docker-jenkins 里面使用 docker

概况

• DooD(Docker-outside-of-Docker) 在 docker 容器里面安装 docker，然后通过 /var/run/docker.sock 与宿主机的 docker 关联，成为宿主机的兄弟容器，在该容器里面执行docker 命令相当于在宿主机里面执行，且可以将镜像安装到宿主机里面
• DinD (Docker-in-Docker)在 docker 容器里面安装 docker，与宿主机是完全独立的两套 docker 环境

安装

• 首先是需要替换一下 sources.list 文件使用阿里云镜像

  [root@localhost docker-jenkins]# cat sources.list
  deb-src  xenial main restricted #Added by software-properties
  deb  xenial main restricted
  deb-src  xenial main restricted multiverse universe #Added by software-properties
  deb  xenial-updates main restricted
  deb-src  xenial-updates main restricted multiverse universe #Added by software-properties
  deb  xenial universe
  deb  xenial-updates universe
  deb  xenial multiverse
  deb  xenial-updates multiverse
  deb  xenial-backports main restricted universe multiverse
  deb-src  xenial-backports main restricted universe multiverse #Added by software-properties
  deb  xenial partner
  deb-src  xenial partner
  deb  xenial-security main restricted
  deb-src  xenial-security main restricted multiverse universe #Added by software-properties
  deb  xenial-security universe
  deb  xenial-security multiverse
  

• 构建 docker 镜像

  FROM jenkins/jenkins:lts
  MAINTAINER javahuang 
  
  # Install necessary packages
  # 
  USER root
  COPY sources.list  /etc/apt/sources.list
  RUN apt-key adv --keyserver  --recv-keys 40976EAF437D05B5 \
    && apt-key adv --keyserver  --recv-keys 3B4FE6ACC0B21F32 \
    && apt-get update \
    && apt-get install -y sudo \
    && sudo apt-get install -y supervisor iptables libdevmapper1.02.1 libltdl7 libseccomp2 rsync \
    && sudo rm -rf /var/lib/apt/lists/*
  
  # Install docker-engine
  # According to Petazzoni's article:
  # ---------------------------------
  # "Former versions of this post advised to bind-mount the docker binary from
  # the host to the container. This is not reliable anymore, because the Docker
  # Engine is no longer distributed as (almost) static libraries."
  # ARG docker_version=18.03.1-ce
  # RUN curl -sSL  | sh && \
  #   apt-get purge -y docker-engine && \
  #   apt-get install docker-engine=${docker_version}-0~jessie
  COPY docker-ce_18.03.1_ce-0_debian_amd64.deb /root
  RUN cd /root \
    && dpkg -i docker-ce_18.03.1_ce-0_debian_amd64.deb
  
  
  # Make sure jenkins user has docker privileges
  RUN usermod -aG docker jenkins
  
  # Install initial plugins
  # USER jenkins
  # COPY plugins.txt /usr/share/jenkins/plugins.txt
  # RUN /usr/local/bin/plugins.sh /usr/share/jenkins/plugins.txt
  
  # supervisord
  USER root
  # Create log folder for supervisor and jenkins
  RUN mkdir -p /var/log/supervisor
  RUN mkdir -p /var/log/jenkins
  
  # Copy the supervisor.conf file into Docker
  COPY supervisord.conf /etc/supervisor/conf.d/supervisord.conf
  
  # Start supervisord when running the container
  CMD /usr/bin/supervisord -c /etc/supervisor/conf.d/supervisord.conf
  

  docker build -t docker-jenkins:v1 .
  

• 启动 jenkins

  docker run --restart=always -d --name jenkins -v /var/run/docker.sock:/var/run/docker.sock -v jenkins_home:/var/jenkins_home -p 8080:8080 -p 50000:50000 docker-jenkins:v1
  

• 测试

  [root@localhost]# docker exec -it jenkins /bin/bash
  root@90f540fa6bd8:/# su - jenkins
  jenkins@90f540fa6bd8:~$ docker images
  # 可以看到返回的是宿主机的镜像
  ...