{"id":210479,"date":"2025-11-20T15:40:29","date_gmt":"2025-11-20T07:40:29","guid":{"rendered":"https:\/\/www.server.hk\/blog\/?p=210479"},"modified":"2025-11-13T15:41:14","modified_gmt":"2025-11-13T07:41:14","slug":"%e9%a6%99%e6%b8%af%e6%9c%8d%e5%8a%a1%e5%99%a8docker%e7%8e%af%e5%a2%83%e9%83%a8%e7%bd%b2%e5%85%a8%e6%8c%87%e5%8d%97%ef%bc%9a%e4%bb%8e%e5%85%a5%e9%97%a8%e5%88%b0%e7%94%9f%e4%ba%a7%e7%ba%a7%e4%bc%98","status":"publish","type":"post","link":"https:\/\/server.hk\/cnblog\/210479\/","title":{"rendered":"\u9999\u6e2f\u670d\u52a1\u5668Docker\u73af\u5883\u90e8\u7f72\u5168\u6307\u5357\uff1a\u4ece\u5165\u95e8\u5230\u751f\u4ea7\u7ea7\u4f18\u5316\u5b9e\u6218"},"content":{"rendered":"<p>\u5728\u5bb9\u5668\u5316\u6d6a\u6f6e\u5e2d\u5377\u4e91\u539f\u751f\u7684\u5f53\u4e0b\uff0cDocker\u5df2\u6210\u4e3a\u5fae\u670d\u52a1\u67b6\u6784\u3001CI\/CD\u6d41\u6c34\u7ebf\u548c\u591a\u73af\u5883\u90e8\u7f72\u7684\u6807\u914d\u6280\u672f\u3002\u9009\u62e9<strong>\u9999\u6e2f\u670d\u52a1\u5668<\/strong>\u90e8\u7f72Docker\u73af\u5883\uff0c\u4e0d\u4ec5\u80fd\u4eab\u53d7CN2 GIA\u4f4e\u81f335ms\u7684\u4e2d\u6e2f\u5ef6\u8fdf\uff0c\u8fd8\u53ef\u514d\u9664ICP\u5907\u6848\u6d41\u7a0b\uff0c\u5feb\u901f\u5b9e\u73b0\u4e1a\u52a1\u4e0a\u7ebf\u3002\u672c\u6587\u5c06\u4ee5\u77e5\u8bc6\u79d1\u666e\u4e3a\u4e3b\uff08\u7ea690%\uff09\uff0c\u8be6\u7ec6\u8bb2\u89e3<strong>\u9999\u6e2f\u670d\u52a1\u5668Docker\u73af\u5883\u90e8\u7f72\u6307\u5357<\/strong>\uff0c\u6db5\u76d6\u7cfb\u7edf\u9009\u578b\u3001\u5b89\u88c5\u914d\u7f6e\u3001\u5b89\u5168\u52a0\u56fa\u3001\u751f\u4ea7\u4f18\u5316\u53ca\u6545\u969c\u6392\u67e5\uff0c\u7ed3\u5408Server.HK\u771f\u5b9e\u4ea7\u54c1\u53c2\u6570\u4e0e\u7ebf\u8def\u7279\u6027\uff0c\u5e2e\u52a9\u60a8\u5728\u9ad8\u6027\u80fd\u7269\u7406\u673a\u4e0a\u6784\u5efa\u7a33\u5b9a\u53ef\u6269\u5c55\u7684\u5bb9\u5668\u5316\u5e73\u53f0\u3002<\/p>\n<h2>\u4e00\u3001\u4e3a\u4ec0\u4e48\u9009\u62e9\u9999\u6e2f\u670d\u52a1\u5668\u90e8\u7f72Docker<\/h2>\n<p>Docker\u5bb9\u5668\u672c\u8d28\u662f\u8fdb\u7a0b\u7ea7\u865a\u62df\u5316\uff0c\u5bf9I\/O\u548c\u7f51\u7edc\u654f\u611f\u3002\u4f20\u7edf\u5927\u9646\u670d\u52a1\u5668\u9700\u5907\u6848\u4e14\u5e26\u5bbd\u53d7\u9650\uff0c\u800c<strong>\u9999\u6e2f\u670d\u52a1\u5668<\/strong>\u5177\u5907\uff1a<\/p>\n<ul>\n<li><strong>\u4f4e\u5ef6\u8fdf\u7f51\u7edc<\/strong>\uff1aCN2 