docker nginx-php容器镜像瘦身优化

1、 在安装好php环境的容器，参考上面贴出的链接那篇文章的部分，做好基础工作：

#创建工作目录
mkdir /rootfs

#进入工作目录
cd /rootfs

#创建基础目录
mkdir -p bin etc lib proc sys tmp dev/pts usr/lib64 usr/bin usr/local/bin

#创建一个空的DNS服务用的文件
touch etc/resolv.conf

#复制名称解析文件
cp /etc/nsswitch.conf etc/nsswitch.conf

#创建用户和用户组文件
echo root:x:::root:/:/bin/sh > etc/passwd
echo root:x:: > etc/group

#创建php程序运行的用户
echo www:x:::root:/:/bin/sh >> etc/passwd
echo www:x:: >> etc/group

#依赖库软链接
ln -s lib lib64

#工具软链接
ln -s bin sbin

#下载busybox，若网速慢可以用迅雷下载，然后复制到/sbin/busybox
curl -o /sbin/busybox http://busybox.net/downloads/binaries/1.21.1/busybox-x86_64

#加权限
chmod +x /sbin/busybox

#安装busybox
cp /sbin/busybox bin
busybox --install -s bin

2、找依赖，假设我的php安装在/usr/local/php中，用交互模式进入容器

运行命令查看依赖：

ldd /usr/local/php/sbin/php-fpm

ldd /usr/local/nginx/sbin/nginx

会列出一大堆依赖库，并且这些库在不同的路径。由于用到busybox，那就将这些库复制到工作目录的根目录的lib即可。即/rootfs/lib/中，用这个工具找出来的是不完整的、还有c++运行库等等。

我整理出来的完整依赖库是：

ldd /usr/local/sbin/php-fpm
    linux-vdso.so. (0x00007fff2cf62000)
    libcrypt.so. => /lib/x86_64-linux-gnu/libcrypt.so. (0x00007fd1cc915000)
    libresolv.so. => /lib/x86_64-linux-gnu/libresolv.so. (0x00007fd1cc6fe000)
    libedit.so. => /usr/lib/x86_64-linux-gnu/libedit.so. (0x00007fd1cc4c5000)
    libtinfo.so. => /lib/x86_64-linux-gnu/libtinfo.so. (0x00007fd1cc29b000)
    librt.so. => /lib/x86_64-linux-gnu/librt.so. (0x00007fd1cc093000)
    libz.so. => /lib/x86_64-linux-gnu/libz.so. (0x00007fd1cbe78000)
    libm.so. => /lib/x86_64-linux-gnu/libm.so. (0x00007fd1cbb77000)
    libdl.so. => /lib/x86_64-linux-gnu/libdl.so. (0x00007fd1cb973000)
    libnsl.so. => /lib/x86_64-linux-gnu/libnsl.so. (0x00007fd1cb75b000)
    libxml2.so. => /usr/lib/x86_64-linux-gnu/libxml2.so. (0x00007fd1cb3f4000)
    libssl.so.1.0. => /usr/lib/x86_64-linux-gnu/libssl.so.1.0. (0x00007fd1cb193000)
    libcrypto.so.1.0. => /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0. (0x00007fd1cad96000)
    libcurl.so. => /usr/lib/x86_64-linux-gnu/libcurl.so. (0x00007fd1cab22000)
    libc.so. => /lib/x86_64-linux-gnu/libc.so. (0x00007fd1ca777000)
    libbsd.so. => /lib/x86_64-linux-gnu/libbsd.so. (0x00007fd1ca567000)
    libpthread.so. => /lib/x86_64-linux-gnu/libpthread.so. (0x00007fd1ca34a000)
    /lib64/ld-linux-x86-.so. (0x00007fd1cd911000)
    liblzma.so. => /lib/x86_64-linux-gnu/liblzma.so. (0x00007fd1ca127000)
    libidn.so. => /usr/lib/x86_64-linux-gnu/libidn.so. (0x00007fd1c9ef3000)
    librtmp.so. => /usr/lib/x86_64-linux-gnu/librtmp.so. (0x00007fd1c9cd6000)
    libssh2.so. => /usr/lib/x86_64-linux-gnu/libssh2.so. (0x00007fd1c9aad000)
    libgssapi_krb5.so. => /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so. (0x00007fd1c9862000)
    libkrb5.so. => /usr/lib/x86_64-linux-gnu/libkrb5.so. (0x00007fd1c958e000)
    libk5crypto.so. => /usr/lib/x86_64-linux-gnu/libk5crypto.so. (0x00007fd1c935d000)
    libcom_err.so. => /lib/x86_64-linux-gnu/libcom_err.so. (0x00007fd1c9159000)
    liblber-2.4.so. => /usr/lib/x86_64-linux-gnu/liblber-2.4.so. (0x00007fd1c8f4a000)
    libldap_r-2.4.so. => /usr/lib/x86_64-linux-gnu/libldap_r-2.4.so. (0x00007fd1c8cf8000)
    libgnutls-deb0.so. => /usr/lib/x86_64-linux-gnu/libgnutls-deb0.so. (0x00007fd1c89d9000)
    libhogweed.so. => /usr/lib/x86_64-linux-gnu/libhogweed.so. (0x00007fd1c87aa000)
    libnettle.so. => /usr/lib/x86_64-linux-gnu/libnettle.so. (0x00007fd1c8578000)
    libgmp.so. => /usr/lib/x86_64-linux-gnu/libgmp.so. (0x00007fd1c82f5000)
    libgcrypt.so. => /lib/x86_64-linux-gnu/libgcrypt.so. (0x00007fd1c8014000)
    libkrb5support.so. => /usr/lib/x86_64-linux-gnu/libkrb5support.so. (0x00007fd1c7e08000)
    libkeyutils.so. => /lib/x86_64-linux-gnu/libkeyutils.so. (0x00007fd1c7c04000)
    libsasl2.so. => /usr/lib/x86_64-linux-gnu/libsasl2.so. (0x00007fd1c79e8000)
    libp11-kit.so. => /usr/lib/x86_64-linux-gnu/libp11-kit.so. (0x00007fd1c77a2000)
    libtasn1.so. => /usr/lib/x86_64-linux-gnu/libtasn1.so. (0x00007fd1c758e000)
    libgpg-error.so. => /lib/x86_64-linux-gnu/libgpg-error.so. (0x00007fd1c737c000)
    libffi.so. => /usr/lib/x86_64-linux-gnu/libffi.so. (0x00007fd1c7173000)

