Docker进阶Swarm、Stack、Secret、Config

[root@VM-0-14-centos ~]# docker swarm --help

Usage:  docker swarm COMMAND

Manage Swarm

Commands:
  ca          Display and rotate the root CA
  init        Initialize a swarm
  join        Join a swarm as a node and/or manager
  join-token  Manage join tokens
  leave       Leave the swarm
  unlock      Unlock swarm
  unlock-key  Manage the unlock key
  update      Update the swarm

Run 'docker swarm COMMAND --help' for more information on a command.

[root@VM-0-14-centos ~]# docker swarm init --help

Usage:  docker swarm init [OPTIONS]

Initialize a swarm

Options:
      --advertise-addr string   # 广播地址               Advertised address (format: <ip|interface>[:port])
      --autolock                               Enable manager autolocking (requiring an unlock key to start a
                                               stopped manager)
      --availability string                    Availability of the node ("active"|"pause"|"drain") (default "active")
      --cert-expiry duration                   Validity period for node certificates (ns|us|ms|s|m|h) (default
                                               2160h0m0s)
      --data-path-addr string                  Address or interface to use for data path traffic (format:
                                               <ip|interface>)
      --data-path-port uint32                  Port number to use for data path traffic (1024 - 49151). If no
                                               value is set or is set to 0, the default port (4789) is used.
      --default-addr-pool ipNetSlice           default address pool in CIDR format (default [])
      --default-addr-pool-mask-length uint32   default address pool subnet mask length (default 24)
      --dispatcher-heartbeat duration          Dispatcher heartbeat period (ns|us|ms|s|m|h) (default 5s)
      --external-ca external-ca                Specifications of one or more certificate signing endpoints
      --force-new-cluster                      Force create a new cluster from current state
      --listen-addr node-addr                  Listen address (format: <ip|interface>[:port]) (default 0.0.0.0:2377)
      --max-snapshots uint                     Number of additional Raft snapshots to retain
      --snapshot-interval uint  # 快照               Number of log entries between Raft snapshots (default 10000)
      --task-history-limit int                 Task history retention limit (default 5)

# 初始化主节点
docker swarm init
# 加入一个节点（管理者、worker）
docker swarm join

# 获取令牌
docker swarm join-token manager	# 生成加入 manager节点 命令
docker swarm join-token worker	# 生成加入 worker 节点 命令

docker swarm init --advertise-addr 172.27.0.6

docker swarm join --token SWMTKN-1-6b1kbshfye331k4d86az2ohqvdwlj1bijsbka6hvb8h5ha4n28-e61bl5kpo7c1jbaj4hj8nizv1 172.27.0.6:2377

docker node ls

systemctl stop docker

docker swarm leave

[root@VM-0-6-centos ~]# docker service --help

Usage:  docker service COMMAND

Manage services

Commands:
  create      创建一个 new service
  inspect     查看services细节
  logs        查看service日志
  ls          List services
  ps          List the tasks of one or more services
  rm          Remove one or more services
  rollback    Revert changes to a service's configuration
  scale       动态扩缩容 Scale one or multiple replicated services
  update      更行service

Run 'docker service COMMAND --help' for more information on a command.

