Docker系列（二十）——Docker实例二Docker安装Nginx实例

迈不过友情╰ 2022-04-11 19:58 346阅读 0赞

###                                    《 Docker实例二Docker安装Nginx实例 》 ###

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hlbGxvX1dvcmxkX1FXUA_size_16_color_FFFFFF_t_70][]

> ### 前言 ###

在前面一篇文章种，完成了 《 [Docker安装Apache实例][Docker_Apache] 》，本篇将继续镜像安装教程，并完成Docker安装Nginx实例。

> ### Docker实例二Docker安装Nginx实例 ###

**第一种：使用 docker pull 镜像名 拉取镜像**

1、查询星级数大于30的Nginx镜像（注：星级数越高，越受欢迎的，默认在 Docker Hub 查询的），

输入命令 “ docker search -s 30 nginx” ，查询内容如下：

[root@localhost ~]# docker search -s 30 nginx
    Flag --stars has been deprecated, use --filter=stars=3 instead
    NAME                                                   DESCRIPTION                                     STARS               OFFICIAL            AUTOMATED
    nginx                                                  Official build of Nginx.                        10449               [OK]                
    jwilder/nginx-proxy                                    Automated Nginx reverse proxy for docker con…   1480                                    [OK]
    richarvey/nginx-php-fpm                                Container running Nginx + PHP-FPM capable of…   657                                     [OK]
    jrcs/letsencrypt-nginx-proxy-companion                 LetsEncrypt container to use with nginx as p…   448                                     [OK]
    kong                                                   Open-source Microservice & API Management la…   254                 [OK]                
    webdevops/php-nginx                                    Nginx with PHP-FPM                              118                                     [OK]
    kitematic/hello-world-nginx                            A light-weight nginx container that demonstr…   112                                     
    zabbix/zabbix-web-nginx-mysql                          Zabbix frontend based on Nginx web-server wi…   79                                      [OK]
    bitnami/nginx                                          Bitnami nginx Docker Image                      59                                      [OK]
    1and1internet/ubuntu-16-nginx-php-phpmyadmin-mysql-5   ubuntu-16-nginx-php-phpmyadmin-mysql-5          47                                      [OK]
    linuxserver/nginx                                      An Nginx container, brought to you by LinuxS…   44

2、拉取第一个镜像，也是官方版的镜像，输入命令 “ docker pull nginx”，默认拉取的为最新版本 latest ，内容如下：

[root@localhost ~]# docker pull nginx
    Using default tag: latest
    latest: Pulling from library/nginx
    f17d81b4b692: Already exists 
    82dca86e04c3: Pull complete 
    046ccb106982: Pull complete 
    Digest: sha256:d59a1aa7866258751a261bae525a1842c7ff0662d4f34a355d5f36826abc0341
    Status: Downloaded newer image for nginx:latest

3、拉取完成后，输入命令 “ docker images nginx ”，可以在本地镜像列表里查到REPOSITORY为nginx的镜像，内容如下：

[root@localhost ~]# docker images nginx
    REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
    nginx               latest              62f816a209e6        3 weeks ago         109MB

**第二种：通过 Dockerfile 构建Docker镜像**

1、新建Nginx的Dockerfile文件存放目录，输入命令 “ mkdir -p /opt/dockerfile/nginx ” ，并进入到目录下。

[root@localhost ~]# mkdir -p /opt/dockerfile/nginx
    [root@localhost ~]# cd /opt/dockerfile/nginx/
    [root@localhost nginx]#

2、创建dockerfile文件，输入命令 “ vi nginxdockerfile ” ，并键入如下内容：

**Ubuntu 版本：**

# Base 基础镜像
    FROM debian:stretch-slim
    
    LABEL maintainer="NGINX Docker Maintainers <docker-maint@nginx.com>"
    
