Docker on Codrut Constantin Gusoi

Docker compose nginx proxy

Sat, 23 Jan 2021 19:39:33 +0000

Create some nginx config files for custom setup:

mkdir -p ./config/settings/per_host

echo 'client_max_body_size 10m;' > ./config/settings/proxy_wide.conf
echo 'client_max_body_size 20m;' > ./config/settings/per_host/myporject.test

Save this as your docker-compose.yml file:

#-------------------------------------------------------------------------------
# Version
#-------------------------------------------------------------------------------

version: '2.4'

#-------------------------------------------------------------------------------
# Networks
#-------------------------------------------------------------------------------

networks:
  backend_network:
    driver: bridge
  frontend_network:
    driver: bridge
    name: nginx-reverse-proxy-network

#-------------------------------------------------------------------------------
# Volumes
#-------------------------------------------------------------------------------

volumes:
  proxy_dhparam:
    driver: local
  proxy_certs:
    driver: local
  proxy_html:
    driver: local

#-------------------------------------------------------------------------------
# Logging
#-------------------------------------------------------------------------------

x-default-logging: &logging
  logging:
    options:
      max-size: '12m'
      max-file: '5'
    driver: json-file

#-------------------------------------------------------------------------------
# Services
#-------------------------------------------------------------------------------

services:

  #-----------------------------------------------------------------------------
  # Proxy

  proxy:
    image: jwilder/nginx-proxy:latest
    <<: *logging
    mem_limit: '200m'
    memswap_limit: '500m'
    networks:
      - backend_network
      - frontend_network
    ports:
      - '127.0.0.1:80:80'
      - '127.0.0.1:443:443'
    restart: on-failure
    ulimits:
      nproc: 10000
      nofile: 90000
    volumes:
      - proxy_dhparam:/etc/nginx/dhparam
      - proxy_certs:/etc/nginx/certs
      - proxy_html:/usr/share/nginx/html
      - /var/run/docker.sock:/tmp/docker.sock:ro
      - ./config/settings/proxy_wide.conf:/etc/nginx/conf.d/proxy_wide.conf:ro
      - ./config/settings/per_host:/etc/nginx/vhost.d

  #-----------------------------------------------------------------------------
  # Let's Encrypt

  letsencrypt:
    image: jrcs/letsencrypt-nginx-proxy-companion:latest
    <<: *logging
    mem_limit: '500m'
    memswap_limit: '1g'
    networks:
      - backend_network
    restart: on-failure
    ulimits:
      nproc: 10000
      nofile: 90000
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./config/settings/per_host:/etc/nginx/vhost.d
    volumes_from:
      - proxy

Spin it up with:

docker-compose up -d

Connect to the external network in all your other projects:

#-------------------------------------------------------------------------------
# Networks
#-------------------------------------------------------------------------------

networks:
  backend_network:
    driver: bridge
  frontend_network:
    external: true
    name: nginx-reverse-proxy-network

Add your vhost to the container environment:

services:
  web:
    environment:
      VIRTUAL_HOST=myporject.test
      VIRTUAL_PORT=3000
      # LETSENCRYPT_HOST=myporject.test
      # LETSENCRYPT_EMAIL=mail@myproject.test

Don’t forget you edit your hosts file:

grep -q '127.0.0.1 myproject.test' /etc/hosts ||
  sudo sed -i '$ a 127.0.0.1 myproject.test' /etc/hosts

Fix docker shell history navigation

Tue, 29 Dec 2020 11:07:12 +0000

Prerequisites Link to heading

Start a docekr container:

docker run --rm -it alpine sh

Run some random commands in that shell:

ls -la
pwd
cd ~
uname -a

Problem Link to heading

Try to navigate the history with Ctrl + p and notice it is broken. When you press it the first time it does nothing, press it a second time it jumps 2 commands.

Docker Images: basic Node setup

Wed, 14 Oct 2020 18:32:57 +0000

Use this as a template for node apps:

#-------------------------------------------------------------------------------
# Base

FROM node:16.2.0-alpine

SHELL ["/bin/ash", "-c"]

#-------------------------------------------------------------------------------
# Packages

RUN set -exo pipefail              && \
                                      \
    echo 'Install system packages' && \
    apk add --update --no-cache \
      build-base                \
      shadow

#-------------------------------------------------------------------------------
# Workspace

RUN set -exo pipefail       && \
                               \
    echo 'Create workspace' && \
    mkdir -p /work

WORKDIR /work

#-------------------------------------------------------------------------------
# User

ARG HOST_USER_UID=1000
ARG HOST_USER_GID=1000

RUN set -exo pipefail                                  && \
                                                          \
    echo 'Create the notroot user and group from host' && \
    deluser --remove-home node                         && \
    groupadd -g $HOST_USER_GID notroot                 && \
    useradd -lm -u $HOST_USER_UID -g notroot notroot   && \
                                                          \
    echo 'Set direcotry permissions'                   && \
    chown notroot:notroot /work

#-------------------------------------------------------------------------------
# Command

CMD ["sh"]

Build it like this:

Docker Images: Firefox with Geckodriver

Sat, 01 Aug 2020 18:42:55 +0000

# ------------------------------------------------------------------------------
# Base

FROM alpine:3.12.1

# ------------------------------------------------------------------------------
# Packages

RUN set -exo pipefail             && \
                                     \
    echo 'Install firefox'        && \
    apk add --update --no-cache \
      firefox

