Docker可视化web界面管理-Portainer部署记录

[root@docker-node1 ~]# cat /etc/redhat-release CentOS Linux release 7.5.1804 (Core) [root@docker-node1 ~]# ifconfig|grep 172.16.60 ???????inet 172.16.60.213 ?netmask 255.255.255.0 ?broadcast 172.16.60.255[root@docker-node1 ~]# systemctl stop firewalld[root@docker-node1 ~]# systemctl disable firewalld[root@docker-node1 ~]# firewall-cmd --statenot running

[root@docker-node1 ~]# docker search portainerNAME ????????????????????????????DESCRIPTION ????????????????????????????????????STARS ??????????????OFFICIAL ???????????AUTOMATEDportainer/portainer ?????????????A simple to use management user interface fo… ??831 ????????????????????????????????????hypriot/rpi-portainer ???????????A web interface for the Docker engine. Dead … ??36 ?????????????????????????????????????portainer/templates ?????????????App Templates for Portainer http://portainer… ??14 ?????????????????????????????????????portainer/agent ?????????????????An agent used to manage all the resources in… ??10 ?????????????????????????????????????portainer/golang-builder ????????Utility to build Golang binaries. ??????????????2 ??????????????????????????????????????[OK]bmoorman/portainer ??????????????Portainer [github.com/portainer/portainer] o… ??1 ??????????????????????????????????????[OK]arpanpal010/portainer ???????????????????????????????????????????????????????????1 ??????????????????????????????????????usgsastro/portainer ?????????????custom portainer install into centos7 ??????????1 ??????????????????????????????????????[OK]softonic/portainer-endpoint ?????Allows auto register all the swarm nodes in … ??1 ??????????????????????????????????????[OK]dockerframework/portainer ???????Portainer (Simple Management UI for Docker) … ??1 ??????????????????????????????????????[OK]rancher/portainer-agent ?????????????????????????????????????????????????????????0 ??????????????????????????????????????voltha/voltha-portainer ?????????Portainer support for VOLTHA ???????????????????0 ??????????????????????????????????????nenadilic84/portainer ???????????????????????????????????????????????????????????0 ??????????????????????????????????????rodjers/portainer ???????????????Swarm portainer ????????????????????????????????0 ??????????????????????????????????????portainer/base ??????????????????Multi-stage build image to create the Portai… ??0 ??????????????????????????????????????[OK]hassioaddons/portainer ??????????????????????????????????????????????????????????0 ??????????????????????????????????????portainer/angular-builder ???????Builder image for Portainer frontend. ??????????0 ??????????????????????????????????????[OK]stefanscherer/portainer ?????????Portainer for Windows Insider ??????????????????0 ??????????????????????????????????????jiangxinshang/portainer ?????????可在loongson的mips64el平台运行的portainer ??????????????0 ??????????????????????????????????????ssbkang/portainer ???????????????????????????????????????????????????????????????0 ??????????????????????????????????????ollijanatuinen/portainer ????????debug/development versions of portainer ????????0 ??????????????????????????????????????helloysd/portainer ??????????????????????????????????????????????????????????????0 ??????????????????????????????????????j0nnylester/portainer ???????????portainer running on a Raspberry Pi ????????????0 ??????????????????????????????????????11384eb/portainer ???????????????????????????????????????????????????????????????0 ??????????????????????????????????????flochtililoch/armv7l-portainer ??????????????????????????????????????????????????0 ?????

[root@docker-node1 ~]# docker pull portainer/portainerUsing default tag: latestlatest: Pulling from portainer/portainerd1e017099d17: Pull complete d4e5419541f5: Pull complete Digest: sha256:07c0e19e28e18414dd02c313c36b293758acf197d5af45077e3dd69c630e25ccStatus: Downloaded newer image for portainer/portainer:latest[root@docker-node1 ~]# docker imagesREPOSITORY ???????????TAG ????????????????IMAGE ID ???????????CREATED ????????????SIZEnginx ????????????????latest ?????????????62f816a209e6 ???????6 days ago ?????????109MBportainer/portainer ??latest ?????????????00ead811e8ae ???????8 weeks ago ????????58.7MB

[root@docker-node1 ~]# docker run -ti -d --name kevin-portainer -p 9000:9000 --restart=always -v /var/run/docker.sock:/var/run/docker.sock ?portainer/portainer5818eaf37bf493a679ebbaa05ba28c6a860501ea78e608981e1934300843ab4b[root@docker-node1 ~]# docker psCONTAINER ID ???????IMAGE ????????????????COMMAND ????????????CREATED ????????????STATUS ?????????????PORTS ???????????????????NAMES5818eaf37bf4 ???????portainer/portainer ??"/portainer" ???????19 seconds ago ?????Up 2 seconds ???????0.0.0.0:9000->9000/tcp ??kevin-portainer

一. ??先来搭建Swarm集群环境1) 基本环境用两台机器来搭建(都是centos7.5系统)172.16.60.213 ???docker-node1172.16.60.214 ???docker-node2[root@docker-node1 ~]# cat /etc/redhat-release CentOS Linux release 7.5.1804 (Core) 修改两台机器的主机名并做hosts (这里以docker-node1为例)[root@docker-node1 ~]# hostnamectl set-hostname docker-node1[root@docker-node1 ~]# echo "docker-node1" > /etc/hostname[root@docker-node1 ~]# vim /etc/hosts172.16.60.213 ???docker-node1172.16.60.214 ???docker-node2关闭两台机器的防火墙和selinux (这里以docker-node1为例)[root@docker-node1 ~]# systemctl stop firewalld[root@docker-node1 ~]# systemctl disable firewalld[root@docker-node1 ~]# firewall-cmd --statenot running[root@docker-node1 ~]# cat /etc/sysconfig/selinux SELINUX=disabled[root@docker-node1 ~]# setenforce 0[root@docker-node1 ~]# getenforce Disabled两台机器都要安装docker环境 (这里以docker-node1为例)[root@docker-node1 ~]# yum install -y docker[root@docker-node1 ~]# systemctl start docker[root@docker-node1 ~]# systemctl disable docker修改docker监听端口 (这里以docker-node1为例)Swarm是通过监听2375端口进行通信的，所以在使用Swarm进行集群管理之前，需要设置一下2375端口的监听。所有主机节点docker开启2375监听，docker版本不同，配置方式不一样[root@docker-node1 ~]# cp /lib/systemd/system/docker.service /lib/systemd/system/docker.service.bak[root@docker-node1 ~]# vim ?/lib/systemd/system/docker.service ????????//将ExecStart一行修改为下面内容:ExecStart=/usr/bin/dockerd -H tcp://0.0.0.0:2375 -H unix:///var/run/docker.sock[root@docker-node1 ~]# diff /lib/systemd/system/docker.service /lib/systemd/system/docker.service.bak13c13< ExecStart=/usr/bin/dockerd -H tcp://0.0.0.0:2375 -H unix:///var/run/docker.sock---> ExecStart=/usr/bin/dockerd -H unix://重启docker服务[root@docker-node1 ~]# systemctl daemon-reload[root@docker-node1 ~]# systemctl restart docker2) Swarm安装和集群创建2.1) Swarm镜像下载docker-node1机器上下载[root@docker-node1 ~]# docker pull swarm[root@docker-node1 ~]# docker imagesREPOSITORY ???????????TAG ????????????????IMAGE ID ?????????????CREATED ??????????????SIZEswarm ?????????????????????latest ?????????????ff454b4a0e84 ???????5 months ago ???????12.7MBdocker-node2机器上下载[root@docker-node2 ~]# docker pull swarm[root@docker-node2 ~]# docker imagesREPOSITORY ?????????TAG ????????????????IMAGE ID ??????????????CREATED ?????????????SIZEdocker.io/swarm ????latest ?????????????ff454b4a0e84 ???????5 months ago ???????12.7 MB2.2) 初始化Swarm在docker-node1机器上进行初始化操作[root@docker-node1 ~]# docker swarm init --advertise-addr 172.16.60.213Swarm initialized: current node (vayif0c04lged913w9z3pxtd5) is now a manager.To add a worker to this swarm, run the following command: ???docker swarm join --token SWMTKN-1-5qjhhernfguqc4zwhtwgdzfwy7xl1ksjr04ve2wg0pk376wqvx-717allcxbo5mu02weq0s4ge36 172.16.60.213:2377To add a manager to this swarm, run ‘docker swarm join-token manager‘ and follow the instructions.上面命令执行后，该机器自动加入到swarm集群。这个会创建一个集群token，获取全球唯一的 token，作为集群唯一标识。后续将其他节点加入集群都会用到这个token值。其中，--advertise-addr参数表示其它swarm中的worker节点使用此ip地址与manager联系。命令的输出包含了其它节点如何加入集群的命令。2.3) 添加集群节点在docker-node2机器上执行以下添加集群节点的操作命令[root@docker-node2 ~]# docker swarm join --token SWMTKN-1-5qjhhernfguqc4zwhtwgdzfwy7xl1ksjr04ve2wg0pk376wqvx-717allcxbo5mu02weq0s4ge36 172.16.60.213:2377This node joined a swarm as a worker.如后续要加入其他更多的节点,添加操作也是执行这个命令.2.3) 查看集群节点在docker-node1机器上执行查看,因为此时它是swarm集群的leader节点[root@docker-node1 ~]# docker node listID ??????????????????????????????????HOSTNAME ?????????STATUS ???????????AVAILABILITY ???????MANAGER STATUS ?????ENGINE VERSIONvayif0c04lged913w9z3pxtd5 * ?????????docker-node1 ?????Ready ????????????Active ?????????????Leader ?????????????18.09.0trmbfdjdxncnukfenuzuokfun ???????????docker-node2 ?????Ready ????????????Active ?????????????????????????????????1.13.1最后查看下两个机器上的2375端口都已经开启了[root@docker-node1 ~]# lsof -i:2375COMMAND ??PID USER ??FD ??TYPE ?DEVICE SIZE/OFF NODE NAMEdockerd 13785 root ???5u ?IPv6 4518841 ?????0t0 ?TCP *:2375 (LISTEN)[root@docker-node2 ~]# lsof -i:2375COMMAND ???PID USER ??FD ??TYPE ?DEVICE SIZE/OFF NODE NAMEdockerd-c 2966 root ???5u ?IPv6 3602947 ?????0t0 ?TCP *:2375 (LISTEN)===============================================================二. ?部署Portainerdocker-node1节点操作删除上面单机版部署的容器[root@docker-node1 ~]# for i in $(docker ps -a -q);do docker stop $i && docker rm $i;donee3af45ff8141e3af45ff81415818eaf37bf45818eaf37bf4[root@docker-node1 ~]# docker ps -aCONTAINER ID ???????IMAGE ??????????????COMMAND ????????????CREATED ????????????STATUS ?????????????PORTS ??????????????NAMES[root@docker-node1 ~]# docker imagesREPOSITORY ????????????TAG ????????????????IMAGE ID ???????????CREATED ????????????SIZEportainer/portainer ??latest ?????????????00ead811e8ae ???????8 weeks ago ????????58.7MB[root@docker-node1 ~]# docker run -ti -d --name my-portainer -p 9000:9000 --restart=always ?portainer/portainer6755cd140049d7cb3ab77f40ddf0fb79f20384cffd17cb87da68d04033be30b5[root@docker-node1 ~]# docker psCONTAINER ID ???????IMAGE ??????????????????????COMMAND ????????????CREATED ?????????????STATUS ?????????????????PORTS ?????????????????????????????NAMES6755cd140049 ???????portainer/portainer ??"/portainer" ???????????57 seconds ago ?????Up 41 seconds ??????0.0.0.0:9000->9000/tcp ??my-portainer