Uma ungena ezweni le-virtualization elula, cishe uhlangane neziqondiso eziningi ezibonakala zibhalelwe onjiniyela be-NASA. Iqiniso liwukuthi setha iseva yasekhaya Ukuphatha izinhlelo zokusebenza ku-VPS akudingeki kube yindaba ebuhlungu uma uqonda izisekelo futhi ulandela indlela ecacile, ikakhulukazi uma usebenzisa ama-distros afana ne-Ubuntu noma i-Debian.
UDocker uzele ukusindisa izimpilo zethu ngokuqeda inkinga edumile ye- "Isebenza emshinini wami"Ngokuhlanganisa isevisi ngayinye ngemitapo yolwazi yayo kanye nokuncika kwayo, sifinyelela indawo ehambisanayo futhi sivimbele ukungqubuzana phakathi kwezinhlelo zokusebenza, okusivumela ukuthi sisebenzise konke kusukela kuseva yefayela kuya ohlelweni oluzenzakalelayo lwasekhaya ngaphandle kokwesaba ukuphula uhlelo lokusebenza lwe-host.
Iyini ngempela i-Docker futhi kungani kufanele uyisebenzise?
Ngokuyisisekelo, i-Docker iyipulatifomu ekuvumela ukuthi udale izindawo ezihlukanisiwe ezibizwa ngokuthi izitshaNgokungafani nemishini yendabuko ebonakalayo, edinga uhlelo lokusebenza oluphelele lwesibonelo ngasinye, izitsha zabelana nge-kernel yesistimu yomsingathi. Lokhu kuzenza zibe elula kakhulu futhi kuyashesha ukuqala.
Izinzuzo zicacile: unayo ukusetshenziswa okusheshayo kakhulu Izinsizakalo, ukuhlukaniswa okuphelele okuvimbela ukwehluleka kohlelo lokusebenza olulodwa ukuthi lungathinteki kwezinye, kanye nokuphatheka okumangalisayo. Kungakhathaliseki ukuthi usebenzisa i-Intel NUC ekhaya noma i-VPS enamandla enesitoreji se-NVMe, uhlelo lokusebenza luzoziphatha ngendlela efanayo.
Izinto ezidingekayo kanye nokulungiselela uhlelo
Ukuze konke kuhambe kahle, udinga iseva ye-Linux (yize isebenza naku-Windows naku-Mac usebenzisa Ideskithophu ye-Docker ku-Windows naku-macOSUma usebenzisa indawo efana Ubuntu Server 24.04LTS noma i-Debian, uzoba sendleleni efanele. Ngokuphathelene nehadiwe, nge I-RAM engu-2GB kanye nesikhala sediski esingu-5GB Lokhu kuvame ukwanele ukuqala, inqobo nje uma i-kernel ingu-version 3.10 noma ngaphezulu.
Ngaphambi kokungena ku-Docker, kubalulekile ukuthi uhlelo lwakho luhlanzeke. Uma usemshinini omusha, qiniseka ukuthi unayo i-sudo inikwe amandla ukugwema ukusebenza njengempande njalo, okuwumkhuba omubi wokuphepha. Kunconywa futhi ukubuyekeza wonke amaphakheji esistimu nge sudo apt update && sudo apt upgrade -y ukugwema izingxabano zokuhambisana.
Ukufakwa kwe-Docker Engine ngesinyathelo ngesinyathelo ku-Linux
Ukuze ufake i-Docker ngendlela ethembeke kakhulu, kungcono ukusebenzisa i- indawo esemthethweniOkokuqala, faka ukuncika okudingekayo njengokuthi curl y ca-certificatesOkulandelayo, kufanele wengeze Ukhiye we-Docker GPGLokhu kubalulekile ohlelweni ukuqinisekisa ukuthi isofthiwe oyilandayo iyiqiniso futhi ayiphazanyiswanga ngabantu besithathu.
Uma indawo yokugcina isilungisiwe, qhubeka nokufaka injini nge sudo apt install docker-ce docker-ce-cli containerd.io. Ungakhohlwa vumela isevisi ukuze iqale ngokuzenzakalelayo lapho umshini uqala ukusebenzisa umyalo systemctl enable dockerUma uthanda ukungabhali sudo Isikhathi ngasinye lapho usebenzisa umyalo, ungangeza umsebenzisi wakho ku- Iqembu le-DockerKhumbula ukuphuma bese ungena ngemvume ukuze ushintsho luqale ukusebenza.
Kulabo abadinga ukuphatha izinsizakalo eziningi ngesikhathi esisodwa (njenge-Pi-hole noma i-Nextcloud noma i-Jellyfin), ukufaka i- I-plugin ye-Docker Compose Kuyimpoqo. Leli thuluzi likuvumela ukuthi Sebenzisa izinhlelo zokusebenza nge-Docker Compose Ukuchaza yonke ingqalasizinda yakho kufayela elilodwa le-YAML kwenza ukufaka izitsha eziningi kube umsebenzi womyalo owodwa: docker compose up -d.
