随笔 - 105, 文章 - 31, 评论 - 3, 阅读 - 13万

一、关闭firewall，永久关闭，使用iptables防火墙

systemctl stop firewalld.service #停止firewall
systemctl disable firewalld.service #禁止firewall开机启动
firewall-cmd --state #查看默认防火墙状态（关闭后显示notrunning，开启后显示running）
 
yum install iptables-services -y　　  # 安装防火墙<br>systemctl restart iptables.service　　# 重启防火墙

二、安装docker

要求centos7版本<br>yum install docker -y      安装
docker -v    查看版本
　　Docker version 1.12.6, build 3e8e77d/1.12.6<br>systemctl start docker 　　启动docker<br>ps -ef|grep docker　　　　　查看是否有docker进程<br>systemctl enable docker 　 设置docker开机自启动

三、下载打包好镜像文件

1）本地镜像制作过程

[root@localhost ~]# docker ps
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS                NAMES
da67831689e3        docker.io/nginx     "/bin/bash"         17 seconds ago      Up 16 seconds       0.0.0.0:80->80/tcp   cocky_aryabhata
[root@localhost ~]# 
[root@localhost ~]# docker commit da67831689e3 test
sha256:783e5f357a7fec72303b88fd4a6a97268ea3481fc2433331a23a59e4552ff1ed
[root@localhost ~]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
test                latest              783e5f357a7f        6 seconds ago       109 MB
docker.io/nginx     latest              7042885a156a        12 days ago         109 MB
[root@localhost ~]# 

[root@localhost ~]# docker save test > new_nginx.tar
[root@localhost ~]# ls
anaconda-ks.cfg  new_nginx.tar
[root@localhost ~]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
test                latest              783e5f357a7f        6 minutes ago       109 MB
docker.io/nginx     latest              7042885a156a        12 days ago         109 MB
[root@localhost ~]# cat new_nginx.tar |docker import - new-nginx
sha256:8e1deabb4ca699ac12196e09b2bd3742f6dc6eb2f5df5f64ee4487634d7ddf41
[root@localhost ~]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
new-nginx           latest              8e1deabb4ca6        3 seconds ago       113 MB
test                latest              783e5f357a7f        7 minutes ago       109 MB
docker.io/nginx     latest              7042885a156a        12 days ago         109 MB

View Code

1）上传打包好的镜像文件

[root@Squid ~]# docker images      查看本地镜像
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
# 上传打包好的镜像包lamp-zabbix.tar
[root@Squid ~]# ll lamp-zabbix.tar 
-rw-r--r--. 1 root root 1323229696 2月  10 14:27 lamp-zabbix.tar
[root@Squid ~]# cat lamp-zabbix.tar |docker import - lamp-zabbix:v1　　
sha256:8c4e625c0b2806330b8e974283dfaf7987305c428bb63152c3532f38bf0f728d
[root@Squid ~]# docker images　　# 有文件说明导入docker成功
REPOSITORY          TAG                 IMAGE ID            CREATED              SIZE
lamp-zabbix         v1                  8c4e625c0b28        About a minute ago   1.302 GB

四、运行lamp-zabbix容器

[root@Squid ~]# docker run --name zabbix_server -t -i -p 88:80 8c4e625c0b28 /bin/bash# 将容器的web 80端口映射到容器外部80端口上
[root@7d17cdcaf9bd /]# /etc/init.d/httpd start
[root@7d17cdcaf9bd /]# /etc/init.d/mysqld start
[root@7d17cdcaf9bd /]# /etc/init.d/zabbix_server start[root@7d17cdcaf9bd /]# exit 退出容器[root@Squid ~]# vi /etc/sysconfig/iptables　　-A INPUT -p tcp -m state --state NEW -m tcp --dport 88 -j ACCEPT[root@Squid ~]# docker start zabbix_server

五、慎用的操作的恢复

[root@7d17cdcaf9bd /]# exit 退出容器，即停止容器。容器的业务都将停止
[root@Squid ~]# docker ps
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
 
