deploy --compose-file 05redis.yml redis

Fa'aopoopo le Docker Registry:

06registry.yml

version: '3.7'

services:
  registry:
    image: registry:2.6
    networks:
      - traefik
    volumes:
      - registry_data:/var/lib/registry
    deploy:
      replicas: 1
      placement:
        constraints: [node.role == manager]
      restart_policy:
        condition: on-failure
      labels:
        - traefik.enable=true
        - traefik.http.routers.registry.rule=Host(`registry.example.com`)
        - traefik.http.services.registry.loadbalancer.server.port=5000
        - traefik.docker.network=traefik

volumes:
  registry_data:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: "/srv/docker/registry"

networks:
  traefik:
    external: true

# mkdir /srv/docker/registry
# docker stack deploy --compose-file 06registry.yml registry

Ma mulimuli ane - GitLab:

08gitlab-runner.yml

version: '3.7'

services:
  gitlab:
    image: gitlab/gitlab-ce:latest
    networks:
      - pgsql
      - redis
      - traefik
      - gitlab
    ports:
      - 22222:22
    environment:
      GITLAB_OMNIBUS_CONFIG: |
        postgresql['enable'] = false
        redis['enable'] = false
        gitlab_rails['registry_enabled'] = false
        gitlab_rails['db_username'] = "gitlab"
        gitlab_rails['db_password'] = "XXXXXXXXXXX"
        gitlab_rails['db_host'] = "postgresql"
        gitlab_rails['db_port'] = "5432"
        gitlab_rails['db_database'] = "gitlab"
        gitlab_rails['db_adapter'] = 'postgresql'
        gitlab_rails['db_encoding'] = 'utf8'
        gitlab_rails['redis_host'] = 'redis-master'
        gitlab_rails['redis_port'] = '6379'
        gitlab_rails['redis_password'] = 'xxxxxxxxxxx'
        gitlab_rails['smtp_enable'] = true
        gitlab_rails['smtp_address'] = "smtp.yandex.ru"
        gitlab_rails['smtp_port'] = 465
        gitlab_rails['smtp_user_name'] = "noreply@example.com"
        gitlab_rails['smtp_password'] = "xxxxxxxxx"
        gitlab_rails['smtp_domain'] = "example.com"
        gitlab_rails['gitlab_email_from'] = 'noreply@example.com'
        gitlab_rails['smtp_authentication'] = "login"
        gitlab_rails['smtp_tls'] = true
        gitlab_rails['smtp_enable_starttls_auto'] = true
        gitlab_rails['smtp_openssl_verify_mode'] = 'peer'
        external_url 'http://gitlab.example.com/'
        gitlab_rails['gitlab_shell_ssh_port'] = 22222
    volumes:
      - gitlab_conf:/etc/gitlab
      - gitlab_logs:/var/log/gitlab
      - gitlab_data:/var/opt/gitlab
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints:
        - node.role == manager
      labels:
        - traefik.enable=true
        - traefik.http.routers.gitlab.rule=Host(`gitlab.example.com`)
        - traefik.http.services.gitlab.loadbalancer.server.port=80
        - traefik.docker.network=traefik
  gitlab-runner:
    image: gitlab/gitlab-runner:latest
    networks:
      - gitlab
    volumes:
      - gitlab_runner_conf:/etc/gitlab
      - /var/run/docker.sock:/var/run/docker.sock
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints:
        - node.role == manager

volumes:
  gitlab_conf:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: "/srv/docker/gitlab/conf"
  gitlab_logs:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: "/srv/docker/gitlab/logs"
  gitlab_data:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: "/srv/docker/gitlab/data"
  gitlab_runner_conf:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: "/srv/docker/gitlab/runner"

networks:
  pgsql:
    external: true
  redis:
    external: true
  traefik:
    external: true
  gitlab:
    external: true

