$ docker-compose up -d
$ docker-compose downImageも削除
$ docker-compose down --rmi all
$ docker-compose rm
$ docker ps
$ docker ps -a
$ docker run ＜イメージ名＞[:タグ名]例）docker run TestApp
$ docker create ＜イメージ名＞[:タグ名]例）docker create TestApp
$ docker start ＜コンテナID＞例）docker start 08311c3ab75d
$ docker exec -it ＜コンテナ名＞例）docker exec -it ubuntu_bash bash
$ docker exec ＜コンテナ名＞ ＜コマンド＞例）docker exec ubuntu_bash ls -l /usr
$ docker cp ＜ローカル・パス＞ ＜コンテナ名＞:＜コンテナ内のディレクトリパス＞例）docker cp /tmp/app.py webapp:/tmp/app.py
$ docker cp ＜コンテナ名＞:＜コンテナ内のディレクトリパス＞ ＜ローカル・パス＞例）docker cp webapp:/tmp/app.py /tmp/app.py
$ docker stop ＜コンテナID＞例）docker stop 08311c3ab75d
$ docker kill ＜コンテナID＞例）docker kill 08311c3ab75d
$ docker rm ＜コンテナID＞例）docker rm 08311c3ab75d
$ docker container inspect ＜コンテナID＞例）docker container inspect 940fb334d049
$ docker log ＜コンテナID＞例）docker log 940fb334d049
$ docker top ＜コンテナID＞例）docker top 940fb334d049
$ docker images
$ docker rmi ＜イメージID＞
$ docker history ＜イメージID＞
$ docker build -t ＜リポジトリ[:TAG]＞ .
$ docker login
$ docker search ＜イメージ名＞例）docker search postgres
$ docker pull ＜イメージ名＞例）docker pull postgres:latest
$ docker push ＜レジストリの場所/リポジトリ名＞[:バージョン]例）docker push test.com/MyApp:01
$ docker network create --subnet ＜サブネットマスク＞ ＜ネットワークの名前＞例）docker network create --subnet 192.168.10.0/24 testnetwork
$ docker network ls
$ docker network rm ＜ネットワークの名前＞例）docker network rm testnetwork
$ docker network connect ＜ネットワークの名前＞ ＜コンテナID＞
$ ddocker network connect --ip ＜IPアドレス＞ ＜ネットワークの名前＞ ＜コンテナID＞例）docker network connect --ip 192.168.10.1 testnetwork 940fb334d049
$ docker network disconnect ＜ネットワークの名前＞ ＜コンテナID＞例）docker network disconnect testnetwork 940fb334d049
$ docker network inspect ＜ネットワークの名前＞例）docker network inspect testnetwork
$ docker network prune
$ docker volume create ＜ボリュームの名前＞例）docker volume create myvol
$ docker volume rm ＜ボリュームの名前＞例）docker volume rm myvol
$ docker volume ls
$ docker volume prune
$ docker volume inspect ＜ボリュームの名前＞例）docker volume inspect myvol
[root@localhost ~]# yum -y install https://download.postgresql.org/pub/repos/yum/reporpms/EL-7-x86_64/pgdg-redhat-repo-latest.noarch.rpm■PostgreSQL10の情報確認
[root@localhost ~]# yum info postgresql10-serverPostgre10インストール
[root@localhost ~]# yum -y install postgresql10-server■PostgreSQLのバージョンの確認
[root@localhost ~]# /usr/pgsql-10/bin/postgres --version postgres (PostgreSQL) 10.13■PostgreSQLのDBの初期化
[root@localhost ~]# /usr/pgsql-10/bin/postgresql-10-setup initdb Initializing database ... OK■サービスの有効化
[root@localhost ~]# systemctl enable postgresql-10■サービスの開始
[root@localhost ~]# systemctl start postgresql-10■サービスの確認
[root@localhost ~]# systemctl status postgresql-10
● postgresql-10.service - PostgreSQL 10 database server
Loaded: loaded (/usr/lib/systemd/system/postgresql-10.service; enabled; vendor preset: disabled)
Active: active (running) since 木 2020-05-21 13:58:01 JST; 1h 58min ago
Docs: https://www.postgresql.org/docs/10/static/
Process: 30639 ExecStartPre=/usr/pgsql-10/bin/postgresql-10-check-db-dir ${PGDATA} (code=exited, status=0/SUCCESS)
Main PID: 30645 (postmaster)
CGroup: /system.slice/postgresql-10.service
tq30645 /usr/pgsql-10/bin/postmaster -D /var/lib/pgsql/10/data/
tq30647 postgres: logger process
tq30649 postgres: checkpointer process
tq30650 postgres: writer process
tq30651 postgres: wal writer process
tq30652 postgres: autovacuum launcher process
tq30653 postgres: stats collector process
mq30654 postgres: bgworker: logical replication launcher
5月 21 13:58:01 localhost.localdomain systemd[1]: Starting PostgreSQL 10 database server...
