花里胡哨的东西（一）：IDEA集成Docker，通过CA认证方式安全链接到Docker,实现一键部署

2023-10-04 16:27:16

一、Docker开启远程访问

1、修改配置

打开配置文件

vim /lib/systemd/system/docker.service

然后将

ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock

修改为

ExecStart=/usr/bin/dockerd -H tcp://0.0.0.0:2375 -H unix:///var/run/docker.sock

2、修改保存后，重启Docker服务

#更新配置
systemctl daemon-reload 
#重启docker
systemctl restart docker.service

3、开放2375端口

firewall-cmd --zone=public --add-port=2375/tcp --permanent

重启防火墙

firewall-cmd --reload

4、测试

curl 127.0.0.1:2375/version

二、IDEA配置

三、IDEA项目配置

1、项目目录里新建docker文件夹

2、编写Dockerfile文件（构建镜像的核心文件）

FROM java:8
VOLUME /tmp
ADD travel-0.0.1-SNAPSHOT.jar /app.jar
RUN sh -c 'touch /app.jar'
ENV JAVA_OPTS=""
ENTRYPOINT [ "sh", "-c", "java $JAVA_OPTS -Djava.security.egd=file:/dev/./urandom -jar /app.jar" ]

3、pom.xm文件配置（我的项目为 springboot项目）

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
    <parent>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-parent</artifactId>
        <version>2.5.4</version>
        <relativePath/> <!-- lookup parent from repository -->
    </parent>
    <groupId>com.ice</groupId>
    <artifactId>travel</artifactId>
    <version>0.0.1-SNAPSHOT</version>
    <name>travel</name>
    <description>Demo project for Spring Boot</description>
    <properties>
        <java.version>1.8</java.version>
        <!--docker镜像文件的端口-->
        <docker.image.port>8050</docker.image.port>
    </properties>
    <dependencies>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-web</artifactId>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-test</artifactId>
            <scope>test</scope>
        </dependency>
    </dependencies>

    <build>
        <plugins>
            <plugin>
                <groupId>com.spotify</groupId>
                <artifactId>docker-maven-plugin</artifactId>
                <version>1.0.0</version>

                <configuration>
                    <!--远程Docker的地址-->
                    <dockerHost>http://110.42.174.240:2375</dockerHost>
                    <!--镜像名称，前缀/项目名-->
                    <!--${docker.image.prefix}/-->
                    <!--pem -->
                    <dockerCertPath>C:\ca</dockerCertPath>
                    <imageName>${project.artifactId}-${docker.image.port}</imageName>
                    <dockerDirectory>src/main/docker</dockerDirectory>
                    <resources>
                        <resource>
                            <targetPath>/</targetPath>
                            <directory>${project.build.directory}</directory>
                            <include>${project.build.finalName}.jar</include>
                        </resource>
                    </resources>
                </configuration>
            </plugin>
        </plugins>
    </build>
</project>