寮€鍙戣繃绋嬩綔涓哄紑鍙戜汉鍛橈紝鎴戜滑甯屾湜灏藉彲鑳藉皢鎴戜滑鐨勫紑鍙戠幆澧冧笌鎴戜滑鐨勭敓浜х幆澧冪浉鍖归厤锛屼互纭繚鎴戜滑鏋勫缓鐨勫唴瀹瑰湪閮ㄧ讲鏃惰兘澶熸甯稿伐浣溿€傛垜浠繕甯屾湜鑳藉蹇€熷紑鍙戯紝杩欐剰鍛崇潃鎴戜滑甯屾湜蹇€熸瀯寤猴紝鎴戜滑甯屾湜鑳藉浣跨敤璋冭瘯鍣ㄧ瓑寮€鍙戝伐鍏枫€傚鍣ㄦ槸缁勭粐鎴戜滑鐨勫紑鍙戠幆澧冪殑濂芥柟娉曪紝浣嗘垜浠渶瑕佷竴涓纭畾涔夌殑Dockerfile鎵嶈兘涓庢垜浠殑瀹瑰櫒蹇€熶氦浜掋€傚閲忔瀯寤篋ockerfile鏄敤浜庢瀯寤哄鍣ㄦ槧鍍忕殑澹版槑娓呭崟銆傝櫧鐒禗ocker鏋勫缓鍣ㄥ皢姣忎釜姝ラ鐨勭粨鏋滅紦瀛樹负鍥惧儚灞傦紝浣嗙紦瀛樺彲鑳戒細澶辨晥锛屽鑷寸紦瀛樺け鏁堢殑姝ラ浠ュ強鎵€鏈夊悗缁楠ら渶瑕侀噸鏂拌繍琛屽苟閲嶆柊鐢熸垚鐩稿簲鐨勫眰銆傚綋瀵规瀯寤轰笂涓嬫枃涓殑鏂囦欢鐨凜OPY鎴朅DD寮曠敤鍙戠敓鏇存敼鏃讹紝缂撳瓨灏嗗け鏁堛€傚洜姝ゆ瀯寤烘楠ょ殑椤哄簭浼氬鏋勫缓鐨勬€ц兘浜х敓闈炲父澶х殑褰卞搷銆傝鎴戜滑鐪嬩竴涓湪Dockerfile涓瀯寤篘odeJs椤圭洰鐨勭ず渚嬨€傚湪杩欎釜椤圭洰涓紝鍦╬ackage.json鏂囦欢涓寚瀹氫簡涓€浜涗緷璧栭」锛岃繖浜涗緷璧栭」鏄湪杩愯npmci鍛戒护鏃惰幏鍙栫殑銆傛渶绠€鍗曠殑Dockerfile濡備笅鎵€绀猴細FROMnode:ltsENVCI=trueENVPORT=3000WORKDIR/codeCOPY銆?codeRUNnpmciCMD["npm","start"]澶嶅埗浠ｇ爜姣忓綋鏋勫缓涓婁笅鏂囦腑鐨勬枃浠跺彂鐢熸洿鏀规椂锛屾垜浠寜鐓uildingaDockerfilewiththeabovestructure灏嗗鑷寸紦瀛樺湪COPY琛屼笂澶辨晥銆備篃灏辨槸璇达紝濡傛灉闄や簡package.json鏂囦欢浠ュ鐨勮€楁椂杈冮暱鐨勬枃浠跺彂鐢熷彉鍖栵紝鍒欓渶瑕侀噸鏂拌幏鍙栦緷璧栵紝骞跺皢鍏舵斁鍦╪ode_modules鐩綍涓嬨€備负閬垮厤杩欑鍙戦€佸苟浠呭湪渚濊禆椤规洿鏀规椂閲嶆柊鑾峰彇渚濊禆椤癸紙鍗冲綋package.json鎴杙ackage-lock.json鏇存敼鏃讹級锛屾垜浠簲璇ヨ€冭檻灏嗕緷璧栭」瀹夎涓庢瀯寤哄拰杩愯搴旂敤绋嬪簭鍒嗗紑銆備紭鍖栧悗鐨凞ockerfile濡備笅锛欶ROMnode:ltsENVCI=trueENVPORT=3000WORKDIR/codeCOPYpackage.jsonpackage-lock.json/code/RUNnpmciCOPYsrc/code/srcCMD["npm","start"]鏈変簡杩欎釜鍒嗙锛屽鏋減ackage.json鎴杙ackage-lock.json鏂囦欢娌℃湁鏀瑰彉锛岀紦瀛樺皢鐢ㄤ簬鐢盧UNnpmci鍛戒护鐢熸垚鐨勮繖涓€灞傘€傝繖鎰忓懗鐫€褰撴垜浠紪杈戝簲鐢ㄧ▼搴忔簮浠ｇ爜骞堕噸鏂版瀯寤烘椂锛屼笉闇€瑕侀噸鏂颁笅杞戒緷璧栭」锛屼粠鑰岃妭鐪佷簡澶ч噺鏃堕棿馃帀銆備繚鎸佷富鏈哄拰瀹瑰櫒涔嬮棿鐨勫疄鏃跺姞杞借繖涓妧宸т笌Dockerfile娌℃湁鐩存帴鍏崇郴锛屼絾鎴戜滑缁忓父鍚埌杩欐牱鐨