# mkdir -p /srv/docker/gitlab/conf
# mkdir -p /srv/docker/gitlab/logs
# mkdir -p /srv/docker/gitlab/data
# mkdir -p /srv/docker/gitlab/runner
# docker stack deploy --compose-file 08gitlab-runner.yml gitlab

Tulaga mulimuli o le fuifui ma auaunaga:

# docker service ls
ID                  NAME                   MODE                REPLICAS            IMAGE                          PORTS
lef9n3m92buq        etcd_etcd1             replicated          1/1                 quay.io/coreos/etcd:latest
ij6uyyo792x5        etcd_etcd2             replicated          1/1                 quay.io/coreos/etcd:latest
fqttqpjgp6pp        etcd_etcd3             replicated          1/1                 quay.io/coreos/etcd:latest
hq5iyga28w33        gitlab_gitlab          replicated          1/1                 gitlab/gitlab-ce:latest        *:22222->22/tcp
dt7s6vs0q4qc        gitlab_gitlab-runner   replicated          1/1                 gitlab/gitlab-runner:latest
k7uoezno0h9n        pgsql_pgkeeper1        replicated          1/1                 sorintlab/stolon:master-pg10
cnrwul4r4nse        pgsql_pgkeeper2        replicated          1/1                 sorintlab/stolon:master-pg10
frflfnpty7tr        pgsql_pgkeeper3        replicated          1/1                 sorintlab/stolon:master-pg10
x7pqqchi52kq        pgsql_pgsentinel       replicated          3/3                 sorintlab/stolon:master-pg10
mwu2wl8fti4r        pgsql_postgresql       replicated          3/3                 sorintlab/stolon:master-pg10
9hkbe2vksbzb        redis_redis-master     global              3/3                 bitnami/redis:latest           *:6379->6379/tcp
l88zn8cla7dc        redis_redis-replica    replicated          3/3                 bitnami/redis:latest           *:30003->6379/tcp
1utp309xfmsy        redis_redis-sentinel   global              3/3                 bitnami/redis:latest           *:30002->16379/tcp
oteb824ylhyp        registry_registry      replicated          1/1                 registry:2.6
qovrah8nzzu8        traefik_traefik        replicated          3/3                 traefik:latest                 *:80->80/tcp, *:443->443/tcp

O le a se isi mea e mafai ona faaleleia? Ia mautinoa e faʻapipiʻi Traefik e taʻavale pusa i luga o https, faʻaopoopo tls encryption mo Postgresql ma Redis. Ae i se tulaga lautele, ua mafai ona tuʻuina atu i tagata atiaʻe o se PoC. Se'i o tatou va'ava'ai nei i isi mea i le Docker.

podman

O le isi afi ta'uta'ua mo ta'avale koneteina fa'avasegaina i pods (pods, vaega o koneteina fa'apipi'i fa'atasi). E le pei o Docker, e le manaʻomia soʻo se auaunaga e faʻatautaia ai pusa; Na tusia foi i le Go, e manaʻomia se taimi faʻaoga OCI e faʻatautaia ai koneteina, pei ole runC.

Docker ma mea uma, uma, uma

O le galulue faatasi ma Podman e masani lava ona faamanatu mai mo Docker, i le tulaga e mafai ona e faia e pei o lenei (e pei ona taʻua e le toʻatele na faʻataʻitaʻiina, e aofia ai le tusitala o lenei tusiga):

$ alias docker=podman

ma e mafai ona e galue pea. I se tulaga lautele, o le tulaga ma Podman e matua manaia lava, aua afai o uluai lomiga o Kubernetes na galulue ma Docker, ona oʻo lea i le 2015, pe a maeʻa le faʻavasegaina o le lalolagi o koneteina (OCI - Open Container Initiative) ma le vaevaeina o Docker i containerd ma runC, o se isi mea i Docker mo le tamoe i Kubernetes ua atiaʻe: CRI-O. Podman i lenei tulaga o se isi mea i Docker, fausia i luga o mataupu faavae o Kubernetes, e aofia ai le faʻavasegaina o pusa, ae o le autu autu o le poloketi o le faʻalauiloaina lea o pusa Docker-style e aunoa ma ni auaunaga faaopoopo. Mo mafuaʻaga manino, e leai se faʻaogaina, talu ai o loʻo faʻaalia manino e le au atinaʻe afai e te manaʻomia se fuifui, ave Kubernetes.