Ukuqinisekisa ukuphepha kweziqukathi zakho
Yilapho abantu abaningi bephambuka khona. Ukuze ube nendawo ephephile, into yokuqala nciphisa isithombe esiyisisekeloEsikhundleni sokusebenzisa izithombe ezinkulu, khetha izinguqulo slim o Abasabalalisi be-Alpineokunciphisa kakhulu indawo yokuhlasela ngokungafaki isofthiwe engadingekile.
Enye indlela yobungcweti ukusebenzisa Ukwakhiwa kwezigaba eziningiKuhlanganisa ukusebenzisa isithombe esiqinile ukuhlanganisa ikhodi bese ukopisha kuphela i-binary ephumayo esithombeni esilula kakhulu ukuze kusetshenziswe, kulandela i- umhlahlandlela wokwenza ngcono izithombe ze-DockerLokhu akugcini nje ngokusindisa isikhala, kodwa kususa amathuluzi okwakha ukuthi umhlaseli angasebenzisa kabi uma ekwazile ukungena esitsheni.
Ngokuphathelene nokuphathwa kokufinyelela, ungalokothi, ugcine amaphasiwedi noma okhiye be-API ngqo ku-Dockerfile. Izimfihlo ze-Docker noma amathuluzi angaphandle njengeHashiCorp Vault. Ngaphezu kwalokho, kubalulekile ukuthi izitsha zisebenze nge umsebenzisi ongeyena impandeukudala umsebenzisi othize ngaphakathi kwesithombe ukuze anciphise amalungelo uma kwenzeka kungena.
Ukulungiswa kwenethiwekhi kanye nokugcinwa okuthuthukisiwe
Uma uhlela ukunikeza ezinye zezinsizakalo zakho kwamanye amazwe, ukuhlukaniswa kwenethiwekhi Ngumngane wakho omkhulu. Ungafaki konke kunethiwekhi ezenzakalelayo; dala amanethiwekhi enziwe ngokwezifiso usebenzisa docker network create ukuhlukanisa izitsha. Ngale ndlela, uma isevisi eyodwa isengozini, umhlaseli uzoba ubunzima obuningi ukuhamba eceleni uye kwezinye izitsha.
Ukuze ugcine iseva isebenza kahle, ungasebenzisa amathuluzi afana nalawa I-Trivy noma i-Snyk ukuskena ubuthakathaka ezithombeni. Kunconywa kakhulu futhi ukuthi usebenzise I-Docker Bench for Security, iskripthi esihlaziya ukucushwa kwakho futhi sikutshele ngqo ukuthi ubuthakathaka bakho busekelwe emikhubeni emihle kakhulu embonini.
Okokugcina, ungamnaki umphathi. Sebenzisa i- ama-firewall afana ne-UFW Ukuze uvale wonke amachweba angadingekile, sebenzisa ukuqinisekiswa kokhiye we-SSH esikhundleni samaphasiwedi. Ukukhawulela izinsiza ze-CPU kanye nememori zesitsha ngasinye kuzovimbela izinqubo ezibalekayo noma ukuhlaselwa kwe-DoS. Susa yonke iseva yakho ezifuywayo.
Ukwazi ukusebenzisa i-virtualization nge-Docker kudinga ukudlulela ngale kokufakwa okuyisisekelo kuye ekucabangeni kokuphepha okuqhubekayo. Kusukela ekukhetheni izithombe ezilula nokusebenzisa izakhiwo zezigaba eziningi kuya ekulawuleni ngokuqinile amalungelo enethiwekhi nabasebenzisi, isendlalelo ngasinye esengeziwe sivikela ingqalasizinda yakho. Ukugcina uhlelo lwakho lubuyekeziwe kanye nokuqapha amalogi kukuvumela ukuthi uphathe izinsizakalo zakho ngokuthula kwengqondo kokuthi iseva yakho iqinile, isebenza kahle, futhi iyakwazi ukumelana nezinsongo zangaphandle ezingaba khona.
Umbhali oshisekayo ngomhlaba wamabhayithi nobuchwepheshe ngokujwayelekile. Ngiyathanda ukwabelana ngolwazi lwami ngokubhala, futhi yilokho engizokwenza kule bhulogi, ngikubonise zonke izinto ezithakazelisayo kakhulu ngamagajethi, isofthiwe, ihadiwe, izitayela zobuchwepheshe, nokuningi. Inhloso yami ukukusiza ukuthi uzulazule emhlabeni wedijithali ngendlela elula nejabulisayo.