    ENV NGINX_VERSION 1.15.7-1~stretch
    ENV NJS_VERSION   1.15.7.0.2.6-1~stretch
    
    RUN set -x \
    	&& apt-get update \
    	&& apt-get install --no-install-recommends --no-install-suggests -y gnupg1 apt-transport-https ca-certificates \
    	&& \
    	NGINX_GPGKEY=573BFD6B3D8FBC641079A6ABABF5BD827BD9BF62; \
    	found=''; \
    	for server in \
    		ha.pool.sks-keyservers.net \
    		hkp://keyserver.ubuntu.com:80 \
    		hkp://p80.pool.sks-keyservers.net:80 \
    		pgp.mit.edu \
    	; do \
    		echo "Fetching GPG key $NGINX_GPGKEY from $server"; \
    		apt-key adv --keyserver "$server" --keyserver-options timeout=10 --recv-keys "$NGINX_GPGKEY" && found=yes && break; \
    	done; \
    	test -z "$found" && echo >&2 "error: failed to fetch GPG key $NGINX_GPGKEY" && exit 1; \
    	apt-get remove --purge --auto-remove -y gnupg1 && rm -rf /var/lib/apt/lists/* \
    	&& dpkgArch="$(dpkg --print-architecture)" \
    	&& nginxPackages=" \
    		nginx=${NGINX_VERSION} \
    		nginx-module-xslt=${NGINX_VERSION} \
    		nginx-module-geoip=${NGINX_VERSION} \
    		nginx-module-image-filter=${NGINX_VERSION} \
    		nginx-module-njs=${NJS_VERSION} \
    	" \
    	&& case "$dpkgArch" in \
    		amd64|i386) \
    # arches officialy built by upstream
    			echo "deb https://nginx.org/packages/mainline/debian/ stretch nginx" >> /etc/apt/sources.list.d/nginx.list \
    			&& apt-get update \
    			;; \
    		*) \
    # we're on an architecture upstream doesn't officially build for
    # 从已发布的源包构建二进制文件
    			echo "deb-src https://nginx.org/packages/mainline/debian/ stretch nginx" >> /etc/apt/sources.list.d/nginx.list \
    			\
    # new directory for storing sources and .deb files
    # 用于存储源文件和.deb文件的新目录
    			&& tempDir="$(mktemp -d)" \
    			&& chmod 777 "$tempDir" \
    # (777 to ensure APT's "_apt" user can access it too) 授权
    			\
    # 保存当前安装的包的列表，以最后可以干净地删除构建依赖项
    			&& savedAptMark="$(apt-mark showmanual)" \
    			\
    # build .deb files from upstream's source packages (which are verified by apt-get)
    			&& apt-get update \
    			&& apt-get build-dep -y $nginxPackages \
    			&& ( \
    				cd "$tempDir" \
    				&& DEB_BUILD_OPTIONS="nocheck parallel=$(nproc)" \
    					apt-get source --compile $nginxPackages \
    			) \
    # 在这里不删除 APT 列表，因为它们会被重新下载并在稍后删除
    			\
    # 重置 apt-mark 的 “ manual ” 列表，以便 “ purge --auto-remove ” 将删除所有构建依赖项
    # (这是在安装构建包之后完成的，这样就不必重新下载任何重叠的依赖项)
    			&& apt-mark showmanual | xargs apt-mark auto > /dev/null \
    			&& { [ -z "$savedAptMark" ] || apt-mark manual $savedAptMark; } \
    			\
    # 创建要从其中安装的临时本地 APT repo( 以便 APT 可以处理依赖项解析)
    			&& ls -lAFh "$tempDir" \
    			&& ( cd "$tempDir" && dpkg-scanpackages . > Packages ) \
    			&& grep '^Package: ' "$tempDir/Packages" \
    			&& echo "deb [ trusted=yes ] file://$tempDir ./" > /etc/apt/sources.list.d/temp.list \
    # work around the following APT issue by using "Acquire::GzipIndexes=false" (overriding "/etc/apt/apt.conf.d/docker-gzip-indexes")
    #   Could not open file /var/lib/apt/lists/partial/_tmp_tmp.ODWljpQfkE_._Packages - open (13: Permission denied)
    #   ...
    #   E: Failed to fetch store:/var/lib/apt/lists/partial/_tmp_tmp.ODWljpQfkE_._Packages  Could not open file /var/lib/apt/lists/partial/_tmp_tmp.ODWljpQfkE_._Packages - open (13: Permission denied)
    			&& apt-get -o Acquire::GzipIndexes=false update \
    			;; \
    	esac \
    	\
    	&& apt-get install --no-install-recommends --no-install-suggests -y \
    						$nginxPackages \
    						gettext-base \
    	&& apt-get remove --purge --auto-remove -y apt-transport-https ca-certificates && rm -rf /var/lib/apt/lists/* /etc/apt/sources.list.d/nginx.list \
    	\
    # 如果在构建中有残余项，就清除它们(包括额外的、不必要的构建副版本)
    	&& if [ -n "$tempDir" ]; then \
    		apt-get purge -y --auto-remove \
    		&& rm -rf "$tempDir" /etc/apt/sources.list.d/temp.list; \
    	fi
    
