s2i原理
s2i是紅帽推出的一種基于容器的應(yīng)用鏡像構(gòu)建工具患久。它需要三個(gè)元素：源碼，基礎(chǔ)鏡像示启，構(gòu)建配置兢哭。大概流程如下：
- 首先用戶需要制作一個(gè)基礎(chǔ)鏡像，作為構(gòu)建的基礎(chǔ)環(huán)境夫嗓，用戶需要配置好相應(yīng)的軟件包迟螺，環(huán)境變量，等等
- s2i負(fù)責(zé)啟動(dòng)一個(gè)容器（其鏡像為用戶指定的基礎(chǔ)鏡像）
- s2i將源碼拉取到容器中的/tmp/src目錄下舍咖，然后讀取s2i的配置信息進(jìn)行源碼編譯及安裝配置
- s2i將編譯好的容器提交成新的鏡像
s2i配置文件信息
主要包含四個(gè)文件矩父，分別為：
- assemble 用于對(duì)源碼編譯以及安裝配置的腳本
- run 啟動(dòng)應(yīng)用鏡像時(shí)執(zhí)行的腳本
- save-artifacts 用于保存一些編譯中復(fù)用的內(nèi)容，這樣下次編譯可以直接使用這些文件排霉，從而加快編譯安裝等速度
- usage 打印生成鏡像的幫助信息
這四個(gè)文件都需要用戶自行定義浙垫，s2i會(huì)通過(guò)三種方式尋找這些文件，分別為：
- 源碼中.s2i/bin下
- --scripts-url 參數(shù)指定的位置
- 鏡像中l(wèi)abel：io.openshift.s2i.scripts-url指定的位置
推薦使用第一種方式郑诺，這樣方便管理和持續(xù)集成夹姥，其他兩種url都支持以下三種形式：
- image://path_to_scripts_dir 在鏡像內(nèi)的絕對(duì)路徑
- file://path_to_scripts_dir 在主機(jī)上的絕對(duì)或者相對(duì)路徑
- http(s)://path_to_scripts_dir 網(wǎng)絡(luò)上的文件
cloudstack在openshift中的部署
由于不同應(yīng)用的配置文件差異很大，所以此處不會(huì)對(duì)配置文件進(jìn)行詳細(xì)解釋辙诞，主要列出主要文件的內(nèi)容辙售。在cloudstack的環(huán)境中中主要包含三臺(tái)cloudstack server和后端的mysql主從數(shù)據(jù)庫(kù)，其中需要用到s2i功能的只有cloudstack的編譯飞涂，由于三個(gè)cs server的差別不大旦部，所以使用同一個(gè)鏡像祈搜，通過(guò)環(huán)境變量的不同來(lái)決定是否為主服務(wù)器。
cloudstack服務(wù)部署
cloudstack基礎(chǔ)鏡像
此處直接列出它的Dockerfile
# cloudstack-base
FROM centos:6.6
# TODO: Put the maintainer name in the image metadata
MAINTAINER bdt <bit_bdt@foxmail.com>
# relate url : https://github.com/openshift/source-to-image/blob/master/docs/builder_image.md#required-image-contents
# TODO: Rename the builder environment variable to inform users about application you provide them
ENV BASE_IMAGE_VERSION 1.4
Run yum -y install wget which && yum -y install epel-release && yum -y update && yum -y upgrade \
&& yum install -y ntp && yum -y install java-1.6.0-openjdk \
&& yum -y install mysql mysql-server && yum -y install git svn rpm-build \
&& yum -y install python-setuptools && yum -y install genisoimage \
&& yum -y install java-1.6.0-openjdk-devel tomcat6 ws-commons-util MySQL-python \
&& yum -y clean all
Run yum -y install selinux-policy libselinux-devel selinux-policy-targeted python-pip && yum -y clean all \
&& pip install --upgrade pip && pip install supervisor \
&& sed -i 's/SELINUX/#SELINUX/g' /etc/selinux/config && echo "SELINUX=disabled" >> /etc/selinux/config
Run wget https://archive.apache.org/dist/tomcat/tomcat-6/v6.0.35/bin/apache-tomcat-6.0.35.tar.gz \
&& tar xzvf apache-tomcat-6.0.35.tar.gz -C /usr/local \
&& rm -rf apache-tomcat-6.0.35.tar.gz
Run wget http://mirror.cc.columbia.edu/pub/software/apache/maven/maven-3/3.0.5/binaries/apache-maven-3.0.5-bin.tar.gz \
&& tar xzf apache-maven-3.0.5-bin.tar.gz -C /usr/local \
&& cd /usr/local && ln -s apache-maven-3.0.5 maven && rm -rf apache-maven-3.0.5-bin.tar.gz
Run pip uninstall -y meld3 && wget https://pypi.python.org/packages/source/m/meld3/meld3-1.0.2.tar.gz && tar -zxf meld3-1.0.2.tar.gz \
&& cd meld3-1.0.2 && python setup.py install && cd - && rm -f meld3-1.0.2.tar.gz && rm -rf meld3-1.0.2
Run yum -y install gcc && yum -y clean all
ADD repository /root/.m2/repository
s2i配置
前邊所述的四個(gè)文件士八，在本文中主要用到是run和assemble容燕，所以此處只列出它們的內(nèi)容
run
主要執(zhí)行start.sh
sh /tmp/src/.s2i/bin/start.sh
其內(nèi)容如下：
for de in $(losetup -a | grep "cloudstack" | awk -F: '{print $1}'); do losetup -d $de; done;
a=$(losetup -a|wc -l)
mknod /dev/loop$a -m666 b 7 $a
let a++
mknod /dev/loop$a -m666 b 7 $a
losetup -f
#losetup -f
#if [ $? -ne 0 ]; then
# mknod $(losetup -a | awk -F: 'BEGIN{a=0} {a++;} END{printf("/dev/loop%d -m666 b 7 %d",a,a)}')
#fi
if [ "$CSM" == "TRUE" ]; then
cloudstack-setup-databases cloud:password@"$MYSQL_MASTER_SERVICE_HOST" --deploy-as=root:password
elif [ "$CSM" == "FALSE" ]; then
cloudstack-setup-databases cloud:password@"$MYSQL_MASTER_SERVICE_HOST"
else
echo "the value of CSM is not legal"
fi
echo_supervisord_conf > /etc/supervisord.conf
echo -e "[program:cloudstack-setup-management]\ncommand=cloudstack-setup-management" >> /etc/supervisord.conf