5月 21 13:58:01 localhost.localdomain postmaster[30645]: 2020-05-21 13:58:01.232 JST [30645] LOG: IPv6アドレス"::1"、ポート5432で待ち受けています
5月 21 13:58:01 localhost.localdomain postmaster[30645]: 2020-05-21 13:58:01.232 JST [30645] LOG: IPv4アドレス"127.0.0.1"、ポート5432で待ち受けています
5月 21 13:58:01 localhost.localdomain postmaster[30645]: 2020-05-21 13:58:01.234 JST [30645] LOG: Unixソケット"/var/run/postgresql/.s.PGSQL.5432"で待ち受けています
5月 21 13:58:01 localhost.localdomain postmaster[30645]: 2020-05-21 13:58:01.237 JST [30645] LOG: Unixソケット"/tmp/.s.PGSQL.5432"で待ち受けています
5月 21 13:58:01 localhost.localdomain postmaster[30645]: 2020-05-21 13:58:01.254 JST [30645] LOG: ログ出力をログ収集プロセスにリダイレクトしています
5月 21 13:58:01 localhost.localdomain postmaster[30645]: 2020-05-21 13:58:01.254 JST [30645] ヒント: ここからのログ出力はディレクトリ"log"に現れます。
5月 21 13:58:01 localhost.localdomain systemd[1]: Started PostgreSQL 10 database server.
[General] # # UAG virtual appliance unique name (between 1 and 32 characters). # If name is not specified, the script will prompt for it. # #UAGの名前を入れる name=uag01 # # Full path filename of the UAG .ova virtual machine image # The file can be obtained from VMware # #OVAファイルパスを指定 source=Z:\Horizon 7.6\euc-unified-access-gateway-3.4.0.0-11037344_OVF10.ova # # target refers to the vCenter username and address/hostname and the ESXi host for deployment # Refer to the ovftool documentation for information about the target syntax. # See https://www.vmware.com/support/developer/ovf/ # PASSWORD in upper case results in a password prompt during deployment so that passwords do not need # to specified in this .INI file. # In this example, the vCenter username is administrator@vsphere.local # the vCenter server is 192.168.0.21 (this can be a hostname or IP address) # the ESXi hostname is esx1.myco.int (this can be a hostname or IP address) # #target=vi://administrator@vsphere.local:PASSWORD@192.168.0.21/Datacenter1/host/esx1.myco.int #target=vi://ユーザー名:パスワード@vCenterのIPもしくはホスト名/Datacenter名/host/Cluster名 target=vi://administrator@vsphere.local:PASSWORD@172.22.130.20/DC/host/cluster # # vSphere datastore name # #Datastore名を指定 ds=ds01 # # Disk provisioning mode. Refer to OVF Tool documentation for options. # #diskMode=thin # # vSphere Network names. For pre 3.3 UAG versions, a vSphere Network Protocol Profile (NPP) must be associated with every referenced network name. This specifies # network settings such as IPv4 subnet mask, gateway etc. UAG 3.3 and newer no longer uses NPPs and so for static IPv4 addresses a netmask0, netmask1 and netmask2 # value must be specified for each NIC. Normally a defaultGateway setting is also required. # #netInternet=VM Network #netManagementNetwork=VM Network #netBackendNetwork=VM Network #defaultGateway=192.168.0.1 #deploymentOption=onenic #ip0=192.168.0.90 #netmask0=255.255.255.0 #routes0=192.168.1.0/24 192.168.0.1,192.168.2.0/24 192.168.0.2 #PortGroupを指定 netInternet=DMZ(100) netManagementNetwork=DMZ(100) netBackendNetwork=DMZ(100) #DefaultGateway defaultGateway=192.168.100.254 #NICおよびIPの指定。StaticRoute。 