使用 Docker 部署 LNMP 并搭建 wordpress

准备

系统版本：CentOS Linux release 7.4.1708 (Core) 内核版本：3.10.0-693.el7.x86_64 IP：192.168.31.43 可访问外网。

[root@docker ~]# cat /etc/redhat-release 
CentOS Linux release 7.4.1708 (Core) 
[root@docker ~]# hostname 
docker.mage.com
[root@docker ~]# uname -r 
3.10.0-693.el7.x86_64

关闭系统防火墙，SELinux，开启iptables防火墙

[root@docker /]# systemctl stop firewalld
[root@docker /]# systemctl disable firewalld
Removed symlink /etc/systemd/system/multi-user.target.wants/firewalld.service.
Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.
[root@docker /]# sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config 
[root@docker /]# sed -i 's/SELINUXTYPE=targeted/#SELINUXTYPE=targeted/g' /etc/selinux/config
[root@docker /]# grep '^SELINUX'  /etc/selinux/config 
SELINUX=disabled 
[root@docker /]# setenforce 0
[root@docker /]# getenforce 
Permissive
[root@docker /]# yum -y install iptables-services
[root@docker /]# vim /etc/sysconfig/iptables

# sample configuration for iptables service
# you can edit this manually or use system-config-firewall
# please do not ask us to add additional ports/services to this default configuration
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 3306 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
:wq! #保存退出
[root@docker /]# systemctl restart iptables.service
[root@docker /]# systemctl enable iptables.service
Created symlink from /etc/systemd/system/basic.target.wants/iptables.service to /usr/lib/systemd/system/iptables.service.
[root@docker /]# /usr/libexec/iptables/iptables.init restart
iptables: Setting chains to policy ACCEPT: filter nat      [  OK  ]
iptables: Flushing firewall rules:                     [  OK  ]
iptables: Unloading modules:                           [  OK  ]
iptables: Applying firewall rules:                     [  OK  ]

1、安装Docker 服务

[root@docker ~]# yum -y install docker
[root@docker ~]# systemctl start docker
[root@docker ~]# systemctl enable docker
Created symlink from /etc/systemd/system/multi-user.target.wants/docker.service to /usr/lib/systemd/system/docker.service.

创建目录，分别用于Nginx、php、Mysql　各种服务对应的Dockerfile 如下所示:

[root@docker docker]# tree  -L 2  --charset ASCII 
.
|-- mysql
|   `-- Dockerfile
|-- nginx
|   |-- Dockerfile
|   `-- wordpress
`-- php
    |-- Dockerfile
    `-- wordpress

