docker之docker-machine用法

转自：https://www.cnblogs.com/jsonhc/p/7784466.html

docker-machine 是docker官方提供的docker管理工具。
通过docker-machine可以轻松的做到：

　　在Windows平台和MAC平台安装和运行docker

　　搭建和管理多个docker 主机

　　搭建swarm集群

环境win下面安装的virtualbox，virtualbox安装的centos7，网络模式NAT+hostonly

ip：192.168.56.102（hostonly）

1、安装docker-machine：

curl -L https://github.com/docker/machine/releases/download/v0.13.0/docker-machine-`uname -s`-`uname -m` >/tmp/docker-machine &&
chmod +x /tmp/docker-machine &&
sudo cp /tmp/docker-machine /usr/local/bin/docker-machine

2、查看docker-machine版本：

# docker-machine version
[root@docker ~]# docker-machine version
docker-machine version 0.13.0, build 9ba6da9

3、在centos7环境下创建machine：

[root@localhost ~]# docker-machine create -d virtualbox default
Creating CA: /root/.docker/machine/certs/ca.pem
Creating client certificate: /root/.docker/machine/certs/cert.pem
Running pre-create checks...
Error with pre-create check: "VBoxManage not found. Make sure VirtualBox is installed and VBoxManage is in the path"

但是却报错了，以为virtualbox安装的centos7环境支持的是virtualbox驱动，才发现环境安装支持virtualbox驱动

使用virtualbox驱动需要安装virtualbox，而Ubuntu的解决方法为：

于是采用generic驱动，具体介绍查看官网：https://docs.docker.com/machine/drivers/generic/

[root@localhost ~]# docker-machine create -d generic --generic-ip-address=192.168.56.102 --generic-ssh-key ~/.ssh/id_rsa --generic-ssh-user=root vm

Running pre-create checks...

Creating machine...

(vm) Importing SSH key...

Waiting for machine to be running, this may take a few minutes...

Detecting operating system of created instance...

Waiting for SSH to be available...

Error creating machine: Error detecting OS: Too many retries waiting for SSH to be available. Last error: Maximum number of retries (60) exceeded

　　--generic-ip-address=192.168.56.102：这里的ip是指本机，如果需要为其他远程docker主机安装可以改为其他docker主机ip（这里是本地创建docker-machine）

依然报错，这是由于docker-machine为本机创建machine时也需要进行ssh认证：

[root@localhost ~]# ssh-keygen
[root@localhost ~]# ssh-copy-id root@192.168.56.102

将密码发给自己，然后重新继续创建machine：

[root@localhost ~]# docker-machine create -d generic --generic-ip-address=192.168.56.102 --generic-ssh-key ~/.ssh/id_rsa --generic-ssh-user=root vm
Running pre-create checks...
Creating machine...
(vm) Importing SSH key...
Waiting for machine to be running, this may take a few minutes...
Detecting operating system of created instance...
Waiting for SSH to be available...
Detecting the provisioner...
Provisioning with centos...
Copying certs to the local machine directory...
Copying certs to the remote machine...
Setting Docker configuration on the remote daemon...
Checking connection to Docker...
Docker is up and running!
To see how to connect your Docker Client to the Docker Engine running on this virtual machine, run: docker-machine env vm

于是终于创建machine成功了

查看docker-machine：

[root@localhost ~]# docker-machine ls
NAME   ACTIVE   DRIVER    STATE     URL                         SWARM   DOCKER        ERRORS
vm     -        generic   Running   tcp://192.168.56.102:2376           v17.09.0-ce 

查看vm的环境变量：

[root@localhost ~]# docker-machine env vm
export DOCKER_TLS_VERIFY="1"
export DOCKER_HOST="tcp://192.168.56.102:2376"
export DOCKER_CERT_PATH="/root/.docker/machine/machines/vm"
export DOCKER_MACHINE_NAME="vm"
# Run this command to configure your shell:
# eval $(docker-machine env vm)

