Terraform 部署 docker 环境

Terraform 部署 docker 环境

配置开发环境

Terraform 配置语法

Terraform 的配置文件都是以 ​​.tf​​ 为后缀

Terraform 支持两种模式 ​​HCL​​，​​JSON​​

Provider

​​官网文档​​

Terraform 通过 provider 管理基础设施，使用 provider 与云供应厂商和其他类型资源的 API 进行交互；

Resource

示例：

我们本次演示使用服务器本地 docker 环境进行演示​​docker provider docs​​

使用Terraform 运行 nginx容器创建 nginx数据目录

mkdir -p /data/nginx_homeecho 123 > /data/nginx_home/index.html

TF操作步骤：

1.初始化安装Terraform

2.定义nginx 容器的资源tf文件

定义provider（main.tf）

terraform { required_providers { docker = { source = "kreuzwerker/docker" version = "~> 2.13.0" } }}provider "docker" {}

定义docker镜像(nginx.tf)

resource "docker_image" "nginx" { name = "nginx:latest" keep_locally = true //资源销毁后不会删除本地镜像}resource "docker_container" "nginx" { image = docker_image.nginx.name name = "nginx_test" ports { internal = 80 external = 8000 } volumes{ container_path = "/usr/share/nginx/html" host_path = "/data/nginx_home" }}

3.terraform init 初始化

4.terraform plan 预览

root@tf:~/nginx-tf# terraform planTerraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + createTerraform will perform the following actions: # docker_container.nginx will be created + resource "docker_container" "nginx" { + attach = false + bridge = (known after apply) + command = (known after apply) + container_logs = (known after apply) + entrypoint = (known after apply) + env = (known after apply) + exit_code = (known after apply) + gateway = (known after apply) + hostname = (known after apply) + id = (known after apply) + image = "nginx:latest" + init = (known after apply) + ip_address = (known after apply) + ip_prefix_length = (known after apply) + ipc_mode = (known after apply) + log_driver = "json-file" + logs = false + must_run = true + name = "nginx_test" + network_data = (known after apply) + read_only = false + remove_volumes = true + restart = "no" + rm = false + security_opts = (known after apply) + shm_size = (known after apply) + start = true + stdin_open = false + tty = false + healthcheck { + interval = (known after apply) + retries = (known after apply) + start_period = (known after apply) + test = (known after apply) + timeout = (known after apply) } + labels { + label = (known after apply) + value = (known after apply) } + ports { + external = 80 + internal = 80 + ip = "0.0.0.0" + protocol = "tcp" } + volumes { + container_path = "/usr/share/nginx/html" + host_path = "/data/nginx_home" } } # docker_image.nginx will be created + resource "docker_image" "nginx" { + id = (known after apply) + keep_locally = true + latest = (known after apply) + name = "nginx:latest" + output = (known after apply) + repo_digest = (known after apply) }Plan: 2 to add, 0 to change, 0 to destroy.─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────Note: You didn't use the -out option to save this plan, so Terraform can't guarantee to take exactly these actions if you run "terraformapply" now.

5.terraform apply 部署

root@tf:~/nginx-tf# terraform applyTerraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + createTerraform will perform the following actions: # docker_container.nginx will be created + resource "docker_container" "nginx" { + attach = false + bridge = (known after apply) + command = (known after apply) + container_logs = (known after apply) + entrypoint = (known after apply) + env = (known after apply) + exit_code = (known after apply) + gateway = (known after apply) + hostname = (known after apply) + id = (known after apply) + image = "nginx:latest" + init = (known after apply) + ip_address = (known after apply) + ip_prefix_length = (known after apply) + ipc_mode = (known after apply) + log_driver = "json-file" + logs = false + must_run = true + name = "nginx_test" + network_data = (known after apply) + read_only = false + remove_volumes = true + restart = "no" + rm = false + security_opts = (known after apply) + shm_size = (known after apply) + start = true + stdin_open = false + tty = false + healthcheck { + interval = (known after apply) + retries = (known after apply) + start_period = (known after apply) + test = (known after apply) + timeout = (known after apply) } + labels { + label = (known after apply) + value = (known after apply) } + ports { + external = 8000 + internal = 80 + ip = "0.0.0.0" + protocol = "tcp" } + volumes { + container_path = "/usr/share/nginx/html" + host_path = "/data/nginx_home" } } # docker_image.nginx will be created + resource "docker_image" "nginx" { + id = (known after apply) + keep_locally = true + latest = (known after apply) + name = "nginx:latest" + output = (known after apply) + repo_digest = (known after apply) }Plan: 2 to add, 0 to change, 0 to destroy.Do you want to perform these actions? Terraform will perform the actions described above. Only 'yes' will be accepted to approve. Enter a value: yesdocker_image.nginx: Creating...docker_image.nginx: Still creating... [10s elapsed]docker_image.nginx: Still creating... [20s elapsed]docker_image.nginx: Still creating... [30s elapsed]docker_image.nginx: Creation complete after 39s [id=sha256:12766a6745eea133de9fdcd03ff720fa971fdaf21113d4bc72b417c123b15619nginx:latest]docker_container.nginx: Creating...docker_container.nginx: Creation complete after 1s [id=1cb955e261d45f2501521e51c15abee7afd37a909cd4226ba3c4857bf354a175]Apply complete! Resources: 2 added, 0 changed, 0 destroyed.

6.docker ps 验证

root@tf:~/nginx-tf# docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES1cb955e261d4 nginx:latest "/docker-entrypoint.…" About a minute ago Up About a minute 0.0.0.0:80->80/tcp nginx_test

版权声明：本文内容由网络用户投稿，版权归原作者所有，本站不拥有其著作权，亦不承担相应法律责任。如果您发现本站中有涉嫌抄袭或描述失实的内容，请联系我们jiasou666@gmail.com 处理，核实后本网站将在24小时内删除侵权内容。