GIA\u76f4\u8fde\u5927\u9646&lt;35ms\uff0cBGP\u591a\u7ebf\u8986\u76d6\u4e1c\u5357\u4e9a\u3002<\/li>\n<li><strong>\u514d\u5907\u6848\u4e0a\u7ebf<\/strong>\uff1a\u5883\u5916IDC\uff0c24\u5c0f\u65f6\u5185\u4ea4\u4ed8\u88f8\u673a\u3002<\/li>\n<li><strong>\u72ec\u4eab\u8d44\u6e90<\/strong>\uff1a\u7269\u7406\u673a\u65e0\u865a\u62df\u5316\u5f00\u9500\uff0c\u5bb9\u5668\u6027\u80fd\u6052\u5b9a\u3002<\/li>\n<li><strong>\u9690\u79c1\u5408\u89c4<\/strong>\uff1a\u9999\u6e2f\u6cd5\u5f8b\u6846\u67b6\uff0c\u6570\u636e\u4e3b\u6743\u66f4\u5b89\u5168\u3002<\/li>\n<\/ul>\n<p>Server.HK\u9999\u6e2f\u7279\u4ef7\u670d\u52a1\u5668A\u5957\u9910\uff08\uffe5299\/\u6708\uff09\u914d\u5907Intel Xeon E3-1230 v2\uff084\u68388\u7ebf\u7a0b 3.3GHz\uff09\u30018GB\u5185\u5b58\u3001240GB SSD\u300130M BGP\u5e26\u5bbd\u30012\u4e2aIP\uff08\u6d4b\u8bd5IP\uff1a103.143.80.254\uff09\uff0c\u8db3\u4ee5\u652f\u6491\u4e2d\u5c0f\u578bDocker\u96c6\u7fa4\u3002\u66f4\u9ad8\u8d1f\u8f7d\u53ef\u9009CN2 C\u5957\u9910\uff08\uffe51050\/\u6708\uff09\uff1a\u53ccE5-2660\u300132GB\u5185\u5b58\u300110M CN2 GIA\uff0c\u5b9e\u6d4b\u652f\u6301500+\u5bb9\u5668\u5e76\u53d1\u3002<\/p>\n<h2>\u4e8c\u3001\u7cfb\u7edf\u4e0e\u786c\u4ef6\u51c6\u5907<\/h2>\n<h3>1. \u64cd\u4f5c\u7cfb\u7edf\u9009\u578b<\/h3>\n<p>Docker\u5b98\u65b9\u63a8\u8350Ubuntu 20.04\/22.04\u6216CentOS 7\/8 Stream\u3002Server.HK\u514d\u8d39\u9884\u88c5\u7cfb\u7edf\uff0c\u5efa\u8bae\u9009\u62e9\uff1a<\/p>\n<ul>\n<li><strong>Ubuntu 22.04 LTS<\/strong>\uff1a\u5185\u68385.15+\uff0ccgroup v2\u539f\u751f\u652f\u6301\u3002<\/li>\n<li><strong>CentOS 7<\/strong>\uff1a\u517c\u5bb9\u6027\u5f3a\uff0c\u9002\u5408\u4f20\u7edf\u4f01\u4e1a\u3002<\/li>\n<\/ul>\n<h3>2. \u786c\u4ef6\u8d44\u6e90\u8bc4\u4f30<\/h3>\n<table border=\"1\" cellspacing=\"0\">\n<tbody>\n<tr>\n<th>\u5bb9\u5668\u89c4\u6a21<\/th>\n<th>\u63a8\u8350\u914d\u7f6e<\/th>\n<th>Server.HK\u5957\u9910<\/th>\n<\/tr>\n<tr>\n<td>&lt;50\u5bb9\u5668<\/td>\n<td>4\u68388G+240GB SSD<\/td>\n<td>\u7279\u4ef7A\uff08\uffe5299\uff09<\/td>\n<\/tr>\n<tr>\n<td>50-200\u5bb9\u5668<\/td>\n<td>8\u683816G+240GB SSD<\/td>\n<td>\u7279\u4ef7B\uff08\uffe5399\uff09<\/td>\n<\/tr>\n<tr>\n<td>&gt;200\u5bb9\u5668<\/td>\n<td>16\u683832G+\u9ad8\u901fNVMe<\/td>\n<td>CN2 C\uff08\uffe51050\uff09<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u4e09\u3001Docker\u6838\u5fc3\u7ec4\u4ef6\u5b89\u88c5\u4e0e\u914d\u7f6e<\/h2>\n<h3>1. \u57fa\u7840\u73af\u5883\u521d\u59cb\u5316<\/h3>\n<p>\u767b\u5f55Server.HK\u63d0\u4f9b\u7684Root\u6743\u9650\uff08\u9ed8\u8ba422\u7aef\u53e3SSH\uff09\uff0c\u6267\u884c\uff1a<\/p>\n<pre># \u66f4\u65b0\u7cfb\u7edf\r\napt update &amp;&amp; apt upgrade -y  # Ubuntu\r\n# \u6216\r\nyum update -y  # CentOS\r\n\r\n# \u5b89\u88c5\u57fa\u7840\u5de5\u5177\r\napt install -y curl wget vim net-tools\r\n<\/pre>\n<h3>2. Docker Engine\u5b89\u88c5\uff08Ubuntu 22.04\u793a\u4f8b\uff09<\/h3>\n<pre># \u5378\u8f7d\u65e7\u7248\u672c\r\nsudo