    # 将请求和错误日志转发到docker日志收集器
    RUN ln -sf /dev/stdout /var/log/nginx/access.log \
    	&& ln -sf /dev/stderr /var/log/nginx/error.log
    
    # 暴露80端口
    EXPOSE 80
    
    STOPSIGNAL SIGTERM
    
    CMD ["nginx", "-g", "daemon off;"]

**Linux 版本：**

FROM alpine:3.9
    
    LABEL maintainer="NGINX Docker Maintainers <docker-maint@nginx.com>"
    
    ENV NGINX_VERSION 1.15.10
    
    RUN GPG_KEYS=B0F4253373F8F6F510D42178520A9993A1C052F8 \
    	&& CONFIG="\
    		--prefix=/etc/nginx \
    		--sbin-path=/usr/sbin/nginx \
    		--modules-path=/usr/lib/nginx/modules \
    		--conf-path=/etc/nginx/nginx.conf \
    		--error-log-path=/var/log/nginx/error.log \
    		--http-log-path=/var/log/nginx/access.log \
    		--pid-path=/var/run/nginx.pid \
    		--lock-path=/var/run/nginx.lock \
    		--http-client-body-temp-path=/var/cache/nginx/client_temp \
    		--http-proxy-temp-path=/var/cache/nginx/proxy_temp \
    		--http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp \
    		--http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp \
    		--http-scgi-temp-path=/var/cache/nginx/scgi_temp \
    		--user=nginx \
    		--group=nginx \
    		--with-http_ssl_module \
    		--with-http_realip_module \
    		--with-http_addition_module \
    		--with-http_sub_module \
    		--with-http_dav_module \
    		--with-http_flv_module \
    		--with-http_mp4_module \
    		--with-http_gunzip_module \
    		--with-http_gzip_static_module \
    		--with-http_random_index_module \
    		--with-http_secure_link_module \
    		--with-http_stub_status_module \
    		--with-http_auth_request_module \
    		--with-http_xslt_module=dynamic \
    		--with-http_image_filter_module=dynamic \
    		--with-http_geoip_module=dynamic \
    		--with-threads \
    		--with-stream \
    		--with-stream_ssl_module \
    		--with-stream_ssl_preread_module \
    		--with-stream_realip_module \
    		--with-stream_geoip_module=dynamic \
    		--with-http_slice_module \
    		--with-mail \
    		--with-mail_ssl_module \
    		--with-compat \
    		--with-file-aio \
    		--with-http_v2_module \
    	" \
    	&& addgroup -S nginx \
    	&& adduser -D -S -h /var/cache/nginx -s /sbin/nologin -G nginx nginx \
    	&& apk add --no-cache --virtual .build-deps \
    		gcc \
    		libc-dev \
    		make \
    		openssl-dev \
    		pcre-dev \
    		zlib-dev \
    		linux-headers \
    		curl \
    		gnupg1 \
    		libxslt-dev \
    		gd-dev \
    		geoip-dev \
    	&& curl -fSL https://nginx.org/download/nginx-$NGINX_VERSION.tar.gz -o nginx.tar.gz \
    	&& curl -fSL https://nginx.org/download/nginx-$NGINX_VERSION.tar.gz.asc  -o nginx.tar.gz.asc \
    	&& export GNUPGHOME="$(mktemp -d)" \
    	&& found=''; \
    	for server in \
    		ha.pool.sks-keyservers.net \
    		hkp://keyserver.ubuntu.com:80 \
    		hkp://p80.pool.sks-keyservers.net:80 \
    		pgp.mit.edu \
    	; do \
    		echo "Fetching GPG key $GPG_KEYS from $server"; \
    		gpg --keyserver "$server" --keyserver-options timeout=10 --recv-keys "$GPG_KEYS" && found=yes && break; \
