Docker部署Python Web应用
Michael阿明 人气:01. 安装 docker
在 WSL2 中安装 docker https:
会报错:
# Executing docker install script, commit: 93d2499759296ac1f9c510605fef85052a2c32be
WSL DETECTED: We recommend using Docker Desktop for Windows.
Please get Docker Desktop from https://www.docker.com/products/docker-desktop
You may press Ctrl+C now to abort this script.
+ sleep 20
去下载安装 windows 下的 docker
2. 编写代码
使用 Flask 框架启动了一个 Web 服务器,而它唯一的功能是:如果当前环境中有 “NAME” 这个环境变量,就把它打印在 “Hello” 后,否则就打印 “Hello world”,最后再打印出当前环境的 hostname
import os from flask import Flask import socket from gevent import pywsgi app = Flask(__name__) @app.route('/') def hello(): html = "<h3>Hello {name}!</h3>" \ "<b>Hostname:</b> {hostname}<br/>" return html.format(name=os.getenv("NAME", "world"), hostname=socket.gethostname()) if __name__ == "__main__": server = pywsgi.WSGIServer(('0.0.0.0', 12345), app) server.serve_forever()
导出依赖包
pip freeze >requirements.txt
Flask==2.0.1 gevent==21.8.0 greenlet==1.1.1 itsdangerous==2.0.1 Jinja2==3.0.1 MarkupSafe==2.0.1 Werkzeug==2.0.1 zope.event==4.5.0 zope.interface==5.4.0
3. 编写 Dockerfile
# 使用官方提供的 Python 开发镜像作为基础镜像 FROM python:3.8-slim # 将工作目录切换为 /app WORKDIR /app # 将当前目录下的所有内容复制到 /app 下 ADD . /app # 使用 pip 命令安装这个应用所需要的依赖 # RUN pip install --trusted-host pypi.python.org -r requirements.txt RUN pip install --trusted-host http://pypi.tuna.tsinghua.edu.cn/simple -r requirements.txt # 国内的源更快 # 允许外界访问容器的 12345 端口 EXPOSE 12345 # 设置环境变量 ENV NAME World # 设置容器进程为:python app.py,即:这个 Python 应用的启动命令 CMD ["python", "app.py"] # CMD 前面 隐式的包含了 ENTRYPOINT , /bin/sh -c
在 WSL 里操作 :
让 docker 制作镜像,-t 加 tag,自动加载 Dockerfile,执行里面的语句
docker build -t helloworld .
[+] Building 17.4s (10/10) FINISHED => [internal] load build definition from Dockerfile 0.1s => => transferring dockerfile: 757B 0.0s => [internal] load .dockerignore 0.1s => => transferring context: 2B 0.0s => [internal] load metadata for docker.io/library/python:3.8-slim 2.9s => [auth] library/python:pull token for registry-1.docker.io 0.0s => [1/4] FROM docker.io/library/python:3.8-slim@sha256:4dd66d1ccaddaa0587851cb92b365bf3090dccb41393c6f8b 0.0s => [internal] load build context 0.1s => => transferring context: 813B 0.0s => CACHED [2/4] WORKDIR /app 0.0s => [3/4] ADD . /app 0.1s => [4/4] RUN pip install --trusted-host http://pypi.tuna.tsinghua.edu.cn/simple -r requirements.txt 13.6s => exporting to image 0.6s => => exporting layers 0.6s => => writing image sha256:390d32b9f7a20ccd347361bd31450807d3e63d052e334865cf8460968ffceff4 0.0s => => naming to docker.io/library/helloworld 0.0s Use 'docker scan' to run Snyk tests against images to find vulnerabilities and learn how to fix them
查看镜像
(k8s)PC:/mnt/d/gitcode/k8s$ docker image ls REPOSITORY TAG IMAGE ID CREATED SIZE helloworld latest 390d32b9f7a2 About a minute ago 169MB
启动容器
docker run -p 4000:12345 helloworld
