Docker-compose构建nginx反向代理配置详解

一、compose简介

compose项目来源于之前的fig项目，使用python语言编写。compose项目主要用于编排部署docker的应用，本身与docker/swarm配合度很高

docker compose是docker编排服务的一部分，可以让用户在其他平台上快速的安装docker，dockercompose属于一个应用层的服务，用户可以定义哪个容器组运行哪个应用，它支持动态改变应用。

dockerfile可以让用户管理一个单独的容器，而compose则允许用户在一个模版yaml格式中定义一个相关联的容器，例如一个调度器，两个web服务器等。

一、我们先做一个基础的环境，用dockerfile做一个apache镜像。

以下是Apache的dockerfile。

#FROM docker.io/centos:centos6
MAINTAINER [email protected]
RUN yum install -y httpd net-tools iputils
RUN sed 's/#ServerName www.example.com:80/ServerName www.benet.com/g' /etc/httpd/conf/httpd.conf
EXPOSE 80
CMD ["/usr/sbin/httpd","-DFOREGROUND"]

1.编写完成之后运行dockerfile

# docker build -t centos:http .
Sending build context to Docker daemon 2.048 kB
Step 1 : FROM docker.io/centos:centos6
Trying to pull repository docker.io/library/centos ...
centos6: Pulling from docker.io/library/centos

b26de5a391ad: Downloading [=========================>                 ] 2.701 MB/70.04 MB

2.运行完成之后查看是否有http的镜像

# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
centos              http                33e4acf38103        24 seconds ago      302 MB
docker.io/centos    centos6             5dedbd63518e        9 days ago          194.3 MB

3.编写nginx-dockerfile，以下的nginx的dockerfile

#images of nginx
FROM docker.io/centos:centos6
RUN yum install -y pcre-devel wget net-tools gcc zlib zlib-devel make openssl-devel
RUN useradd -M -s /sbin/nologin nginx
ADD http://nginx.org/download/nginx-1.6.2.tar.gz .
RUN tar zxvf nginx-1.6.2.tar.gz
RUN mkdir -p /usr/local/nginx
RUN cd nginx-1.6.2 && ./configure --prefix=/usr/local/nginx --user=nginx --group=nginx --with-http_stub_status_module && make && make install
RUN ln -s /usr/local/nginx/sbin/* /usr/local/sbin/
copy nginx.conf /usr/local/nginx/conf/nginx.conf
expose 80
CMD ["nginx"]

4.注意以上红色字段，我们需要拷贝一份nginx在当前目录。以下是nginx主配置内容

# ls
dockerfile  nginx.conf
vim nginx.conf
#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #gzip  on;
upstream yankerp{
           server Apache1:80 weight=1;
           server Apache2:80 weight=1;
           server Apache3:80 weight=1;
    }
    server {
        listen       80;
        server_name  localhost;

        #charset koi8-r;

        #access_log  logs/host.access.log  main;

        location / {
            root   html;
            index  index.html index.htm;
        proxy_pass http://yankerp;
        }

        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

        # proxy the PHP scripts to Apache listening on 127.0.0.1:80
        #
        #location ~ \.php$ {
        #    proxy_pass   http://127.0.0.1;
        #}

        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        #location ~ \.php$ {
        #    root           html;
        #    fastcgi_pass   127.0.0.1:9000;
        #    fastcgi_index  index.php;
        #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
        #    include        fastcgi_params;
        #}

        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #    deny  all;
        #}
    }


    # another virtual host using mix of IP-, name-, and port-based configuration
    #
    #server {
    #    listen       8000;
    #    listen       somename:8080;
    #    server_name  somename  alias  another.alias;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}


    # HTTPS server
    #
    #server {
    #    listen       443 ssl;
    #    server_name  localhost;

    #    ssl_certificate      cert.pem;
    #    ssl_certificate_key  cert.key;

    #    ssl_session_cache    shared:SSL:1m;
    #    ssl_session_timeout  5m;

    #    ssl_ciphers  HIGH:!aNULL:!MD5;
    #    ssl_prefer_server_ciphers  on;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}

}
daemon off;

5.随后运行nginx-dockerfile 注意那个后面的小点，代表当前位置。

# docker build -t centos:nginx .
Sending build context to Docker daemon 6.144 kB
Step 1 : FROM docker.io/centos:centos6
 ---> 5dedbd63518e
Step 2 : RUN yum install -y pcre-devel wget net-tools gcc zlib zlib-devel make openssl-devel
 ---> Running in 4c25bd1ebd47
Loaded plugins: fastestmirror, ovl
Setting up Install Process