deploymentOption=onenic ip0=192.168.100.1 netmask0=255.255.255.0 #routes0=192.168.100.0/24 192.168.100.254 #deploymentOption=twonic #ip0=192.168.0.90 #netmask0=255.255.255.0 #ip1=192.168.0.91 #netmask1=255.255.255.0 #routes0=192.168.1.0/24 192.168.0.1,192.168.2.0/24 192.168.0.2 #routes1=192.168.3.0/24 192.168.0.1,192.168.4.0/24 192.168.0.2 #deploymentOption=threenic #ip0=192.168.0.90 #netmask0=255.255.255.0 #ip1=192.168.0.91 #netmask1=255.255.255.0 #ip2=192.168.0.92 #netmask2=255.255.255.0 #routes0=192.168.1.0/24 192.168.0.1,192.168.2.0/24 192.168.0.2 #routes1=192.168.3.0/24 192.168.0.1,192.168.4.0/24 192.168.0.2 #routes2=192.168.5.0/24 192.168.0.1,192.168.6.0/24 192.168.0.2 #DNSを記入 dns=192.168.100.10 #syslogUrl=syslog://server.example.com:514 # # Setting honorCipherOrder to true forces the TLS cipher order to be the order specified by the server. This can be set on # UAG 2.7.2 and newer to force the Forward Secrecy ciphers to be presented first to improve security. # honorCipherOrder=true # # sessionTimeout value in milliseconds. Default is 36000000 (10 hours). When the session timeout expires, # the user needs to login again. # # 11 hours sessionTimeout=39600000 # For UAG 3.4 onwards include licenseEdition property to be deployed. # Options include- Standard, Advanced or Enterprise. # Please uncomment the UAG license edition based on the Horizon/Workspace ONE licensing. # licenseEdition=Standard # licenseEdition=Advanced # licenseEdition=Enterprise [SSLCert] # # From UAG 3.0 and newer, you can specify the name of a .pfx or .12 format certificate file containing the required certificate and private key and # any required intermediate certificates. In this case there is no need to use openssl commands to convert the .pfx/.p12 file into the # associated PEM certificates file and PEM private key file. # #pfxCerts=sslcerts.pfx #pfxCerts=C:\temp\UAG\sslcerts.pfx # # If there are multiple SSL certificates with private key in the .pfx file you also need to specify an alias name in order to select the required certificate. # This is not necessary if there is only one SSL certificate with private key in the file # #pfxCertAlias=alias1 # # The following pemCerts and pemPrivKey settings are only needed if you don't have a .pfx/.p12 file and want to directly use the two PEM format files. # # pemCerts refers to a PEM format file containing the SSL server certificate to be deployed. The file should also contain any # required intermediate CA and root CA certificates. # ###pemCerts=sslcerts.pem # # pemPrivKey refers to a file containing the RSA PRIVATE KEY for the SSL server certificate in the above certificate file. # #pemPrivKey=sslcertrsakey.pem # # From UAG 3.2 and newer, you can specify a certificate for the admin interface on port 9443. It is in the same format as [SSLCert] above. # [SSLCertAdmin] #pfxCerts=sslcerts.pfx #pemCerts=sslcerts.pem #pemPrivKey=sslcertrsakey.pem ###pfxCerts=C:\temp\UAG\sslcerts.pfx ###pemCerts=C:\temp\UAG\sslcerts.pem ####pemPrivKey=C:\temp\UAG\sslcertrsakey.pem [Horizon] # # proxyDestinationUrl refers to the backend