Docker ＋ shipyard（中文版）安装教程

公子语凉

Docker 安装

• 安装必要的一些系统工具及EPEL仓库：
  

yum install -y epel-release
yum install -y yum-utils device-mapper-persistent-data lvm2

• 添加软件源信息：
  

yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

• 更新并安装DockerCE：
  

yum makecache fast
yum -y install docker-ce

• 开启Docker服务：
  

service docker start

• 配置docker阿里云加速：
  

cd /etc/docker
ls
vi daemon.json

• 在 daemon.json 中加入下面配置：(这里使用的是我的阿里云 容器镜像加速通道 )
• 如果想要申请自己的 可以去：阿里云 登录之后点击控制台 搜索 镜像加速 点击 镜像加速器
  

{
    "registry-mirrors": ["https://d4f1k2y7.mirror.aliyuncs.com"]
}

• 重启Docker
  

systemctl daemon-reload
systemctl restart docker
shipyard中文版安装

• 下载所需的Docker镜像：
  

docker pull rethinkdb
docker pull microbox/etcd
docker pull shipyard/docker-proxy
docker pull swarm
docker pull dockerclub/shipyard

• 安装脚本
  

• 执行下面的命令：
  

cd /optllmkdir dockercd dockervi deploy

• 将下面的内容加入到 deplay
• 这里我已经将默认端口从 8080 改为了 8088
  

#!/bin/bash# Author         : AidenGXY By 2019-02-18# Description        : Auto deploy shipyard if [ "$1" != "" ] && [ "$1" = "-h" ]; then    echo "Shipyard Deploy uses the following environment variables:"    echo "  ACTION: this is the action to use (deploy, upgrade, node, remove)"    echo "  DISCOVERY: discovery system used by Swarm (only if using 'node' action)"    echo "  IMAGE: this overrides the default Shipyard image"    echo "  PREFIX: prefix for container names"    echo "  SHIPYARD_ARGS: these are passed to the Shipyard controller container as controller args"    echo "  TLS_CERT_PATH: path to certs to enable TLS for Shipyard"    echo "  PORT: specify the listen port for the controller (default: 8080)"    echo "  IP: specify the address at which the controller or node will be available (default: eth0 ip)"    echo "  PROXY_PORT: port to run docker proxy (default: 2375)"    exit 1fiif [ -z "`which docker`" ]; then    echo "You must have the Docker CLI installed on your \$PATH"    echo "  See http://docs.docker.com for details"    exit 1fiACTION=${ACTION:-deploy}IMAGE=${IMAGE:-dockerclub/shipyard:latest}PREFIX=${PREFIX:-shipyard}SHIPYARD_ARGS=${SHIPYARD_ARGS:-""}TLS_CERT_PATH=${TLS_CERT_PATH:-}CERT_PATH="/etc/shipyard"PROXY_PORT=${PROXY_PORT:-2375}SWARM_PORT=3375SHIPYARD_PROTOCOL=httpSHIPYARD_PORT=${PORT:-8088}SHIPYARD_IP=${IP}DISCOVERY_BACKEND=etcdDISCOVERY_PORT=4001DISCOVERY_PEER_PORT=7001ENABLE_TLS=0CERT_FINGERPRINT=""LOCAL_CA_CERT=""LOCAL_SSL_CERT=""LOCAL_SSL_KEY=""LOCAL_SSL_CLIENT_CERT=""LOCAL_SSL_CLIENT_KEY=""SSL_CA_CERT=""SSL_CERT=""SSL_KEY=""SSL_CLIENT_CERT=""SSL_CLIENT_KEY=""show_cert_help() {    echo "To use TLS in Shipyard, you must have existing certificates."    echo "The certs must be named ca.pem, server.pem, server-key.pem, cert.pem and key.pem"    echo "If you need to generate certificates, see https://github.com/ehazlett/certm for examples."}check_certs() {    if [ -z "$TLS_CERT_PATH" ]; then        return    fi    if [ ! -e $TLS_CERT_PATH ]; then        echo "Error: unable to find certificates in $TLS_CERT_PATH"        show_cert_help        exit 1    fi    if [ "$PROXY_PORT" = "2375" ]; then        PROXY_PORT=2376    fi    SWARM_PORT=3376    SHIPYARD_PROTOCOL=https    LOCAL_SSL_CA_CERT="$TLS_CERT_PATH/ca.pem"    LOCAL_SSL_CERT="$TLS_CERT_PATH/server.pem"    LOCAL_SSL_KEY="$TLS_CERT_PATH/server-key.pem"    LOCAL_SSL_CLIENT_CERT="$TLS_CERT_PATH/cert.pem"    LOCAL_SSL_CLIENT_KEY="$TLS_CERT_PATH/key.pem"    SSL_CA_CERT="$CERT_PATH/ca.pem"    SSL_CERT="$CERT_PATH/server.pem"    SSL_KEY="$CERT_PATH/server-key.pem"    SSL_CLIENT_CERT="$CERT_PATH/cert.pem"    SSL_CLIENT_KEY="$CERT_PATH/key.pem"    CERT_FINGERPRINT=$(openssl x509 -noout -in $LOCAL_SSL_CERT -fingerprint -sha256 | awk -F= '{print $2;}')    if [ ! -e $LOCAL_SSL_CA_CERT ] || [ ! -e $LOCAL_SSL_CERT ] || [ ! -e $LOCAL_SSL_KEY ] || [ ! -e $LOCAL_SSL_CLIENT_CERT ] || [ ! -e $LOCAL_SSL_CLIENT_KEY ]; then        echo "Error: unable to find certificates"        show_cert_help        exit 1    fi    ENABLE_TLS=1}# container functionsstart_certs() {    ID=$(docker run \        -ti \        -d \        --restart=always \        --name $PREFIX-certs \        -v $CERT_PATH \        alpine \        sh)    if [ $ENABLE_TLS = 1 ]; then        docker cp $LOCAL_SSL_CA_CERT $PREFIX-certs:$SSL_CA_CERT        docker cp $LOCAL_SSL_CERT $PREFIX-certs:$SSL_CERT        docker cp $LOCAL_SSL_KEY $PREFIX-certs:$SSL_KEY        docker cp $LOCAL_SSL_CLIENT_CERT $PREFIX-certs:$SSL_CLIENT_CERT        docker cp $LOCAL_SSL_CLIENT_KEY $PREFIX-certs:$SSL_CLIENT_KEY    fi}remove_certs() {    docker rm -fv $PREFIX-certs > /dev/null 2>&1}get_ip() {    if [ -z "$SHIPYARD_IP" ]; then        SHIPYARD_IP=`docker run --rm --net=host alpine ip route get 8.8.8.8 | awk '{ print $7;  }'`    fi}start_discovery() {    get_ip    ID=$(docker run \        -ti \        -d \        -p 4001:4001 \        -p 7001:7001 \        --restart=always \        --name $PREFIX-discovery \        microbox/etcd:latest -addr $SHIPYARD_IP:$DISCOVERY_PORT -peer-addr $SHIPYARD_IP:$DISCOVERY_PEER_PORT)}remove_discovery() {    docker rm -fv $PREFIX-discovery > /dev/null 2>&1}start_rethinkdb() {    ID=$(docker run \        -ti \        -d \        --restart=always \        --name $PREFIX-rethinkdb \        rethinkdb)}remove_rethinkdb() {    docker rm -fv $PREFIX-rethinkdb > /dev/null 2>&1}start_proxy() {    TLS_OPTS=""    if [ $ENABLE_TLS = 1 ]; then        TLS_OPTS="-e SSL_CA=$SSL_CA_CERT -e SSL_CERT=$SSL_CERT -e SSL_KEY=$SSL_KEY -e SSL_SKIP_VERIFY=1"    fi    # Note: we add SSL_SKIP_VERIFY=1 to skip verification of the client    # certificate in the proxy image.  this will pass it to swarm that    # does verify.  this helps with performance and avoids certificate issues    # when running through the proxy.  ultimately if the cert is invalid    # swarm will fail to return.    ID=$(docker run \        -ti \        -d \        -p $PROXY_PORT:$PROXY_PORT \        --hostname=$HOSTNAME \        --restart=always \        --name $PREFIX-proxy \        -v /var/run/docker.sock:/var/run/docker.sock \        -e PORT=$PROXY_PORT \        --volumes-from=$PREFIX-certs $TLS_OPTS\        shipyard/docker-proxy:latest)}remove_proxy() {    docker rm -fv $PREFIX-proxy > /dev/null 2>&1}start_swarm_manager() {    get_ip    TLS_OPTS=""    if [ $ENABLE_TLS = 1 ]; then        TLS_OPTS="--tlsverify --tlscacert=$SSL_CA_CERT --tlscert=$SSL_CERT --tlskey=$SSL_KEY"    fi    EXTRA_RUN_OPTS=""    if [ -z "$DISCOVERY" ]; then        DISCOVERY="$DISCOVERY_BACKEND://discovery:$DISCOVERY_PORT"        EXTRA_RUN_OPTS="--link $PREFIX-discovery:discovery"    fi    ID=$(docker run \        -ti \        -d \        --restart=always \        --name $PREFIX-swarm-manager \        --volumes-from=$PREFIX-certs $EXTRA_RUN_OPTS \        swarm:latest \        m --replication --addr $SHIPYARD_IP:$SWARM_PORT --host tcp://0.0.0.0:$SWARM_PORT $TLS_OPTS $DISCOVERY)}remove_swarm_manager() {    docker rm -fv $PREFIX-swarm-manager > /dev/null 2>&1}start_swarm_agent() {    get_ip    if [ -z "$DISCOVERY" ]; then        DISCOVERY="$DISCOVERY_BACKEND://discovery:$DISCOVERY_PORT"        EXTRA_RUN_OPTS="--link $PREFIX-discovery:discovery"    fi    ID=$(docker run \        -ti \        -d \        --restart=always \        --name $PREFIX-swarm-agent $EXTRA_RUN_OPTS \        swarm:latest \        j --addr $SHIPYARD_IP:$PROXY_PORT $DISCOVERY)}remove_swarm_agent() {    docker rm -fv $PREFIX-swarm-agent > /dev/null 2>&1}start_controller() {    #-v $CERT_PATH:/etc/docker:ro \    