运行完之后我们查看是否有nginx镜像

# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
centos              nginx               155c0c66b4fc        41 seconds ago      316.4 MB
centos              http                33e4acf38103        19 minutes ago      302 MB
docker.io/centos    centos6             5dedbd63518e        9 days ago          194.3 MB

二、安装compose，在安装docker-compose时，先安装pip，pip就相当于redhat里面的yum

以下是安装的过程

# wget https://bootstrap.pypa.io/get-pip.py
--2017-09-23 14:56:25--  https://bootstrap.pypa.io/get-pip.py
正在解析主机 bootstrap.pypa.io (bootstrap.pypa.io)... 151.101.76.175
正在连接 bootstrap.pypa.io (bootstrap.pypa.io)|151.101.76.175|:443... 已连接。
已发出 HTTP 请求，正在等待回应... 200 OK
长度：1595408 (1.5M) [text/x-python]
正在保存至: “get-pip.py”

29% [=================================>                             ] 477,486     29.8KB/s 剩余 45s

python get-pip.py

# python get-pip.py
Collecting pip
  Downloading pip-9.0.1-py2.py3-none-any.whl (1.3MB)
    100% |████████████████████████████████| 1.3MB 43kB/s
Collecting wheel
  Downloading wheel-0.30.0-py2.py3-none-any.whl (49kB)
    100% |████████████████████████████████| 51kB 21kB/s
Installing collected packages: pip, wheel
Successfully installed pip-9.0.1 wheel-0.30.0

安装完成时候在安装compose

# pip install docker-compose
Collecting docker-compose
  Downloading docker_compose-1.16.1-py2.py3-none-any.whl (105kB)
    100% |████████████████████████████████| 112kB 14kB/s
Collecting texttable<0.10,>=0.9.0 (from docker-compose)
  Downloading texttable-0.9.1.tar.gz
Collecting backports.ssl-match-hostname>=3.5; python_version < "3.5" (from docker-compose)
  Downloading backports.ssl_match_hostname-3.5.0.1.tar.gz
Collecting docker<3.0,>=2.5.1 (from docker-compose)
  Downloading docker-2.5.1-py2.py3-none-any.whl (111kB)
    100% |████████████████████████████████| 112kB 29kB/s
Collecting jsonschema<3,>=2.5.1 (from docker-compose)
  Downloading jsonschema-2.6.0-py2.py3-none-any.whl
Collecting cached-property<2,>=1.2.0 (from docker-compose)
  Downloading cached_property-1.3.1-py2.py3-none-any.whl
Requirement already satisfied: six<2,>=1.3.0 in /usr/lib/python2.7/site-packages (from docker-compose)
Collecting ipaddress>=1.0.16; python_version < "3.3" (from docker-compose)
  Downloading ipaddress-1.0.18-py2-none-any.whl
Collecting enum34<2,>=1.0.4; python_version < "3.4" (from docker-compose)
  Downloading enum34-1.1.6-py2-none-any.whl
Collecting websocket-client<1.0,>=0.32.0 (from docker-compose)
  Downloading websocket_client-0.44.0-py2.py3-none-any.whl (199kB)
    100% |████████████████████████████████| 204kB 29kB/s
Collecting PyYAML<4,>=3.10 (from docker-compose)
  Downloading PyYAML-3.12.tar.gz (253kB)
    100% |████████████████████████████████| 256kB 23kB/s
Collecting dockerpty<0.5,>=0.4.1 (from docker-compose)
  Downloading dockerpty-0.4.1.tar.gz
Collecting requests!=2.11.0,<2.12,>=2.6.1 (from docker-compose)
  Downloading requests-2.11.1-py2.py3-none-any.whl (514kB)
    100% |████████████████████████████████| 522kB 24kB/s
Collecting docopt<0.7,>=0.6.1 (from docker-compose)
  Downloading docopt-0.6.2.tar.gz
Collecting docker-pycreds>=0.2.1 (from docker<3.0,>=2.5.1->docker-compose)
  Downloading docker_pycreds-0.2.1-py2.py3-none-any.whl
Collecting functools32; python_version == "2.7" (from jsonschema<3,>=2.5.1->docker-compose)
  Downloading functools32-3.2.3-2.zip
Building wheels for collected packages: texttable, backports.ssl-match-hostname, PyYAML, dockerpty, docopt, functools32
  Running setup.py bdist_wheel for texttable ... done
  Stored in directory: /root/.cache/pip/wheels/9e/53/a3/e452dc385103ee8e1f0df7b3457974b580d52ce662ee5a16cc
  Running setup.py bdist_wheel for backports.ssl-match-hostname ... done
  Stored in directory: /root/.cache/pip/wheels/5d/72/36/b2a31507b613967b728edc33378a5ff2ada0f62855b93c5ae1
  Running setup.py bdist_wheel for PyYAML ... done
  Stored in directory: /root/.cache/pip/wheels/2c/f7/79/13f3a12cd723892437c0cfbde1230ab4d82947ff7b3839a4fc
  Running setup.py bdist_wheel for dockerpty ... done
  Stored in directory: /root/.cache/pip/wheels/ae/d5/14/a25cbb003bd70ffefba0fdfbd5a5c4ea4d2a11bde7736f7482
  Running setup.py bdist_wheel for docopt ... done
  Stored in directory: /root/.cache/pip/wheels/b2/16/5f/c33a2bb5f2dce71205f8e65cbfd05647d79d441282be31fd82
  Running setup.py bdist_wheel for functools32 ... done
  Stored in directory: /root/.cache/pip/wheels/3c/d0/09/cd78d0ff4d6cfecfbd730782a7815a4571cd2cd4d2ed6e69d9
Successfully built texttable backports.ssl-match-hostname PyYAML dockerpty docopt functools32
Installing collected packages: texttable, backports.ssl-match-hostname, websocket-client, ipaddress, docker-pycreds, requests, docker, functools32, jsonschema, cached-property, enum34, PyYAML, dockerpty, docopt, docker-compose
  Found existing installation: backports.ssl-match-hostname 3.4.0.2
    Uninstalling backports.ssl-match-hostname-3.4.0.2:
      Successfully uninstalled backports.ssl-match-hostname-3.4.0.2
Successfully installed PyYAML-3.12 backports.ssl-match-hostname-3.5.0.1 cached-property-1.3.1 docke

