CentOS7部署阿里巴巴开源的pouch容器管理工具实战
作者：尹正杰
版权声明：原创作品，谢绝转载！否则将追究法律责任。
一.安装CentOS7.6操作系统
该过程过于简单,且CentOS 7各个版本之间部署方式几乎雷同，可参考我之前的笔记:"https://www.cnblogs.com/yinzhengjie/p/10181840.html" 生产环境如果你要安装docker的话建议使用CentOS7.2以上版本,如果使用的版本较低可能会出现docker无法启动的情况。
二.安装pouch容器管理工具
1>.查看操作环境
[root@docker201.yinzhengjie.org.cn ~]# cat /etc/redhat-release CentOS Linux release 7.6.1810 (Core) [root@docker201.yinzhengjie.org.cn ~]# [root@docker201.yinzhengjie.org.cn ~]# uname -r 3.10.0-957.el7.x86_64 [root@docker201.yinzhengjie.org.cn ~]# [root@docker201.yinzhengjie.org.cn ~]# uname -m x86_64 [root@docker201.yinzhengjie.org.cn ~]#
2>.下载阿里的软件源
[root@docker201.yinzhengjie.org.cn ~]# wget http://mirrors.aliyun.com/opsx/pouch/centos7.repo -O /etc/yum.repos.d/pouch-centos7.repo --2020-01-13 18:39:37-- http://mirrors.aliyun.com/opsx/pouch/centos7.repo Resolving mirrors.aliyun.com (mirrors.aliyun.com)... 27.221.92.123, 110.249.197.229, 119.167.168.229, ... Connecting to mirrors.aliyun.com (mirrors.aliyun.com)|27.221.92.123|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 403 [application/octet-stream] Saving to: ‘/etc/yum.repos.d/pouch-centos7.repo’ 100%[====================================================================================================================================================================================================================================>] 403 --.-K/s in 0s 2020-01-13 18:39:37 (126 MB/s) - ‘/etc/yum.repos.d/pouch-centos7.repo’ saved [403/403] [root@docker201.yinzhengjie.org.cn ~]#
[root@docker201.yinzhengjie.org.cn ~]# cat /etc/yum.repos.d/pouch-centos7.repo [pouch-stable] name=Pouch Stable - $basearch baseurl=http://mirrors.aliyun.com/opsx/pouch/linux/centos/7/$basearch/stable enabled=1 gpgcheck=1 gpgkey=http://mirrors.aliyun.com/opsx/pouch/linux/centos/gpg [pouch-test] name=Pouch Test - $basearch baseurl=http://mirrors.aliyun.com/opsx/pouch/linux/centos/7/$basearch/test enabled=0 gpgcheck=1 gpgkey=http://mirrors.aliyun.com/opsx/pouch/linux/centos/gpg [root@docker201.yinzhengjie.org.cn ~]# [root@docker201.yinzhengjie.org.cn ~]#
3>.通过yum的方式安装pouch
[root@docker201.yinzhengjie.org.cn ~]# yum -y install pouch Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: mirror.bit.edu.cn * extras: mirror.bit.edu.cn * updates: mirrors.aliyun.com pouch-stable | 2.9 kB 00:00:00 pouch-stable/x86_64/primary_db | 8.0 kB 00:00:00 Resolving Dependencies --> Running transaction check ---> Package pouch.x86_64 0:1.3.0-1.el7 will be installed --> Processing Dependency: pam-devel for package: pouch-1.3.0-1.el7.x86_64 --> Processing Dependency: fuse-libs for package: pouch-1.3.0-1.el7.x86_64 --> Processing Dependency: fuse-devel for package: pouch-1.3.0-1.el7.x86_64 --> Processing Dependency: fuse for package: pouch-1.3.0-1.el7.x86_64 --> Running transaction check ---> Package fuse.x86_64 0:2.9.2-11.el7 will be installed ---> Package fuse-devel.x86_64 0:2.9.2-11.el7 will be installed ---> Package fuse-libs.x86_64 0:2.9.2-11.el7 will be installed ---> Package pam-devel.x86_64 0:1.1.8-22.el7 will be installed --> Finished Dependency Resolution Dependencies Resolved ============================================================================================================================================================================================================================================================================== Package Arch Version Repository Size ============================================================================================================================================================================================================================================================================== Installing: pouch x86_64 1.3.0-1.el7 pouch-stable 44 M Installing for dependencies: fuse x86_64 2.9.2-11.el7 base 86 k fuse-devel x86_64 2.9.2-11.el7 base 37 k fuse-libs x86_64 2.9.2-11.el7 base 93 k pam-devel x86_64 1.1.8-22.el7 base 184 k Transaction Summary ============================================================================================================================================================================================================================================================================== Install 1 Package (+4 Dependent packages) Total download size: 45 M Installed size: 146 M Downloading packages: (1/5): fuse-2.9.2-11.el7.x86_64.rpm | 86 kB 00:00:00 (2/5): fuse-devel-2.9.2-11.el7.x86_64.rpm | 37 kB 00:00:00 (3/5): fuse-libs-2.9.2-11.el7.x86_64.rpm | 93 kB 00:00:00 (4/5): pam-devel-1.1.8-22.el7.x86_64.rpm | 184 kB 00:00:00 warning: /var/cache/yum/x86_64/7/pouch-stable/packages/pouch-1.3.0-1.el7.x86_64.rpm: Header V4 RSA/SHA1 Signature, key ID 439ae9ec: NOKEY=========================================================================================== ] 7.0 MB/s | 42 MB 00:00:00 ETA Public key for pouch-1.3.0-1.el7.x86_64.rpm is not installed (5/5): pouch-1.3.0-1.el7.x86_64.rpm | 44 MB 00:00:04 ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ Total 9.9 MB/s | 45 MB 00:00:04 Retrieving key from http://mirrors.aliyun.com/opsx/pouch/linux/centos/gpg Importing GPG key 0x439AE9EC: Userid : "Pouch Release <pouch-dev@list.alibaba-inc.com>" Fingerprint: b615 ddd7 90c7 0912 582d dc2d d7ae a5ed 439a e9ec From : http://mirrors.aliyun.com/opsx/pouch/linux/centos/gpg Running transaction check Running transaction test Transaction test succeeded Running transaction Installing : fuse-libs-2.9.2-11.el7.x86_64 1/5 Installing : fuse-devel-2.9.2-11.el7.x86_64 2/5 Installing : fuse-2.9.2-11.el7.x86_64 3/5 Installing : pam-devel-1.1.8-22.el7.x86_64 4/5 Installing : pouch-1.3.0-1.el7.x86_64 5/5 Verifying : pam-devel-1.1.8-22.el7.x86_64 1/5 Verifying : fuse-devel-2.9.2-11.el7.x86_64 2/5 Verifying : fuse-libs-2.9.2-11.el7.x86_64 3/5 Verifying : fuse-2.9.2-11.el7.x86_64 4/5 Verifying : pouch-1.3.0-1.el7.x86_64 5/5 Installed: pouch.x86_64 0:1.3.0-1.el7 Dependency Installed: fuse.x86_64 0:2.9.2-11.el7 fuse-devel.x86_64 0:2.9.2-11.el7 fuse-libs.x86_64 0:2.9.2-11.el7 pam-devel.x86_64 0:1.1.8-22.el7 Complete! [root@docker201.yinzhengjie.org.cn ~]#
三.pouch工具的基本使用
1>.启动pouch
[root@docker201.yinzhengjie.org.cn ~]# systemctl status pouch ● pouch.service - pouch Loaded: loaded (/usr/lib/systemd/system/pouch.service; disabled; vendor preset: disabled) Active: inactive (dead) [root@docker201.yinzhengjie.org.cn ~]# [root@docker201.yinzhengjie.org.cn ~]# systemctl start pouch [root@docker201.yinzhengjie.org.cn ~]# [root@docker201.yinzhengjie.org.cn ~]# systemctl status pouch ● pouch.service - pouch Loaded: loaded (/usr/lib/systemd/system/pouch.service; disabled; vendor preset: disabled) Active: active (running) since Mon 2020-01-13 18:44:21 CST; 2s ago Main PID: 18422 (pouchd) Tasks: 21 Memory: 26.8M CGroup: /system.slice/pouch.service ├─18422 /usr/local/bin/pouchd └─18429 containerd --config /var/lib/pouch/containerd/state/pouch-containerd.toml --log-level info Jan 13 18:44:19 docker201.yinzhengjie.org.cn pouchd[18422]: time="2020-01-13T18:44:19.748223865+08:00" level=info msg="loading plugin "io.containerd.grpc.v1.introspection"..." type=io.containerd.grpc.v1 Jan 13 18:44:19 docker201.yinzhengjie.org.cn pouchd[18422]: time="2020-01-13T18:44:19.748525272+08:00" level=info msg=serving... address="/run/containerd/debug.sock" Jan 13 18:44:19 docker201.yinzhengjie.org.cn pouchd[18422]: time="2020-01-13T18:44:19.748575854+08:00" level=info msg=serving... address="/var/run/containerd.sock" Jan 13 18:44:19 docker201.yinzhengjie.org.cn pouchd[18422]: time="2020-01-13T18:44:19.748583031+08:00" level=info msg="containerd successfully booted in 0.008565s" Jan 13 18:44:19 docker201.yinzhengjie.org.cn pouchd[18422]: time="2020-01-13T18:44:19.753585443+08:00" level=info msg="success to start containerd" containerd-pid=18429 module=ctrd-supervisord Jan 13 18:44:19 docker201.yinzhengjie.org.cn pouchd[18422]: time="2020-01-13T18:44:19.758489799+08:00" level=info msg="success to create 5 containerd