勯棶棰橈細鍦ㄥ鍣ㄤ腑杩愯搴旂敤绋嬪簭骞朵粠涓绘満涓婄殑IDE淇敼婧愪唬鐮佹椂濡備綍淇濇寔浠ｇ爜鐑紵鍦ㄦ垜浠繖閲岀殑渚嬪瓙涓紝鎴戜滑闇€瑕佸皢鎴戜滑鐨勯」鐩洰褰曟寕杞藉埌瀹瑰櫒涓紝骞朵紶閫掍竴涓幆澧冨彉閲忔潵鍚敤Chokidar锛屽畠灏佽浜哊odeJS鏂囦欢鏇存敼浜嬩欢銆傝繍琛屽懡浠ゅ涓嬶細$dockerrun-eCHOKIDAR_USEPOLLING=true-v${PWD}/src/:/code/src/-p3000:3000repository/image_namecopycode杩欓噷鎴戜滑浣跨敤-v鏉ュ鍒朵笂闈㈢殑浠ｇ爜灏嗗涓绘満鐩綍鎸傝浇鍒板鍣ㄤ腑锛屽綋瀹夸富鏈轰笂鐨勪唬鐮佹湁浠讳綍鍙樺寲鏃讹紝浼氬湪瀹瑰櫒涓疄鏃跺姞杞藉拰鏇存柊銆傛瀯寤轰竴鑷存€у叧浜嶥ockerfile鏈€閲嶈鐨勪簨鎯呬箣涓€鏄粠鐩稿悓鐨勬瀯寤轰笂涓嬫枃锛堟簮銆佷緷璧栭」鈥︹€︼級鏋勫缓瀹屽叏鐩稿悓鐨勫浘鍍忋€傝繖閲屾垜浠户缁畬鍠勪笂涓€鑺傚畾涔夌殑Dockerfile銆備粠婧愭瀯寤轰竴鑷村涓婁竴鑺傛墍杩帮紝鎴戜滑鍙互閫氳繃灏嗘簮鏂囦欢鍜屼緷璧栭」娣诲姞鍒癉ockerfile鎻忚堪骞跺湪鍏朵笂杩愯鍛戒护鏉ユ瀯寤哄簲鐢ㄧ▼搴忋€備絾鏄湪鍓嶉潰鐨勪緥瀛愪腑锛屽叾瀹炴垜浠瘡娆¤繍琛宒ockerbuild閮芥棤娉曠‘璁ょ敓鎴愮殑闀滃儚鏄惁鐩稿悓锛屼负浠€涔堝憿锛熷洜涓哄湪姣忔NodeJS鍙戝竷涔嬪悗锛宭ts鏍囩鎸囧悜鏈€鏂扮殑LTS鐗堟湰鐨凬odeJS闀滃儚锛屽畠浼氶殢鐫€鏃堕棿鐨勬帹绉昏€屽彉鍖栵紝骞朵笖鍙兘浼氬紩鍏ョ牬鍧忔€х殑鍙樺寲銆傛墍浠ユ垜浠彲浠ラ€氳繃涓哄熀纭€鍥惧儚浣跨敤涓€涓槑纭殑鏍囩鏉ヨ交鏉捐В鍐宠繖涓棶棰樸€傚涓嬶細FROMnode:13.12.0ENVCI=trueENVPORT=3000WORKDIR/codeCOPYpackage.jsonpackage-lock.json/code/RUNnpmciCOPYsrc/code/srcCMD["npm","start"]澶嶅埗鎴戜滑涓嬮潰鐨勪唬鐮佹偍杩樹細鐪嬪埌浣跨敤鐗瑰畾浜庢爣绛剧殑鍩烘湰鍥惧儚杩樻湁鍏朵粬浼樺娍銆傚闃舵鍜屽尮閰嶆纭殑鐜鎴戜滑鏈変竴鑷寸殑寮€鍙戞瀯寤猴紝浣嗘垜浠浣曞湪鐢熶骇涓仛鍒拌繖涓€鐐癸紵浠嶥ocker17.05寮€濮嬶紝鎴戜滑鍙互浣跨敤澶氶樁娈垫瀯寤烘潵瀹氫箟鐢熸垚鏈€缁堥暅鍍忕殑姝ラ銆傚埄鐢―ockerfile涓殑杩欑鏈哄埗锛屾垜浠彲浠ュ皢寮€鍙戣繃绋嬩娇鐢ㄧ殑闀滃儚鍜岀敓浜х幆澧冧娇鐢ㄧ殑闀滃儚鍒嗗紑锛屽涓嬶細FROMnode:13.12.0ASdevelopmentENVCI=trueENVPORT=3000WORKDIR/codeCOPYpackage.jsonpackage-lock.json/code/RUNnpmciCOPYsrc/code/srcCMD["npm","start"]FROMdevelopmentASbuilderRUNnpmrunbuildFROMnginx:1.17.9ASproductionCOPY鈥揻rom=builder/code/build/usr/share/澶嶅埗浠ｇ爜nginx/html澶嶅埗浠ｇ爜褰撴垜浠湅鍒癋ROM...AS杩欐牱鐨勬寚浠ゆ椂锛屾垜浠彲浠ョ煡閬撴湁澶氫釜鏋勫缓闃舵銆傛垜浠幇鍦ㄦ湁寮€鍙戙€佹瀯寤哄拰鐢熶骇鐨?