RUN set -exo pipefail                                                    && \
                                                                            \
    echo "Installing geckodriver"                                        && \
                                                                            \
    SHA=61bfc547a623d7305256611a81ecd24e6bf9dac555529ed6baeafcf8160900da && \
    VERSION=v0.28.0                                                      && \
    PACKAGE=geckodriver-$VERSION-linux64.tar.gz                          && \
    BASE=https://github.com/mozilla/geckodriver/releases/download        && \
    DOWNLOAD=$BASE/$VERSION/$PACKAGE                                     && \
                                                                            \
    wget -O "$PACKAGE" "$DOWNLOAD"                                       && \
    sha256sum "$PACKAGE"                                                 && \
    echo "$SHA  $PACKAGE" | sha256sum -c -                               && \
    tar -xzf "$PACKAGE" -C /usr/local/bin                                && \
    rm -rf "$PACKAGE"

# ------------------------------------------------------------------------------
# Command

CMD ["/bin/sh"]

Docker Images: basic Ruby setup

Thu, 16 Jul 2020 18:51:03 +0000

Use this as a template for ruby apps:

#-------------------------------------------------------------------------------
# Base

FROM ruby:2.7.2-alpine

SHELL ["/bin/ash", "-c"]

#-------------------------------------------------------------------------------
# Packages

RUN set -exo pipefail              && \
                                      \
    echo 'Install system packages' && \
    apk add --update --no-cache \
      build-base                \
      shadow

#-------------------------------------------------------------------------------
# Workspace

RUN set -exo pipefail       && \
                               \
    echo 'Create workspace' && \
    mkdir -p /work

WORKDIR /work

#-------------------------------------------------------------------------------
# User

ARG HOST_USER_UID=1000
ARG HOST_USER_GID=1000

RUN set -exo pipefail                                  && \
                                                          \
    echo 'Create the notroot user and group from host' && \
    groupadd -g $HOST_USER_GID notroot                 && \
    useradd -lm -u $HOST_USER_UID -g notroot notroot   && \
                                                          \
    echo 'Set direcotry permissions'                   && \
    chown notroot:notroot /work

#-------------------------------------------------------------------------------
# Gems

COPY --chown=notroot:notroot Gemfile* /work/

USER notroot

RUN set -exo pipefail                 && \
                                         \
    echo 'Install gems'               && \
    cd /work                          && \
    bundle install --jobs 3 --retry 3

#-------------------------------------------------------------------------------
# Command

CMD ["sh"]

Build it like this:

Docker Images: basic entrypoint

Tue, 14 Jul 2020 21:24:54 +0000

This is a docker entrypoint script that loads environment variables from a mounted file and executes the given command; most of the time it’s all you need.

#!/bin/sh

set -e

# Load environment variables.
if [ -f /environment/secrets.env ];
then
  set -a
  echo 'Sourcing: /environment/secrets.env'
  . /environment/secrets.env
  set +a
fi

# Executes the given command.
exec "$@"

Give this file a short and simple name like entry and copy it in your Dockerfile:

Easter Eggs: ruby

Sun, 12 Jul 2020 12:55:20 +0000

Ruby is amazing! Here’s one easter egg:

ruby -r irb -e 'IRB.send(:easter_egg)'

Or start a ruby shell, type RubyVM and press Tab twice.

It also works in Docker, sort of, you need to provide the :dancing argument.

docker run --rm -it ruby:2.7.1-alpine ruby -r irb -e 'IRB.send(:easter_egg, :dancing)'

How to Use: docker-here

Mon, 06 Jul 2020 22:19:44 +0000

Source: https://gitlab.com/sdwolfz/docker-here

Install Link to heading

git clone https://gitlab.com/sdwolfz/docker-here.git
cd docker-here
sudo make install

Usage Link to heading

Instead of doing this:

docker run --rm -it -u "$(id -u)":"$(id -g)" -v "$PWD":/here -w /here alpine ls

Now you can do this:

docker-here alpine ls

You can change both the working directory and the mount path with -w:

docker-here -w /work alpine pwd

Run as root with the -r flag:

How to Use: hadolint

Wed, 24 Jun 2020 18:45:41 +0000

Install Link to heading

It’s not available in any package manager, so use the Docker image:

docker run --rm -it -v "$PWD":/work -w /work hadolint/hadolint:latest-alpine sh

Configure Link to heading

Add a .hadolint.yaml file containing your rules:

---

ignored:
  - DL3018

Use Link to heading

Single file:

hadolint ./path/to/Dockerfile

All files:

find . -name Dockerfile | xargs hadolint

Files known to git:

Reuse YAML sections with anchors

Sun, 21 Jun 2020 12:58:39 +0000

Define an anchor using the & character and reference it everywhere using the <<: * alias:

version: '2.4'

x-default-logging: &logging
  logging:
    options:
      max-size: '12m'
      max-file: '5'
    driver: json-file

services:
  web:
    image: alpine:latest
    command: /bin/true
    <<: *logging

  postgres:
    image: postgres:alpine
    <<: *logging

  redis:
    image: redis:alpine
    <<: *logging

If you run docker-compose config you’ll see x-default-logging is gone and aliases are replaced.