安装docker
安装docker最新稳定版本
修改资源文件
vim /etc/yum.repos.d/docker-ce.repo
[docker-ce-stable]
name=Docker CE Stable -
basearch/stable
enabled=1
gpgcheck=1
gpgkey=https://download.docker.com/linux/centos/gpg
[docker-ce-stable-debuginfo]
name=Docker CE Stable - Debuginfo
basearch/stable
enabled=0
gpgcheck=1
gpgkey=https://download.docker.com/linux/centos/gpg
[docker-ce-stable-source]
name=Docker CE Stable - Sources
baseurl=https://download.docker.com/linux/centos/7/source/stable
enabled=0
gpgcheck=1
gpgkey=https://download.docker.com/linux/centos/gpg
执行安装命令
yum install docker-ce
systemctl start docker && systemctl enable docker
修改主机名
hostname openshift.ctwifi.cn
修改hosts文件
#vim /etc/hosts
10.199.27.48 openshift.ctwifi.cn
Docker 配置代理服务器
#cat /etc/sysconfig/docker
HTTP_PROXY=http://user:[email protected]:8080
HTTPS_PROXY=http://username:[email protected]:8080
http_proxy=http://username:[email protected]:8080
https_proxy=http://username:[email protected]:8080
NO_PROXY=“172.17.0.1,172.30.1.1,127.0.0.1,openshift.ctwifi.cn,10.199.27.48”
export HTTP_PROXY HTTPS_PROXY http_proxy https_proxy NO_PROXY
配置国内镜像和insecure-registries
#/etc/docker/daemon.json
{
“registry-mirrors”: [“https://registry.docker-cn.com”],
“insecure-registries”: [“172.30.0.0/16”]
}
配置系统代理和PATH
#/etc/profile
export http_proxy=http://‘username:password’@proxy.ctwifi.cn:8081
export https_proxy=http://‘username:password’@proxy.ctwifi.cn:8080
export no_proxy=“127.0.0.1,172.17.0.1,10.199.27.48,openshift.ctwifi.cn,172.30.1.1”
export PATH=/opt/openshift:$PATH
配置docker服务
#/usr/lib/systemd/system/docker.service
[Service]
Environment=“HTTPS_PROXY=http://username:[email protected]:8080”
Environment=“NO_PROXY=172.30.1.1,127.0.0.1,172.17.0.1”
EnvironmentFile=/etc/sysconfig/docker
ExecStart=/usr/bin/dockerd --exec-opt native.cgroupdriver=systemd
更新和重启docker服务
#systemctl daemon-reload && systemctl restart docker
启动OpenShift集群
#command #注意172.17.0.1/16一定要设置no-proxy
oc cluster up --public-hostname=openshift.ctwifi.cn --https-proxy=‘http://username:[email protected]:8080’ --http-proxy=‘http://username:[email protected]:8080’ --no-proxy=172.17.0.0/16,127.0.0.1
正常后访问控制台
注意：刚刚启动成功的时候控制台可以访问，但是登陆后有可能跳转到127.0.0.1:8443，需要等几分钟再登陆。（不知道为什么，应该是没有初始化完）
https://openshift.ctwifi.cn:8443
如果安装后有任何问题要重新安装，最好先执行oc cluster down 命令。任何重启系统，并清空所有openshift.local.clusterup 目录，并docker ps -a 查看是否有容器在推出状态，如果有也尽量删除，但是删除退出容器之后再oc cluster up的时候可能会遇到无法解析xxx image的问题，无解，删除系统内的镜像重新导入。
允许在Dockerfile中没有指定用户的情况下，以root用户运行image，否则在部署应用的时候可能会报权限错误。
$ oc adm policy add-scc-to-group anyuid system:authenticated
– This allows images to run as the root UID if no USER is specified in the Dockerfile.
常用命令
进容器
docker exec -it origin bash
使用管理员账号登陆，给admin账号授权
oc login -u system:admin -n default
oc adm policy add-cluster-role-to-user cluster-admin admin
切换project，openshift这个项目中包含有初始的image
oc project openshift
查看image
oc get is
oc login -u admin https://os.ctwifi.cn:8443
oc version
oc new-project hello-world-oc
oc new-app openshift/hello-openshift
oc get pod
oc describe pod
oc expose svc/hello-openshift
oc status
oc project
oc status -v
oc whoami
oc get node
oadm policy add-scc-to-user privileged system:serviceaccount:default:router
oadm router router --replicas=1 --service-account=router
导入模板
oc create -f https://raw.githubusercontent.com/openshift/origin/vl.3.0/examples/quickstarts/cakephp-mysql. json -n openshift
oc get template cakephp-mysql-example -o json -n openshift