涓樁娈点€傛垜浠彲浠ラ€氳繃浣跨敤--target鏍囧織涓虹壒瀹氬紑鍙戦樁娈垫瀯寤哄浘鍍忔潵缁х画灏嗗鍣ㄧ敤浜庢垜浠殑寮€鍙戠閬撱€?dockerbuild鈥搕argetdevelopment-trepository/image_name:development銆傚鍒朵唬鐮佷篃鍙互杩欐牱杩愯锛?dockerrun-eCHOKIDAR_USEPOLLING=true-v${PWD}/src/:/code/src/repository/image_name:development澶嶅埗浠ｇ爜娌℃湁--target鏍囧織鐨刣ocker鏋勫缓灏嗘瀯寤烘渶鍚庨樁娈碉紝鍦ㄦ垜浠殑渚嬪瓙涓槸鐢熶骇鍥惧儚銆傛垜浠殑鐢熶骇闀滃儚鍙槸涓€涓猲ginx闀滃儚锛屽叾涓寘鍚湪鍓嶉潰鐨勬楠や腑鏋勫缓鐨勬枃浠躲€傜敓浜у噯澶囦繚鎸佺敓浜х幆澧冪殑褰㈣薄灏藉彲鑳界簿绠€鍜屽畨鍏ㄦ槸闈炲父閲嶈鐨勩€傚湪鐢熶骇鐜涓繍琛屽鍣ㄤ箣鍓嶏紝闇€瑕佹鏌ヤ竴浜涗簨椤广€備笉鍐嶆湁鏈€鏂扮殑鍥惧儚鐗堟湰姝ｅ鎴戜滑涔嬪墠鎵€璇达紝浣跨敤鐗瑰畾鏍囪鐨勬瀯寤烘楠ゆ湁鍔╀簬浣垮浘鍍忕敓鎴愮嫭涓€鏃犱簩銆傝嚦灏戣繕鏈変袱涓緢濂界殑鐞嗙敱涓洪暅鍍忎娇鐢ㄧ壒瀹氭爣绛撅細寰堝鏄撴壘鍒板湪瀹瑰櫒缂栨帓绯荤粺锛圫warm銆並ubernetes绛夛級涓繍琛屾煇涓暅鍍忕増鏈殑鎵€鏈夊鍣ㄣ€備娇鐢ㄦ垜浠殑repository/image_name:developmentimage$dockerinspect$(dockerps-q)|鍦―ocker寮曟搸瀹瑰櫒涓悳绱q-c'.[]|閫夋嫨(.Config.Image=="repository/image_name:development")|"(.Id)(.State)(.Config)"'"89bf376620b0da039715988fba42e78d42c239446d8cfd79e4fbc9fbcc4fd897{\"鐘舵€乗":\"姝ｅ湪杩愯\",\"姝ｅ湪杩愯\":true,\"Paused\":false,\"Restarting\":false,\"OOMKilled\":false,\"Dead\":false,\"Pid\":25463,\"ExitCode\":0,\"閿欒\":\"\",\"StartedAt\":\"2020-04-20T09:38:31.600777983Z\",\"FinishedAt\":\"0001-01-01T00:00:00Z\"}{\"涓绘満鍚峔":\"89bf376620b0\",\"鍩熷悕\":\"\",\"鐢ㄦ埛\":\"\",\"AttachStdin\":false,\"AttachStdout\":true,\"AttachStderr\":true,\"ExposedPorts\":