Docker环境可道云网盘的安装示例

本文阅读预计需要: 11 minutes

安装 Docker

1. 安装环境

Docker 是一种容器化平台，可以把可道云及其依赖（数据库、Redis 等）打包成独立容器运行，互不干扰。请先安装并启动 Docker 服务；较新版本的 Docker 会自动附带 docker-compose-plugin（用于编排多个容器）。

$ curl -fsSL https://get.docker.com | bash -s docker --mirror Aliyun
$ systemctl enable docker && systemctl start docker

docker compose 用于按配置文件一次性启动多个容器。执行 docker compose up 后，可用 docker compose ls 查看当前运行的 Compose 项目及其配置文件位置：

$ docker compose ls
NAME                STATUS              CONFIG FILES
docker-compose      running(3)          /kodbox/docker-compose.yaml

提示：

若docker compose命令不存在，可手动安装二进制文件docker-compose并在后续命令中替换。

curl -SL https://github.com/docker/compose/releases/download/v2.32.1/docker-compose-linux-x86_64 -o /usr/local/bin/docker-compose

chmod +x /usr/local/bin/docker-compose

2. HTTP 方式快速启动

以下步骤通过 HTTP（非加密）访问可道云，适合内网测试或后续再配置 HTTPS。

注意：

首先创建一个目录作为项目目录，后面所有命令都在这个目录下执行

mkdir /kodbox && cd /kodbox

需在db.env中设置数据库密码，还有yml中的MYSQL_ROOT_PASSWORD需补充。

创建文件来设置数据库环境变量vim db.env

MYSQL_PASSWORD=
MYSQL_DATABASE=kodbox
MYSQL_USER=kodbox

创建 compose.yml 文件，在其中配置映射端口、持久化目录

$ vim compose.yml

services:
  db:
    image: mariadb:lts
    command: --transaction-isolation=READ-COMMITTED
    restart: always
    volumes:
      - "./db:/var/lib/mysql"       #./db是数据库持久化目录，可以修改
      # - "./etc/mysql/conf.d:/etc/mysql/conf.d"       #增加自定义mysql配置
    environment:
      - MYSQL_ROOT_PASSWORD=
      - MARIADB_AUTO_UPGRADE=1
      - MARIADB_DISABLE_UPGRADE_BACKUP=1
    env_file:
      - db.env

  app:
    image: kodcloud/kodbox
    restart: always
    ports:
      - 80:80                       #左边80是使用端口，可以修改
    volumes:
      - "./site:/var/www/html"      #./site是站点目录位置，可以修改
    environment:
      - MYSQL_HOST=db
      - REDIS_HOST=redis
    env_file:
      - db.env
    depends_on:
      - db
      - redis

  redis:
    image: redis:alpine
    restart: always

若拉取镜像较慢，可改用阿里云容器镜像地址：

services:
  db:
    image: registry.cn-hangzhou.aliyuncs.com/kodcloud/mariadb:lts
    command: --transaction-isolation=READ-COMMITTED
    restart: always
    volumes:
      - "./db:/var/lib/mysql"       #./db是数据库持久化目录，可以修改
      # - "./etc/mysql/conf.d:/etc/mysql/conf.d"       #增加自定义mysql配置
    environment:
      - MYSQL_ROOT_PASSWORD=
      - MARIADB_AUTO_UPGRADE=1
      - MARIADB_DISABLE_UPGRADE_BACKUP=1
    env_file:
      - db.env

  app:
    image: registry.cn-hangzhou.aliyuncs.com/kodcloud/kodbox
    restart: always
    ports:
      - 80:80                       #左边80是使用端口，可以修改
    volumes:
      - "./site:/var/www/html"      #./site是站点目录位置，可以修改
    environment:
      - MYSQL_HOST=db
      - REDIS_HOST=redis
    env_file:
      - db.env
    depends_on:
      - db
      - redis

  redis:
    image: registry.cn-hangzhou.aliyuncs.com/kodcloud/redis:alpine
    restart: always

  imaginary:
    image: registry.cn-hangzhou.aliyuncs.com/kodcloud/imaginary
    restart: always
    command: >
      -enable-url-source
      -concurrency 10
      -max-allowed-resolution 500
    deploy:
      resources:
        limits:
          memory: 8g
          cpus: '4.0'

