Dockers¶

Install¶

可以使用别的安装方式，但是最简单的还是清华的安装链接

export DOWNLOAD_URL="https://mirrors.tuna.tsinghua.edu.cn/docker-ce"
curl -fsSL https://get.docker.com/ | sh

curl -SL https://github.com/docker/compose/releases/latest/download/docker-compose-linux-x86_64 -o /usr/local/bin/docker-compose
chmod +x /usr/local/bin/docker-compose

可以使用别的安装方式，但是最简单的还是

curl -fsSL https://get.docker.com -o install-docker.sh
sh install-docker.sh

curl -SL https://github.com/docker/compose/releases/latest/download/docker-compose-linux-x86_64 -o /usr/local/bin/docker-compose
chmod +x /usr/local/bin/docker-compose

Install docker-compose¶

refer to https://docs.docker.com/compose/install/standalone/

curl -SL https://github.com/docker/compose/releases/latest/download/docker-compose-linux-x86_64 -o /usr/local/bin/docker-compose

Miscellaneous¶

Proxy Settings¶

这个问题在 SJTUG（上海交通大学 Linux 用户组）发布公告称已下架 Docker Hub 镜像后更加致命，再看了如何为终端、docker 和容器设置代理 | Moralok 的博客描述后，感觉有了以下认识：

按照文档说明，如果你想要 docker-compose up或者 docker build的时候使用proxy。

see Docker daemon configuration

see Configure daemon with systemd

具体来说就是编辑 /etc/docker/daemon.json

{
  "default-address-pools": [
    {
      "base": "172.28.0.0/16",
      "size": 24
    }
  ],
  "proxies": {
    "http-proxy": "http://xxx",
    "https-proxy": "http://xxx",
    "no-proxy": "*.cn,*.edu.cn,127.0.0.0/8,172.0.0.0/8,10.0.0.0/8"
  }
}

如果你想要docker跑在proxy下面，这里的意思是docker内部的网络是跑在proxy下面

see Configure Docker to use a proxy server

编辑 ~/.docker/config.json文件

{
  "proxies": {
    "default": {
      "httpProxy": "http://xxx",
      "httpsProxy": "http://xxx",
      "noProxy": "*.cn,*.edu.cn,127.0.0.0/8,172.0.0.0/8,10.0.0.8/8"
    }
  }
}

Docker-composes¶

关于docker-compose，我个人是更支持的，因为不用每次都从头跑docker命令，很多时候还会忘记，写一个 run_docker.sh也没必要，还不如直接写 docker-compose up -d --build多么简单方便。

可以考虑从 fatedier/frp 这个页面查看当前的版本号和OS操作系统的名字。例如,

ENV FRP_VERSION 0.49.0
ENV OS linux_arm64

frp¶

frp主要包括客户端的 frpc和服务端的 frps, 其主要是实现内网穿透的工具。这里是他的项目链接 frp/github

虽然有一些frp的docker, 但是有时候更新不是很及时。所以自己写了一个简单的，查看如下。

frpc¶

curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/frp/frpc/Dockerfile
curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/frp/frpc/docker-compose.yml

frps¶

curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/frp/frps/Dockerfile
curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/frp/frps/docker-compose.yml

server_status¶

curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/server_status/Dockerfile
curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/server_status/docker-compose.yml

server_status_rust¶

curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/server_status_rust/Dockerfile
curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/server_status_rust/docker-compose.yml

rathole¶

Github

rathole client¶

curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/rathole/client/Dockerfile
curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/rathole/client/docker-compose.yml
curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/rathole/client/client.toml

rathole server¶

curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/rathole/server/Dockerfile
curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/rathole/server/docker-compose.yml
curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/rathole/server/server.toml

Adhomeguard¶

这个服务主要是用来改进dns服务。可以去广告，并且通过多个dns的整合和缓存，加速。

一些有用的链接：

Cats-Team/AdRules

curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/adguradhome/docker-compose.yml
curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/adguradhome/AdGuardHome.yaml

配置文件, 这个可以帮助快速设置一些常见的过滤器, 放在 docker-compose.yml对应的文件夹下面的 conf目录下:

