发帖互助解决各类问题
搭建openEuler镜像站
2024-09-09openEuler镜像站
背景
社区 开发者希望搭建一套私有镜像站。本文介绍如何使用 docker 快速部署 openEuler 镜像站。
环境准备
虚拟机: 1台 4U8G(根据实际资源消耗调整)
操作系统: openEuler 22.03
安装docker环境:
yum install -y docker
创建镜像存放目录:
mkdir -p /opt/openeuler
docker镜像制作
创建nginx.conf
user root; error_log /dev/stdout info; pid /var/run/nginx.pid; worker_processes 2; worker_rlimit_nofile 1024; events { use epoll; worker_connections 1024; } http { include /etc/nginx/mime.types; log_format main '[\$time_local] remote_addr: \$remote_addr, request: "\$request", ' 'status: \$status, body_bytes_sent: \$body_bytes_sent, http_referer: "\$http_referer", ' 'http_user_agent: "\$http_user_agent"'; access_log /dev/stdout main; server_tokens off; autoindex off; port_in_redirect off; absolute_redirect off; client_header_buffer_size 1k; large_client_header_buffers 4 8k; client_body_buffer_size 1K; client_max_body_size 1k; client_header_timeout 8; client_body_timeout 8; client_body_in_file_only off; keepalive_timeout 5 5; send_timeout 8; proxy_hide_header X-Powered-By; proxy_request_buffering off; limit_conn_zone \$binary_remote_addr zone=limitperip:10m; limit_req_zone \$binary_remote_addr zone=ratelimit:10m rate=1000r/s; gzip on; gzip_min_length 1k; gzip_buffers 4 16k; gzip_comp_level 5; gzip_types text/plain application/x-javascript text/css application/xml text/javascript application/javascript application/x-httpd-php application/json; gzip_vary on; server { listen 8080; server_name example.com; charset utf-8; limit_conn limitperip 10; if (\$request_method !~ ^(GET|HEAD)\$) { return 444; } location ~ /\. { deny all; return 404; } location / { root /repo/openeuler; fancyindex on; fancyindex_exact_size off; autoindex on; } location = /favicon.ico { log_not_found off; access_log off; } } }
创建nginx Dockerfile
FROM openeuler/openeuler:22.03-lts-sp1 WORKDIR /opt/nginx RUN yum update -y \ && yum install -y pcre-devel openssl-devel gcc telnet wget curl make libxslt libxslt-devel gd gd-devel git \ && mkdir -p /etc/nginx/modules \ && git clone https://github.com/aperezdc/ngx-fancyindex.git /etc/nginx/modules/ngx-fancyindex \ && cd /opt/nginx \ && wget http://nginx.org/download/nginx-1.24.0.tar.gz \ && tar zxf nginx-1.24.0.tar.gz \ && sed -i "s|Server: nginx|Server: |" nginx-1.24.0/src/http/ngx_http_header_filter_module.c \ && sed -i "s|\#define[ ]NGINX_VER[ ].*|\#define NGINX_VER \"\"|" nginx-1.24.0/src/core/nginx.h \ && cd nginx-1.24.0 \ && ./configure --prefix=/usr/share/nginx \ --sbin-path=/usr/share/nginx/sbin/nginx \ --modules-path=/etc/nginx/modules \ --conf-path=/etc/nginx/nginx.conf \ --error-log-path=/var/log/nginx/error.log \ --http-log-path=/var/log/nginx/access.log \ --http-client-body-temp-path=/var/lib/nginx/tmp/client_body \ --http-fastcgi-temp-path=/var/lib/nginx/tmp/fastcgi \ --http-proxy-temp-path=/var/lib/nginx/tmp/proxy \ --http-scgi-temp-path=/var/lib/nginx/tmp/scgi \ --http-uwsgi-temp-path=/var/lib/nginx/tmp/uwsgi \ --pid-path=/usr/share/nginx/logs/nginx.pid \ --lock-path=/run/lock/subsys/nginx \ --user=nginx \ --group=nginx \ --with-file-aio \ --with-ipv6 \ --with-http_ssl_module \ --with-http_v2_module \ --with-http_realip_module \ --with-http_sub_module \ --with-http_slice_module \ --with-http_perl_module=dynamic \ --with-http_auth_request_module \ --with-pcre \ --with-pcre-jit \ --with-stream=dynamic \ --with-stream_ssl_module \ --with-debug \ --add-module=/etc/nginx/modules/ngx-fancyindex \ && make \ && make install \ && cd /opt/nginx \ && rm -rf nginx-1.24.0 \ && rm -rf nginx-1.24.0.tar.gz \ && yum clean all \ && useradd nginx \ && chown -R nginx:nginx /var/log/nginx \ && mkdir -p /var/lib/nginx/tmp/client_body \ && chown -R nginx:nginx /var/lib/nginx \ && touch /usr/share/nginx/logs/nginx.pid \ && chown -R nginx:nginx /usr/share/nginx \ && chown -R nginx:nginx /etc/nginx/modules COPY ./nginx.conf /etc/nginx/nginx.conf ENV PATH /usr/share/nginx/sbin:\$PATH EXPOSE 8080 USER root CMD ["nginx", "-g", "daemon off;"]
构建nginx镜像
docker build -t myrepo-nginx:v0.0.1 .
创建脚本entrypoint.sh
#!/bin/sh if [[ -z "\${SYNC_HOST}" ]]; then echo "SYNC_HOST is not defined. exit none zero." exit 1 fi if [[ -z "\${TARGET_DIR}" ]]; then echo "TARGET_DIR is not defined. exit none zero." exit 1 fi mkdir -p "\${TARGET_DIR}" if [[ -z "\${RSYNC_INTERNAL}" ]]; then echo "RSYNC_INTERNAL is not defined. exit none zero." exit 1 fi while true; do echo "Starting to sync repos @ \$(date)" if [[ -z "\${ADDITIONAL_PARAMETERS}" ]]; then timeout \${RSYNC_INTERNAL} rsync -av --partial --progress --block-size=131072 "\${SYNC_HOST}" "\${TARGET_DIR}" else timeout \${RSYNC_INTERNAL} rsync -av --partial --progress --block-size=131072 \${ADDITIONAL_PARAMETERS} "\${SYNC_HOST}" "\${TARGET_DIR}" fi sleep 120 done
创建rsync Dockerfile
FROM openeuler/openeuler:22.03-lts-sp1 RUN yum -y update && \ yum install -y rsync tzdata && \ useradd -s /sbin/nologin -u 1000 rsync ENV TZ="Asia/Shanghai" COPY entrypoint.sh /usr/local/bin/ RUN chown 1000:1000 /usr/local/bin/entrypoint.sh && \ chmod +x /usr/local/bin/entrypoint.sh WORKDIR /usr/local/bin/ ENV PATH=\$PATH:/usr/local/bin/ CMD ["entrypoint.sh"]
构建rsync镜像
docker build -t myrepo-rsync:v0.0.1 .
启动nginx和rsync容器
docker run -d -v /opt/openeuler:/repo/openeuler -p 8080:8080 myrepo-nginx:v0.0.1
docker run -d -e SYNC_HOST="rsync://root@repo.openeuler.openatom.cn/openeuler" -e TARGET_DIR="/repo/openeuler" -e RSYNC_INTERNAL="600" -e ADDITIONAL_PARAMETERS="--delete" -v /opt/openeuler:/repo/openeuler myrepo-rsync:v0.0.1
访问自建镜像站
浏览器上输入 docker 宿主机地址 http://192.168.1.1:8080
【版权声明】Copyright © 2024 openEuler Community。本文由openEuler社区首发,欢迎遵照 CC-BY-SA 4.0 协议规定转载。转载时敬请在正文注明并保留原文链接和作者信息。
【免责声明】本文仅代表作者本人观点,与本网站无关。本网站对文中陈述、观点判断保持中立,不对所包含内容的准确性、可靠性或完整性提供任何明示或暗示的保证。本文仅供读者参考,由此产生的所有法律责任均由读者本人承担。