# ln -s /usr/bin/docker-compose /usr/local/bin/

接下来介绍几个术语

#build
Usage: build [options] [SERVICE...]


Options:
--force-rm  Always remove intermediate containers.
--no-cache  Do not use cache when building the image.
--pull      Always attempt to pull a newer version of the image.
当修改dockerfile或者docker-compose时，运行docker-compose build 重建镜像。  生成镜像后，可使用docker-compose up启动


config
Usage: config [options]


Options:
-q, --quiet     只验证配置，不输出。 当配置正确时，不输出任何内容，当文件配置错误，输出错误信息。
--services      打印服务名，一行一个
验证和查看compose文件配置。
create
为服务创建容器.只是单纯的create，还需要使用start启动compose


Usage: create [options] [SERVICE...]


Options:
    --force-recreate       重新创建容器，即使他的配置和镜像没有改变，不兼容--no-recreate参数
    --no-recreate          如果容器已经存在，不需要重新创建. 不兼容--force-recreate参数
    --no-build             不创建镜像，即使缺失.
    --build                创建容器前，生成镜像.
down
Usage: down [options]


Options:
    --rmi type          删除镜像，类型必须是:
                        'all': 删除compose文件中定义的所以镜像.
                        'local': 删除镜像名为空的镜像
     -v, --volumes       删除卷
                        attached to containers.
    --remove-orphans    Remove containers for services not defined in the
                        Compose file
停止和删除容器、网络、卷、镜像，这些内容是通过docker-compose up命令创建的.  默认值删除 容器 网络，可以通过指定 rmi volumes参数删除镜像和卷


events
Usage: events [options] [SERVICE...]


Options:
    --json      输出事件日志，json格式
输出docker-compose 事件的日志，当执行docker-compose命令操作时，docker-compose even命令就会监控日志:
{
    "service": "web",
    "event": "create",
    "container": "213cf75fc39a",
    "image": "alpine:edge",
    "time": "2015-11-20T18:01:03.615550",
}
exec
Usage: exec [options] SERVICE COMMAND [ARGS...]


