Imbali yengxaki yokufuduka yokugcina idokhi (ingcambu yedokhi)

Ngaphandle kweentsuku ezimbalwa ezidlulileyo, kwaye kwagqitywa kwenye yeeseva ukuba kuhanjiswe ugcino lwe-docker (uluhlu apho idocker igcina zonke izikhongozelo kunye neefayile zemifanekiso) kwicandelo elahlukileyo, elinokuthi lenze ugcino lwe-docker.
wayenomthamo omkhulu. Lo msebenzi wawubonakala ungabalulekanga kwaye wawungayixeleli ingxaki...

Ukuqalisa:

1. Misa kwaye ubulale zonke izikhongozeli zesicelo sethu:

docker-compose down

ukuba zininzi izikhongozeli kwaye zikwimixholo eyahlukeneyo, ungakwenza oku:

docker rm -f $(docker ps -q)

2. Misa idokhi yedaemon:

systemctl stop docker

3. Hambisa uvimba weefayili kwindawo oyifunayo:

cp -r /var/lib/docker /docker/data/storage

4. Sixelela i-docker daemon ukuba ijonge kuluhlu olutsha. Kukho iindlela ezininzi onokukhetha kuzo: mhlawumbi sebenzisa i- -g iflegi ukwalatha i-daemon kwindlela entsha, okanye uqwalaselo lwenkqubo, esilusebenzisileyo. Okanye i-symlink. Andizukungena kwiinkcukacha ezininzi malunga nale nto, ikwi-Intanethi. izele Iincwadana ezihambisa ingcambu yedocker kwindawo entsha.

5. Qala i-docker daemon kwaye uqiniseke ukuba ijongeka kwindawo elungileyo:

systemctl status docker

Komnye wemigca yemveliso kufuneka sibone:

├─19493 /usr/bin/dockerd --data-root=/docker/data/storage

Siye saqinisekisa ukuba ukhetho lugqithiselwe kwi-daemon, ngoku makhe sijonge ukuba iyayisebenzisa na (enkosi inkvizitor68sl)!

docker info | awk '/Root Dir/ {print $NF}' 

6. Masiqalise isicelo sethu:

docker-compose up -d

7. Khangela

Kwaye apha ubumnandi buqala, DBMS, MQ, yonke into ilungile! Uvimba weenkcukacha ulungile, yonke into iyasebenza... ngaphandle kwe nginx. Sinezethu nginx zakha kunye neKerberos kunye neecourtesans. Kwaye ukujonga iilogi zesikhongozeli kubonise ukuba ayinakubhalela ku /var/tmp - Imvume iyaliwe. Ndiguqa iitempile zam ngeminwe kwaye ndizama ukuhlalutya imeko ... Inokwenzeka njani le nto? Umfanekiso weDocker awutshintshanga. Sisanda kuhambisa uvimba weefayili. Yayihlala isebenza, kwaye ilapha kuwe ... Ngenxa yovavanyo, ndangena kwisitya ngezandla zam kwaye ndatshintsha amalungelo kule ncwadana, kwakukho. ingcambu, ingcambu 755, wanika ingcambu, ingcambu 777. Kwaye yonke into yaqala ... Ingcinga yaqala ukuvakala entlokweni yam - uhlobo oluthile lobubhanxa ... Ndacinga, kakuhle, mhlawumbi andizange ndithathele ingqalelo ...

Ndagqiba ekubeni sithandane namalungelo okufikelela kwiifayile ngexesha lokudluliselwa. Siyekile isicelo, i-docker daemon, sacima isilawuli esitsha kwaye sakopa i/var/lib/docker directory usebenzisa rsync -a.

Ndicinga ukuba yonke into ilungile ngoku, masiphakamise isicelo seDocker.

Aaand...ingxaki yahlala...iliso lam laxhuzula. Ndaphuthuma kwi-console yomatshini wam obonakalayo, apho ndiqhuba khona iimvavanyo ezahlukeneyo, ndibe nalo mfanekiso we-nginx, kwaye ndenyuka ngaphakathi kwesitya, kwaye apha amalungelo kwi-/var/tmp directory ayingcambu, ingcambu 777. efanayo njengoko bekufuneka ndisete ngesandla. Kodwa imifanekiso iyafana!

Indlela yefayile ye-xfs yayisetyenziswa kuyo yonke indawo.

Ndithelekise ukusebenzisa umyalelo

docker inspect my-nginx:12345

Zonke ii-hashes ziyafana, zonke enye kwenye. Zombini kumncedisi nakumatshini wam wenyani. Ndicime umfanekiso wendawo ye-nginx kwaye ndiyitsale kwakhona kwirejista, ngenxa yezizathu ezininzi ezikumatshini ofanayo. Kwaye ingxaki iyafana... Ngoku iliso lam lesibini liyaxhuzula.

Andisakhumbuli ukuba zeziphi iingcinga ezisentloko yam, ngaphandle kokukhwaza "AAAAAAAAAA" kunye nezinye izinto. Kwakuyintsimbi yesi-4 kusasa, kwaye ikhowudi yomthombo we-Docker yayisetyenziselwa ukuqonda umgaqo we-hashing image layers. Kuvulwe itoti yesithathu yesiselo esinamandla. Kwaye ekugqibeleni kwafika kum ukuba i-hashing ithathela ingqalelo kuphela ifayile, imixholo yayo, kodwa UNGAFIKEleli kumaLungelo! Oko kukuthi, ngandlela ithile engaqondakaliyo amalungelo ethu alahlekile, iselinux ikhubazekile, i-acl ayisetyenziswa, kwaye akukho nto incamathelayo.

Ndicime umfanekiso wendawo, ndawucima nomfanekiso kwirejista yedocker ndawutyhala kwakhona. Kwaye yonke into yasebenza. Kuvela ukuba ngexesha lokudluliselwa kwamalungelo alahlekile, zombini ngaphakathi komfanekiso wendawo nangaphakathi komfanekiso olele kwirejista. Njengoko besenditshilo, ngenxa yezizathu ezininzi yayifumaneka kwimoto enye. Kwaye ngenxa yoko, kuluhlu olunye /var/lib/docker.

Kwaye ngokulindela umbuzo wokuba ngaba bazama ukubuyisela ukujonga kwe-docker kuluhlu oludala - hayi, abazange bazame, yeha, iimeko azizange zivumele. Ewe, kwaye bendifuna ngokwenene ukuyiqonda.

Emva kokubhala eli nqaku, isisombululo sengxaki sibonakala sicacile kum, kodwa ngexesha lokuhlalutya akuzange kubonakale kunjalo. Ngokunyaniseka, ndiGoogle kwaye andizange ndifumane iimeko ezifanayo.

Isiphumo: Ndiyisombulule ingxaki, andikasiqondi isizathu =(

Ukuba nabani na uyazi, uqikelelo, ube nombono malunga nonobangela wale ngxaki, ndingavuya kakhulu ukuva kuwe kwizimvo!

umthombo: www.habr.com