5 directories, 3 files

2、构建Nginx-dockerfile

FROM docker.io/centos:latest
RUN   yum -y update
RUN   yum -y install gcc gcc-c++ openssl-devel openssl automake autoconf zlib zlib-devel libtool pcre pcre-devl wget net-tools make
RUN   groupadd  -g 900 nginx && useradd nginx -g nginx -s /sbin/nologin
RUN   wget -c http://nginx.org/download/nginx-1.12.2.tar.gz && tar xf nginx-1.12.2.tar.gz
RUN   cd /nginx-1.12.2/ && ./configure --prefix=/usr/local/nginx --with-http_dav_module  --with-http_stub_status_module --with-http_addition_module --with-http_sub_module --with-http_flv_module --with-http_mp4_module --with-http_ssl_module --with-http_gzip_static_module --user=nginx --group=nginx
RUN   cd /nginx-1.12.2/ && make && make install
RUN  ln -s /usr/local/nginx/sbin/nginx  /usr/local/sbin/
RUN  mkdir /wwwroot && chown -R nginx:nginx /wwwroot
ADD  wordpress /wwwroot/wordpress
RUN  sed -i '1afastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;' /usr/local/nginx/conf/fastcgi_params
RUN  sed -i 's/index  index.html index.htm;/index  index.php index.html index.htm;/g' /usr/local/nginx/conf/nginx.conf
RUN  sed -i 's*root  html;*root /wwwroot/wordpress;*g' /usr/local/nginx/conf/nginx.conf
RUN  sed -i 's*#    root           html;*    root           /wwwroot/wordpress;*g' /usr/local/nginx/conf/nginx.conf
RUN  sed -i 's/#    fastcgi_pass   127.0.0.1:9000;/    fastcgi_pass   172.17.0.3:9000;/g' /usr/local/nginx/conf/nginx.conf
RUN  sed -i  's/#    fastcgi_index  index.php;/    fastcgi_index  index.php;/g' /usr/local/nginx/conf/nginx.conf
RUN  sed -i 's*#    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;*  fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;*g' /usr/local/nginx/conf/nginx.conf
RUN  sed -i 's/#    include        fastcgi_params;/    include        fastcgi_params;/g' /usr/local/nginx/conf/nginx.conf
RUN  sed -i  '71d' /usr/local/nginx/conf/nginx.conf && sed -i 'N;70a}' /usr/local/nginx/conf/nginx.conf
RUN  sed -i  '65d' /usr/local/nginx/conf/nginx.conf && sed -i 'N;64alocation ~ \\.php$ {' /usr/local/nginx/conf/nginx.conf
EXPOSE   80
CMD  ["nginx"]

执行构建

[root@docker nginx]#docker build -t="centos:nginx-1.12" .

构建过程如下部分过程省略......　　

 ---> 40b504923c0f
Removing intermediate container b8de3a47769a
Step 19/22 : RUN sed -i  '71d' /usr/local/nginx/conf/nginx.conf && sed -i 'N;70a}' /usr/local/nginx/conf/nginx.conf
 ---> Running in 72be0a234bc1

 ---> 203a1c1130e1
Removing intermediate container 72be0a234bc1
Step 20/22 : RUN sed -i  '65d' /usr/local/nginx/conf/nginx.conf && sed -i 'N;64alocation ~ \\.php$ {' /usr/local/nginx/conf/nginx.conf
 ---> Running in f886679bdbf1

 ---> f63ace5988f4
Removing intermediate container f886679bdbf1
Step 21/22 : EXPOSE 80
 ---> Running in fe29884c1d11
 ---> 190ce789e86d
Removing intermediate container fe29884c1d11
Step 22/22 : CMD nginx
 ---> Running in 3da09bd3f883
 ---> 47de3f75d63b
Removing intermediate container 3da09bd3f883
Successfully built 47de3f75d63b

查看nginx镜像是否构建成功

[root@docker nginx]# docker images 
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
centos              nginx-1.12          47de3f75d63b        2 minutes ago       624 MB
docker.io/centos    latest              9f38484d220f        3 weeks ago         202 MB