    	done; \
    	test -z "$found" && echo >&2 "error: failed to fetch GPG key $GPG_KEYS" && exit 1; \
    	gpg --batch --verify nginx.tar.gz.asc nginx.tar.gz \
    	&& rm -rf "$GNUPGHOME" nginx.tar.gz.asc \
    	&& mkdir -p /usr/src \
    	&& tar -zxC /usr/src -f nginx.tar.gz \
    	&& rm nginx.tar.gz \
    	&& cd /usr/src/nginx-$NGINX_VERSION \
    	&& ./configure $CONFIG --with-debug \
    	&& make -j$(getconf _NPROCESSORS_ONLN) \
    	&& mv objs/nginx objs/nginx-debug \
    	&& mv objs/ngx_http_xslt_filter_module.so objs/ngx_http_xslt_filter_module-debug.so \
    	&& mv objs/ngx_http_image_filter_module.so objs/ngx_http_image_filter_module-debug.so \
    	&& mv objs/ngx_http_geoip_module.so objs/ngx_http_geoip_module-debug.so \
    	&& mv objs/ngx_stream_geoip_module.so objs/ngx_stream_geoip_module-debug.so \
    	&& ./configure $CONFIG \
    	&& make -j$(getconf _NPROCESSORS_ONLN) \
    	&& make install \
    	&& rm -rf /etc/nginx/html/ \
    	&& mkdir /etc/nginx/conf.d/ \
    	&& mkdir -p /usr/share/nginx/html/ \
    	&& install -m644 html/index.html /usr/share/nginx/html/ \
    	&& install -m644 html/50x.html /usr/share/nginx/html/ \
    	&& install -m755 objs/nginx-debug /usr/sbin/nginx-debug \
    	&& install -m755 objs/ngx_http_xslt_filter_module-debug.so /usr/lib/nginx/modules/ngx_http_xslt_filter_module-debug.so \
    	&& install -m755 objs/ngx_http_image_filter_module-debug.so /usr/lib/nginx/modules/ngx_http_image_filter_module-debug.so \
    	&& install -m755 objs/ngx_http_geoip_module-debug.so /usr/lib/nginx/modules/ngx_http_geoip_module-debug.so \
    	&& install -m755 objs/ngx_stream_geoip_module-debug.so /usr/lib/nginx/modules/ngx_stream_geoip_module-debug.so \
    	&& ln -s ../../usr/lib/nginx/modules /etc/nginx/modules \
    	&& strip /usr/sbin/nginx* \
    	&& strip /usr/lib/nginx/modules/*.so \
    	&& rm -rf /usr/src/nginx-$NGINX_VERSION \
    	\
    	# Bring in gettext so we can get `envsubst`, then throw
    	# the rest away. To do this, we need to install `gettext`
    	# then move `envsubst` out of the way so `gettext` can
    	# be deleted completely, then move `envsubst` back.
    	&& apk add --no-cache --virtual .gettext gettext \
    	&& mv /usr/bin/envsubst /tmp/ \
    	\
    	&& runDeps="$( \
    		scanelf --needed --nobanner --format '%n#p' /usr/sbin/nginx /usr/lib/nginx/modules/*.so /tmp/envsubst \
    			| tr ',' '\n' \
    			| sort -u \
    			| awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' \
    	)" \
    	&& apk add --no-cache --virtual .nginx-rundeps $runDeps \
    	&& apk del .build-deps \
    	&& apk del .gettext \
    	&& mv /tmp/envsubst /usr/local/bin/ \
    	\
    	# Bring in tzdata so users could set the timezones through the environment
    	# variables
    	&& apk add --no-cache tzdata \
    	\
    	# forward request and error logs to docker log collector
    	&& ln -sf /dev/stdout /var/log/nginx/access.log \
    	&& ln -sf /dev/stderr /var/log/nginx/error.log
    