增加自定义mysql配置：

mkdir -p ./etc/mysql/conf.d && vim ./etc/mysql/conf.d/custom.cnf

进入项目目录，执行 docker compose up -d 启动服务（-d 表示后台运行）。Docker 会自动拉取镜像并创建容器：

$ docker compose up -d
Creating network "kodbox_default" with the default driver
Creating kodbox_redis_1 ... done
Creating kodbox_db_1    ... done
Creating kodbox_app_1   ... done

用 docker ps 列出正在运行的容器，正常情况下可以看到 3 个容器（应用、数据库、Redis）：

$ docker ps
CONTAINER ID   IMAGE             COMMAND                  CREATED              STATUS              PORTS                          NAMES
f596f5b00305   kodcloud/kodbox   "/entrypoint.sh /usr…"   About a minute ago   Up About a minute   0.0.0.0:80->80/tcp, 9000/tcp   kodbox_app_1
5f94f6d1aabb   mariadb           "docker-entrypoint.s…"   About a minute ago   Up About a minute   3306/tcp                       kodbox_db_1
e6296b23fb0a   redis:alpine      "docker-entrypoint.s…"   About a minute ago   Up About a minute   6379/tcp                       kodbox_redis_1

如需停止并移除所有容器（数据仍保留在挂载目录中）：

$ docker compose down
Stopping kodbox_app_1   ... done
Stopping kodbox_db_1    ... done
Stopping kodbox_redis_1 ... done
Removing kodbox_app_1   ... done
Removing kodbox_db_1    ... done
Removing kodbox_redis_1 ... done
Removing network kodbox_default

数据库和 kodbox 的数据已挂载到宿主机目录，停止后再次执行 docker compose up -d 即可恢复，数据不会丢失：

$ docker compose up -d

根据docker-compose.yml文件中配置的映射端口，访问安装向导进行系统初始化。

3. 配置 HTTPS 证书

HTTPS 会对传输内容加密，生产环境建议启用。以下提供两种方式。

方式一：宿主机 Nginx 反向代理

Nginx 是常用的 Web 服务器；反向代理指由 Nginx 接收外部 HTTPS 请求，再转发给 Docker 容器内的 HTTP 服务。

server {
    listen 80;
    listen 443 ssl http2;
    server_name example.com;

    ssl_certificate     /etc/nginx/ssl/example.com.pem;
    ssl_certificate_key /etc/nginx/ssl/example.com.key;
    ssl_protocols       TLSv1.1 TLSv1.2 TLSv1.3;
    ssl_ciphers         EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:!MD5;
    add_header Strict-Transport-Security "max-age=31536000";
    ssl_prefer_server_ciphers on;
    ssl_session_cache shared:SSL:2m;
    ssl_session_timeout 1h;
    ssl_session_tickets off;

    client_max_body_size 0;
    proxy_buffering off;

    access_log  /var/log/nginx/proxy_access.log  main;
    error_log  /var/log/nginx/proxy_error.log  info;

    location / {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Host $http_host;

        proxy_connect_timeout 3600;
        proxy_read_timeout 3600;
        proxy_send_timeout 3600;
        proxy_http_version 1.1;
        proxy_set_header Connection "";

        proxy_pass http://127.0.0.1:80/;
    }
}

方式二：将证书挂载到容器

SSL 证书用于启用 HTTPS 加密访问。创建一个证书目录，把下载的 Nginx 版 SSL 证书放入其中：

$ mkdir /etc/kodbox/ssl

将证书重命名

$ mv xxx.pem fullchain.pem
$ mv xxx.key privkey.pem

在 HTTP 版 docker-compose.yml 中增加证书目录映射 /etc/kodbox/ssl:/etc/nginx/ssl；容器检测到证书文件后会自动启用 HTTPS 配置。

