docker之docker-machine用法详解（docker简书）

docker-machine 是docker官方提供的docker管理工具。

通过docker-machine可以轻松的做到：

在Windows平台和MAC平台安装和运行docker

搭建和管理多个docker 主机

搭建swarm集群

环境win下面安装的virtualbox，virtualbox安装的centos7，网络模式NAT+hostonly

ip：192.168.56.102（hostonly）

1、安装docker-machine：

curl -L https://github.com/docker/machine/releases/download/v0.13.0/docker-machine-`uname -s`-`uname -m` >/tmp/docker-machine && chmod +x /tmp/docker-machine && sudo cp /tmp/docker-machine /usr/local/bin/docker-machine

2、查看docker-machine版本：

# docker-machine version [root@docker ~]# docker-machine version docker-machine version 0.13.0, build 9ba6da9

3、在centos7环境下创建machine：

[root@localhost ~]# docker-machine create -d virtualbox default Creating CA: /root/.docker/machine/certs/ca.pem Creating client certificate: /root/.docker/machine/certs/cert.pem Running pre-create checks... Error with pre-create check: "VBoxManage not found. Make sure VirtualBox is installed and VBoxManage is in the path"

但是却报错了，以为virtualbox安装的centos7环境支持的是virtualbox驱动，才发现环境安装支持virtualbox驱动

使用virtualbox驱动需要安装virtualbox，而Ubuntu的解决方法为：

于是采用generic驱动，具体介绍查看官网：https://docs.docker.com/machine/drivers/generic/

[root@localhost ~]# docker-machine create -d generic --generic-ip-address=192.168.56.102 --generic-ssh-key ~/.ssh/id_rsa --

generic-ssh-user=root vm Running pre-create checks... Creating machine... (vm) Importing SSH key... Waiting for machine to be running, this may take a few minutes... Detecting operating system of created instance... Waiting for SSH to be available... Error creating machine: Error detecting OS: Too many retries waiting for SSH to be available. Last error: Maximum number of retries (60) exceeded 　　--generic-ip-address=192.168.56.102：这里的ip是指本机，如果需要为其他远程docker主机安装可以改为其他docker主机ip（这里是本地创建docker-machine）

依然报错，这是由于docker-machine为本机创建machine时也需要进行ssh认证：

[root@localhost ~]# ssh-keygen [root@localhost ~]# ssh-copy-id root@192.168.56.102

将密码发给自己，然后重新继续创建machine：

[root@localhost ~]# docker-machine create -d generic --generic-ip-address=192.168.56.102 --generic-ssh-key ~/.ssh/id_rsa --generic-ssh-user=root vm Running pre-create checks... Creating machine... (vm) Importing SSH key... Waiting for machine to be running, this may take a few minutes... Detecting operating system of created instance... Waiting for SSH to be available... Detecting the provisioner... Provisioning with centos... Copying certs to the local machine directory... Copying certs to the remote machine... Setting Docker configuration on the remote daemon... Checking connection to Docker... Docker is up and running! To see how to connect your Docker Client to the Docker Engine running on this virtual machine, run: docker-machine env vm

于是终于创建machine成功了

查看docker-machine：

[root@localhost ~]# docker-machine ls NAME ACTIVE DRIVER STATE URL SWARM DOCKER ERRORS vm - generic Running tcp://192.168.56.102:2376 v17.09.0-ce

查看vm的环境变量：

[root@localhost ~]# docker-machine env vm export DOCKER_TLS_VERIFY="1" export DOCKER_HOST="tcp://192.168.56.102:2376" export DOCKER_CERT_PATH="/root/.docker/machine/machines/vm" export DOCKER_MACHINE_NAME="vm" # Run this command to configure your shell: # eval $(docker-machine env vm)

加载环境变量：

[root@localhost ~]# eval $(docker-machine env vm)

利用ssh登录到machine中：

[root@localhost ~]# docker-machine ssh --help Usage: docker-machine ssh [arg...] Log into or run a command on a machine with SSH. Description: Arguments are [machine-name] [command] [root@localhost ~]# docker-machine ssh vm Last login: Sat Nov 4 17:55:53 2017 from 192.168.56.102 [root@vm ~]#

现在在本地环境创建一个容器启动：

[root@localhost ~]# docker run -d --name=nginx nginx [root@localhost ~]# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 6e62975fab90 nginx "nginx -g 'daemon ..." About a minute ago Up 59 seconds 80/tcp nginx

然后ssh远程到docker-machine中：

[root@localhost ~]# docker-machine ssh vm Last login: Sat Nov 4 18:13:27 2017 from 192.168.56.102 [root@vm ~]# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 6e62975fab90 nginx "nginx -g 'daemon ..." About a minute ago Up About a minute 80/tcp nginx

可以看见docker主机和docker-machine主机里面的容器id相同

利用docker-machine能够安装docker和创建容器

上面是本地为自己创建machine，现在为远程的docker主机创建docker-machine： 环境：centos7，192.168.101.14，vmware下面安装的docker以及docker-machine，为192.168.56.102这台docker主机创建machine： （两个ip不同进行了转发所以可以访问（前面是vm下面的nat的静态ip，后面是virtualbox的两张网卡（nat和host only）））