3、构建PHP-Dockerfile

[root@docker php]# vim Dockerfile 

FROM docker.io/centos:latest
RUN  yum -y install gcc gcc-c++ libxml2-devel libcurl-devel openssl-devel bzip2-devel  openssl automake make autoconf libtool zlib-devel make pcre-devel wget net-tools
RUN  wget -c ftp://mcrypt.hellug.gr/pub/crypto/mcrypt/libmcrypt/libmcrypt-2.5.7.tar.gz && tar xf  libmcrypt-2.5.7.tar.gz
RUN  cd libmcrypt-2.5.7/&& ./configure --prefix=/usr/local/libmcrypt && make && make install
RUN  wget -c http://cn2.php.net/distributions/php-5.6.27.tar.gz && tar xf  php-5.6.27.tar.gz
RUN  cd php-5.6.27/ && ./configure --prefix=/usr/local/php5.6 --with-mysql=mysqlnd --with-pdo-mysql=mysqlnd --with-mysqli=mysqlnd --with-openssl --enable-fpm --enable-sockets --enable-sysvshm --enable-mbstring --with-freetype-dir --with-jpeg-dir --with-png-dir --with-zlib --with-libxml-dir=/usr --enable-xml --with-mhash --with-mcrypt=/usr/local/libmcrypt --with-config-file-path=/etc --with-config-file-scan-dir=/etc/php.d --with-bz2 --enable-maintainer-zts && make && make install
RUN  groupadd -g 1001 nginx  && useradd -u 900 nginx -g nginx -s /sbin/nologin
RUN  mkdir /wwwroot && chown -R nginx.nginx /wwwroot
ADD  wordpress  /wwwroot/wordpress
RUN  cd php-5.6.27 && cp php.ini-production /etc/php.ini
RUN  cd /php-5.6.27 && cp sapi/fpm/init.d.php-fpm /etc/init.d/php-fpm
RUN  chmod +x /etc/init.d/php-fpm && chkconfig --add php-fpm && chkconfig php-fpm on
RUN  cp /usr/local/php5.6/etc/php-fpm.conf.default  /usr/local/php5.6/etc/php-fpm.conf
RUN sed -i 's*;pid = run/php-fpm.pid*pid = run/php-fpm.pid*g' /usr/local/php5.6/etc/php-fpm.conf
RUN sed -i 's/user = nobody/user = nginx/g' /usr/local/php5.6/etc/php-fpm.conf
RUN sed -i 's/group = nobody/group = nginx/g' /usr/local/php5.6/etc/php-fpm.conf
RUN sed -i 's/listen = 127.0.0.1:9000/listen = 172.17.0.3:9000/g' /usr/local/php5.6/etc/php-fpm.conf
RUN sed -i 's/pm.max_children = 5/pm.max_children = 50/g' /usr/local/php5.6/etc/php-fpm.conf
RUN sed -i 's/pm.start_servers = 2/pm.start_servers = 5/g' /usr/local/php5.6/etc/php-fpm.conf
RUN sed -i 's/pm.min_spare_servers = 1/pm.min_spare_servers = 5/g' /usr/local/php5.6/etc/php-fpm.conf
RUN sed -i 's/pm.max_spare_servers = 3/pm.max_spare_servers = 30/g' /usr/local/php5.6/etc/php-fpm.conf
EXPOSE 9000

执行构建

[root@docker php]# docker build -t="centos:php-5.6" .

构建过程如下部分过程省略.......

 ---> 636c0ea1c7d7
Removing intermediate container c64254513a05
Step 17/22 : RUN sed -i 's/listen = 127.0.0.1:9000/listen = 172.17.0.3:9000/g' /usr/local/php5.6/etc/php-fpm.conf
 ---> Running in 697d4ffc958d

 ---> dcd89180efa4
Removing intermediate container 697d4ffc958d
Step 18/22 : RUN sed -i 's/pm.max_children = 5/pm.max_children = 50/g' /usr/local/php5.6/etc/php-fpm.conf
 ---> Running in fd24eda7506d

 ---> 7c8c6b14f08f
Removing intermediate container fd24eda7506d
Step 19/22 : RUN sed -i 's/pm.start_servers = 2/pm.start_servers = 5/g' /usr/local/php5.6/etc/php-fpm.conf
 ---> Running in d15e65943b4b

 ---> bea387e8e124
Removing intermediate container d15e65943b4b
Step 20/22 : RUN sed -i 's/pm.min_spare_servers = 1/pm.min_spare_servers = 5/g' /usr/local/php5.6/etc/php-fpm.conf
 ---> Running in ef4de3f777ec

 ---> bdfbe85b6819
Removing intermediate container ef4de3f777ec
Step 21/22 : RUN sed -i 's/pm.max_spare_servers = 3/pm.max_spare_servers = 30/g' /usr/local/php5.6/etc/php-fpm.conf
 ---> Running in 0e88418605ab