Connection Server to which this UAG appliance will connect. # It can either specify the name or IP address of an individual Connection Server or of a load balanced alias to connect # via a load balancer in front of multiple Connection Servers. # #connection Serverのホスト名 proxyDestinationUrl=https://con01.lab.local # # proxyDestinationUrlThumbprints only needs to be specified if the backend Connection Servers do not have # a trusted CA signed SSL server certificate installed (e.g. if it has the default self-signed certificate only). # This is a comma separated list of thumbprints in the format shown here. # #proxyDestinationUrlThumbprints=sha1:3e ef ed c6 86 75 a6 15 ff c8 96 27 5a 4c ee 8e 16 fd 6e d3,sha1:3e ef ed c6 86 75 a6 15 ff c8 96 27 5a 4c ee 8e 16 fd 6e d3 # # The following external URLs are used by Horizon Clients to establish tunnel, HTML Access and PCoIP connections # to this UAG appliance. If they reference a load balancer name or address then the load balancer must be # configured for source IP hash affinity otherwise the connections may route to the wrong UAG appliance. # #UAGのOutbandアクセスする際のURL tunnelExternalUrl=https://gw.external.jp:443 blastExternalUrl=https://gw.external.jp:443 # # pcoipExternalUrl must contain an IPv4 address (not a DNS name) # #PCoIP用のグローバルIPアドレス pcoipExternalUrl=xxx.xxx.xxx.xxx:4172
PS C:\temp\UAG> .\uagdeploy.ps1 -iniFIle .\uag2-onenic.ini
<script src='https://cdn.rawgit.com/google/code-prettify/master/loader/run_prettify.js'/>
<style>li.L0,li.L1,li.L2,li.L3,li.L5,li.L6,li.L7,li.L8{list-style-type:decimal}</style>
<pre class="prettyprint lang-html linenums"> Codeを書く。 </pre>
#nmcli c m ens192 ipv4.method manual ipv4.address 172.22.xxx.xx/24 connection.autoconnect yes■Default Gateway の割り当て
#nmcli c modify ens192 ipv4.gateway 172.22.130.254■DNS の割り当て
#nmcli connection modify ens192 ipv4.dns 172.22.130.1■NetworkManagerの再起動
#systemctl restart network #nmcli d show■OS Update
# yum update■Firewalld設定
#firewall-cmd --zone=public --add-service=https --permanent #firewall-cmd --list-all■NTP設定
#date #yum install ntp #vi /etc/ntp.conf #systemctl restart ntpd #ntpq -p■SELinuxの無効化
# vi /etc/sysconfig/selinux ========================================================= # This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: # enforcing - SELinux security policy is enforced. # permissive - SELinux prints warnings instead of enforcing. # disabled - No SELinux policy is loaded. SELINUX=disabled # SELINUXTYPE= can take one of three two values: # targeted - Targeted processes are protected, # minimum - Modification of targeted policy. Only selected processes are protected. # mls - Multi Level Security protection. SELINUXTYPE=targeted =========================================================
root@ubuntu:~# systemctl status |grep docker
│ │ └─26867 grep --color=auto docker
├─docker.service
│ └─1232 /usr/bin/dockerd -H unix://
│ ├─647 avahi-daemon: running [modocker.local]
root@ubuntu:~# exit
exit
スクリプトを終了しました。ファイルは log.txt です
root@ubuntu:~#history 88 docker ps 113 history |grep docker root@ubuntu:~#