[root@Squid ~]# docker start 7d17cdcaf9bd   再次进入容器
iptables: No chain/target/match by that name.  报错
[root@Squid ~]# docker start 7d17cdcaf9bd    # 重启docker
7d17cdcaf9bd
[root@Squid ~]# docker ps
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS                NAMES
7d17cdcaf9bd        8c4e625c0b28        "/bin/bash"         27 minutes ago      Up 10 seconds       0.0.0.0:88->80/tcp   zabbix_server
# 容器已经启动
[root@Squid ~]# docker exec -ti 7d17cdcaf9bd /bin/bash
[root@7d17cdcaf9bd /]# netstat -lntup      
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name

六、对于zabbix超级用户密码的修改

1）知道密码的情况下进行修改

2）忘记密码的情况下进行修改

登录数据库修改

# mysql -uroot -p      #登陆数据库 
mysql> show databases;
mysql> use zabbix;
mysql> show tables;
| triggers                   |
| users                      |
| users_groups               |
| usrgrp                     |
| valuemaps                  |
+----------------------------+
127 rows in set (0.00 sec)
=====》users表就是存放用户密码的表，而ID为1就是超级管理员的账号密码
mysql> select * from users;      # 查看表里的字段，admin对应的ID是1 
mysql> select userid,passwd from users; 
+--------+----------------------------------+
| userid | passwd                           |
+--------+----------------------------------+
|      1 | a9eead793bcab362333108a451447758 |
|      2 | d41d8cd98f00b204e9800998ecf8427e |
+--------+----------------------------------+
2 rows in set (0.00 sec)
=====》密码是经过md5加密的
重新开个终端，生成一个MD5加密的密码，这里密码设置的是RedHat
[root@localhost ~]# echo -n redhat|openssl md5    #-n就表示不输入回车符，不加-n，否则就不是这个结果了。 
(stdin)= e2798af12a7a0f4f70b4d69efbc25f4d
接着上面的为admin用户设定一个密码
mysql> update users set passwd='e2798af12a7a0f4f70b4d69efbc25f4d' where userid = '1'; 
      #或者直接使用update  users set passwd=md5("redhat") where userid='1'; 
Query OK, 1 row affected (0.01 sec) 
Rows matched: 1  Changed: 1  Warnings: 0 
mysql> flush privileges; 
mysql> quit 

七、docker启动错误

[root@Squid ~]# docker start c6c3b185f2ce
Error response from daemon: devmapper: Error mounting '/dev/mapper/docker-253:0-35197283-f75fa419830cf84b0dbc1d1d06e9bc67de6fc41789b5abd3ef221c291222f47a' on '/var/lib/docker/devicemapper/mnt/f75fa419830cf84b0dbc1d1d06e9bc67de6fc41789b5abd3ef221c291222f47a'. fstype=xfs options=nouuid,context="system_u:object_r:svirt_sandbox_file_t:s0:c34,c941": invalid argument
<6>[  111.172763] IPv6: ADDRCONF(NETDEV_UP): docker0: link is not ready
<4>[  130.630581] sched: RT throttling activated
<4>[  238.455112] XFS (dm-3): unknown mount option [context="system_u:object_r:svirt_sandbox_file_t:s0:c34].
Error: failed to start containers: c6c3b185f2ce

　　修复方法主要有两种：

可以将selinux重新置为enable，然后重启物理机，即可修复。
修改容器的配置。比如我的容器的配置是/var.lib/docker/containers/e7ef71494940ba293be4b3f74198bf34835c35537810053b051d9a6c33adbd32/config.v2.json文件。将其中的"MountLabel": "system_u:object_r:svirt_sandbox_file_t:s0:c12,c257", "ProcessLabel": "system_u:system_r:svirt_lxc_net_t:s0:c12,c257"重修修改为"MountLabel": "", "ProcessLabel": ""，然后重新启动docker daemon，容器即可修复。