faatulagaga

Mo le fa'apipi'iina i totonu Centos 7, na'o le fa'agaoioia o le Extras repository ona fa'apipi'i lea o mea uma e fa'aaoga ai le poloaiga:

# yum -y install podman

O isi vaega

Podman e mafai ona fa'atupuina iunite mo systemd, fa'apea fo'i le fa'afitauli o le amataina o koneteina pe a uma le toe fa'afouina o le server. E le gata i lea, o le systemd ua faʻaalia e galue saʻo e pei o le pid 1 i totonu o le pusa. O loʻo i ai se meafaigaluega faufale ese mo le fausiaina o pusa, o loʻo i ai foʻi mea faigaluega lona tolu - faʻataʻitaʻiga o le docker-compose, lea e faʻapipiʻiina ai faila faʻatulagaina e fetaui ma Kubernetes, o lea o le suiga mai Podman i Kubernetes e faafaigofieina i le tele e mafai ai.

Galulue ma Podman

Talu ai e leai se fa'aputuga (e tatau ona sui i le Kubernetes pe a mana'omia se fuifui), o le a matou aoina i pusa eseese.

Fa'apipi'i podman-compose:

# yum -y install python3-pip
# pip3 install podman-compose

O le taunuuga o le faila faila mo podman e ese si ese, o lea mo se faʻataʻitaʻiga e tatau ona matou faʻanofo saʻo se vaega voluma eseese i le vaega ma auaunaga.

gitlab-podman.yml

version: '3.7'

services:
  gitlab:
    image: gitlab/gitlab-ce:latest
    hostname: gitlab.example.com
    restart: unless-stopped
    environment:
      GITLAB_OMNIBUS_CONFIG: |
        gitlab_rails['gitlab_shell_ssh_port'] = 22222
    ports:
      - "80:80"
      - "22222:22"
    volumes:
      - /srv/podman/gitlab/conf:/etc/gitlab
      - /srv/podman/gitlab/data:/var/opt/gitlab
      - /srv/podman/gitlab/logs:/var/log/gitlab
    networks:
      - gitlab

  gitlab-runner:
    image: gitlab/gitlab-runner:alpine
    restart: unless-stopped
    depends_on:
      - gitlab
    volumes:
      - /srv/podman/gitlab/runner:/etc/gitlab-runner
      - /var/run/docker.sock:/var/run/docker.sock
    networks:
      - gitlab

networks:
  gitlab:

# podman-compose -f gitlab-runner.yml -d up

I'uga:

# podman ps
CONTAINER ID  IMAGE                                  COMMAND               CREATED             STATUS                 PORTS                                      NAMES
da53da946c01  docker.io/gitlab/gitlab-runner:alpine  run --user=gitlab...  About a minute ago  Up About a minute ago  0.0.0.0:22222->22/tcp, 0.0.0.0:80->80/tcp  root_gitlab-runner_1
781c0103c94a  docker.io/gitlab/gitlab-ce:latest      /assets/wrapper       About a minute ago  Up About a minute ago  0.0.0.0:22222->22/tcp, 0.0.0.0:80->80/tcp  root_gitlab_1

Sei o tatou vaʻai pe o le a le mea e gaosia mo systemd ma kubernetes, mo lenei mea e manaʻomia ona tatou suʻeina le igoa poʻo le id o le pod:

# podman pod ls
POD ID         NAME   STATUS    CREATED          # OF CONTAINERS   INFRA ID
71fc2b2a5c63   root   Running   11 minutes ago   3                 db40ab8bf84b

