创建docker容器

docker run -it --name=yh -h yh --net=none debian:sshd bash ### 确保使用--net=none参数,此时新建的容器内不会创建网卡

docker ps

此时登录容器查看IP,会发现没有eth0网卡:


root@yh:/# ifconfig -a
lo Link encap:Local Loopback 
 inet addr:127.0.0.1 Mask:255.0.0.0
 inet6 addr: ::1/128 Scope:Host
 UP LOOPBACK RUNNING MTU:65536 Metric:1
 RX packets:0 errors:0 dropped:0 overruns:0 frame:0
 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
 collisions:0 txqueuelen:0 
 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

CentOS6.6升级iproute

宿主机是CentOS6.6,为了支持ip netns命令,需要进行升级:

rpm -ivh www.elrepo.org/elrepo-rele…

yum --enablerepo=elrepo-kernel install kernel-lt -y ### 升级内核

vi /etc/grub.conf ### 修改default=0,默认启动新内核

reboot ### 重启使新内核生效

uname -r ### 查看内核版本号是否是新的

yum install -y rdo.fedorapeople.org/rdo-release… ### 更新rdo仓库
vim /etc/yum.repos.d/rdo-release.repo ### 修改文件内容为如下

[openstack-juno]
name=OpenStack Juno Repository
baseurl=repos.fedorapeople.org/repos/opens…enabled=1
skip_if_unavailable=0
gpgcheck=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-RDO-Juno

yum --enablerepo=openstack-juno install iproute ### 更新iproute
rpm -q iproute


设置静态IP

新建一个修改静态IP的脚本modify_docker_ip.sh,内容如下:


#/bin/bashif [ -z $1 ] || [ -z $2 ] || [ -z $3 ] || [ -z $4 ] || [ -z $5 ];then
	echo "Usage: $0 CONTAINERID/CONTAINER_NAME IP MASK GATEWAY ETHNAME"
        echo "       Call the script like: sh manual_con_static_ip.sh  b0e18b6a4432 192.168.5.123 24 192.168.5.1 deth0"
        echo "       Call the script like: sh manual_con_static_ip.sh  my_container 192.168.5.123 24 192.168.5.1 deth0"
        exitfi
  CONTAINERID_NAME=$1SETIP=$2SETMASK=$3GATEWAY=$4ETHNAME=$5
 #判断宿主机网卡是否存在ifconfig $ETHNAME > /dev/null 2>&1if [ $? -eq 0 ]; then
    read -p "$ETHNAME exist,do you want delelte it? y/n " del    if [[ $del == 'y' ]]; then
    ip link del $ETHNAME
    else
    exit
    fifi#pid=`docker inspect -f '{{.State.Pid}}' $CONTAINERID_NAME`echo pid=$pidmkdir -p /var/run/netns
find -L /var/run/netns -type l -delete 
if [ -f /var/run/netns/$pid ]; then
    rm -f /var/run/netns/$pidfiln -s /proc/$pid/ns/net /var/run/netns/$pid#ip link add $ETHNAME type veth peer name B
brctl addif docker0 $ETHNAMEip link set $ETHNAME up
ip link set B netns $pid#先删除容器内已存在的eth0ip netns exec $pid ip link del eth0 > /dev/null 2>&1#设置容器新的网卡eth0ip netns exec $pid ip link set dev B name eth0
ip netns exec $pid ip link set eth0 up
ip netns exec $pid ip addr add $SETIP/$SETMASK dev eth0
ip netns exec $pid ip route add default via $GATEWAY复制代码


在宿主机上执行如下命令为容器创建网卡,并分配静态IP:

./modify_docker_ip.sh 8feff00a0a26 172.17.0.2 16 172.17.42.1 deth0

其中:8feff00a0a26 是容器ID,172.17.0.2是容器的静态IP,16是掩码,172.17.42.1是容器的网关地址(即运行容器的系统中docker0的IP),deth0为新建的宿主机网卡名(对应容器内的eth0)

此时查看宿主机IP:

[root@node0003 ~]# ifconfig
deth0 Link encap:Ethernet HWaddr DA:19:96:9B:1B:E5
inet6 addr: fe80::d819:96ff:fe9b:1be5/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:6 errors:0 dropped:0 overruns:0 frame:0
TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:468 (468.0 b) TX bytes:468 (468.0 b)

docker0 Link encap:Ethernet HWaddr 56:84:7A:FE:97:99
inet addr:172.17.42.1 Bcast:0.0.0.0 Mask:255.255.0.0
inet6 addr: fe80::5484:7aff:fefe:9799/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:12 errors:0 dropped:0 overruns:0 frame:0
TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:768 (768.0 b) TX bytes:468 (468.0 b)

在容器内查看IP:

root@yh:/# ifconfig -a
eth0 Link encap:Ethernet HWaddr 22:e1:72:17:b6:dd
inet addr:172.17.0.2 Bcast:0.0.0.0 Mask:255.255.0.0
inet6 addr: fe80::20e1:72ff:fe17:b6dd/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:3 errors:0 dropped:0 overruns:0 frame:0
TX packets:3 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:238 (238.0 B) TX bytes:238 (238.0 B)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)


附录:

Docker关于网络这块的文档详见:docs.docker.com/articles/ne…

另外一个工具pipework也可以设置静态IP:github.com/jpetazzo/pi…


遗留问题:

问题:docker容器重启之后,eth0消失,IP失效。

描述:docker文档中描述:容器stop的时候,docker自动清理网卡配置,所以重启之后容器内的eth0消失,静态IP也就失效了。

解决方法:1. run一个docker容器之后,再次执行文中的脚本或者pipework重新设置IP即可。 2. 可能还有更好的办法,待研究。


网易云容器服务为用户提供了无服务器容器,让企业能够快速部署业务,轻松运维服务。容器服务支持弹性伸缩、垂直扩容、灰度升级、服务发现、服务编排、错误恢复及性能监测等功能。