 ---> f82a9371039f
Removing intermediate container 0e88418605ab
Step 22/22 : EXPOSE 9000
 ---> Running in d9eaa397f048
 ---> 181e4905ddcc
Removing intermediate container d9eaa397f048
Successfully built 181e4905ddcc

查看php镜像是否构建成功

[root@docker ~]# docker images 
REPOSITORY          TAG                 IMAGE ID            CREATED              SIZE
centos              php-5.6             181e4905ddcc        About a minute ago   1.07 GB
centos              nginx-1.12          47de3f75d63b        27 hours ago         624 MB
docker.io/centos    latest              9f38484d220f        3 weeks ago          202 MB

4、构建Mysql-Dockerfile

[root@docker mysql]# vim Dockerfile 

FROM docker.io/centos:latest
RUN yum -y install gcc gcc-c++ make automake cmake wget
RUN groupadd mysql; useradd -r -M -u 3306 -s /sbin/nologin -g mysql mysql
RUN mkdir /usr/local/mysql; mkdir /data/mysql -pv
RUN yum install gcc gcc-c++ ncurses-devel bison bison-devel -y
RUN wget -c http://dev.mysql.com/get/Downloads/MySQL-5.6/mysql-5.6.29.tar.gz
RUN tar xf mysql-5.6.29.tar.gz -C /usr/local/src/
WORKDIR /usr/local/src/mysql-5.6.29
RUN cmake . -DCMAKE_INSTALL_PREFIX=/usr/local/mysql -DMYSQL_DATADIR=/data/mysql -DSYSCONFDIR=/etc -DMYSQL_TCP_PORT=3306 -DMYSQL_UNIX_ADDR=/var/lib/mysql/mysql.sock -DWITH_INNOBASE_STORAGE_ENGINE=1 -DWITH_MYISAM_STORAGE_ENGINE=1 -DENABLED_LOCAL_INFILE=1 -DWITH_PARTITION_STORAGE_ENGINE=1 -DDEFAULT_CHARSET=utf8 -DEXTRA_CHARSETS=all -DDEFAULT_COLLATION=utf8_general_ci -DWITH-MYSQLD-LDFLAGS=-all-static -DWITH-CLIENT-LD-FLAGS=-all-static -DWITH_DEBUG=0 && gmake && gmake install
RUN chown -R root:mysql /usr/local/mysql/ && chown -R mysql:mysql /data/mysql
RUN chmod 755 /usr/local/src/mysql-5.6.29/scripts/mysql_install_db.sh
RUN /usr/local/src/mysql-5.6.29/scripts/mysql_install_db.sh --basedir=/usr/local/mysql --datadir=/data/mysql --no-defaults --user=mysql
RUN cp /usr/local/src/mysql-5.6.29/support-files/my-default.cnf  /etc/my.cnf
RUN cp /usr/local/src/mysql-5.6.29/support-files/mysql.server  /etc/init.d/mysqld
RUN chmod 775 /etc/init.d/mysqld && /etc/init.d/mysqld start
RUN echo -e '#!/bin/bash\nexport PATH=$PATH:/usr/local/mysql/bin' >/etc/profile.d/mysql.sh
RUN source /etc/profile
EXPOSE 3306

执行构建：　　

[root@docker mysql]# docker build -t="centos:mysql-5.6" .

构建过程如下部分过程省略.....

You can test the MySQL daemon with mysql-test-run.pl
cd /usr/local/mysql/mysql-test ; perl mysql-test-run.pl

Please report any problems at http://bugs.mysql.com/

 ---> 606cfa962cc6
Removing intermediate container bb6a99e76974
Step 13/18 : RUN cp /usr/local/src/mysql-5.6.29/support-files/my-default.cnf  /etc/my.cnf
 ---> Running in e2e5225e4170

 ---> d8fe0c377f37
Removing intermediate container e2e5225e4170
Step 14/18 : RUN cp /usr/local/src/mysql-5.6.29/support-files/mysql.server  /etc/init.d/mysqld
 ---> Running in 77cfbc9e72a0