Kubernetes:

# podman generate kube 71fc2b2a5c63
# Generation of Kubernetes YAML is still under development!
#
# Save the output of this file and use kubectl create -f to import
# it into Kubernetes.
#
# Created with podman-1.6.4
apiVersion: v1
kind: Pod
metadata:
  creationTimestamp: "2020-07-29T19:22:40Z"
  labels:
    app: root
  name: root
spec:
  containers:
  - command:
    - /assets/wrapper
    env:
    - name: PATH
      value: /opt/gitlab/embedded/bin:/opt/gitlab/bin:/assets:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
    - name: TERM
      value: xterm
    - name: HOSTNAME
      value: gitlab.example.com
    - name: container
      value: podman
    - name: GITLAB_OMNIBUS_CONFIG
      value: |
        gitlab_rails['gitlab_shell_ssh_port'] = 22222
    - name: LANG
      value: C.UTF-8
    image: docker.io/gitlab/gitlab-ce:latest
    name: rootgitlab1
    ports:
    - containerPort: 22
      hostPort: 22222
      protocol: TCP
    - containerPort: 80
      hostPort: 80
      protocol: TCP
    resources: {}
    securityContext:
      allowPrivilegeEscalation: true
      capabilities: {}
      privileged: false
      readOnlyRootFilesystem: false
    volumeMounts:
    - mountPath: /var/opt/gitlab
      name: srv-podman-gitlab-data
    - mountPath: /var/log/gitlab
      name: srv-podman-gitlab-logs
    - mountPath: /etc/gitlab
      name: srv-podman-gitlab-conf
    workingDir: /
  - command:
    - run
    - --user=gitlab-runner
    - --working-directory=/home/gitlab-runner
    env:
    - name: PATH
      value: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
    - name: TERM
      value: xterm
    - name: HOSTNAME
    - name: container
      value: podman
    image: docker.io/gitlab/gitlab-runner:alpine
    name: rootgitlab-runner1
    resources: {}
    securityContext:
      allowPrivilegeEscalation: true
      capabilities: {}
      privileged: false
      readOnlyRootFilesystem: false
    volumeMounts:
    - mountPath: /etc/gitlab-runner
      name: srv-podman-gitlab-runner
    - mountPath: /var/run/docker.sock
      name: var-run-docker.sock
    workingDir: /
  volumes:
  - hostPath:
      path: /srv/podman/gitlab/runner
      type: Directory
    name: srv-podman-gitlab-runner
  - hostPath:
      path: /var/run/docker.sock
      type: File
    name: var-run-docker.sock
  - hostPath:
      path: /srv/podman/gitlab/data
      type: Directory
    name: srv-podman-gitlab-data
  - hostPath:
      path: /srv/podman/gitlab/logs
      type: Directory
    name: srv-podman-gitlab-logs
  - hostPath:
      path: /srv/podman/gitlab/conf
      type: Directory
    name: srv-podman-gitlab-conf
status: {}

Systemd:

# podman generate systemd 71fc2b2a5c63
# pod-71fc2b2a5c6346f0c1c86a2dc45dbe78fa192ea02aac001eb8347ccb8c043c26.service
# autogenerated by Podman 1.6.4
# Thu Jul 29 15:23:28 EDT 2020

[Unit]
Description=Podman pod-71fc2b2a5c6346f0c1c86a2dc45dbe78fa192ea02aac001eb8347ccb8c043c26.service
Documentation=man:podman-generate-systemd(1)
Requires=container-781c0103c94aaa113c17c58d05ddabf8df4bf39707b664abcf17ed2ceff467d3.service container-da53da946c01449f500aa5296d9ea6376f751948b17ca164df438b7df6607864.service
Before=container-781c0103c94aaa113c17c58d05ddabf8df4bf39707b664abcf17ed2ceff467d3.service container-da53da946c01449f500aa5296d9ea6376f751948b17ca164df438b7df6607864.service

