Umlando wenkinga yokufuduka kwe-docker storage (docker root)

Ezinsukwini ezimbalwa ezedlule, kwanqunywa ukuthi enye yamaseva ithuthe isitoreji se-docker (inkomba lapho i-docker igcina khona zonke iziqukathi namafayela ezithombe) esigabeni esihlukile,
yayinamandla amakhulu. Umsebenzi wawubonakala ungelutho futhi wawungabikezeli izinkinga...

Ukuqalisa:

1. Misa futhi ubulale zonke iziqukathi zesicelo sethu:

docker-compose down

uma kuneziqukathi eziningi futhi zikuzingoma ezihlukene, ungakwenza lokhu:

docker rm -f $(docker ps -q)

2. Misa i-daemon yedokhu:

systemctl stop docker

3. Hambisa uhla lwemibhalo endaweni oyifunayo:

cp -r /var/lib/docker /docker/data/storage

4. Sitshela i-docker daemon ukuthi ibheke ohlwini lwemibhalo olusha. Kunezinketho ezimbalwa: noma sebenzisa i- -g flag ukukhomba i-daemon endleleni entsha, noma izilungiselelo ze-systemd, esizisebenzisile. Noma i-symlink. Ngeke ngingene emininingwaneni eminingi ngalokhu, kuku-inthanethi. egcwele iziqondiso zokuhambisa impande ye-docker endaweni entsha.

5. Qala i-docker daemon futhi uqiniseke ukuthi ibukeka endaweni efanele:

systemctl status docker

Komunye wemigqa yokuphuma kufanele sibone:

├─19493 /usr/bin/dockerd --data-root=/docker/data/storage

Senze isiqiniseko sokuthi inketho idluliselwe ku-daemon, manje ake sihlole ukuthi iyayisebenzisa yini (siyabonga inkvizitor68sl)!

docker info | awk '/Root Dir/ {print $NF}' 

6. Ake siqale isicelo sethu:

docker-compose up -d

7. Hlola

Futhi lapha ubumnandi buqala, DBMS, MQ, konke kuhamba kahle! Isizindalwazi siphelele, yonke into iyasebenza... ngaphandle kwe-nginx. Sinezethu i-nginx ukwakha nge-Kerberos kanye nama-courtesans. Futhi ukubuka izingodo zesitsha kubonise ukuthi ayikwazi ukubhala ku-/var/tmp - Imvume inqatshiwe. Ngixova amathempeli ami ngeminwe futhi ngizame ukuhlaziya isimo... Kungenzeka kanjani lokhu? Isithombe se-Docker asizange sishintshe. Sisanda kuhambisa uhla lwemibhalo. Kwasebenza njalo, futhi nansi kuwe ... Ukuze ngizame, ngangena esitsheni ngezandla zami futhi ngashintsha amalungelo alolu hlu lwemibhalo, kwakukhona. impande, impande 755, wanikela impande, impande 777. Futhi konke kwaqala ... Umcabango waqala ukuzwakala ekhanda lami - uhlobo oluthile lombhedo ... Ngacabanga, kahle, mhlawumbe angizange ngicabangele okuthile ...

Nginqume ukuthi sithandane namalungelo okufinyelela amafayela ngesikhathi sokudlulisa. Simise uhlelo lokusebenza, i-docker daemon, sasusa umkhombandlela omusha futhi sakopisha umkhombandlela /var/lib/docker sisebenzisa. rsync -a.

Ngicabanga ukuthi konke kuhamba kahle manje, ake siphakamise uhlelo lwe-Docker.

Aaand... inkinga yasala... Iso lami ladikiza. Ngaphuthuma ku-console yomshini wami we-virtual, lapho ngigijima khona izivivinyo ezihlukahlukene, nginalesi sithombe se-nginx, futhi ngagibela ngaphakathi kwesitsha, futhi lapha amalungelo ohlu lwemibhalo / var / tmp ayimpande, impande 777. Okusho ukuthi, i okufanayo njengoba bekumele ngisethe ngesandla. Kodwa izithombe ziyefana!

Isistimu yefayela ye-xfs ibisetshenziswa yonke indawo.

Ngiqhathanise ukusebenzisa umyalo

docker inspect my-nginx:12345

Wonke ama-hashi ayefana, wonke awodwa. Kokubili kuseva nasemshinini wami obonakalayo. Ngisuse isithombe se-nginx sendawo futhi ngasikhipha futhi ebhukwini, okuthi ngenxa yezizathu eziningi sisemshinini ofanayo. Futhi inkinga iyafana... Manje iso lami lesibili liyadikiza.

Angisakhumbuli ukuthi yayimiphi imicabango ekhanda lami, ngaphandle kokumemeza “AAAAAAAAAA” nezinye izinto. Kwakuyihora lesi-4 ekuseni, futhi ikhodi yomthombo ye-Docker yasetshenziswa ukuze kuqondwe isimiso sezendlalelo zesithombe se-hashing. Kuvulwe ithini lesithathu lesiphuzo esinamandla. Futhi ekugcineni kwafika kimi ukuthi i-hashing icabangela ifayela kuphela, okuqukethwe kwalo, kodwa UNGAFINYELI AMALUNGELO! Okusho ukuthi, ngendlela engaqondakali amalungelo ethu alahlekile, i-selinux ivaliwe, i-acl ayisetshenziswa, futhi akukho nokuncane okunamathelayo.

Ngisuse isithombe sendawo, ngasusa nesithombe endaweni yokubhalisa idokhu ngaphinde ngisiphusha. Futhi konke kwasebenza. Kuvela ukuthi ngesikhathi sokudlulisa amalungelo alahlekile, ngaphakathi kwesithombe sendawo nangaphakathi kwesithombe esilele ebhukwini. Njengoba ngike ngasho, ngenxa yezizathu eziningi yayitholakala emotweni efanayo. Futhi ngenxa yalokho, kumkhombandlela owodwa /var/lib/docker.

Futhi silindele umbuzo wokuthi ngabe bazama yini ukubuyisela amehlo e-docker ohlwini lwakudala - cha, abazange bazame, maye, izimo azizange zikuvumele. Yebo, futhi ngangifuna ngempela ukukuqonda.

Ngemva kokubhala lesi sihloko, isixazululo senkinga sibonakala sisobala kimi, kodwa ngesikhathi sokuhlaziya kwakungabonakali kanjalo. Ngokweqiniso, ngi-Googled futhi angizange ngithole izimo ezifanayo.

Umphumela: Ngiyixazulule inkinga, angikasiqondi isizathu =(

Uma noma ubani azi, eqagela, abe nombono mayelana nezimbangela zale nkinga, ngizojabula kakhulu ukuzwa kuwe kumazwana!

Source: www.habr.com