Docker:除非我手动重启,否则MySQL会拒绝主机IP

Question

这是我的Dockerfile:

FROM debian:jessie-backports

RUN apt-get update --yes && apt-get upgrade --yes
RUN DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \ 
  git \
  curl \
  build-essential\
  libssl-dev\
  ca-certificates\
  mysql-server\
  redis-server\
  elasticsearch

USER root

ENV HOME /root

# MYSQL SETUP
RUN sed -i -e"s/^bind-address\s*=\s*127.0.0.1/#bind-address = 0.0.0.0/" /etc/mysql/my.cnf
RUN sed -i -e"s/^#max_connections\s*=\s*100/max_connections = 200/" /etc/mysql/my.cnf
RUN echo "\n[mysqld]\nskip-grant-tables\n" >> /etc/mysql/my.cnf
VOLUME ["/var/lib/mysql", "/var/log/mysql"]

EXPOSE 3306

# REDIS SETUP
RUN echo "daemonize yes\nbind 0.0.0.0" >> /etc/redis/redis-serve.conf

RUN sed 's/^daemonize no/daemonize yes/' -i /etc/redis/redis.conf \
 && sed 's/^bind 127.0.0.1/bind 0.0.0.0/' -i /etc/redis/redis.conf \
 && sed 's/^# unixsocket /unixsocket /' -i /etc/redis/redis.conf \
 && sed 's/^# unixsocketperm 755/unixsocketperm 777/' -i /etc/redis/redis.conf \
 && sed '/^logfile/d' -i /etc/redis/redis.conf

VOLUME ["/var/lib/redis", "/var/log/redis"]

EXPOSE 6379 6380

# ELASTICSEARCH SETUP

RUN sed 's/^#START_DAEMON=true/START_DAEMON=true/' -i /etc/default/elasticsearch

VOLUME ["/opt/elasticsearch/data", "/opt/elasticsearch/logs"]

EXPOSE 9200 9300

ADD docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
RUN chmod 777 /usr/local/bin/docker-entrypoint.sh
ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]

入口点:

#!/bin/bash

/etc/init.d/mysql start
/etc/init.d/redis-server start
/etc/init.d/elasticsearch start
/bin/bash

我正在运行的命令启动容器:

docker run -i -t -p 3306:3306 -p 6379:6379 -p 9200:9200 -p 9300:9300 assethost

我想从主机连接到容器中运行的MySQL服务器,但这是我尝试连接时发生的情况:

ERROR 1130 (HY000): Host '192.168.99.1' is not allowed to connect to this MySQL server

Redis和Elasticsearch都暴露自己很好.如果我从运行容器时从入口点出来的Bash shell手动重启它,MySQL才会开始接受外部主机.我必须跑/etc/init.d/mysql restart.只有这样,我才能使用MySQL客户端从主机成功连接.

请注意,我使用的是docker-machine,所以我必须给MySQL客户端提供主机IP才能连接.

如何能够从主机连接到容器中运行的MySQL实例,而无需手动重启MySQL？

Docker版本1.12.1,build 23cf638

Answer 1

我找到了一种方法来在启动时应用skip-grant-tables选项。

解决方法

在 docker-entrypoint.sh 中，我 /etc/init.d/mysql start改为

HOME=/etc/mysql /usr/bin/mysqld_safe > /dev/null 2>&1 &

其他变化

由于 my.cnf 中已经有一个[mysqld]部分，因此我在 Dockerfile 中更改了以下行 RUN echo "\n[mysqld]\nskip-grant-tables\n" >> /etc/mysql/my.cnf

到

RUN sed -i '/\[mysqld\]/ a skip-grant-tables\nskip-name-resolve' /etc/mysql/my.cnf

我添加了skip-name-resolve这样 mysql 不会尝试解析本地 IP 地址的名称。

注意事项

/etc/init.d/mysql restart该解决方法在执行时不再起作用，但/etc/init.d/mysql stop; /etc/init.d/mysql start保留了“skip-grant-tables”选项。