体验docker UCP

发表于   |   分类于   |  

背景

docker官方也有私有云版本

install

docker engine

感谢Daoloud提供的一键式安装

1
curl -sSL https://get.daocloud.io/docker | sh

ucp

1
2
3
4
5
6
7
8
9
export DOCKER_TLS_VERIFY="0"
export DOCKER_HOST="tcp://104.236.158.191:2376"
export DOCKER_CERT_PATH=""
export DOCKER_MACHINE_NAME="node1"

docker run --rm -it \
> -v /var/run/docker.sock:/var/run/docker.sock \
> --name ucp docker/ucp install -i \
> --swarm-port 3376 --host-address 104.236.158.191

提示

1
Could not read CA certificate "/root/.docker/ca.pem": open /root/.docker/ca.pem: no such file or directory

看来需要生成一个

1
2
3
openssl req -out ca.pem -new -x509
# aaaa
# 104.236.158.191

再次运行run

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

Unable to find image 'docker/ucp:latest' locally
latest: Pulling from docker/ucp
e110a4a17941: Pull complete
a1c3e1c9e147: Pull complete
bca4748868da: Pull complete
Digest: sha256:46154615e2429a9a8f3d019c414f69cd47f9f7dd5d5c35f54016c01fad1d99ef
Status: Downloaded newer image for docker/ucp:latest
INFO[0000] Verifying your system is compatible with UCP
INFO[0000] Your engine version 1.12.0, build 8eab29e (4.4.0-31-generic) is compatible
WARN[0000] Your system does not have enough memory.  UCP suggests a minimum of 2.00 GB, but you only have 0.97 GB.  You may have unexpected errors.
Please choose your initial UCP admin password:
Confirm your initial password:
INFO[0024] Pulling required images... (this may take a while)
WARN[0080] None of the hostnames we'll be using in the UCP certificates [ubuntu-1gb-sfo1-01 127.0.0.1 172.17.0.1 104.236.158.191] contain a domain component.  Your generated certs may fail TLS validation unless you only use one of these shortnames or IPs to connect.  You can use the --san flag to add more aliases

You may enter additional aliases (SANs) now or press enter to proceed with the above list.
Additional aliases: abc
INFO[0192] Installing UCP with host address 104.236.158.191 - If this is incorrect, please specify an alternative address with the '--host-address' flag
INFO[0000] Checking that required ports are available and accessible
INFO[0005] Generating UCP Cluster Root CA
INFO[0047] Generating UCP Client Root CA
INFO[0060] Deploying UCP Containers
INFO[0113] New configuration established.  Signalling the daemon to load it...
INFO[0114] Successfully delivered signal to daemon
INFO[0114] UCP instance ID: DKVU:ULUA:C3SO:O36W:4WUE:OM4Z:5V4X:IA46:ZLS5:L2KE:KE5J:O56D
INFO[0114] UCP Server SSL: SHA-256 Fingerprint=71:C8:1D:AB:CA:EE:E7:91:07:D6:23:83:F2:A7:67:2A:F8:DE:88:43:5C:D4:2E:76:9D:BA:B9:39:B4:11:64:86
INFO[0114] Login as "admin"/(your admin password) to UCP at https://104.236.158.191:443

安装完成，效果图
效果图

分析

系统容器

NODE NAME IMAGE CREATED
ubuntu-1gb-sfo1-01 ucp-controller docker/ucp-controller:1.1.2 2016-08-02 20:30:12 +0800
ubuntu-1gb-sfo1-01 ucp-auth-worker docker/ucp-auth:1.1.2 2016-08-02 20:30:09 +0800
ubuntu-1gb-sfo1-01 ucp-auth-api docker/ucp-auth:1.1.2 2016-08-02 20:30:08 +0800
ubuntu-1gb-sfo1-01 ucp-auth-store docker/ucp-auth-store:1.1.2 2016-08-02 20:30:04 +0800
ubuntu-1gb-sfo1-01 ucp-cluster-root-ca docker/ucp-cfssl:1.1.2 2016-08-02 20:30:03 +0800
ubuntu-1gb-sfo1-01 ucp-client-root-ca docker/ucp-cfssl:1.1.2 2016-08-02 20:30:02 +0800
ubuntu-1gb-sfo1-01 ucp-swarm-manager docker/ucp-swarm:1.1.2 2016-08-02 20:30:01 +0800
ubuntu-1gb-sfo1-01 ucp-swarm-join docker/ucp-swarm:1.1.2 2016-08-02 20:30:01 +0800
ubuntu-1gb-sfo1-01 ucp-proxy docker/ucp-proxy:1.1.2 2016-08-02 20:29:59 +0800
ubuntu-1gb-sfo1-01 ucp-kv docker/ucp-etcd:1.1.2 2016-08-02 20:29:56 +0800

官网的架构图

Name Description
ucp-proxy A TLS proxy. It allows secure access to the local Docker Engine.
ucp-controller The UCP application. It uses the key-value store for persisting configurations.
ucp-swarm-manager Provides the clustering capabilities. It uses the key-value store for leader election, and keeping track of cluster members.
ucp-swarm-join Heartbeat to record on the key-value store that this node is alive. If the node goes down, this heartbeat stops, and the node is removed from the cluster.
ucp-auth-api The centralized API for identity and authentication used by UCP and DTR.
ucp-auth-worker Performs scheduled LDAP synchronizations and cleans data on the ucp-auth-store.
ucp-auth-store Stores authentication configurations, and data for users, organizations and teams.
ucp-kv Used to store the UCP configurations. Don’t use it in your applications, since it’s for internal use only.
ucp-cluster-root-ca A certificate authority to sign the certificates used when joining new nodes, and on administrator client bundles.
ucp-client-root-ca A certificate authority to sign user bundles. Only used when UCP is installed without an external root CA.

基本上明白都有什么作用了

本博客欢迎转发,但请保留原作者信息
github:codejuan
博客地址:http://blog.decbug.com/