基于openEuler的微服务集群实战Docker Compose编排NginxMySQL全流程在云原生技术席卷企业IT基础设施的今天将操作系统容器化已成为提升资源利用率、加速应用交付的标准实践。openEuler作为面向数字基础设施的开源操作系统凭借其卓越的多架构支持能力和云原生友好特性正成为容器化部署的理想选择。本文将带您深入探索如何利用Docker Compose这一编排利器在openEuler基础上构建完整的NginxMySQL微服务集群实现从单机部署到生产级集群管理的技术跃迁。1. 环境准备与架构设计1.1 系统需求与组件选型构建基于openEuler的容器化微服务集群需要确保基础环境满足以下要求Docker引擎版本20.10.0及以上支持Compose V2格式openEuler镜像推荐LTS版本如24.03-lts-sp2保证长期支持硬件资源至少2核CPU、4GB内存、20GB磁盘空间网络配置主机需开启IP转发net.ipv4.ip_forward1关键组件版本矩阵组件推荐版本替代方案备注openEuler24.03-lts-sp222.03-lts-sp4生产环境首选LTSNginx1.25.3OpenResty支持HTTP/3MySQL8.0.36MariaDB 10.11事务型业务首选1.2 多容器网络拓扑设计合理的网络架构是微服务稳定运行的基础。我们采用桥接网络模式设计如下通信方案[Host Machine] ├── [openeuler-bridge-network] │ ├── nginx-container (172.20.0.10) │ ├── mysql-container (172.20.0.20) │ └── [自定义网络策略] └── [Host Volume Mounts] ├── /data/nginx └── /data/mysql这种设计实现了容器间通过服务名直接通信关键数据持久化到宿主机端口暴露最小化原则2. Docker Compose编排实战2.1 编写docker-compose.yml创建项目目录并编写核心配置文件mkdir -p ~/openeuler-cluster/{nginx,mysql} cd ~/openeuler-clusterversion: 3.8 services: nginx: image: nginx:1.25.3-alpine container_name: openeuler-nginx platform: linux/amd64 ports: - 8080:80 - 8443:443 volumes: - ./nginx/conf.d:/etc/nginx/conf.d - ./nginx/logs:/var/log/nginx networks: - openeuler-net depends_on: - mysql healthcheck: test: [CMD, curl, -f, http://localhost] interval: 30s timeout: 10s retries: 3 mysql: image: mysql:8.0 container_name: openeuler-mysql platform: linux/amd64 environment: MYSQL_ROOT_PASSWORD: ${DB_ROOT_PASSWORD} MYSQL_DATABASE: ${DB_NAME} MYSQL_USER: ${DB_USER} MYSQL_PASSWORD: ${DB_PASSWORD} volumes: - ./mysql/data:/var/lib/mysql - ./mysql/init:/docker-entrypoint-initdb.d networks: - openeuler-net healthcheck: test: [CMD, mysqladmin, ping, -h, localhost] timeout: 20s retries: 10 networks: openeuler-net: driver: bridge ipam: config: - subnet: 172.20.0.0/242.2 环境变量配置创建.env文件管理敏感配置# Database Configuration DB_ROOT_PASSWORDOpenEuler1234 DB_NAMEapp_db DB_USERapp_user DB_PASSWORDUser5678 # Network Settings SUBNET172.20.0.0/24 NGINX_IP172.20.0.10 MYSQL_IP172.20.0.202.3 初始化脚本准备MySQL容器首次启动时会执行/docker-entrypoint-initdb.d目录下的脚本# 创建初始化SQL文件 cat ~/openeuler-cluster/mysql/init/01-create-tables.sql EOF CREATE TABLE IF NOT EXISTS users ( id INT AUTO_INCREMENT PRIMARY KEY, username VARCHAR(50) NOT NULL, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ) ENGINEInnoDB DEFAULT CHARSETutf8mb4; EOF3. 集群部署与优化3.1 启动与验证集群执行以下命令启动整个集群docker compose up -d验证服务状态# 检查容器运行状态 docker compose ps # 测试Nginx连接MySQL docker exec openeuler-nginx sh -c apk add mysql-client mysql -h mysql -u ${DB_USER} -p${DB_PASSWORD} ${DB_NAME} -e SHOW TABLES; # 查看实时日志 docker compose logs -f3.2 性能调优配置针对openEuler环境优化Nginx配置# ~/openeuler-cluster/nginx/conf.d/app.conf upstream backend { server mysql:3306; keepalive 32; } server { listen 80; server_name localhost; location /db { proxy_pass http://backend; proxy_http_version 1.1; proxy_set_header Connection ; } }MySQL性能优化建议# 在my.cnf中添加 [mysqld] innodb_buffer_pool_size 1G innodb_log_file_size 256M skip_name_resolve ON default_authentication_plugin mysql_native_password4. 生产环境进阶管理4.1 高可用方案设计实现零停机部署的滚动更新策略# 在docker-compose.yml中添加 deploy: update_config: parallelism: 1 delay: 10s order: start-first备份与恢复方案# MySQL每日备份 docker exec openeuler-mysql sh -c mysqldump -u root -p${MYSQL_ROOT_PASSWORD} --all-databases | gzip /var/lib/mysql/backup/$(date %Y%m%d).sql.gz # Nginx配置版本控制 cd ~/openeuler-cluster/nginx git init git add . git commit -m Initial config4.2 监控与日志收集配置Prometheus监控指标# docker-compose.yml追加 monitoring: image: prom/prometheus ports: - 9090:9090 volumes: - ./prometheus.yml:/etc/prometheus/prometheus.yml networks: - openeuler-net日志收集的ELK方案# 修改Nginx日志格式 log_format json_combined escapejson { time:$time_iso8601, remote_addr:$remote_addr, request:$request, status: $status, body_bytes_sent:$body_bytes_sent, request_time:$request_time };5. 故障排查与日常维护5.1 常见问题解决方案容器网络连通性测试# 检查容器间通信 docker exec -it openeuler-nginx ping mysql # 查看网络详情 docker network inspect openeuler-cluster_openeuler-net资源限制配置示例# 在docker-compose.yml中限制资源 nginx: deploy: resources: limits: cpus: 1.5 memory: 1G reservations: memory: 512M5.2 安全加固措施实施最小权限原则# 为MySQL创建专用用户 docker exec openeuler-mysql mysql -u root -p${DB_ROOT_PASSWORD} -e CREATE USER app_ro% IDENTIFIED BY Readonly123; GRANT SELECT ON ${DB_NAME}.* TO app_ro%; # 定期轮换密码 openssl rand -base64 16 | docker secret create db_password_v2 -在openEuler宿主机上实施的安全配置# 配置防火墙规则 firewall-cmd --permanent --add-rich-rulerule familyipv4 source address172.20.0.0/24 port port3306 protocoltcp accept firewall-cmd --reload # 启用SELinux容器策略 semanage port -a -t http_port_t -p tcp 8080