clients, connect to: /var/run/containerd.sock" Jan 13 18:44:19 docker201.yinzhengjie.org.cn pouchd[18422]: time="2020-01-13T18:44:19.759049076+08:00" level=info msg="Snapshotter is set to be overlayfs" Jan 13 18:44:19 docker201.yinzhengjie.org.cn pouchd[18422]: time="2020-01-13T18:44:19.759278316+08:00" level=info msg="invoke pre-start hook in plugin" Jan 13 18:44:21 docker201.yinzhengjie.org.cn pouchd[18422]: time="2020-01-13T18:44:21.605939977+08:00" level=info msg="start to listen to: unix:///var/run/pouchd.sock" Jan 13 18:44:21 docker201.yinzhengjie.org.cn systemd[1]: Started pouch. [root@docker201.yinzhengjie.org.cn ~]#
2>.查看pouch的信息
[root@docker201.yinzhengjie.org.cn ~]# pouch info #注意观察"Default Runtime"的属性值 Containers: 0 Running: 0 Paused: 0 Stopped: 0 Images: 0 ID: Name: docker201.yinzhengjie.org.cn Server Version: 1.3.0 Storage Driver: overlayfs Driver Status: [] Logging Driver: json-file Volume Drivers: [local tmpfs] Cgroup Driver: cgroupfs Default Runtime: runc Runtimes: runc runc: <nil> containerd: <nil> Security Options: [seccomp selinux] Kernel Version: 3.10.0-957.el7.x86_64 Operating System: "CentOS Linux 7 (Core)" OSType: linux Architecture: amd64 HTTP Proxy: HTTPS Proxy: Registry: https://index.docker.io/v1/ Experimental: false Debug: false Labels: node_ip=192.168.6.201 SN=VMware-56 CPUs: 2 Total Memory: 3.683GiB Pouch Root Dir: /var/lib/pouch LiveRestoreEnabled: true LxcfsEnabled: false CriEnabled: false Daemon Listen Addresses: [unix:///var/run/pouchd.sock] [root@docker201.yinzhengjie.org.cn ~]#
3>.查看pouch工具的帮助信息
[root@docker201.yinzhengjie.org.cn ~]# pouch --help pouch is a client side tool pouch to interact with daemon side process pouchd. Flags and arguments can be input to do what actually you wish. Then pouch parses the flags and arguments and sends a RESTful request to daemon side pouchd. Usage: pouch [command] Available Commands: checkpoint Manage checkpoint commands commit Commit an image from a container create Create a new container with specified image events Get real time events from the daemon exec Run a command in a running container gen-doc Generate docs help Help about any command history Display history information on image image Manage image images List all images info Display system-wide information inspect Get the detailed information of container load load a set of images from a tar archive or STDIN login Login to a registry logout Logout from a registry logs Print a container's logs network Manage pouch networks pause Pause one or more running containers ps List containers pull Pull an image from registry remount-lxcfs remount lxcfs bind in containers rename Rename a container with newName restart restart one or more containers rm Remove one or more containers rmi Remove one or more images by reference run Create a new container and start it save Save an image to a tar archive or STDOUT start Start one or more created or stopped containers stats Display a live stream of container(s) resource usage statistics stop Stop one or more running containers tag Create a tag TARGET_IMAGE that refers to SOURCE_IMAGE top Display the running processes of a container unpause Unpause one or more paused container update Update the configurations of a container updatedaemon Update the configurations of pouchd upgrade Upgrade a container with new image and args version Print versions about Pouch CLI and Pouchd volume Manage pouch volumes wait Block until one or more containers stop, then print their exit codes Flags: -D, --debug Switch client log level to DEBUG mode -h, --help help for pouch -H, --host string Specify connecting address of Pouch CLI (default "unix:///var/run/pouchd.sock") --tlscacert string Specify CA file of TLS --tlscert string Specify cert file of TLS --tlskey string Specify key file of TLS --tlsverify Use TLS and verify remote Use "pouch [command] --help" for more information about a command. [root@docker201.yinzhengjie.org.cn ~]# [root@docker201.yinzhengjie.org.cn ~]#