{\"3000/tcp\":{}},\"Tty\":false,\"OpenStdin\":false,\"StdinOnce\":false,\"Env\":[\"CHOKIDAR_USEPOLLING=true\",\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\",\"NODE_VERSION=12.16.2\",\"YARN_VERSION=1.22.4\",\"CI=true\",\"PORT=3000\"],\"Cmd\":[\"npm\",\"start\"],\"Image\":\"repository/image_name:development\",\"Volumes\":null,\"WorkingDir\":\"/code\",\"Entrypoint\":[\"docker-entrypoint.sh\"],\"OnBuild\":null,\"Labels\":{}}"鍦ㄤ娇鐢ㄦ垜浠殑瀛樺偍搴?image_name:developmentimage杩愯瀹瑰櫒鐨刱8spod涓悳绱紙浣跨敤jqcli锛?kubectlgetpods鈥揳ll-namespaces-ojson|jq-c'.items[]|select(.spec.containers[].image=="repository/image_name:development")|.metadata'{"creationTimestamp":"2020-04-10T09:41:55Z","generateName":"image_name-78f95d4f8c-","labels":{"com.docker.default-service-type":"","com.docker.deploy-namespace":"docker","com.docker.fry":"image_name","com.docker.image-tag":"development","pod-template-hash":"78f95d4f8c"},"name":"image_name-78f95d4f8c-gmlrz","namespace":"docker","ownerReferences":[{"apiVersion":"apps/v1鈥?"blockOwnerDeletion":true,"controller":true,"kind":"ReplicaSet","name":"image_name-78f95d4f8c","uid":"5ad21a59-e691-4873-a6f0-8dc51563de8d"}],"resourceVersion":"532","selfLink":"/api/v1/namespaces/docker/pods/image_name-78f95d4f8c-gmlrz","uid":"5c70f340-05f1-418f-9a05-84d0abe7009d"}澶嶅埗浠