AdGuardHome.yaml

http:
  pprof:
    port: 6060
    enabled: false
  address: 0.0.0.0:3000
  session_ttl: 720h
users:
  - name: admin
    password: xxx 
auth_attempts: 5
block_auth_min: 15
http_proxy: ""
language: zh-cn
theme: auto
dns:
  bind_hosts:
    - 0.0.0.0
  port: 53
  anonymize_client_ip: false
  ratelimit: 20
  ratelimit_whitelist: []
  refuse_any: true
  upstream_dns:
    - tls://dns.alidns.com
    - https://dns.alidns.com/dns-query
    - 223.5.5.5
    - 119.29.29.29
    - 114.114.114.114
  upstream_dns_file: ""
  bootstrap_dns:
    - 223.5.5.5
  fallback_dns:
    - 223.5.5.5
    - 119.29.29.29
    - 114.114.114.114
  all_servers: false
  fastest_addr: false
  fastest_timeout: 1s
  allowed_clients: []
  disallowed_clients: []
  blocked_hosts:
    - version.bind
    - id.server
    - hostname.bind
  trusted_proxies:
    - 127.0.0.0/8
    - ::1/128
  cache_size: 4194304
  cache_ttl_min: 0
  cache_ttl_max: 0
  cache_optimistic: false
  bogus_nxdomain: []
  aaaa_disabled: false
  enable_dnssec: false
  edns_client_subnet:
    custom_ip: ""
    enabled: false
    use_custom: false
  max_goroutines: 300
  handle_ddr: true
  ipset: []
  ipset_file: ""
  bootstrap_prefer_ipv6: false
  upstream_timeout: 10s
  private_networks: []
  use_private_ptr_resolvers: true
  local_ptr_upstreams: []
  use_dns64: false
  dns64_prefixes: []
  serve_http3: false
  use_http3_upstreams: false
tls:
  enabled: false
  server_name: ""
  force_https: false
  port_https: 443
  port_dns_over_tls: 853
  port_dns_over_quic: 784
  port_dnscrypt: 0
  dnscrypt_config_file: ""
  allow_unencrypted_doh: false
  certificate_chain: ""
  private_key: ""
  certificate_path: ""
  private_key_path: ""
  strict_sni_check: false
querylog:
  ignored: []
  interval: 24h
  size_memory: 1000
  enabled: true
  file_enabled: true
statistics:
  ignored: []
  interval: 24h
  enabled: true
filters:
  - enabled: true
    url: https://adguardteam.github.io/AdGuardSDNSFilter/Filters/filter.txt
    name: AdGuard Simplified Domain Names filter
    id: 1
  - enabled: true
    url: https://adaway.org/hosts.txt
    name: AdAway
    id: 2
  - enabled: true
    url: https://easylist-downloads.adblockplus.org/easyprivacy.txt
    name: easyprivacy隐私
    id: 1633345725
  - enabled: true
    url: https://www.i-dont-care-about-cookies.eu/abp/
    name: I don't care about cookies
    id: 1633345726
  - enabled: true
    url: https://easylist-downloads.adblockplus.org/easylistchina.txt
    name: easylistchina
    id: 1633345727
  - enabled: true
    url: https://raw.githubusercontent.com/cjx82630/cjxlist/master/cjx-annoyance.txt
    name: CJX’s Annoyance List
    id: 1637754807
  - enabled: true
    url: https://easylist-downloads.adblockplus.org/easylist.txt
    name: EasyList
    id: 1698895129
whitelist_filters: []
user_rules: []
dhcp:
  enabled: false
  interface_name: ""
  local_domain_name: lan
  dhcpv4:
    gateway_ip: ""
    subnet_mask: ""
    range_start: ""
    range_end: ""
    lease_duration: 86400
    icmp_timeout_msec: 1000
    options: []
  dhcpv6:
    range_start: ""
    lease_duration: 86400
    ra_slaac_only: false
    ra_allow_slaac: false
filtering:
  blocking_ipv4: ""
  blocking_ipv6: ""
  blocked_services:
    schedule:
      time_zone: Asia/Shanghai
    ids: []
  protection_disabled_until: null
  safe_search:
    enabled: false
    bing: true
    duckduckgo: true
    google: true
    pixabay: true
    yandex: true
    youtube: true
  blocking_mode: default
  parental_block_host: family-block.dns.adguard.com
  safebrowsing_block_host: standard-block.dns.adguard.com
  rewrites: []
  safebrowsing_cache_size: 1048576
  safesearch_cache_size: 1048576
  parental_cache_size: 1048576
  cache_time: 30
  filters_update_interval: 24
  blocked_response_ttl: 10
  filtering_enabled: true
  parental_enabled: false
  safebrowsing_enabled: false
  protection_enabled: true
clients:
  runtime_sources:
    whois: true
    arp: true
    rdns: true
    dhcp: true
    hosts: true
  persistent: []
log:
  file: ""
  max_backups: 0
  max_size: 100
  max_age: 3
  compress: false
  local_time: false
  verbose: false
os:
  group: ""
  user: ""
  rlimit_nofile: 0
schema_version: 27

Aria filebrowser(TODO)¶

这个是设置的aria-pro和filebrowser

traefik¶

这个服务可以很好配合docker完成不同域名的转发工作，从而替代nginx。

curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/traefik/docker-compose.yml

为了配合 authentik 的使用，还需要添加如下中间件 tls.yml和 route.yml

mkdir -p traefik_conf
curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/traefik/traefik_conf/tls.yml
curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/traefik/traefik_conf/route.yml

prom+grafana (TODO)¶

可视化监控，

curl -OL https://raw.githubusercontent.com/hotchilipowder/my_config/main/dockers/prom-grafana/docker-compose.yml

Build My Docker Dev¶

由于经常要开启一些data science的项目，因此编写了一套自己的 cookie-cutter的模板。请参见: :logo-github: