常用软件安装

一、docker 构建

FROM ubuntu:22.04

ARG http_proxy=http://http://127.0.0.1:1080 https_proxy=$http_proxy

RUN apt update && \
    apt install -y supervisor net-tools iputils-ping vim iproute2 openssh-server openssh-client && \
    apt clean && \
    sed -i "s/#PermitRootLogin prohibit-password/PermitRootLogin yes/g" /etc/ssh/sshd_config && \
    sed -i "s/#PasswordAuthentication yes/PasswordAuthentication yes/g" /etc/ssh/sshd_config && \
    echo "root:123" | chpasswd && \
    touch /entrypoint.sh && \
    chmod +x /entrypoint.sh && \
    echo "service ssh start" >> /entrypoint.sh && \
    echo "sleep infinity" >> /entrypoint.sh

CMD ["/usr/bin/sh", "-c", "/entrypoint.sh"]

RUN apt update && apt install -y perftest iperf3 infiniband-diags net-tools iputils-ping wrk vim iproute2 && apt clean

二、安装

1、rocket

https://hub.docker.com/_/rocket-chat https://rocket.chat/install

docker run -d --name rocketchat-mongo mongo:4.0.10 --smallfiles --oplogSize 128 --replSet rs1 --storageEngine=mmapv1

docker exec -d rocketchat-mongo bash -c 'echo -e "replication:\n replSetName: \"rs01\"" | tee -a /etc/mongod.conf && mongo --eval "printjson(rs.initiate())"'

docker run -d --name rocketchat --link rocketchat-mongo -e "MONGO_URL=mongodb://rocketchat-mongo:27017/rocketchat" -e MONGO_OPLOG_URL=mongodb://rocketchat-mongo:27017/local?replSet=rs01 -e ROOT_URL=http://192.168.21.87:3001 -p 3001:3000 rocketchat/rocket.chat:1.2.1

2、samba

https://github.com/dperson/samba

-s "<name;/path>[;browse;readonly;guest;users;admins;writelist;comment]"
    Configure a share
    required arg: "<name>;</path>"
    <name> is how it's called for clients
    <path> path to share
    NOTE: for the default values, just leave blank
    [browsable] default:'yes' or 'no'
    [readonly] default:'yes' or 'no'
    [guest] allowed default:'yes' or 'no'
    NOTE: for user lists below, usernames are separated by ','
    [users] allowed default:'all' or list of allowed users
    [admins] allowed default:'none' or list of admin users
    [writelist] list of users that can write to a RO share
    [comment] description of share

docker run -it --name samba -p 139:139 -p 445:445 \
  --restart always \
  -e TZ=EST5EDT \
  -v /fs/samba:/mount \
  -d dperson/samba -p \
  -s "samba;/mount/;yes;no;yes;all;all;all;all"

mkdir /opt/test
chmod 777 -R /opt/test

docker run -it -p 139:139 -p 445:445 --name samba -v /opt/test:/mount -d dperson/samba \
            -u "test;qwe" \
            -s "test;/mount/;yes;no;yes;all;all;all" \
            -w "WORKGROUP" \
            -g "force user= test" \
            -g "guest account= test"

# 查看正在运行的配置参数
testparm -v

3、gitlab

https://docs.gitlab.com/omnibus/docker/

docker run --detach \
  --hostname gitlab.example.com \
  --publish 8443:443 --publish 8080:80 --publish 8022:22 \
  --name gitlab \
  --restart always \
  --volume /srv/gitlab/config:/etc/gitlab \
  --volume /srv/gitlab/logs:/var/log/gitlab \
  --volume /srv/gitlab/data:/var/opt/gitlab \
  gitlab/gitlab-ce:latest

默认帐户的用户名是root，第一次访问时，将被重定向到密码重置屏幕,登录后，您可以更改用户名。

gitlab-ctl reconfigure
gitlab-ctl restart
gitlab-ctl status
gitlab-ctl stop
gitlab-ctl tail                                  
gitlab-ctl stop unicorn
gitlab-ctl stop sideki

FAQ

fail to initialize orm engine: Sqlstore::Migration failed err: unable to open database file

chmod 777 -R ./grafana/data

2020-10-15_07:07:14.07056 time="2020-10-15T07:07:14Z" level=fatal msg="find gitaly" error="open /var/opt/gitlab/gitaly/gitaly.pid: permission denied" wrapper=3997

chown 998 gitaly.pid
chgrp 988 gitaly.pid

4、wiki

https://www.dokuwiki.org/dokuwiki https://github.com/bitnami/bitnami-docker-dokuwiki

docker run -d -p 9080:8080 -p 9443:8443 --restart=always --name dokuwiki \
 -e DOKUWIKI_USERNAME=admin \
 -e DOKUWIKI_PASSWORD=qwe \
 -e ALLOW_EMPTY_PASSWORD=yes \
 -v /fs/wiki/data:/bitnami/dokuwiki \
 bitnami/dokuwiki:latest

可用参数

DOKUWIKI_USERNAME: Dokuwiki application username. Default: user
DOKUWIKI_FULL_NAME: Dokuwiki application user full name. Default: Full Name
DOKUWIKI_PASSWORD: Dokuwiki application password. Default: bitnami1
DOKUWIKI_EMAIL: Dokuwiki application email. Default: user@example.com
DOKUWIKI_WIKI_NAME: Dokuwiki wiki name. Default: Bitnami DokuWiki

5、redmine

https://hub.docker.com/redmine

use SQLite3

docker run -d --name some-redmine redmine

use PostgreSQL

docker run -d --name some-postgres --network some-network -e POSTGRES_PASSWORD=secret -e POSTGRES_USER=redmine postgres

docker run -d --name some-redmine --network some-network -e REDMINE_DB_POSTGRES=some-postgres -e REDMINE_DB_USERNAME=redmine -e REDMINE_DB_PASSWORD=secret redmine

use MySQL

docker run -d --name some-mysql --network some-network -e MYSQL_USER=redmine -e MYSQL_PASSWORD=secret -e MYSQL_DATABASE=redmine -e MYSQL_RANDOM_ROOT_PASSWORD=1 mysql:5.7

docker run -d --name some-redmine --network some-network -e REDMINE_DB_POSTGRES=some-postgres -e REDMINE_DB_USERNAME=redmine -e REDMINE_DB_PASSWORD=secret redmine

6、vsftpd

https://github.com/panubo/docker-vsftpd

生成秘钥

openssl req -x509 -nodes -days 3650 -newkey rsa:1024 -keyout /opt/pub/vsftpd.pem -out /opt/pub/vsftpd.pem

运行容器

docker run -d \
    -p 21:21 -p 4559-4564:4559-4564 \
    -e FTP_USER=root -e FTP_PASSWORD=qwe \
    -v /home/vsftpd:/home/vsftpd \
    -v /var/log/ftp:/var/log \
    -v /opt/pub/vsftpd.pem:/etc/ssl/certs/vsftpd.crt:ro \
    -v /opt/pub/vsftpd.pem:/etc/ssl/private/vsftpd.key:ro \
    -v /home/vsftpd:/srv \
    --restart=always \
    docker.io/panubo/vsftpd vsftpd /etc/vsftpd_ssl.conf

7、jenkins

https://www.jenkins.io/doc/book/installing/docker/

docker network create jenkins

docker run -d  \
  --restart always \
  --network host \
  --network-alias docker \
  --name jenkins -u root \
  -p 8080:8080  \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v /opt/jenkins:/var/jenkins_home  \
  jenkinsci/blueocean:1.25.2

cat /jenkins/secrets/initialAdminPassword

1.webhook

需要安装插件

GitLab
Multibranch Scan Webhook Trigger
Docker

git配置

http://192.168.0.190:8080/multibranch-webhook-trigger/invoke?token=mytoken

Url is blocked: Requests to the local network are not allowed

Admin Area > Settings > Network > Outbound requests
Allow requests to the local network from web hooks and services
Allow requests to the local network from system hooks

jenkins配置

Scan by webhook
Trigger token
mytoken

2.新加节点

安装

https://gitee.com/hlyani/apps/blob/master/jenkins_agent/Dockerfile

mkdir /opt/Jenkins

apt install openjdk-11-jdk

apk add docker openssh openjdk11 git

8、harbor

https://github.com/goharbor/harbor

http://hlyani.gitee.io/hlyani.github.io/notes/docker/harbor.html

./prepare
./install.sh --with-chartmuseum

docker-compose down -v
docker-compose up -d
docker-compose stop -v

9、nextcloud

docker run -d \
    --restart always \
    --name nextcloud \
    -p 8000:80 \
    -v /data/nextcloud:/var/www/html \
    nextcloud

10、svn

docker run --restart always --name svn -d -v /root/dockers/svn:/var/opt/svn -p 3690:3690 garethflowers/svn-server

docker exec -it svn /bin/sh

svnadmin create svn

vim svnserve.conf
anon-access = none             # 匿名用户不可读写，也可设置为只读 read
auth-access = write            # 授权用户可写
password-db = passwd           # 密码文件路径，相对于当前目录
authz-db = authz               # 访问控制文件
realm = /var/opt/svn/svn       # 认证命名空间，会在认证提示界面显示，并作为凭证缓存的关键字，可以写仓库名称比如svn

vim passwd
[users]
# harry = harryssecret
# sally = sallyssecret
admin = 123456

vim authz
[groups]
owner = admin
[/]               # / 表示所有仓库
admin = rw        # 用户 admin 在所有仓库拥有读写权限
[svn:/]           # 表示以下用户在仓库 svn 的所有目录有相应权限
@owner = rw       # 表示 owner 组下的用户拥有读写权限

svn co svn://127.0.0.1:3690/svn

11、mariadb

docker pull mariadb:10.4
docker run -d -name mariadb -e MYSQL_ROOT_PASSWORD=qwe -p 3306:3306 mariadb:10.4

12、redis

docker run -d --name redis -p 6379:6379 redis

13、squid

https://hub.docker.com/r/ubuntu/squid

docker run -d --name squid-container -e TZ=UTC -p 3128:3128 ubuntu/squid:5.2-22.04_beta

14、clash

# clash-linux-amd64-latest
# https://github.com/szkzn/Clash_Core_Latest_Bak_2023-09-05
wget -O config.yaml "http://XXX/api/v1/client/subscribe?token=XXX&flag=clash"
wget https://cdn.jsdelivr.net/gh/Dreamacro/maxmind-geoip@release/Country.mmdb

FROM alpine
COPY clash cache.db config.yaml Country.mmdb /opt/
CMD ["/opt/clash", "-d", "/opt"]

docker run -d --net=host --restart=always --name clash clash:1.0.0

常用软件安装

常用软件安装

一、docker 构建

二、安装

1、rocket

2、samba

3、gitlab

4、wiki

5、redmine

6、vsftpd

7、jenkins

8、harbor

9、nextcloud

10、svn

11、mariadb

12、redis

13、squid

14、clash

results matching ""

No results matching ""