1、首先将192.168.101.14和主机192.168.56.102进行ssh连接认证：

[root@docker ~]# ssh-keygen [root@docker ~]# ssh-copy-id root@192.168.56.102

2、创建machine：

[root@docker ~]# docker-machine create -d generic --generic-ip-address=192.168.56.102 --generic-ssh-key ~/.ssh/id_rsa --generic-ssh-user=root default Creating CA: /root/.docker/machine/certs/ca.pem Creating client certificate: /root/.docker/machine/certs/cert.pem Running pre-create checks... Creating machine... (default) Importing SSH key... Waiting for machine to be running, this may take a few minutes... Detecting operating system of created instance... Waiting for SSH to be available... Detecting the provisioner... Provisioning with centos... Copying certs to the local machine directory... Copying certs to the remote machine... Setting Docker configuration on the remote daemon... Checking connection to Docker... Docker is up and running! To see how to connect your Docker Client to the Docker Engine running on this virtual machine, run: docker-machine env default

执行环境变量，进入到machine环境：

[root@docker ~]# docker-machine env default [root@docker ~]# eval $(docker-machine env default)

3、查看创建的machine：

[root@docker ~]# docker-machine ls NAME ACTIVE DRIVER STATE URL SWARM DOCKER ERRORS default - generic Running tcp://192.168.56.102:2376 v17.09.0-ce

可以看见在192.168.101.14环境上为远程主机192.168.56.102创建的machine

4、创建容器：

[root@docker ~]# docker run -d --name=nginx nginx（本地没有nginx镜像） b1f08986f6d5dbb1ede699e915bde734bab278fbe70f93af06ec2267fae2fef3 [root@docker ~]# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES b1f08986f6d5 nginx "nginx -g 'daemon ..." 4 seconds ago Up 3 seconds 80/tcp nginx 5、ssh到machine： [root@docker ~]# docker-machine ssh default Last login: Sat Nov 4 18:51:49 2017 from 192.168.56.1 [root@default ~]# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES b1f08986f6d5 nginx "nginx -g 'daemon ..." 23 seconds ago Up 22 seconds 80/tcp nginx

现在查看远程主机是否创建了容器：

[root@localhost ~]# docker ps -a could not read CA certificate "/root/.docker/machine/machines/default/ca.pem": open /root/.docker/machine/machines/default/ca.pem: no such file or directory

报错原因：

由于刚刚在192.168.56.102为自己设置了machine，保留了之前machine的环境变量，虽然现在删除了，但是设置了环境变量，将刚刚设置的环境变量取消：

[root@localhost ~]# unset DOCKER_TLS_VERIFY [root@localhost ~]# unset DOCKER_CERT_PATH [root@localhost ~]# unset DOCKER_MACHINE_NAME [root@localhost ~]# unset DOCKER_HOST

然后重新查看：

[root@localhost ~]# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES b1f08986f6d5 nginx "nginx -g 'daemon ..." 8 minutes ago Up 8 minutes 80/tcp nginx

可以发现，为远程主机创建容器成功

现在192.168.101.14上面存在镜像centos_nginx:v4，而远程主机192.168.56.102没有该镜像，现在创建容器，看是否远程主机能够创建成功？

[root@docker ~]# docker pull registry.cn-hangzhou.aliyuncs.com/wadeson/jsonhc:v4 [root@docker ~]# docker images REPOSITORY TAG IMAGE ID CREATED SIZE nginx latest b72d63324dbb 13 hours ago 108MB registry.cn-hangzhou.aliyuncs.com/wadeson/jsonhc v4 6c5128aaff05 2 days ago 464MB

然后在远程主机查看：

[root@localhost ~]# docker images REPOSITORY TAG IMAGE ID CREATED SIZE nginx latest b72d63324dbb 13 hours ago 108MB registry.cn-hangzhou.aliyuncs.com/wadeson/jsonhc v4 6c5128aaff05 2 days ago 464MB

可以看见两主机的镜像同步，也是容器也是同步的

vm下面的docker可以为virtualbox下面的docker创建容器 而更多的是本地可以为云等其他环境创建容器，通过docker-machine

在这之前192.168.101.14的images都不见了，那是因为设置machine环境变量：

unset DOCKER_TLS_VERIFY unset DOCKER_CERT_PATH unset DOCKER_MACHINE_NAME unset DOCKER_HOST

执行上面将machine的环境变量取消就可以返回原来的环境了：

[root@docker ~]# docker images REPOSITORY TAG IMAGE ID CREATED SIZE centos_init v1 383ff3502443 26 hours ago 448MB centos_nginx v8 6f792dc07c35 2 days ago 464MB centos_nginx v7 9e875385d6be 2 days ago 464MB centos_nginx v6 959fdf4d4288 2 days ago 464MB centos_nginx v5 5c1131306686 2 days ago 464MB registry.cn-hangzhou.aliyuncs.com/wadeson/jsonhc v4 6c5128aaff05 2 days ago 464MB 192.168.101.14:5000/centos_nginx v4 6c5128aaff05 2 days ago 464MB centos_nginx v4 6c5128aaff05 2 days ago 464MB centos_nginx v3 0e49a2c0562f 2 days ago 464MB centos_nginx v2 2031faf8894a 2 days ago 464MB centos_nginx v1 78d18f16e757 3 days ago 464MB registry latest 2ba7189700c8 9 days ago 33.3MB ubuntu latest 747cb2d60bbe 3 weeks ago 122MB centos latest 196e0ce0c9fb 7 weeks ago 197MB

而如果需要返回machine环境就继续执行machine环境变量就行，这种方式很好的隔离了本地和远程镜像和容器