ldd /usr/local/nginx/sbin/nginx
    linux-vdso.so. (0x00007fff3d5dd000)
    libdl.so. => /lib/x86_64-linux-gnu/libdl.so. (0x00007f7f01b3f000)
    libpthread.so. => /lib/x86_64-linux-gnu/libpthread.so. (0x00007f7f01922000)
    libcrypt.so. => /lib/x86_64-linux-gnu/libcrypt.so. (0x00007f7f016eb000)
    libpcre.so. => /lib/x86_64-linux-gnu/libpcre.so. (0x00007f7f0147d000)
    libssl.so.1.0. => /usr/lib/x86_64-linux-gnu/libssl.so.1.0. (0x00007f7f0121c000)
    libcrypto.so.1.0. => /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0. (0x00007f7f00e1f000)
    libz.so. => /lib/x86_64-linux-gnu/libz.so. (0x00007f7f00c04000)
    libxml2.so. => /usr/lib/x86_64-linux-gnu/libxml2.so. (0x00007f7f0089d000)
    libxslt.so. => /usr/lib/x86_64-linux-gnu/libxslt.so. (0x00007f7f0065d000)
    libexslt.so. => /usr/lib/x86_64-linux-gnu/libexslt.so. (0x00007f7f00447000)
    libperl.so.5.20 => /usr/lib/x86_64-linux-gnu/libperl.so.5.20 (0x00007f7f00086000)
    libm.so. => /lib/x86_64-linux-gnu/libm.so. (0x00007f7effd85000)
    libc.so. => /lib/x86_64-linux-gnu/libc.so. (0x00007f7eff9da000)
    /lib64/ld-linux-x86-.so. (0x00007f7f01d43000)
    liblzma.so. => /lib/x86_64-linux-gnu/liblzma.so. (0x00007f7eff7b7000)
    libgcrypt.so. => /lib/x86_64-linux-gnu/libgcrypt.so. (0x00007f7eff4d6000)
    libgpg-error.so. => /lib/x86_64-linux-gnu/libgpg-error.so. (0x00007f7eff2c4000)

复制相应的.so包到rootfs目录下

3、复制php程序

#复制PHP程序
cp -R /usr/local/php  /rootfs/usr/local/php
cp -R /usr/local/nginx /rootfs/usr/local/nginx
cp -R /usr/local/etc /rootfs/usr/local

4、打包tar文件

tar cf /rootfs.tar .

5、创建DockerFile

#将rootfs.tar 复制出来，其实这个已经是一个基于busybox+nginx+php创建的小型系统了
docker cp ngx01:/rootfs.tar .

FROM scratch
ADD rootfs.tar /
WORKDIR /usr/local/nginx/ptweb
RUN  apt-key adv --recv-keys --keyserver keyserver.ubuntu.com 3B4FE6ACC0B21F32 \
     && apt-get update \
     && apt-get install supervisor -y \
     && apt-get install cron -y \
     && /bin/ln -svf  /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \
     && echo 'Asia/Shanghai' >/etc/timezone \
     && ln -svf /usr/local/nginx/sbin/nginx /usr/sbin/nginx \
     && apt-get autoclean -y \
     && apt-get clean  -y \
     && apt-get autoremove -y
EXPOSE
ENTRYPOINT ["/usr/bin/supervisord", "-n", "-c", "/etc/supervisord.conf"]

然后build系统

docker build -t ngx-php-supervisor:v01 .

或者使用已经封装过的rootfs.tar:https://github.com/lvelvis/docker-debian-artifacts/releases/download/v1.1/rootfs.tar.xz