apt-get remove docker docker-engine docker.io containerd runc\r\n\r\n# \u5b89\u88c5\u4f9d\u8d56\r\nsudo apt-get install -y ca-certificates curl gnupg lsb-release\r\n\r\n# \u6dfb\u52a0Docker\u5b98\u65b9GPG\u5bc6\u94a5\r\nsudo mkdir -p \/etc\/apt\/keyrings\r\ncurl -fsSL https:\/\/download.docker.com\/linux\/ubuntu\/gpg | sudo gpg --dearmor -o \/etc\/apt\/keyrings\/docker.gpg\r\n\r\n# \u8bbe\u7f6e\u7a33\u5b9a\u7248\u4ed3\u5e93\r\necho \"deb [arch=$(dpkg --print-architecture) signed-by=\/etc\/apt\/keyrings\/docker.gpg] https:\/\/download.docker.com\/linux\/ubuntu $(lsb_release -cs) stable\" | sudo tee \/etc\/apt\/sources.list.d\/docker.list &gt; \/dev\/null\r\n\r\n# \u5b89\u88c5Docker\r\nsudo apt-get update\r\nsudo apt-get install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin\r\n<\/pre>\n<h3>3. Docker Compose\u5b89\u88c5<\/h3>\n<pre># \u4e0b\u8f7d\u6700\u65b0\u7248\uff08v2.23.0\u793a\u4f8b\uff09\r\nsudo curl -L \"https:\/\/github.com\/docker\/compose\/releases\/download\/v2.23.0\/docker-compose-$(uname -s)-$(uname -m)\" -o \/usr\/local\/bin\/docker-compose\r\n\r\n# \u6dfb\u52a0\u6267\u884c\u6743\u9650\r\nsudo chmod +x \/usr\/local\/bin\/docker-compose\r\n\r\n# \u9a8c\u8bc1\r\ndocker-compose --version\r\n<\/pre>\n<h3>4. \u5f00\u673a\u81ea\u542f\u4e0e\u6027\u80fd\u8c03\u4f18<\/h3>\n<pre>sudo systemctl enable docker\r\nsudo systemctl start docker\r\n\r\n# \u521b\u5efadaemon.json\u4f18\u5316\u914d\u7f6e\r\ncat &gt; \/etc\/docker\/daemon.json &lt;&lt; EOF\r\n{\r\n  \"data-root\": \"\/var\/lib\/docker\",\r\n  \"exec-opts\": [\"native.cgroupdriver=systemd\"],\r\n  \"storage-driver\": \"overlay2\",\r\n  \"log-driver\": \"json-file\",\r\n  \"log-opts\": {\r\n    \"max-size\": \"10m\",\r\n    \"max-file\": \"3\"\r\n  },\r\n  \"default-ulimits\": {\r\n    \"nofile\": {\r\n      \"Name\": \"nofile\",\r\n      \"Hard\": 65535,\r\n      \"Soft\": 65535\r\n    }\r\n  }\r\n}\r\nEOF\r\n\r\nsudo systemctl restart docker\r\n<\/pre>\n<h2>\u56db\u3001\u751f\u4ea7\u7ea7\u5b89\u5168\u52a0\u56fa<\/h2>\n<h3>1. \u7528\u6237\u6743\u9650\u9694\u79bb<\/h3>\n<pre># \u521b\u5efadocker\u7528\u6237\u7ec4\uff0c\u907f\u514droot\u8fd0\u884c\r\nsudo groupadd docker\r\nsudo usermod -aG docker $USER\r\n\r\n# \u91cd\u542fSSH\u4f1a\u8bdd\u751f\u6548\r\n<\/pre>\n<h3>2. \u9632\u706b\u5899\u4e0e\u7aef\u53e3\u7ba1\u7406<\/h3>\n<pre># \u5b89\u88c5ufw\r\nsudo apt install ufw\r\n\r\n# \u4ec5\u5f00\u653e\u5fc5\u8981\u7aef\u53e3\r\nsudo ufw allow 22\/tcp\r\nsudo ufw allow 80\/tcp\r\nsudo ufw allow 443\/tcp\r\nsudo ufw enable\r\n<\/pre>\n<h3>3. \u955c\u50cf\u5b89\u5168\u626b\u63cf<\/h3>\n<p>\u96c6\u6210Trivy\u626b\u63cf\u6f0f\u6d1e\uff1a<\/p>\n<pre>curl -sfL https:\/\/raw.githubusercontent.com\/aquasecurity\/trivy\/main\/contrib\/install.sh | sh -s -- -b \/usr\/local\/bin\r\n\r\n# \u626b\u63cf\u5b98\u65b9nginx\u955c\u50cf\r\ntrivy image nginx:latest\r\n<\/pre>\n<h2>\u4e94\u3001\u5178\u578b\u5e94\u7528\u90e8\u7f72\u5b9e\u6218<\/h2>\n<h3>1. WordPress\u96c6\u7fa4\uff08LAMP+NFS\uff09<\/h3>\n<p>\u521b\u5efadocker-compose.yml\uff1a<\/p>\n<pre>version: '3.8'\r\nservices:\r\n  db:\r\n    image: mariadb:10.6\r\n    restart: always\r\n    environment:\r\n      MYSQL_ROOT_PASSWORD: your_password\r\n    volumes:\r\n      - db_data:\/var\/lib\/mysql\r\n\r\n  wordpress:\r\n    image: wordpress:latest\r\n    restart: always\r\n    ports:\r\n      - \"80:80\"\r\n    environment:\r\n      WORDPRESS_DB_HOST: db\r\n      WORDPRESS_DB_USER: root\r\n      WORDPRESS_DB_PASSWORD: your_password\r\n    volumes:\r\n      - wp_data:\/var\/www\/html\r\n\r\nvolumes:\r\n  db_data:\r\n  wp_data:\r\n<\/pre>\n<p>\u6267\u884c<code>docker-compose up -d<\/code>\uff0cServer.HK 30M BGP\u5e26\u5bbd\u8f7b\u677e\u652f\u6491\u65e5PV 5\u4e07+\u3002<\/p>\n<h3>2. \u591aIP\u7ad9\u7fa4\u90e8\u7f72\uff08SEO\u4f18\u5316\uff09<\/h3>\n<p>\u5229\u7528Server.HK\u7ad9\u7fa4\u670d\u52a1\u5668\u591aIP\u7279\u6027\uff08\u7ad9\u7fa4A\u5957\u9910\uffe51199\/\u6708\uff0c5\u4e2a\/29\u5b50\u7f51\uff09\uff0c\u4e3a\u6bcf\u4e2a\u7ad9\u70b9\u7ed1\u5b9a\u72ec\u7acbIP\uff1a<\/p>\n<pre># \u793a\u4f8b\uff1a\u4e3aIP 103.143.80.100 \u90e8\u7f72\u72ec\u7acbNginx\r\ndocker run -d --name site1 --ip 103.143.80.100 -p 80:80 nginx\r\n<\/pre>\n<h2>\u516d\u3001\u6027\u80fd\u76d1\u63a7\u4e0e\u6545\u969c\u6392\u67e5<\/h2>\n<h3>1. \u8d44\u6e90\u76d1\u63a7<\/h3>\n<p>\u5b89\u88c5Portainer\u53ef\u89c6\u5316\u7ba1\u7406\uff1a<\/p>\n<pre>docker volume create portainer_data\r\ndocker run -d -p 9000:9000 --name portainer --restart always -v \/var\/run\/docker.sock:\/var\/run\/docker.sock -v portainer_data:\/data portainer\/portainer-ce\r\n<\/pre>\n<h3>2. \u5e38\u89c1\u95ee\u9898\u89e3\u51b3<\/h3>\n<ul>\n<li><strong>\u5bb9\u5668\u65e0\u6cd5\u8bbf\u95ee\u5916\u7f51<\/strong>\uff1a\u68c0\u67e5Server.HK\u9632\u706b\u5899\u89c4\u5219\uff0c25\u7aef\u53e3\u9ed8\u8ba4\u7981\u7528\uff08\u9632\u5783\u573e\u90ae\u4ef6\uff09\u3002<\/li>\n<li><strong>\u78c1\u76d8\u7a7a\u95f4\u544a\u6025<\/strong>\uff1a\u6267\u884c<code>docker system prune -a<\/code>\u6e05\u7406\u65e0\u7528\u955c\u50cf\u3002<\/li>\n<li><strong>\u7f51\u7edc\u6296\u52a8<\/strong>\uff1a\u4f7f\u7528\u6d4b\u8bd5IP\uff08154.39.251.254\uff09ping\u4e09\u7f51\uff0cCN2\u7ebf\u8def\u66f4\u7a33\u5b9a\u3002<\/li>\n<\/ul>\n<h2>\u4e03\u3001Server.HK\u9999\u6e2f\u670d\u52a1\u5668Docker\u90e8\u7f72\u4f18\u52bf<\/h2>\n<p>Server.HK\u63d0\u4f9b\uff1a<\/p>\n<ul>\n<li><strong>\u6781\u901f\u4ea4\u4ed8<\/strong>\uff1a\u73b0\u673a\u5373\u5f00\uff0c\u514d\u8d39\u521d\u59cb\u5316\u73af\u5883\u3002<\/li>\n<li><strong>\u7ebf\u8def\u4f18\u9009<\/strong>\uff1aCN2 GIA\/BGP\u667a\u80fd\u8c03\u5ea6\uff0c<a href=\"https:\/\/server.hk\/server.php\">\u7acb\u5373\u9009\u8d2d<\/a>\u3002<\/li>\n<li><strong>\u6280\u672f\u652f\u6301<\/strong>\uff1a7&#215;24\u5c0f\u65f6\u5de5\u5355\uff0c\u514d\u8d39\u91cd\u88c5\u7cfb\u7edf\u3001\u6545\u969c\u6392\u9664\u3002<\/li>\n<li><strong>\u652f\u4ed8\u7075\u6d3b<\/strong>\uff1a\u652f\u6301\u652f\u4ed8\u5b9d\u3001USDT\uff0c<a href=\"https:\/\/t.me\/serverhkbot\" rel=\"nofollow\">TG\u54a8\u8be2<\/a>\u4eab\u4f18\u60e0\u3002<\/li>\n<\/ul>\n<h2>\u7ed3\u8bed<\/h2>\n<p>\u901a\u8fc7\u4ee5\u4e0a<strong>\u9999\u6e2f\u670d\u52a1\u5668Docker\u73af\u5883\u90e8\u7f72\u6307\u5357<\/strong>\uff0c\u60a8\u53ef\u5728Server.HK\u9ad8\u6027\u80fd\u7269\u7406\u673a\u4e0a\u5feb\u901f\u6784\u5efa\u5bb9\u5668\u5316\u5e73\u53f0\uff0c\u65e0\u8bba\u662f\u5fae\u670d\u52a1\u67b6\u6784\u3001\u7ad9\u7fa4SEO\u8fd8\u662f\u5f00\u53d1\u6d4b\u8bd5\uff0c\u5747\u53ef\u5b9e\u73b0\u9ad8\u6548\u7a33\u5b9a\u8fd0\u884c\u3002\u7acb\u5373\u8bbf\u95ee<a href=\"https:\/\/server.hk\/server.php\">Server.HK\u9999\u6e2f\u670d\u52a1\u5668\u9875\u9762<\/a>\uff0c\u9009\u62e9\uffe5299\u8d77\u7279\u4ef7\u673a\u6216CN2\u9ad8\u7aef\u914d\u7f6e\uff0c\u5f00\u542f\u60a8\u7684Docker\u5bb9\u5668\u5316\u4e4b\u65c5\uff01<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u5728\u5bb9\u5668\u5316\u6d6a\u6f6e\u5e2d\u5377\u4e91\u539f\u751f\u7684\u5f53\u4e0b\uff0cD&#46;&#46;&#46;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4927],"tags":[],"class_list":["post-210479","post","type-post","status-publish","format-standard","hentry","category-4927"],"_links":{"self":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/posts\/210479","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/comments?post=210479"}],"version-history":[{"count":1,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/posts\/210479\/revisions"}],"predecessor-version":[{"id":210480,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/posts\/210479\/revisions\/210480"}],"wp:attachment":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/media?parent=210479"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/categories?post=210479"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/tags?post=210479"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}