 ---> 3f519a998871
Removing intermediate container 77cfbc9e72a0
Step 15/18 : RUN chmod 775 /etc/init.d/mysqld && /etc/init.d/mysqld start
 ---> Running in 102a4655911d

Starting MySQL... SUCCESS! 
 ---> 2bb4c829741d
Removing intermediate container 102a4655911d
Step 16/18 : RUN echo -e '#!/bin/bash\nexport PATH=$PATH:/usr/local/mysql/bin' >/etc/profile.d/mysql.sh
 ---> Running in 7b165abf6700

 ---> 6681e46bfc70
Removing intermediate container 7b165abf6700
Step 17/18 : RUN source /etc/profile
 ---> Running in 09441e8887cc

 ---> e670d8afe1c0
Removing intermediate container 09441e8887cc
Step 18/18 : EXPOSE 3306
 ---> Running in 7b442f366b38
 ---> 82082b1e3011
Removing intermediate container 7b442f366b38
Successfully built 82082b1e3011

查看Mysql镜像是否构建成功

[root@docker mysql]# docker images 
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
centos              mysql-5.6           82082b1e3011        7 minutes ago       5.14 GB
centos              php-5.6             181e4905ddcc        28 minutes ago      1.07 GB
centos              nginx-1.12          47de3f75d63b        27 hours ago        624 MB
docker.io/centos    latest              9f38484d220f        3 weeks ago         202 MB

5、启动各容器并映射主机端口

通过第4步查看 Nginx、PHP、MySQL 均已经构建成功，现启动容器并映射主机端口

[root@docker /]# docker run  -dit -p 80:80 centos:nginx-1.12 /bin/bash
e5c0b1ce22789b4430a5cf4c2f63485dd7d5924808ceba6272d1e35036969a5d
[root@docker /]# docker run -dit  -p 9000:9000 centos:php-5.6 /bin/bash
74bc8730a63e993c23b84a6230028245c7589da034096f06014ea189411f3255
[root@docker /]# docker run -dit -p 3306:3306 centos:mysql-5.6 /bin/bash
41bd4f2d06205e10a26401f4e92a38095ab9b24ffd41ad5d5569b4a91596830e

6、查看容器的运行情况

[root@docker /]# docker ps 
CONTAINER ID        IMAGE               COMMAND             CREATED              STATUS              PORTS                    NAMES
41bd4f2d0620        centos:mysql-5.6    "/bin/bash"         About a minute ago   Up About a minute   0.0.0.0:3306->3306/tcp   blissful_borg
74bc8730a63e        centos:php-5.6      "/bin/bash"         About a minute ago   Up About a minute   0.0.0.0:9000->9000/tcp   happy_bassi
e5c0b1ce2278        centos:nginx-1.12   "/bin/bash"         About a minute ago   Up About a minute   0.0.0.0:80->80/tcp       focused_morse

7、后台进入容器开启相关的服务，MySQL添加授权用户，访问测试.

[root@docker /]# docker exec -it 41bd4f2d0620 /bin/bash 
[root@41bd4f2d0620 mysql-5.6.29]# mysql 
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 1
Server version: 5.6.29 Source distribution

Copyright (c) 2000, 2016, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| mysql              |
| performance_schema |
| test               |
+--------------------+
4 rows in set (0.02 sec)

mysql> create database wordpress default charset utf8 COLLATE utf8_general_ci;
Query OK, 1 row affected (0.00 sec)

mysql> grant all privileges on wordpress.*  to 'wordpress'@'%' identified by '123456' with grant option;
Query OK, 0 rows affected (0.01 sec)

mysql> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| mysql              |
| performance_schema |
| test               |
| wordpress          |
+--------------------+
5 rows in set (0.00 sec)

8、安装wordpress程序

浏览器访问 http://192.168.31.43/index.php