[Service]
Restart=on-failure
ExecStart=/usr/bin/podman start db40ab8bf84bf35141159c26cb6e256b889c7a98c0418eee3c4aa683c14fccaa
ExecStop=/usr/bin/podman stop -t 10 db40ab8bf84bf35141159c26cb6e256b889c7a98c0418eee3c4aa683c14fccaa
KillMode=none
Type=forking
PIDFile=/var/run/containers/storage/overlay-containers/db40ab8bf84bf35141159c26cb6e256b889c7a98c0418eee3c4aa683c14fccaa/userdata/conmon.pid

[Install]
WantedBy=multi-user.target
# container-da53da946c01449f500aa5296d9ea6376f751948b17ca164df438b7df6607864.service
# autogenerated by Podman 1.6.4
# Thu Jul 29 15:23:28 EDT 2020

[Unit]
Description=Podman container-da53da946c01449f500aa5296d9ea6376f751948b17ca164df438b7df6607864.service
Documentation=man:podman-generate-systemd(1)
RefuseManualStart=yes
RefuseManualStop=yes
BindsTo=pod-71fc2b2a5c6346f0c1c86a2dc45dbe78fa192ea02aac001eb8347ccb8c043c26.service
After=pod-71fc2b2a5c6346f0c1c86a2dc45dbe78fa192ea02aac001eb8347ccb8c043c26.service

[Service]
Restart=on-failure
ExecStart=/usr/bin/podman start da53da946c01449f500aa5296d9ea6376f751948b17ca164df438b7df6607864
ExecStop=/usr/bin/podman stop -t 10 da53da946c01449f500aa5296d9ea6376f751948b17ca164df438b7df6607864
KillMode=none
Type=forking
PIDFile=/var/run/containers/storage/overlay-containers/da53da946c01449f500aa5296d9ea6376f751948b17ca164df438b7df6607864/userdata/conmon.pid

[Install]
WantedBy=multi-user.target
# container-781c0103c94aaa113c17c58d05ddabf8df4bf39707b664abcf17ed2ceff467d3.service
# autogenerated by Podman 1.6.4
# Thu Jul 29 15:23:28 EDT 2020

[Unit]
Description=Podman container-781c0103c94aaa113c17c58d05ddabf8df4bf39707b664abcf17ed2ceff467d3.service
Documentation=man:podman-generate-systemd(1)
RefuseManualStart=yes
RefuseManualStop=yes
BindsTo=pod-71fc2b2a5c6346f0c1c86a2dc45dbe78fa192ea02aac001eb8347ccb8c043c26.service
After=pod-71fc2b2a5c6346f0c1c86a2dc45dbe78fa192ea02aac001eb8347ccb8c043c26.service

[Service]
Restart=on-failure
ExecStart=/usr/bin/podman start 781c0103c94aaa113c17c58d05ddabf8df4bf39707b664abcf17ed2ceff467d3
ExecStop=/usr/bin/podman stop -t 10 781c0103c94aaa113c17c58d05ddabf8df4bf39707b664abcf17ed2ceff467d3
KillMode=none
Type=forking
PIDFile=/var/run/containers/storage/overlay-containers/781c0103c94aaa113c17c58d05ddabf8df4bf39707b664abcf17ed2ceff467d3/userdata/conmon.pid

[Install]
WantedBy=multi-user.target

Ae paga lea, e ese mai i le faʻalauiloaina o koneteina, e leai se isi mea e faia e le iunite faʻapipiʻi mo systemd (mo se faʻataʻitaʻiga, faʻamamā mea tuai pe a toe amataina sea auaunaga), o lea e tatau ai ona e tusia na mea oe lava.