ｇ爜瀵逛簬CVE锛圕ommonVulnerabilitiesandExposures锛夛紝鎴戜滑鍙互蹇€熺煡閬撳鍣ㄥ拰闀滃儚鏄惁闇€瑕佹墦琛ヤ竵鍦ㄦ垜浠繖閲岀殑渚嬪瓙涓紝鎴戜滑鍙互鎸囧畾鎴戜滑鐨勫紑鍙戝拰鐢熶骇闀滃儚浣跨敤alpine鐗堟湰銆侳ROM鑺傜偣锛?3.12.0-alpineASdevelopmentENVCI=trueENVPORT=3000WORKDIR/codeCOPYpackage.jsonpackage-lock.json/code/RUNnpmciCOPYsrc/code/srcCMD["npm","start"]FROMdevelopmentASbuilderRUNnpmrunbuildFROMnginx:1.17.9-alpineCOPY--from=builder/code/build/usr/share/nginx/html澶嶅埗浠ｇ爜浣跨敤瀹樻柟闀滃儚鍙互浣跨敤DockerHub鎼滅储Dockerfile涓娇鐢ㄧ殑鍩虹闀滃儚锛屼竴浜涘畠浠槸瀹樻柟鏀寔鐨勯暅鍍忋€傛垜浠己鐑堝缓璁娇鐢ㄨ繖浜涢暅鍍忥細瀹冧滑鐨勫唴瀹瑰凡缁忚繃楠岃瘉銆備慨澶岰VE鍚庯紝浠栦滑浼氬揩閫熸洿鏂癉ockerHub涓殑瀹樻柟nginx闀滃儚銆傚彲浠ユ坊鍔爄mage_filter璇锋眰鏌ヨ鍙傛暟鑾峰彇瀹樻柟鐗堟湰鐨勯暅鍍忥細https://hub.docker銆俢om/search...澶嶅埗浠ｇ爜鎴戜滑涓婇潰浣跨敤鐨勪緥瀛愰兘鏄娇鐢∟odeJS鍜孨GINX鐨勫畼鏂归暅鍍忋€傝冻澶熺殑鏉冮檺锛佹墍鏈夊簲鐢ㄧ▼搴忥紝鏃犺鏄惁鍦ㄥ鍣ㄤ腑杩愯锛岄兘搴旈伒瀹堟渶灏忔潈闄愬師鍒欙紝杩欐剰鍛崇潃搴旂敤绋嬪簭搴旇鍙兘璁块棶瀹冮渶瑕佺殑璧勬簮銆傚鏋滃嚭鐜版伓鎰忚涓烘垨閿欒锛屼互杩囧鏉冮檺杩愯鐨勮繘绋嬪彲鑳戒細鍦ㄨ繍琛屾椂瀵规暣涓郴缁熶骇鐢熸剰鎯充笉鍒扮殑鍚庢灉銆傚皢鍥惧儚鏈韩閰嶇疆涓洪潪鐗规潈鐢ㄦ埛涔熼潪甯哥畝鍗曪細FROMmaven:3.6.3-jdk-11ASbuilderWORKDIR/workdir/serverCOPYpom.xml/workdir/server/pom.xmlRUNmvndependency:go-offlineRUNmvnpackageFROMopenjdk:11-jre-slimRUNaddgroup-Sjava&&adduser-Sjavauser-GjavaUSERjavauserEXPOSE8080COPY鈥揻rom=builder/workdir/server/target/project-0.0.1-SNAPSHOT.jar/project-0.0.1-SNAPSHOT.jarCMD["java","-Djava.security.egd=file:/dev/./urandom","-jar","/project-0.0.1-SNAPSHOT.jar"]澶嶅埗浠ｇ爜鍙渶鍒涘缓涓€涓柊鐨勭粍锛屽悜鍏朵腑娣诲姞涓€涓敤鎴凤紝鐒跺悗浣跨敤USER鎸囦护锛岃繖鏍锋垜浠氨鍙互浠ラ潪root鐢ㄦ埛韬唤杩愯瀹瑰櫒銆?/p>
