利用python自動(dòng)生成docker nginx反向代理配置

由于在測(cè)試環(huán)境上用docker部署了多個(gè)應(yīng)用，而且他們的端口有的相同，有的又不相同，數(shù)量也比較多，在使用jenkins發(fā)版本的時(shí)候，不好配置，于是想要寫一個(gè)腳本，能在docker 容器創(chuàng)建、停止的時(shí)候，自動(dòng)生成nginx反向代理，然后reload nginx

我的原則是盡量簡(jiǎn)單，輕量，內(nèi)存占用少

目標(biāo)很明確，只要能監(jiān)聽(tīng)到docker的容器啟動(dòng)/停止事件，即可

網(wǎng)上查了一下可以用docker events來(lái)監(jiān)聽(tīng)docker事件，試了一下，發(fā)現(xiàn)基本可以滿足，于是用python寫了一段程序，用來(lái)監(jiān)聽(tīng)docker事件

python
#!/usr/bin/python
# coding: utf8
import os
import json
import re
import subprocess
 
 
def override(path, text):
  if not os.path.exists(path) and os.path.exists(path+"_temp"):
    os.rename(path+"_temp",path)
  fw = open(path+"_temp", 'wb')
  fw.write(text)
  fw.close()
  if os.path.exists(path):
    os.remove(path)
  os.rename(path+"_temp", path)
 
 
def read(path):
  try:
    fr = open(path, "rb")
  except IOError:
    print "The file don't exist, Please double check!"
    return
  lines = fr.readlines()
  ret = ''
  for line in lines:
    ret += line
  return ret
 
 
def read_jsonfile(path):
  return json.loads(read(path))
 
 
def cmd(command):
  return os.popen(command).read()
 
 
def get_name(container):
  return cmd("docker inspect -f '{{.Name}}' " + container).replace("/", "").replace('
', '')
 
 
def get_ip(container):
  return cmd("docker inspect -f '{{.NetworkSettings.IPAddress}}' " + container).replace('
', '')
 
 
def get_port(container):
  return cmd("docker inspect -f '{{.Config.ExposedPorts}}' " + container).replace('/tcp:{}]', '').replace('map[', '').replace('
', '')
 
 
def get_info(container):
  filename = "/var/lib/docker/containers/" + container + "/config.v2.json"
  config = read_jsonfile(filename)
 
  name = config['Name'].replace("/", "")
  port = config['Config']['ExposedPorts'].keys()[0].replace('/tcp', '')
  ip = cmd("docker inspect -f '{{.NetworkSettings.IPAddress}}' " + name)
  # ip = config['NetworkSettings']['Networks']['bridge']['IPAddress']
 
  ret = {'name': name, 'port': port, 'ip': ip}
  return ret
 
 
tpl = """
  server {
    listen 80;
    server_name $name.test.com;
    location / {
    proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header Host $http_host;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_pass http://$ip:$port;
    }
  }
"""
 
 
def generate_conf():
  print "generate_conf"
  out = cmd("docker ps | grep -v CONTAINER | awk '{print $1}'")
  containers = out.split("
")
  servers = ''
  hosts = ''
  for con in containers:
    if con != '':
      name = get_name(con)
      ip = get_ip(con)
      port = get_port(con)
      print ip, port
      if len(port) >= 2:
        servers += tpl.replace("$name", name).replace("$ip", ip).replace("$port", port)
        hosts += "11.12.13.14 " + name + ".test.com
"
  override('/usr/local/openresty/nginx/conf/vhost.conf', servers)
  override('/usr/local/openresty/nginx/html/vhost.html', "<pre>" + hosts + "</pre>")
 
 
def reload_nginx():
  print "reload nginx"
  cmd('nginx -s reload')
 
 
def auto_reload():
  generate_conf()
  reload_nginx()
 
print " ==================== docker events ==================== "
 
# auto_reload()
 
proc = subprocess.Popen(["docker", "events"],
            # shell=True,  # windows: true, linux: false
            stdout=subprocess.PIPE)
 
while 1:
  out = proc.stdout.readline()
  event = re.sub('(|)', "", out).split(" ")
  if out.find('container stop') != -1:
    auto_reload()
    print ' container stop '
  elif out.find('container start') != -1:
    auto_reload()
    print ' start container '
  if out == '':
    print "out "
    break

啟動(dòng)命令：

nohup ./docker.py > /dev/null 2>&1 &

程序會(huì)在后臺(tái)運(yùn)行，斷開(kāi)ssh也不會(huì)結(jié)束

主要就是生成一個(gè) conf 文件，這個(gè)文件要在nginx.conf里面引入，然后每次有容器啟動(dòng)/停止都生成這個(gè)文件，然后重啟nginx，我這了還把容器名加上一個(gè)域名，組合成了一個(gè)子域名，然后把對(duì)應(yīng)的映射關(guān)系生成了一個(gè)html文件，通過(guò)瀏覽器可以訪問(wèn)這個(gè)文件，然后把對(duì)應(yīng)的代碼 復(fù)制到本機(jī)的 hosts 文件里面，可以實(shí)現(xiàn)通過(guò)域名訪問(wèn)應(yīng)用，當(dāng)然只是開(kāi)發(fā)測(cè)試的時(shí)候會(huì)這么做，但是也足夠了。