docker service create -p 8888:80 --name my-nginx nginx

docker run 容器启动！不具有扩缩容
docker service 服务！具有扩缩容，滚动更新

# REPLICAS：副本数目
docker service ps ls
docker service ps my-nginx

# 查看服务 元数据
docker service inspect my0nginx

docker service update --replicas 5 my-nginx
或
docker service scale my-nginx=5

dcoker service create --mode replicated --name mytom tomcat:7 

docker service create --mode global --name haha alpine ping baidu.com

# 单机
docker-compose up -d wordpress.yaml

# 集群
docker-stack deploy wordpress.yaml

<p><h3>文章目录</h3><ul><ul><li><a href="#1_Swarm_2">1 Swarm介绍</a></li><ul><li><a href="#11_Warm_6">1.1 Warm文档</a></li><li><a href="#12__11">1.2 工作模式</a></li><li><a href="#13__17">1.3 购买服务器</a></li></ul><li><a href="#2__24">2 搭建集群</a></li><li><a href="#3_Raft_105">3 Raft协议</a></li><li><a href="#4__123">4 弹性、扩缩容、集群</a></li><li><a href="#Docker_Stack_190">Docker Stack</a></li><li><a href="#Docker_Secret_199">Docker Secret</a></li></ul></ul></p> <h2><a id="1_Swarm_2"></a>1 Swarm介绍</h2> <p>安装docker<br /> <a href="https://blog.csdn.net/zx77588023/article/details/122652560" target="_blank">https://blog.csdn.net/zx77588023/article/details/122652560</a></p> <h3><a id="11_Warm_6"></a>1.1 Warm文档</h3> <p>https://docs.docker.com/config/daemon/prometheus/</p> <p><code>Run your app in production -&gt; Configure containers -&gt; Scale your app</code></p> <h3><a id="12__11"></a>1.2 工作模式</h3> <p><img src="https://img.couragesteak.com/6cc6fadc7e7902c0f34d89f7ac8ae89f.png" alt="image.png" /></p> <p><code>Raft</code>：一致性算法</p> <h3><a id="13__17"></a>1.3 购买服务器</h3> <p><img src="https://img.couragesteak.com/b7ebffb670761181bf43028851b7f9cb.png" alt="image.png" /></p> <blockquote> <p>集群<br /> 2主2从</p> </blockquote> <h2><a id="2__24"></a>2 搭建集群</h2> <pre><div class="hljs"><code class="lang-shell">[root@VM-0-14-centos ~]# docker swarm --help Usage: docker swarm COMMAND Manage Swarm Commands: ca Display and rotate the root CA init Initialize a swarm join Join a swarm as a node and/or manager join-token Manage join tokens leave Leave the swarm unlock Unlock swarm unlock-key Manage the unlock key update Update the swarm Run &#x27;docker swarm COMMAND --help&#x27; for more information on a command. </code></div></pre> <pre><div class="hljs"><code class="lang-shell">[root@VM-0-14-centos ~]# docker swarm init --help Usage: docker swarm init [OPTIONS] Initialize a swarm Options: --advertise-addr string # 广播地址 Advertised address (format: &lt;ip|interface&gt;[:port]) --autolock Enable manager autolocking (requiring an unlock key to start a stopped manager) --availability string Availability of the node (&quot;active&quot;|&quot;pause&quot;|&quot;drain&quot;) (default &quot;active&quot;) --cert-expiry duration Validity period for node certificates (ns|us|ms|s|m|h) (default 2160h0m0s) --data-path-addr string Address or interface to use for data path traffic (format: &lt;ip|interface&gt;) --data-path-port uint32 Port number to use for data path traffic (1024 - 49151). If no value is set or is set to 0, the default port (4789) is used. --default-addr-pool ipNetSlice default address pool in CIDR format (default []) --default-addr-pool-mask-length uint32 default address pool subnet mask length (default 24) --dispatcher-heartbeat duration Dispatcher heartbeat period (ns|us|ms|s|m|h) (default 5s) --external-ca external-ca Specifications of one or more certificate signing endpoints --force-new-cluster Force create a new cluster from current state --listen-addr node-addr Listen address (format: &lt;ip|interface&gt;[:port]) (default 0.0.0.0:2377) --max-snapshots uint Number of additional Raft snapshots