In ubuntu, we start a docker container, try to find docker networking namespace via "ip netns list". The output is empty.
The docker by default , it records netns on /var/run/docker/netns. While "ip netns list" is checking /var/run/netns
stop all containers , rm -rf /var/run/netns, ln -s /var/run/docker/netns /var/run/netns
Tip:
To find netns id of container use
docker ps ---> find container ID
docker inspect <contain ID> |grep netns
With istioctl, it has built-in manifests. However, these manifests or docker images may not be accessible in the corporate network, or users use other docker repo other than docker.io. How to install it?
FROM oraclelinux:7-slim
RUN yum -y --setopt=tsflags=nodocs update && \
yum -y --setopt=tsflags=nodocs install httpd && \
yum -y --setopt=tsflags=nodocs install mod_ssl && \
yum clean all
EXPOSE 80
RUN ln -sf /proc/self/fd/1 /var/log/httpd/error_log && \
ln -sf /proc/self/fd/1 /var/log/httpd/access_log
RUN groupadd www-data && useradd -g www-data www-data
RUN chmod 755 -R /etc/pki && chown -hR www-data:www-data /etc/httpd/ && chown -hR www-data:www-data /run/httpd/ && chown -hR www-data:www-data /var/www/ && chown -hR www-data:www-data /var/log/httpd/
#setcap to bind to privileged ports as non-root
RUN setcap 'cap_net_bind_service=+ep' /usr/sbin/httpd && getcap /usr/sbin/httpd
ADD run-httpd.sh /run-httpd.sh
RUN chown www-data:www-data /run-httpd.sh
USER 1000
CMD ["/run-httpd.sh"]run-httpd.sh :#!/bin/bashexec /usr/sbin/apachectl -DFOREGROUNDtail -f /var/log/httpd/access_log
securityContext: runAsUser: 54321 fsGroup: 54321
box: postgres:9.3
build:
steps:
- internal/docker-build:
dockerfile: Postgres-Dockerfile
image-name: postgresimage
- internal/docker-push:
# specify the image to be pushed - this is the one we created earlier
image-name: postgresimage
username: $OCIRUSERNAME # Registry username
password: $OCIRPASSWORD # Registry password
registry: https://iad.ocir.io/v2
repository: $IRIDIZEREPO
tag: $VERSION
FROM postgres:9.3
RUN mkdir -p /var/lib/postgresql-static-test/data
ENV PGDATA /var/lib/postgresql-static-test/data
curl -L https://s3.amazonaws.com/downloads.wercker.com/cli/stable/linux_amd64/wercker -o /usr/local/bin/wercker
chmod u+x /usr/local/bin/wercker
kubectl label nodes instance-cas-db2 dbhost=livesqlsb
kubectl label nodes instance-cas-mt2 mthost=livesqlsb
---
apiVersion: v1
kind: PersistentVolume
metadata:
name: livesqlsb-pv-volume1
labels:
type: local
spec:
storageClassName: manual
capacity:
storage: 10Gi
accessModes:
- ReadWriteOnce
hostPath:
path: "/u03/LTEST/oradata"
---
apiVersion: v1
kind: PersistentVolume
metadata:
name: livesqlsb-pv-volume2
labels:
type: local
spec:
storageClassName: manual
capacity:
storage: 200Gi
accessModes:
- ReadWriteOnce
hostPath:
path: "/u03/ALTEST/oradata"
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: livesql-pv-claim2
spec:
storageClassName: manual
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 200Gi
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: livesql-pv-claim1
spec:
storageClassName: manual
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 10Gi
apiVersion: v1
kind: Service
metadata:
labels:
app: livesqlsb-db
name: livesqlsb-db-service
namespace: default
spec:
clusterIP: None
ports:
- port: 1521
protocol: TCP
targetPort: 1521
selector:
app: livesqlsb-db
apiVersion: v1
kind: Pod
metadata:
name: livesqlsb-db
labels:
app: livesqlsb-db
spec:
volumes:
- name: livesqlsb-db-pv-storage1
persistentVolumeClaim:
claimName: livesql-pv-claim1
- name: livesqlsb-db-pv-storage2
persistentVolumeClaim:
claimName: livesql-pv-claim2
containers:
- image: oracle/database:18.3v2
name: livesqldb
ports:
- containerPort: 1521
name: livesqldb
volumeMounts:
- mountPath: /opt/oracle/oradata
name: livesqlsb-db-pv-storage1
- mountPath: /u02/app/oracle/oradata
name: livesqlsb-db-pv-storage2
env:
- name: ORACLE_SID
value: "LTEST"
- name: ORACLE_PDB
value: "ltestpdb"
nodeSelector:
dbhost: livesqlsb
apiVersion: v1
kind: Service
metadata:
labels:
name: apexords-service
name: apexords-service
spec:
ports:
- port: 7777
targetPort: 8888
nodePort: 30301
selector:
name: apexords-service
type: NodePort
apiVersion: v1Before moving into K8S, access url is http://<hostname>:7777/ords/
kind: Pod
metadata:
name: apexords
labels:
name: apexords-service
spec:
containers:
- name: apexords
image: oracle/apexords:v5
imagePullPolicy: IfNotPresent
ports:
- containerPort: 8888
name: apexords
nodeSelector:
mthost: livesqldbsb
docker run -itd --name testdb -p 1528:1521 -p 5500:5500 -e ORACLE_SID=LTEST -e ORACLE_PDB=ltestpdb -e ORACLE_PWD=<password> -v /u01/build/db18.3/oradata:/opt/oracle/oradata oracle/database:18.3.0-ee
@apexins SYSAUX SYSAUX TEMP /i/
— Run the apex_rest_config command
@apex_rest_config.sql
- Change and unlock the apex related accounts
- alter user APEX_180100 identified by <password>;
- alter user APEX_INSTANCE_ADMIN_USER identified by <password>;
- alter user APEX_LISTENER identified by <password>;
- alter user APEX_PUBLIC_USER identified by <password>;
- alter user APEX_REST_PUBLIC_USER identified by <password>;
- alter user APEX_180100 account unlock;
- alter user APEX_INSTANCE_ADMIN_USER account unlock;
- alter user APEX_LISTENER account unlock;
- alter user APEX_PUBLIC_USER account unlock;
- alter user APEX_REST_PUBLIC_USER account unlock;
docker run -itd --name testords1 \
--network=ltest_network \
-p 7777:8888 \
-e ORACLE_HOST=<hostname> \
-e ORACLE_PORT=1528 \
-e ORACLE_SERVICE=ltestpdb \
-e ORACLE_PWD= <password> \
-e ORDS_PWD=<password> \
-v /u01/build/ords/config/ords:/opt/oracle/ords/config/ords \
oracle/restdataservices:v1
spec:
containers:
- name: helloworld
# enter the path to your image, be sure to include the correct region prefix
image: <region-code>.ocir.io/<tenancy-namespace>/<repo-name>/<image-name>:<tag>
ports:
- containerPort: 80
imagePullSecrets:
# enter the name of the secret you created
- name: <secret-name>
[Service]
Environment="HTTP_PROXY=http://proxy.example.com:80/"