Options:
-d                分离模式，后台运行命令.
--privileged      获取特权.
--user USER       指定运行的用户.
-T                禁用分配TTY. By default `docker-compose exec`
                  分配 a TTY.
--index=index     当一个服务拥有多个容器时，可通过该参数登陆到该服务下的任何服务，例如：docker-compose exec --index=1 web /bin/bash ，web服务中包含多个容器
                  instances of a service [default: 1]
和docker exec命令功能相同，可以通过service name登陆到容器中
e.g. docker-compose exec web sh
kill
Usage: kill [options] [SERVICE...]


Options:
-s SIGNAL         向容器发送信号. 默认是SIGKILL.
通过发送 SIGKILL 信号来强制停止服务容器。支持通过参数来指定发送的信号:
$ docker-compose kill -s SIGINT
logs
Usage: logs [options] [SERVICE...]


Options:
--no-color          单色输出，不显示其他颜.
-f, --follow        跟踪日志输出，就是可以实时查看日志
-t, --timestamps    显示时间戳
--tail              从日志的结尾显示，--tail=200
显示日志输出.
pause
Usage: pause [SERVICE...]
暂停容器服务. docker-compose pause  暂停所有服务. docker-compose pause web，之后暂停web服务的容器。
unpause
Usage: unpause [SERVICE...]
恢复容器服务. docker-compose unpause  恢复所有服务. docker-compose unpause web，之后恢复web服务的容器。
port
Usage: port [options] SERVICE PRIVATE_PORT


Options:
--protocol=proto  tcp or udp [default: tcp]
--index=index     index of the container if there are multiple
                  instances of a service [default: 1]
输出服务的共有端口.
# docker-compose port web 8080   -- 8080为容器内部端口
0.0.0.0:8884
ps
Usage: ps [options] [SERVICE...]


Options:
-q    只显示ID
显示容器. 默认显示name、command、state、ports
pull
Usage: pull [options] [SERVICE...]


Options:
--ignore-pull-failures  忽略pull失败的镜像，继续pull其他镜像.
pull compose文件中所指明的镜像.
push
Usage: push [options] [SERVICE...]


Options:
    --ignore-push-failures  忽略错误.
push compose文件中所指明的镜像
restart
Usage: restart [options] [SERVICE...]


Options:
-t, --timeout TIMEOUT      Specify a shutdown timeout in seconds. (default: 10)
Restarts services.
rm
Usage: rm [options] [SERVICE...]


Options:
    -f, --force   Don't ask to confirm removal
    -v            期初加载到容器的任何匿名卷
    -a, --all     Also remove one-off containers created by
                  docker-compose run
Removes stopped service containers. 如果服务在运行，需要先docker-compose stop 停止容器
By default, anonymous volumes attached to containers will not be removed. You can override this with -v. To list all volumes, use docker volume ls.
Any data which is not in a volume will be lost.
run
Usage: run [options] [-e KEY=VAL...] SERVICE [COMMAND] [ARGS...]


Options:
 -d                   后台运行，输出容器名.
-e KEY=VAL            设置环境变量参数，可以使用多次
-u, --user=""         指定运行的用户
--no-deps             不启动link服务，只启动run的服务.
--rm                  运行后删除容器，后台运行模式除外(-d).
-p, --publish=[]      开放端口
--service-ports       compose文件中配置什么端口，就映射什么端口.
-T                    禁用TTY.
-w, --workdir=""      设置工作目录
启动web服务器，并执行bash命令.
$ docker-compose run web bash
根据compose配置文件制定的端口，映射到主机:
$ docker-compose run --service-ports web python manage.py shell
指定端口映射到主机:
$ docker-compose run --publish 8080:80 -p 2022:22 -p 127.0.0.1:2021:21 web python manage.py shell
link db容器:
$ docker-compose run db psql -h db -U docker
不linke容器，单独启动指定容器:
$ docker-compose run --no-deps web python manage.py shell
scale
Usage: scale [SERVICE=NUM...]
设置服务的个数.
$ docker-compose scale web=2 worker=3
start
Usage: start [SERVICE...]
启动服务.
stop
Usage: stop [options] [SERVICE...]


Options:
-t, --timeout TIMEOUT     关闭超时时间 (default: 10).
停止容器.
up
Usage: up [options] [SERVICE...]


Options:
    -d                         后台运行，输出容器的名字.
                               Incompatible with --abort-on-container-exit.
    --no-color                  单色输出.
    --no-deps                  不启动link服务.
    --force-recreate           强制重新创建compose服务，即使没有任何改变。重新创建后启动容器
                               Incompatible with --no-recreate.
    --no-recreate               如果容器已经存在，不重新创建.
                               Incompatible with --force-recreate.
    --no-build                 不创建重启，即使镜像不存在.
    --build                    重新创建镜像，然后生成容器.
    --abort-on-container-exit  任何容器停止，自动停止所有容器.
                               Incompatible with

下面创建一个web项目，一个nginx挂载三个web容器

docker-nginx目录作为工作目录，并在其中创建一个子目录nginx

# pwd
/root/docker-nginx
[root@yankerp docker-nginx]# mkdir nginx
[root@yankerp docker-nginx]# ll
总用量 0
drwxr-xr-x. 2 root root 6 9月  23 15:16 nginx

在/root/docker-nginx/nginx下创建nginx的主配置文件nginx.conf

在/root/docker-nginx/下创建docker-compose.yml文件
下面是创建目录的内容

nginx.conf文件内容

# pwd
/root/docker-nginx/nginx
[root@yankerp nginx]# vim nginx.conf
[root@yankerp nginx]# cat nginx.conf

#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #gzip  on;
upstream yankerp{
               server Apache1:80 weight=1;
               server Apache2:80 weight=1;
               server Apache3:80 weight=1;
        }
    server {
        listen       80;
        server_name  localhost;

        #charset koi8-r;

        #access_log  logs/host.access.log  main;

        location / {
            root   html;
            index  index.html index.htm;
            proxy_pass http://yankerp;
        }

        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

        # proxy the PHP scripts to Apache listening on 127.0.0.1:80
        #
        #location ~ \.php$ {
        #    proxy_pass   http://127.0.0.1;
        #}

        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        #location ~ \.php$ {
        #    root           html;
        #    fastcgi_pass   127.0.0.1:9000;
        #    fastcgi_index  index.php;
        #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
        #    include        fastcgi_params;
        #}

        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #    deny  all;
        #}
    }


    # another virtual host using mix of IP-, name-, and port-based configuration
    #
    #server {
    #    listen       8000;
    #    listen       somename:8080;
    #    server_name  somename  alias  another.alias;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}


    # HTTPS server
    #
    #server {
    #    listen       443 ssl;
    #    server_name  localhost;

    #    ssl_certificate      cert.pem;
    #    ssl_certificate_key  cert.key;

    #    ssl_session_cache    shared:SSL:1m;
    #    ssl_session_timeout  5m;

    #    ssl_ciphers  HIGH:!aNULL:!MD5;
    #    ssl_prefer_server_ciphers  on;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}

}
daemon off;

yml文件内容

[root@yankerp docker-nginx]# pwd
/root/docker-nginx
[root@yankerp docker-nginx]# ls
docker-compose.yml  nginx
[root@yankerp docker-nginx]# cat docker-compose.yml
Apache1:
  image: centos:http
  expose:
    - 80

Apache2:
  image: centos:http
  expose:
    - 80

Apache3:
  image: centos:http
  expose:
    - 80

nginx:
  image: centos:nginx
  links:
    - Apache1
    - Apache2
    - Apache3
  ports:
    - "8000:80"

配置完成后运行compose项目

在docker-nginx目录下执行docker-compose up -d启动应用

# pwd
/root/docker-nginx
[root@yankerp docker-nginx]# docker-compose up -d
Creating dockernginx_Apache2_1 ...
Creating dockernginx_Apache1_1 ...
Creating dockernginx_Apache3_1 ...
Creating dockernginx_Apache2_1
Creating dockernginx_Apache1_1
Creating dockernginx_Apache2_1 ... done
Creating dockernginx_nginx_1 ...
Creating dockernginx_nginx_1 ... done

查看容器启动情况。

# docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                  NAMES
a7e7bed203a6        centos:nginx        "nginx"                  29 seconds ago      Up 9 seconds        0.0.0.0:8000->80/tcp   dockernginx_nginx_1
8b6704eb5f6d        centos:http         "/usr/sbin/httpd -DFO"   39 seconds ago      Up 28 seconds       80/tcp                 dockernginx_Apache3_1
fa540c849b72        centos:http         "/usr/sbin/httpd -DFO"   39 seconds ago      Up 29 seconds       80/tcp                 dockernginx_Apache1_1
50c037a51a16        centos:http         "/usr/sbin/httpd -DFO"   39 seconds ago      Up 29 seconds       80/tcp                 dockernginx_Apache2_1

到这里有关于Docker-compose构建nginx反向代理配置就演示完毕了！！！希望对你有所帮助！！！@再见！！！！