加载环境变量：

[root@localhost ~]# eval $(docker-machine env vm)

利用ssh登录到machine中：

[root@localhost ~]# docker-machine ssh --help
Usage: docker-machine ssh [arg...]
Log into or run a command on a machine with SSH.
Description:
Arguments are [machine-name] [command]
[root@localhost ~]# docker-machine ssh vm
Last login: Sat Nov  4 17:55:53 2017 from 192.168.56.102
[root@vm ~]# 

现在在本地环境创建一个容器启动：

[root@localhost ~]# docker run -d --name=nginx nginx
[root@localhost ~]# docker ps -a
CONTAINER ID        IMAGE               COMMAND                  CREATED              STATUS              PORTS               NAMES
6e62975fab90        nginx               "nginx -g 'daemon ..."   About a minute ago   Up 59 seconds       80/tcp              nginx

然后ssh远程到docker-machine中：

[root@localhost ~]# docker-machine ssh vm
Last login: Sat Nov  4 18:13:27 2017 from 192.168.56.102
[root@vm ~]# docker ps -a
CONTAINER ID        IMAGE               COMMAND                  CREATED              STATUS              PORTS               NAMES
6e62975fab90        nginx               "nginx -g 'daemon ..."   About a minute ago   Up About a minute   80/tcp              nginx

可以看见docker主机和docker-machine主机里面的容器id相同

利用docker-machine能够安装docker和创建容器

 

 

上面是本地为自己创建machine，现在为远程的docker主机创建docker-machine：

环境：centos7，192.168.101.14，vmware下面安装的docker以及docker-machine，为192.168.56.102这台docker主机创建machine：

（两个ip不同进行了转发所以可以访问（前面是vm下面的nat的静态ip，后面是virtualbox的两张网卡（nat和host only）））

1、首先将192.168.101.14和主机192.168.56.102进行ssh连接认证：

[root@docker ~]# ssh-keygen
[root@docker ~]# ssh-copy-id root@192.168.56.102

2、创建machine：

[root@docker ~]# docker-machine create -d generic --generic-ip-address=192.168.56.102 --generic-ssh-key ~/.ssh/id_rsa --generic-ssh-user=root default
Creating CA: /root/.docker/machine/certs/ca.pem
Creating client certificate: /root/.docker/machine/certs/cert.pem
Running pre-create checks...
Creating machine...
(default) Importing SSH key...
Waiting for machine to be running, this may take a few minutes...
Detecting operating system of created instance...
Waiting for SSH to be available...
Detecting the provisioner...
Provisioning with centos...
Copying certs to the local machine directory...
Copying certs to the remote machine...
Setting Docker configuration on the remote daemon...
Checking connection to Docker...
Docker is up and running!
To see how to connect your Docker Client to the Docker Engine running on this virtual machine, run: docker-machine env default

执行环境变量，进入到machine环境：

[root@docker ~]# docker-machine env default
[root@docker ~]# eval $(docker-machine env default)

3、查看创建的machine：

[root@docker ~]# docker-machine ls
NAME      ACTIVE   DRIVER    STATE     URL                         SWARM   DOCKER        ERRORS
default   -        generic   Running   tcp://192.168.56.102:2376           v17.09.0-ce  

可以看见在192.168.101.14环境上为远程主机192.168.56.102创建的machine

4、创建容器：

[root@docker ~]# docker run -d --name=nginx nginx（本地没有nginx镜像）
b1f08986f6d5dbb1ede699e915bde734bab278fbe70f93af06ec2267fae2fef3
[root@docker ~]# docker ps -a
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS               NAMES
b1f08986f6d5        nginx               "nginx -g 'daemon ..."   4 seconds ago       Up 3 seconds        80/tcp              nginx

5、ssh到machine：

[root@docker ~]# docker-machine ssh default
Last login: Sat Nov  4 18:51:49 2017 from 192.168.56.1
[root@default ~]# docker ps -a
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS               NAMES
b1f08986f6d5        nginx               "nginx -g 'daemon ..."   23 seconds ago      Up 22 seconds       80/tcp              nginx