$ mkdir kodbox && cd kodbox
$ vim docker-compose.yaml

version: '3.5'

services:
  db:
    image: mariadb:10.6
    restart: always
    command: --transaction-isolation=READ-COMMITTED --log-bin=binlog --binlog-format=ROW
    volumes:
      - "./db:/var/lib/mysql"       #./db是数据库持久化目录，可以修改
    environment:
      - MYSQL_ROOT_PASSWORD=
      - MARIADB_AUTO_UPGRADE=1
      - MARIADB_DISABLE_UPGRADE_BACKUP=1
    env_file:
      - db.env

  app:
    image: kodcloud/kodbox
    restart: always
    ports:
      - 443:443                      #左边80是使用端口，可以修改
    volumes:
      - "/etc/kodbox/ssl:/etc/nginx/ssl"  #左边配置主机证书目录
      - "./site:/var/www/html"      #./site是站点目录位置，可以修改
    environment:
      - MYSQL_HOST=db
      - REDIS_HOST=redis
    env_file:
      - db.env
    depends_on:
      - db
      - redis

  redis:
    image: redis:alpine
    restart: always

然后进入项目目录，执行docker compose up -d命令启动

4.其他问题

自定义容器网络及 IP 段

参考provide-static-ip-to-docker-containers-via-docker-compose

version: '3.5'

services:
  db:
    image: mariadb:10.6
    restart: always
    command: --transaction-isolation=READ-COMMITTED --log-bin=binlog --binlog-format=ROW
    volumes:
      - "./db:/var/lib/mysql"       #./db是数据库持久化目录，可以修改
    environment:
      - MYSQL_ROOT_PASSWORD=
      - MARIADB_AUTO_UPGRADE=1
      - MARIADB_DISABLE_UPGRADE_BACKUP=1
    env_file:
      - db.env
    networks:
      vpcbr:
        ipv4_address: 10.5.0.5

  app:
    image: kodcloud/kodbox
    restart: always
    ports:
      - 80:80                       #左边80是使用端口，可以修改
    volumes:
      - "./site:/var/www/html"      #./site是站点目录位置，可以修改
    environment:
      - MYSQL_HOST=db
      - REDIS_HOST=redis
    env_file:
      - db.env
    networks:
      vpcbr:
        ipv4_address: 10.5.0.6
    depends_on:
      - db
      - redis

  redis:
    image: redis:alpine
    restart: always
    networks:
      vpcbr:
        ipv4_address: 10.5.0.7

networks:
  vpcbr:
    driver: bridge
    ipam:
     config:
       - subnet: 10.5.0.0/16
         gateway: 10.5.0.1

挂载 NFS 存储卷

提示：

NFS服务端需配置no_root_squash

启动后需赋予容器对挂载目录的读写权限docker exec -it kodbox-app-1 chown -R nginx:nginx /mnt/nfs

version: '3.5'

services:
  db:
    image: mariadb:10.6
    restart: always
    command: --transaction-isolation=READ-COMMITTED --log-bin=binlog --binlog-format=ROW
    volumes:
      - "./db:/var/lib/mysql"       #./db是数据库持久化目录，可以修改
    environment:
      - MYSQL_ROOT_PASSWORD=
      - MARIADB_AUTO_UPGRADE=1
      - MARIADB_DISABLE_UPGRADE_BACKUP=1
    env_file:
      - db.env

  app:
    image: kodcloud/kodbox
    restart: always
    ports:
      - 80:80                       #左边80是使用端口，可以修改
    volumes:
      - "./site:/var/www/html"      #./site是站点目录位置，可以修改
      - nfs_mount:/mnt/nfs
    environment:
      - MYSQL_HOST=db
      - REDIS_HOST=redis
    env_file:
      - db.env
    depends_on:
      - db
      - redis

  redis:
    image: redis:alpine
    restart: always

volumes:
  nfs_mount:
    driver_opts:
      type: "nfs"
      o: "addr=192.168.1.4,nolock,rw"
      device: ":/path/to-dir"

