1.docker构建前端web镜像配置
（1）基于nginx-perl镜像构建web服务。
构建前端工程镜像目录结构web，其中dist存放前端工程编译后的文件，build.sh为构建docker镜像包的脚本，Dockerfile为镜像构建基础文件，nginx.conf为nginx配置，nginx-perl.tar为前端构建依赖的基础镜像，run.sh为镜像包部署文件。web包目录结构如下：
(a) build.sh文件说明
#删除pod服务 xxx-web
docker rm -f xxx-web
#删除镜像 xxx-web:1.0.0
docker rmi xxx-web:1.0.0
#构建镜像 xxx-web:1.0.0
docker build -t xxx-web:1.0.0 .
(b) Dockerfile文件说明
#指定依赖的基础镜像
FROM nginx:1.25-perl
#将web包下dist目录复制到容器/usr/local/nginx/html/目录下
ADD ./dist/ /usr/local/nginx/html/
#将web包下nginx配置复制到容器/etc/nginx/目录下
ADD ./nginx.conf /etc/nginx/
#指定镜像启动命令
ENTRYPOINT ["nginx","-g","daemon off;"]
(c) nginx.conf文件说明
user root;
worker_processes 1;
load_module modules/ngx_http_perl_module.so;
#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;
events {
worker_connections 1024;
}
#定义环境变量
env APP_SERVICE_HOST;
http {
include mime.types;
default_type application/json;
sendfile on;
keepalive_timeout 600000;
#从配置中获取环境变量，并赋值
perl_set APP_SERVICE_HOST 'sub { return ENV{"APP_SERVICE_HOST"}; }';
server {
listen 80;
server_name operation-web;
client_max_body_size 10240M;
index index.html;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
ssl_certificate ssl/server.crt; # 证书路径
ssl_certificate_key ssl/server.key; # 请求认证 key 的路径
root /usr/local/nginx/html;
location / {
try_files uri uri/ /index.html;
add_header 'Access-Control-Allow-Origin' '*' always;
add_header 'Access-Control-Allow-Methods' 'OPTIONS, GET, PUT, POST, DELETE';
add_header 'Access-Control-Allow-Headers' 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,authorization,Customip,customip,Accesstoken,accesstoken';
处理预检请求
if ($request_method = 'OPTIONS') {
return 204;
}
}
#前端获取环境变量接口
location /api/env-config {
add_header 'Access-Control-Allow-Origin' '*' always;
set json_text '{"SSO_HOST":"{APP_SERVICE_HOST}"}';
default_type application/json;
return 200 $json_text;
}
#后端接口代理
location /api {
default_type application/json;
add_header 'Access-Control-Allow-Origin' '*' always;
add_header 'Access-Control-Allow-Methods' 'OPTIONS, GET, PUT, POST, DELETE';
add_header 'Access-Control-Allow-Headers' 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,authorization,Customip,customip,Accesstoken,accesstoken';
处理预检请求
if ($request_method = 'OPTIONS') {
return 204;
}
proxy_pass http://$APP_SERVICE_HOST;
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
rewrite "^/api/(.*)" /1 break;
}
}
（2）docker run命令启动镜像服务
run.sh为镜像服务启动脚本，如下所示：
#!/bin/bash
docker run -itd --name operation-web --restart=always -p:10010:80 \
-e "APP_SERVICE_HOST=192.168.16.128:10009" \
xxx-web:1.0.0
2.docker构建后端镜像配置
（1）基于debian镜像构建后端服务。
service目录结构，其中build.sh为构建docker镜像包的脚本，Dockerfile为镜像构建基础文件，debian.tar为后端构建依赖的基础镜像，run.sh为镜像包部署文件，start.sh为启动前准备文件。service包目录结构如下：
(a) build.sh文件说明
#删除服务xxx-service
docker rm -f xxx-service
#删除镜像xxx-service:1.0.0
docker rmi xxx-service:1.0.0
#构建镜像xxx-service:1.0.0
docker build -t xxx-service:1.0.0 .
(b) Dockerfile文件说明
#指定依赖的基础镜像
FROM debian:stable-20211220
配置环境变量，JDK的安装目录、容器内时区
ENV JAVA_DIR=/usr/local
ENV TZ=Asia/Shanghai
ENV LANG C.UTF-8
ENV LC_ALL C
RUN ln -snf /usr/share/zoneinfo/TZ /etc/localtime \&\& echo TZ > /etc/timezone
安装JDK
ADD jdk-8u361-linux-aarch64.tar.gz /usr/local
#COPY jdk-8u361-linux-aarch64.tar.gz /usr/local
ENV JAVA_HOME=$JAVA_DIR/jdk1.8.0_361
ENV PATH=PATH:JAVA_HOME/bin
ADD sys-operation-boot-0.0.1-SNAPSHOT.jar /opt/app/
#COPY sys-operation-boot-0.0.1-SNAPSHOT.jar /opt/app/
ADD start.sh /
RUN chmod 777 /start.sh
指定项目监听的端口
EXPOSE 9999
#指定启动脚本
ENTRYPOINT ["/start.sh"]
(c) start.sh文件说明
#!/bin/bash
#echo "$K8S_API_HOST apiserver.cluster.local" >> /etc/hosts
#echo "$K8S_API_HOST sealos.hub" >> /etc/hosts
java -jar -Dfile.encoding=UTF-8 -Duser.timezone=GMT+08 -Djava.security.egd=file:/dev/./urandom /opt/app/xxx-service-1.0.0.jar --
spring.profiles.active=${SPRING_PROFILES_ACTIVE}
（2）docker run命令启动镜像服务
run.sh为镜像服务启动脚本，如下所示：
#!/bin/bash
docker run -itd --name operation-service --restart=always -p:10009:9999 \
-e "SPRING_PROFILES_ACTIVE=dev" \
-v /etc/docker:/etc/docker \
-v /mnt/share:/mnt/share \
xxx-service:1.0.0