因为在 Dockerfile 中已经指定了 CMD。否则,就得把进程的启动命令加在后面 python app.py
查看容器启动
(base) $ docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES f6e051d1af6b helloworld "python app.py" 2 minutes ago Up 2 minutes 0.0.0.0:4000->12345/tcp, :::4000->12345/tcp upbeat_elion
通过 -p 4000:12345 告诉 Docker,把容器内的 12345 端口映射在宿主机的 4000 端口上
这样做的目的是,只要访问宿主机的 4000 端口,就可以看到容器里应用 返回的结果
curl http://localhost:4000 # <h3>Hello World!</h3><b>Hostname:</b> dc1c1343e366<br/>
使用容器完成了一个应用的开发与测试
4. 上传镜像
注册 docker hub,docker login 命令登录
docker tag helloworld kobe24o/helloworld:v0
kobe24o 是账号名(镜像仓库),helloworld 镜像名,v0自己分配的版本号
docker push kobe24o/helloworld:v0
(k8s) $ docker push kobe24o/helloworld:v0 The push refers to repository [docker.io/kobe24o/helloworld] 931022d457d6: Pushing [================> ] 16.07MB/47.27MB c76dc68917fc: Pushed 047ca6dfe9ab: Pushed d82f4c466b47: Mounted from library/python 5aa75f4e55e7: Mounted from library/python 74d6903a940b: Mounted from library/python 2f9c2b8e82bd: Mounted from library/python ba5a5fe43301: Mounted from library/python
5. 修改镜像
(base) $ docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES dd3bf057cb09 helloworld "python app.py" 7 seconds ago Up 5 seconds 0.0.0.0:4000->12345/tcp, :::4000->12345/tcp compassionate_carver (base) $ docker exec -it dd3bf057cb09 /bin/sh # pwd /app # touch newfile.txt # ls Dockerfile app.py newfile.txt requirements.txt # exit (base) $ docker commit dd3bf057cb09 kobe24o/helloworld:v1 sha256:ca8880f84040f9bdd7ef13763b9c64f8bd4a513a74bc2b095be06aae5b60268a
上面操作,新加了一个文件到镜像里,commit 保存
docker inspect --format '{{ .State.Pid}}' dd3bf057cb09 1763 # 查看正在运行的容器的进程号 PID
通过查看宿主机的 proc 文件,看到这个 进程的所有 Namespace 对应的文件
root:/# ls -l /proc/{PID}/ns/ total 0 lrwxrwxrwx 1 root root 0 Sep 14 11:15 cgroup -> 'cgroup:[4026531835]' lrwxrwxrwx 1 root root 0 Sep 14 11:15 ipc -> 'ipc:[4026532220]' lrwxrwxrwx 1 root root 0 Sep 14 09:49 mnt -> 'mnt:[4026532218]' lrwxrwxrwx 1 root root 0 Sep 14 11:15 net -> 'net:[4026531992]' lrwxrwxrwx 1 root root 0 Sep 14 11:15 pid -> 'pid:[4026532221]' lrwxrwxrwx 1 root root 0 Sep 14 11:15 pid_for_children -> 'pid:[4026532221]' lrwxrwxrwx 1 root root 0 Sep 14 11:15 user -> 'user:[4026531837]' lrwxrwxrwx 1 root root 0 Sep 14 11:15 uts -> 'uts:[4026532219]'
一个进程,可以选择 加入 到某个进程已有的 Namespace 当中,从而达到 “进入” 这个进程所在容器的目的,这正是 docker exec
的实现原理
push 到 hub
(base) $ docker push kobe24o/helloworld:v1 The push refers to repository [docker.io/kobe24o/helloworld] dfee38b42dbb: Pushed 931022d457d6: Layer already exists c76dc68917fc: Layer already exists 047ca6dfe9ab: Layer already exists d82f4c466b47: Layer already exists 5aa75f4e55e7: Layer already exists 74d6903a940b: Layer already exists 2f9c2b8e82bd: Layer already exists ba5a5fe43301: Layer already exists v1: digest: sha256:7af7ff571ea9fd70d48abeaa2b38a1ed1c1a4e5a933b722d82af25d3e889f84e size: 2206
加载全部内容