to retain --snapshot-interval uint # 快照 Number of log entries between Raft snapshots (default 10000) --task-history-limit int Task history retention limit (default 5) </code></div></pre> <pre><div class="hljs"><code class="lang-shell"><span class="hljs-meta"># </span><span class="language-bash">初始化主节点</span> docker swarm init <span class="hljs-meta"># </span><span class="language-bash">加入一个节点（管理者、worker）</span> docker swarm join <span class="hljs-meta"> # </span><span class="language-bash">获取令牌</span> docker swarm join-token manager # 生成加入 manager节点 命令 docker swarm join-token worker # 生成加入 worker 节点 命令 </code></div></pre> <p>将dokcer1设置为主节点</p> <pre><div class="hljs"><code class="lang-shell">docker swarm init --advertise-addr 172.27.0.6 </code></div></pre> <p><img src="https://img.couragesteak.com/2b6537b3cae30efbb599639ac17fe9df.png" alt="image.png" /></p> <p>docker2加入1节点</p> <pre><div class="hljs"><code class="lang-shell">docker swarm join --token SWMTKN-1-6b1kbshfye331k4d86az2ohqvdwlj1bijsbka6hvb8h5ha4n28-e61bl5kpo7c1jbaj4hj8nizv1 172.27.0.6:2377 </code></div></pre> <p>主节点查看所有节点</p> <pre><div class="hljs"><code class="lang-shell">docker node ls </code></div></pre> <h2><a id="3_Raft_105"></a>3 Raft协议</h2> <p>双主双从：假设一个节点挂了！其他节点是否可以用: 不可用<br /> Raft协议：保证大多数接待存货才可以用、只要&gt;1，集群至少大于3台</p> <p>关闭docker：测试挂机</p> <pre><div class="hljs"><code class="lang-shell">systemctl stop docker </code></div></pre> <p>退出集群</p> <pre><div class="hljs"><code class="lang-shell">docker swarm leave </code></div></pre> <p>故：至少3个主节点 多于1台机器存货</p> <h2><a id="4__123"></a>4 弹性、扩缩容、集群</h2> <p>docker-compose up：启动一个项目。单机</p> <p>集群：swarm docker service</p> <p>容器 =&gt; 服务 =&gt; 副本</p> <p>帮助</p> <pre><div class="hljs"><code class="lang-shell">[root@VM-0-6-centos ~]# docker service --help Usage: docker service COMMAND Manage services Commands: create 创建一个 new service inspect 查看services细节 logs 查看service日志 ls List services ps List the tasks of one or more services rm Remove one or more services rollback Revert changes to a service&#x27;s configuration scale 动态扩缩容 Scale one or multiple replicated services update 更行service Run &#x27;docker service COMMAND --help&#x27; for more information on a command. </code></div></pre> <p>启动服务</p> <pre><div class="hljs"><code class="lang-shell">docker service create -p 8888:80 --name my-nginx nginx </code></div></pre> <pre><div class="hljs"><code class="lang-shell">docker run 容器启动！不具有扩缩容 docker service 服务！具有扩缩容，滚动更新 </code></div></pre> <p>查看服务</p> <pre><div class="hljs"><code class="lang-shell"><span class="hljs-meta"># </span><span class="language-bash">REPLICAS：副本数目</span> docker service ps ls docker service ps my-nginx <span class="hljs-meta"> # </span><span class="language-bash">查看服务 元数据</span> docker service inspect my0nginx </code></div></pre> <p>更新副本数量</p> <pre><div class="hljs"><code class="lang-shell">docker service update --replicas 5 my-nginx 或 docker service scale my-nginx=5 </code></div></pre> <p>调整service 以什么方式运行</p> <pre><div class="hljs"><code class="lang-shell">dcoker service create --mode replicated --name mytom tomcat:7 docker service create --mode global --name haha alpine ping baidu.com </code></div></pre> <h2><a id="Docker_Stack_190"></a>Docker Stack</h2> <pre><div class="hljs"><code class="lang-shell"><span class="hljs-meta"># </span><span class="language-bash">单机</span> docker-compose up -d wordpress.yaml <span class="hljs-meta"> # </span><span class="language-bash">集群</span> docker-stack deploy wordpress.yaml </code></div></pre> <h2><a id="Docker_Secret_199"></a>Docker Secret</h2> <p>学习地址：<br /> https://www.bilibili.com/video/BV1kv411q7Qc</p>