挂载 CIFS 存储卷（SMB）

参考docker_compose_cifs_mounts

# Variables that will need to be changed:

#     <PUID> - User id for folder/file permissions

#     <PGID> - Group id for folder/file permissions

#     <PATH_TO_CONFIG> - Path where Unmanic will store config files

#     <PATH_TO_ENCODE_CACHE> - Cache path for in-progress encoding tasks

#     <REMOTE_IP> - Remote IP address of CIFS mount

#     <PATH_TO_LIBRARY> - Path in remote machine to be mounted as your library

#     <USERNAME> - Remote mount username

#     <PASSWORD> - Remote mount password

version: '3.5'

services:
  db:
    image: mariadb:10.6
    restart: always
    command: --transaction-isolation=READ-COMMITTED --log-bin=binlog --binlog-format=ROW
    volumes:
      - "./db:/var/lib/mysql"       #./db是数据库持久化目录，可以修改
    environment:
      - MYSQL_ROOT_PASSWORD=
      - MARIADB_AUTO_UPGRADE=1
      - MARIADB_DISABLE_UPGRADE_BACKUP=1
    env_file:
      - db.env

  app:
    image: kodcloud/kodbox
    restart: always
    ports:
      - 80:80                       #左边80是使用端口，可以修改
    volumes:
      - "./site:/var/www/html"      #./site是站点目录位置，可以修改
      - cifs_mount:/mnt/cifs
    environment:
      - MYSQL_HOST=db
      - REDIS_HOST=redis
      - PUID=100
      - PGID=101
    env_file:
      - db.env
    depends_on:
      - db
      - redis

  redis:
    image: redis:alpine
    restart: always

volumes:
  cifs_mount:
    driver: local
    driver_opts:
      type: cifs
      device: //<REMOTE_IP>/<PATH_TO_LIBRARY>
      o: "username=<USERNAME>,password=<PASSWORD>,uid=100,gid=101"

龙芯环境部署

注意：

首先创建一个目录作为项目目录，后面所有命令都在这个目录下执行

mkdir /kodbox && cd /kodbox

需在db.env中设置数据库密码，还有yml中的MYSQL_ROOT_PASSWORD需补充。

wget https://static.box.kodcloud.com/plugins/teamos/docker-compose-loongarch64 -O /usr/local/bin/docker-compose

chmod +x /usr/local/bin/docker-compose

创建文件来设置数据库环境变量vim db.env

MYSQL_PASSWORD=
MYSQL_DATABASE=kodbox
MYSQL_USER=kodbox

创建 compose.yml 文件，在其中配置映射端口、持久化目录

$ vim compose.yml

services:
  db:
    image: lcr.loongnix.cn/library/mariadb:10.5.18
    command: --transaction-isolation=READ-COMMITTED
    restart: always
    volumes:
      - "./db:/var/lib/mysql"       #./db是数据库持久化目录，可以修改
      # - "./etc/mysql/conf.d:/etc/mysql/conf.d"       #增加自定义mysql配置
    environment:
      - MYSQL_ROOT_PASSWORD=
      - MARIADB_AUTO_UPGRADE=1
      - MARIADB_DISABLE_UPGRADE_BACKUP=1
    env_file:
      - db.env

  app:
    image: registry.cn-hangzhou.aliyuncs.com/kodcloud/kodbox:loongarch64
    restart: always
    ports:
      - 80:80                       #左边80是使用端口，可以修改
    volumes:
      - "./site:/var/www/html"      #./site是站点目录位置，可以修改
    ulimits:
      nofile:
        soft: 51200
        hard: 51200
    environment:
      - MYSQL_HOST=db
      - REDIS_HOST=redis
    env_file:
      - db.env
    depends_on:
      - db
      - redis

  redis:
    image: lcr.loongnix.cn/library/redis:8.2.2-alpine3.21
    restart: always

进入项目目录，执行docker-compose up -d启动命令，会自动拉取容器并运行。

Docker, 容器