现在查看远程主机是否创建了容器：

[root@localhost ~]# docker ps -a
could not read CA certificate "/root/.docker/machine/machines/default/ca.pem": open /root/.docker/machine/machines/default/ca.pem: no such file or directory

报错原因：

由于刚刚在192.168.56.102为自己设置了machine，保留了之前machine的环境变量，虽然现在删除了，但是设置了环境变量，将刚刚设置的环境变量取消：

[root@localhost ~]# unset DOCKER_TLS_VERIFY
[root@localhost ~]# unset DOCKER_CERT_PATH
[root@localhost ~]# unset DOCKER_MACHINE_NAME
[root@localhost ~]# unset DOCKER_HOST

然后重新查看：

[root@localhost ~]# docker ps -a
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS               NAMES
b1f08986f6d5        nginx               "nginx -g 'daemon ..."   8 minutes ago       Up 8 minutes        80/tcp              nginx

可以发现，为远程主机创建容器成功

现在192.168.101.14上面存在镜像centos_nginx:v4，而远程主机192.168.56.102没有该镜像，现在创建容器，看是否远程主机能够创建成功？

[root@docker ~]# docker pull registry.cn-hangzhou.aliyuncs.com/wadeson/jsonhc:v4
[root@docker ~]# docker images
REPOSITORY                                         TAG                 IMAGE ID            CREATED             SIZE
nginx                                              latest              b72d63324dbb        13 hours ago        108MB
registry.cn-hangzhou.aliyuncs.com/wadeson/jsonhc   v4                  6c5128aaff05        2 days ago          464MB

然后在远程主机查看：

[root@localhost ~]# docker images
REPOSITORY                                         TAG                 IMAGE ID            CREATED             SIZE
nginx                                              latest              b72d63324dbb        13 hours ago        108MB
registry.cn-hangzhou.aliyuncs.com/wadeson/jsonhc   v4                  6c5128aaff05        2 days ago          464MB

可以看见两主机的镜像同步，也是容器也是同步的

vm下面的docker可以为virtualbox下面的docker创建容器

而更多的是本地可以为云等其他环境创建容器，通过docker-machine

 

在这之前192.168.101.14的images都不见了，那是因为设置machine环境变量：

unset DOCKER_TLS_VERIFY
unset DOCKER_CERT_PATH
unset DOCKER_MACHINE_NAME
unset DOCKER_HOST

执行上面将machine的环境变量取消就可以返回原来的环境了：

[root@docker ~]# docker images
REPOSITORY                                         TAG                 IMAGE ID            CREATED             SIZE
centos_init                                        v1                  383ff3502443        26 hours ago        448MB
centos_nginx                                       v8                  6f792dc07c35        2 days ago          464MB
centos_nginx                                       v7                  9e875385d6be        2 days ago          464MB
centos_nginx                                       v6                  959fdf4d4288        2 days ago          464MB
centos_nginx                                       v5                  5c1131306686        2 days ago          464MB
registry.cn-hangzhou.aliyuncs.com/wadeson/jsonhc   v4                  6c5128aaff05        2 days ago          464MB
192.168.101.14:5000/centos_nginx                   v4                  6c5128aaff05        2 days ago          464MB
centos_nginx                                       v4                  6c5128aaff05        2 days ago          464MB
centos_nginx                                       v3                  0e49a2c0562f        2 days ago          464MB
centos_nginx                                       v2                  2031faf8894a        2 days ago          464MB
centos_nginx                                       v1                  78d18f16e757        3 days ago          464MB
registry                                           latest              2ba7189700c8        9 days ago          33.3MB
ubuntu                                             latest              747cb2d60bbe        3 weeks ago         122MB
centos                                             latest              196e0ce0c9fb        7 weeks ago         197MB

而如果需要返回machine环境就继续执行machine环境变量就行，这种方式很好的隔离了本地和远程镜像和容器