    COPY nginx.conf /etc/nginx/nginx.conf
    COPY nginx.vh.default.conf /etc/nginx/conf.d/default.conf
    
    EXPOSE 80
    
    STOPSIGNAL SIGTERM
    
    CMD ["nginx", "-g", "daemon off;"]

3、通过 Dockerfile 的 docker build 构建一个 nginx 镜像，这儿可以自定义镜像名，输入命令 “ docker build -f /opt/dockerfile/nginx/nginxdockerfile -t huazai/web/nginx:v1.0 . ” 进行构建，部分构建内容如下：

[root@localhost nginx]# docker build -f nginxdockerfile -t huazai/web/nginx:v1.0 .
    Sending build context to Docker daemon  6.144kB
    Step 1/9 : FROM debian:stretch-slim
    stretch-slim: Pulling from library/debian
    f17d81b4b692: Already exists 
    Digest: sha256:ef6be890318a105f7401d0504c01c2888daa5d9e45b308cf0e45c7cb8e44634f
    Status: Downloaded newer image for debian:stretch-slim
    
    # 此处省去 N 行
    
    Step 8/9 : STOPSIGNAL SIGTERM
     ---> Running in 826aa504ed43
    Removing intermediate container 826aa504ed43
     ---> 721acf30abb2
    Step 9/9 : CMD ["nginx", "-g", "daemon off;"]
     ---> Running in 6a968fa50cf9
    Removing intermediate container 6a968fa50cf9
     ---> b217394a78f2
    Successfully built b217394a78f2
    Successfully tagged huazai/web/nginx:v1.0

构建成功后，输入命令 “ docker images huazai/web/nginx  ” ，可以在本地的镜像列表种查找到方才构建 nginx 镜像，内容如下：

[root@localhost nginx]# docker images huazai/web/nginx
    REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
    huazai/web/nginx    v1.0                b217394a78f2        8 minutes ago       109MB

--------------------

> ### 测试 nginx 镜像 ###

1、创建 nginx 相关目录，后面用于数据转递与共享的容器数据卷，

输入命令 “ mkdir -p /opt/nginx/config /opt/nginx/www /opt/nginx/logs ” ，内容如下：

[root@localhost ~]# mkdir -p /opt/nginx/config /opt/nginx/www /opt/nginx/logs
    [root@localhost ~]# cd /opt/nginx/
    [root@localhost nginx]# ll
    total 0
    drwxr-xr-x. 2 root root 6 Dec  4 02:35 config
    drwxr-xr-x. 2 root root 6 Dec  4 02:35 logs
    drwxr-xr-x. 2 root root 6 Dec  4 02:35 www

目录说明：

<table> 
 <tbody> 
  <tr> 
   <td>config</td> 
   <td>用于存放 nginx 的配置文件，启动时将文件将映射为 nginx 容器的配置文件；</td> 
  </tr> 
  <tr> 
   <td>www</td> 
   <td>对应 nginx 容器虚拟目录，启动时将映射为 nginx 容器配置的虚拟目录；</td> 
  </tr> 
  <tr> 
   <td>logs</td> 
   <td>用于存放nginx所产生的日志，启动时将映射为 nginx 容器的日志目录；</td> 
  </tr> 
 </tbody> 
</table>

2、启动镜像，创建一个容器实例，输入命令 “ docker run -it -d -p 80:80 --name nginx01 -v /opt/nginx/www:/opt/nginx/www -v /opt/nginx/config:/etc/nginx/nginx.conf -v /opt/nginx/logs:/opt/nginx/logs --privileged=true 镜像ID ” ，启动后会产生一个 ID ，内容如下：

3、查看 nginx 服务启动情况，输入命令 “ docker ps ” ，内容如下：

4、访问 nginx（这儿需要一些配置，自定义哈），正常启动后，访问如下图：

--------------------

好了，关于 Docker系列（二十）——Docker实例二Docker安装Nginx实例 就写到这儿了，如果还有什么疑问或遇到什么问题欢迎扫码提问，也可以给我留言哦，我会一一详细的解答的。   
歇后语：“ 共同学习，共同进步 ”，也希望大家多多关注CSND的IT社区。

--------------------

<table> 
 <tbody> 
  <tr> 
   <td>作&nbsp; &nbsp; &nbsp; &nbsp;者：</td> 
   <td>华 &nbsp; &nbsp;仔</td> 
  </tr> 
  <tr> 
   <td>联系作者：</td> 
   <td>who.seek.me@java98k.vip</td> 
  </tr> 
  <tr> 
   <td>来&nbsp; &nbsp; &nbsp; &nbsp; 源：</td> 
   <td>CSDN (Chinese Software Developer Network)</td> 
  </tr> 
  <tr> 
   <td>原&nbsp; &nbsp; &nbsp; &nbsp; 文：</td> 
   <td><a href="https://blog.csdn.net/Hello_World_QWP/article/details/84763869" rel="nofollow">https://blog.csdn.net/Hello_World_QWP/article/details/84763869</a></td> 
  </tr> 
  <tr> 
   <td>版权声明：</td> 
   <td>本文为博主原创文章，请在转载时务必注明博文出处！</td> 
  </tr> 
 </tbody> 
</table>

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hlbGxvX1dvcmxkX1FXUA_size_16_color_FFFFFF_t_70]: /images/20220412/d970c2e85be84a28b25aadcb2c1fb9fb.png
[Docker_Apache]: https://blog.csdn.net/Hello_World_QWP/article/details/84762704