I le mataupu faavae, ua lava le Podman e faʻataʻitaʻi ai mea o loʻo i ai, faʻafeiloaʻi faʻasologa tuai mo le docker-compose, ona agaʻi atu lea i Kubernetes, pe a manaʻomia se fuifui, pe maua se faʻaoga faigofie-e faʻaoga i Docker.

rkt

Проект alu i totonu o faamaumauga pe a ma le ono masina talu ai ona o le mea moni na faʻatau e RedHat, o lea o le a ou le mafaufau atili ai i ai. I le aotelega, na tuua ai se lagona lelei tele, ae faʻatusatusa ia Docker aemaise lava Podman, e foliga mai o se tuʻufaʻatasiga. Sa i ai foi se tufatufa CoreOS na fausia i luga o le rkt (e ui na i ai muamua le Docker), ae na iu foi i le lagolago ina ua maeʻa le RedHat faʻatau.

Papala

Faʻatele tasi le poloketi, o le tusitala na na o le manaʻo e fau ma taʻavale pusa. I le faʻamasinoina o faʻamaumauga ma tulafono, e leʻi mulimuli le tusitala i tulaga faʻavae, ae na o le filifili e tusi lana lava faʻatinoga, lea, i le mataupu faavae, na ia faia.

sailiiliga

O le tulaga ma Kubernetes e manaia tele: i le tasi itu, faatasi ai ma Docker e mafai ona e fausia se fuifui (i le faʻaogaina), lea e mafai ai ona e faʻatautaia siosiomaga oloa mo tagata faʻatau, e moni lava lenei mea mo 'au laiti (3-5 tagata) , poʻo faʻatasi ai ma sina avega atoa , poʻo le leai o se manaʻo e malamalama i le lavelave o le faʻatulagaina o Kubernetes, e aofia ai mo uta maualuga.

E le maua e Podman le fetaui atoatoa, ae e tasi lona aoga taua - fetaui ma Kubernetes, e aofia ai meafaigaluega faaopoopo (buildah ma isi). O le mea lea, o le a ou faʻalatalata atu i le filifiliga o se meafaigaluega mo galuega e pei ona taʻua i lalo: mo 'au laiti, poʻo le faʻatapulaʻaina o le paketi - Docker (faʻatasi ai ma se faiga faʻafefe), mo le atinaʻeina o aʻu lava i luga o se tagata faʻapitoa - Podman uo, ma mo isi tagata uma. - Kubernetes.

Ou te lē o mautinoa pe o le a lē suia le tulaga ma Docker i le lumanaʻi, auā o i latou o ni paionia, ma o lea laʻasaga ma lea laʻasaga o loʻo faasolosolo malie ona faʻatulagaina, ae o Podman, e ui lava i ona vaivaiga uma (o loʻo galue i luga Linux, e leai ni fa'aputuga, fa'apotopotoga ma isi gaioiga e fa'atinoina e fofo a isi vaega) e sili atu le manino o le lumana'i, o lea ou te vala'aulia ai tagata uma e talanoaina nei fa'ai'uga i fa'amatalaga.

SALA I le aso 3 o Aokuso na matou faʻalauiloa ai le "Kosi vitio Docker", lea e mafai ona e aoao atili ai e uiga i lana galuega. O le a matou suʻesuʻeina uma ana meafaigaluega: mai faʻamatalaga faʻavae i luga o fesoʻotaʻiga, nuances o le galue ma le tele o faiga faʻaogaina ma gagana polokalame. O le a e masani i tekinolosi ma malamalama i le mea ma le auala sili e faʻaoga ai Docker. O le a matou faʻasoa atu foʻi mataupu faʻataʻitaʻiga sili ona lelei.

Tau fa'atonu a'o le'i fa'amatu'u: RUB 5000. E mafai ona e matamata i le Docker Video Course polokalame i luga ole itulau ole vasega.

puna: www.habr.com

Faʻatau talimalo faʻatuatuaina mo nofoaga ma DDoS puipuiga, VPS VDS servers 🔥 Fa'atau le 'upega tafa'ilagi talimalo fa'atuatuaina ma le puipuiga DDoS, 'au'aunaga VPS VDS | ProHoster