supervisord --nodaemon
assemble
#!/bin/bash -e
#
# S2I assemble script for the 'cs-base' image.
# The 'assemble' script builds your application source so that it is ready to run.
#
# For more information refer to the documentation:
# https://github.com/openshift/source-to-image/blob/master/docs/builder_image.md
#
# If the 'cs-base' assemble script is executed with the '-h' flag, print the usage.
if [[ "$1" == "-h" ]]; then
exec /usr/libexec/s2i/usage
fi
# Restore artifacts from the previous build (if they exist).
#
if [ "$(ls /tmp/artifacts/ 2>/dev/null)" ]; then
echo "---> Restoring build artifacts..."
mv /tmp/artifacts/. ./
fi
echo "---> Installing cloudstack source code..."
#cp -Rf /tmp/src/. ./
echo "---> Building cloudstack from source with args -p noredist... "
# TODO: Add build steps for your application, eg npm install, bundle install, pip install, etc.
pushd /tmp/src/packaging/centos63/
sh package.sh -p noredist
popd
echo "---> move rpms and clean build data..."
cp -r /tmp/src/dist/rpmbuild/RPMS/x86_64/ /root/x86_64/
rm -rf /tmp/src/dist
rm -rf /root/.m2
echo "---> yum localinstall rpms..."
yum -y localinstall /root/x86_64/cloudstack-common-4.3.0*.rpm /root/x86_64/cloudstack-awsapi-4.3.0*.rpm /root/x86_64/cloudstack-management-4.3.0*.rpm
mysql主從配置
mysql master的配置
其dockerfile如下
# cloudstack-base
FROM centos:6.6
# TODO: Put the maintainer name in the image metadata
MAINTAINER bdt <bit_bdt@foxmail.com>
RUN yum -y update && yum install mysql-server -y && yum clean all -y
RUN chkconfig iptables off
COPY start.sh /usr/share/start.sh
RUN chmod 555 /usr/share/start.sh
EXPOSE 3306
CMD sh /usr/share/start.sh && /usr/bin/mysqld_safe
對(duì)應(yīng)的start.sh內(nèi)容如下：
sed -i "/\[mysqld\]/a server-id=1\nlog-bin=mysql-bin\nbinlog-format='ROW'" /etc/my.cnf
service mysqld start \
&& mysql -e \
"SET PASSWORD = PASSWORD('password'); \
CREATE USER 'root'@'%' IDENTIFIED BY 'password'; \
CREATE USER 'repl'@'%' IDENTIFIED BY 'password'; \
GRANT ALL PRIVILEGES ON *.* TO 'root'@'%' WITH GRANT OPTION; \
GRANT REPLICATION SLAVE ON *.* TO 'repl'@'%' IDENTIFIED BY 'password'; \
flush privileges;"
service mysqld stop
mysql slave的配置
其dockerfile如下
# cloudstack-base
FROM centos:6.6
# TODO: Put the maintainer name in the image metadata
MAINTAINER bdt <bit_bdt@foxmail.com>
RUN yum -y update && yum install mysql-server -y && yum clean all -y
Run chkconfig iptables off
ADD start.sh /usr/share/start.sh
RUN chmod 555 /usr/share/start.sh
EXPOSE 3306
CMD sh /usr/share/start.sh && /usr/bin/mysqld_safe
對(duì)應(yīng)的start.sh如下
sed -i "/\[mysqld\]/a server-id=2\nlog-bin=mysql-bin\nbinlog-format = 'ROW'" /etc/my.cnf
service mysqld start
mysql -e \
"SET PASSWORD = PASSWORD('password'); \
CREATE USER 'root'@'%' IDENTIFIED BY 'password'; \
GRANT ALL PRIVILEGES ON *.* TO 'root'@'%' WITH GRANT OPTION; \
flush privileges;
change master to master_host='$MYSQL_MASTER_SERVICE_HOST',master_user='repl',master_password='password';"
service mysqld stop
openshift中部署cloudstack應(yīng)用
具體的yaml文件此處不再展示，可以訪問gitlab中cloudstack項(xiàng)目自行查看