TLS_OPTS=""    if [ $ENABLE_TLS = 1 ]; then        TLS_OPTS="--tls-ca-cert $SSL_CA_CERT --tls-cert=$SSL_CERT --tls-key=$SSL_KEY --shipyard-tls-ca-cert=$SSL_CA_CERT --shipyard-tls-cert=$SSL_CERT --shipyard-tls-key=$SSL_KEY"    fi    ID=$(docker run \        -ti \        -d \        --restart=always \        --name $PREFIX-controller \        --link $PREFIX-rethinkdb:rethinkdb \        --link $PREFIX-swarm-manager:swarm \        -p $SHIPYARD_PORT:$SHIPYARD_PORT \        --volumes-from=$PREFIX-certs \        $IMAGE \        --debug \        server \        --listen :$SHIPYARD_PORT \        -d tcp://swarm:$SWARM_PORT $TLS_OPTS $SHIPYARD_ARGS)}wait_for_available() {    set +e     IP=$1    PORT=$2    echo Waiting for Shipyard on $IP:$PORT    docker pull ehazlett/curl > /dev/null 2>&1    TLS_OPTS=""    if [ $ENABLE_TLS = 1 ]; then        TLS_OPTS="-k"    fi    until $(docker run --rm ehazlett/curl --output /dev/null --connect-timeout 1 --silent --head --fail $TLS_OPTS $SHIPYARD_PROTOCOL://$IP:$PORT/ > /dev/null 2>&1); do        printf '.'        sleep 1     done    printf '\n'}remove_controller() {    docker rm -fv $PREFIX-controller > /dev/null 2>&1}if [ "$ACTION" = "deploy" ]; then    set -e    check_certs    get_ip     echo "Deploying Shipyard"    echo " -> Starting Database"    start_rethinkdb    echo " -> Starting Discovery"    start_discovery    echo " -> Starting Cert Volume"    start_certs    echo " -> Starting Proxy"    start_proxy    echo " -> Starting Swarm Manager"    start_swarm_manager    echo " -> Starting Swarm Agent"    start_swarm_agent    echo " -> Starting Controller"    start_controller    wait_for_available $SHIPYARD_IP $SHIPYARD_PORT    echo "Shipyard available at $SHIPYARD_PROTOCOL://$SHIPYARD_IP:$SHIPYARD_PORT"    if [ $ENABLE_TLS = 1 ] && [ ! -z "$CERT_FINGERPRINT" ]; then        echo "SSL SHA-256 Fingerprint: $CERT_FINGERPRINT"    fi    echo "Username: admin Password: shipyard"elif [ "$ACTION" = "node" ]; then    set -e    if [ -z "$DISCOVERY" ]; then        echo "You must set the DISCOVERY environment variable"        echo "with the discovery system used with Swarm"        exit 1    fi    check_certs    echo "Adding Node"    echo " -> Starting Cert Volume"    start_certs    echo " -> Starting Proxy"    start_proxy    echo " -> Starting Swarm Manager"    start_swarm_manager $DISCOVERY    echo " -> Starting Swarm Agent"    start_swarm_agent    echo "Node added to Swarm: $SHIPYARD_IP"    elif [ "$ACTION" = "upgrade" ]; then    set -e    check_certs    get_ip    echo "Upgrading Shipyard"    echo " -> Pulling $IMAGE"    docker pull $IMAGE    echo " -> Upgrading Controller"    remove_controller    start_controller    wait_for_available $SHIPYARD_IP $SHIPYARD_PORT    echo "Shipyard controller updated"elif [ "$ACTION" = "remove" ]; then    # ignore errors    set +e    echo "Removing Shipyard"    echo " -> Removing Database"    remove_rethinkdb    echo " -> Removing Discovery"    remove_discovery    echo " -> Removing Cert Volume"    remove_certs    echo " -> Removing Proxy"    remove_proxy    echo " -> Removing Swarm Agent"    remove_swarm_agent    echo " -> Removing Swarm Manager"    remove_swarm_manager    echo " -> Removing Controller"    remove_controller    echo "Done"else    echo "Unknown action $ACTION"    exit 1fi

• 修改原安装脚本为中文版安装脚本：
  • 当执行第一条命令的时候我本地好像执行失败了。（冒红了，个人感觉失败了，不过做到最后，好像并不影响）
    
  
  

grep -n shipyard:latest deploysed -i 's/shipyard\/shipyard:latest/dockerclub\/shipyard:latest/g' deploy

• 安装
  

sh deploy

• 使用 shipyard
  

浏览器输入：http://主机IP:8088                这个列子的就是： http://192.168.1.200:8088默认账号：admin默认密码：shipyard

公子语凉

样式都变形了， 大家还是下载下来看吧。

ljhtoljh

什么鬼，文字污染啊

bei133

感谢楼主

hate

shipyard好像完蛋了吧

liun66

这配置文件看麻了。。