在使用docker的時(shí)候,經(jīng)常需要借助一些基礎(chǔ)鏡像來(lái)進(jìn)一步二次定制,比如centos鏡像、ubunt鏡像,那么如果要自己定義一個(gè)基礎(chǔ)鏡像應(yīng)該如何做呢,有兩種方法,這兩種方法都是參考網(wǎng)絡(luò)上以及自己實(shí)踐后確實(shí)可用的方法,本例子以麒麟操作系統(tǒng)為例子,推薦方法二
1、創(chuàng)建任意一個(gè)目錄并進(jìn)入此目錄(不可在/root下創(chuàng)建),命令如下:
mkdir -p /opt/kylin && cd /opt/kylini
2、創(chuàng)建基礎(chǔ)目錄,命令如下:
3、copy系統(tǒng)相關(guān)文件到usr路徑下,命令如下:
cp -a /usr/lib /usr/lib64 /usr/bin /usr/share usr/
4、按照當(dāng)前系統(tǒng)來(lái)創(chuàng)建軟鏈,命令如下:
ln -s usr/lib lib
ln -s usr/lib64 lib64
ln -s usr/bin bin
6、刪除一些非必要腳本,否則執(zhí)行chroot .會(huì)提示Error: /proc must be mounted,如下:
rm -rf etc/profile.d/flatpak.sh etc/profile.d/gawk.csh etc/profile.d/gawk.sh etc/profile.d/lang.csh etc/profile.d/lang.sh etc/profile.d/system-info.sh
7、全部操作完成后文件目錄結(jié)構(gòu)如圖所示:
8、執(zhí)行chroot . 命令,測(cè)試鏡像目錄是否有問(wèn)題,已進(jìn)入容器,如圖:
cd ..
tar -C kylin/ -zc . -f kylin-docker.tar.gz 或者tar -zcvf kylin-docker.tar.gz -C kylin/ .
10、編寫(xiě)Dockerfile文件,定制鏡像,如下:
FROM scratch
ADD kylin-docker.tar.gz /
LABEL \
org.label-schema.schema-version="1.0" \
org.label-schema.name="Kylin Base Image" \
org.label-schema.vendor="Kylin" \
org.label-schema.license="GPLv2" \
org.label-schema.build-date="20230629" \
org.opencontainers.image.title="Kylin v10 Image" \
org.opencontainers.image.vendor="Kylin" \
org.opencontainers.image.licenses="GPL-2.0-only" \
org.opencontainers.image.created="2022-06-29 00:00:00+00:00"
CMD ["/bin/bash"]
docker build -t kylin-v10 .
從上圖可以看出,通過(guò)此方法制作的鏡像偏大
方法二,直接通過(guò)腳本(來(lái)源GitHub并二次修改),推薦此種方法制作#!/usr/bin/env bash
set -e
usage() {
cat << EOOPTS
$(basename $0) [OPTIONS] <name>
OPTIONS:
-p "<packages>" The list of packages to install in the container.
The default is blank. Can use multiple times.
-g "<groups>" The groups of packages to install in the container.
The default is "Core". Can use multiple times.
-y <yumconf> The path to the yum config to install packages from. The
default is /etc/yum.conf for Centos/RHEL and /etc/dnf/dnf.conf for Fedora
-t <tag> Specify Tag information.
default is referred at /etc/{redhat,system}-release
EOOPTS
exit 1
}
yum_config=/etc/yum.conf
if [ -f /etc/dnf/dnf.conf ] && command -v dnf &> /dev/null; then
yum_config=/etc/dnf/dnf.conf
alias yum=dnf
fi
install_groups=()
install_packages=()
version=
while getopts ":y:p:g:t:h" opt; do
case $opt in
y)
yum_config=$OPTARG
;;
h)
usage
;;
p)
install_packages+=("$OPTARG")
;;
g)
install_groups+=("$OPTARG")
;;
t)
version="$OPTARG"
;;
\?)
echo "Invalid option: -$OPTARG"
usage
;;
esac
done
shift $((OPTIND - 1))
name=$1
if [[ -z $name ]]; then
usage
fi
if [ ${#install_groups[*]} -eq 0 ]; then
install_groups=('Core')
fi
target=$(mktemp -d --tmpdir=/root $(basename $0).XXXXXX)
set -x
mkdir -m 755 "$target"/dev
mknod -m 600 "$target"/dev/console c 5 1
mknod -m 600 "$target"/dev/initctl p
mknod -m 666 "$target"/dev/full c 1 7
mknod -m 666 "$target"/dev/null c 1 3
mknod -m 666 "$target"/dev/ptmx c 5 2
mknod -m 666 "$target"/dev/random c 1 8
mknod -m 666 "$target"/dev/tty c 5 0
mknod -m 666 "$target"/dev/tty0 c 4 0
mknod -m 666 "$target"/dev/urandom c 1 9
mknod -m 666 "$target"/dev/zero c 1 5
if [ -d /etc/yum/vars ]; then
mkdir -p -m 755 "$target"/etc/yum
cp -a /etc/yum/vars "$target"/etc/yum/
fi
if [[ -n "$install_groups" ]]; then
yum -c "$yum_config" --installroot="$target" --releasever=/ --setopt=tsflags=nodocs \
--setopt=group_package_types=mandatory -y groupinstall "${install_groups[@]}"
fi
if [[ -n "$install_packages" ]]; then
yum -c "$yum_config" --installroot="$target" --releasever=/ --setopt=tsflags=nodocs \
--setopt=group_package_types=mandatory -y install "${install_packages[@]}"
fi
yum -c "$yum_config" --installroot="$target" -y clean all
cat > "$target"/etc/sysconfig/network << EOF
NETWORKING=yes
HOSTNAME=localhost.localdomain
EOF
rm -rf "$target"/usr/{{lib,share}/locale,{lib,lib64}/gconv,bin/localedef,sbin/build-locale-archive}
rm -rf "$target"/usr/share/{man,doc,info,gnome/help}
rm -rf "$target"/usr/share/cracklib
rm -rf "$target"/usr/share/i18n
rm -rf "$target"/var/cache/yum
mkdir -p --mode=0755 "$target"/var/cache/yum
rm -rf "$target"/sbin/sln
rm -rf "$target"/etc/ld.so.cache "$target"/var/cache/ldconfig
mkdir -p --mode=0755 "$target"/var/cache/ldconfig
if [ -z "$version" ]; then
for file in "$target"/etc/{kylin,system}-release; do
if [ -r "$file" ]; then
version="$(sed 's/^[^0-9\]*\([0-9.]\+\).*$/\1/' "$file")"
break
fi
done
fi
if [ -z "$version" ]; then
echo >&2 "warning: cannot autodetect OS version, using '$name' as tag"
version=$name
fi
tar --numeric-owner -c -C "$target" . | docker import - $name:$version
rm -rf "$target"
注意:第129行需要修改為自己系統(tǒng)的release,可通過(guò)cat /etc/kylin-release命令查看./mkimage-yum.sh -y /etc/yum.conf kylinv10
從上圖可以看出,通過(guò)腳本方式做成的鏡像體積更小一些,如果想體積更小一些,可通過(guò)刪除系統(tǒng)內(nèi)不用的軟件包實(shí)現(xiàn),具體可根據(jù)需求自行實(shí)現(xiàn)
閱讀原文:原文鏈接
該文章在 2025/7/1 23:22:07 編輯過(guò)