监控docker

下载sysdig/sysdig

docker pull sysdig/sysdig

[ ~]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
sysdig/sysdig       latest              150a67cf5648        5 weeks ago         740MB

运行sysdig

[ ~]# docker container run -dit --rm --name=sysdig --privileged=true --volume=/var/run/docker.sock:/host/var/run/docker.sock --volume=/dev:/host/dev --volume=/proc:/host/proc:ro --volume=/boot:/host/boot:ro --volume=/lib/modules:/host/lib/modules:ro --volume=/usr:/host/usr:ro sysdig/sysdig
WARNING: IPv4 forwarding is disabled. Networking will not work.
56b65a31fa5512eaeab022ff20d39e4fac155d22438ce255930967d6fe7a8eef

随意的跑几个容器

[ ~]# docker run -dit --name=nginx1 nginx:latest 
WARNING: IPv4 forwarding is disabled. Networking will not work.
9bef7d9af89d25dc3722b429982f8623bc175ec8c7fb963cccef5685ef4bb7e3
[ ~]# docker run -dit --name=nginx2 nginx:latest 
WARNING: IPv4 forwarding is disabled. Networking will not work.
f6e28f285453ca30cc74c9c190072624354b97f5fd584da96ac3ca917dd55f42
[ ~]# docker run -dit --name=busybox1 busybox:latest 
WARNING: IPv4 forwarding is disabled. Networking will not work.
3b24037d4e9f10519f501ceefd2a50510f50801ce62e1052f87c675a13a6fdc9
[ ~]# docker run -dit --name=busybox2 busybox:latest 
WARNING: IPv4 forwarding is disabled. Networking will not work.
2960d028dff6a42eb4edb05fd353549d745b4c4e68c7552294b1a00d5dbb5948

下载sysdig/sysdig

docker pull sysdig/sysdig

[ ~]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
sysdig/sysdig       latest              150a67cf5648        5 weeks ago         740MB

运行sysdig

[ ~]# docker container run -dit --rm --name=sysdig --privileged=true --volume=/var/run/docker.sock:/host/var/run/docker.sock --volume=/dev:/host/dev --volume=/proc:/host/proc:ro --volume=/boot:/host/boot:ro --volume=/lib/modules:/host/lib/modules:ro --volume=/usr:/host/usr:ro sysdig/sysdig
WARNING: IPv4 forwarding is disabled. Networking will not work.
56b65a31fa5512eaeab022ff20d39e4fac155d22438ce255930967d6fe7a8eef

随意的跑几个容器

[ ~]# docker run -dit --name=nginx1 nginx:latest 
WARNING: IPv4 forwarding is disabled. Networking will not work.
9bef7d9af89d25dc3722b429982f8623bc175ec8c7fb963cccef5685ef4bb7e3
[ ~]# docker run -dit --name=nginx2 nginx:latest 
WARNING: IPv4 forwarding is disabled. Networking will not work.
f6e28f285453ca30cc74c9c190072624354b97f5fd584da96ac3ca917dd55f42
[ ~]# docker run -dit --name=busybox1 busybox:latest 
WARNING: IPv4 forwarding is disabled. Networking will not work.
3b24037d4e9f10519f501ceefd2a50510f50801ce62e1052f87c675a13a6fdc9
[ ~]# docker run -dit --name=busybox2 busybox:latest 
WARNING: IPv4 forwarding is disabled. Networking will not work.
2960d028dff6a42eb4edb05fd353549d745b4c4e68c7552294b1a00d5dbb5948

解决报错WARNING: IPv4 forwarding is disabled. Networking will not work.

解决方式：

第一步：在宿主机上执行echo "net.ipv4.ip_forward=1" >>/usr/lib/sysctl.d/00-system.conf

第二步：重启network和docker服务

[ /]# systemctl restart network && systemctl restart docker

进入容器

[ ~]# docker container exec -it sysdig bash

:/# csysdig                                ##将以交互方式启动sysdig

 可以看到我们刚才跑的所有的容器

按F2进入菜单F10退出或者是ctrl+c

Weave Scope

Weave Scope最大的特点是会自动生成docker容器的地图，让我们能够更直观理解，监控和控制容器

执行以下脚本安装运行weave scope

[ ~]# curl -L git.io/scope -o /usr/local/bin/scope
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0     0    0     0    0     0      0      0 --:--:--  0:00:06 --:--:--     0
  0     0    0     0    0     0      0      0 --:--:--  0:00:09 --:--:--     0
100   616  100   616    0     0     56      0  0:00:11  0:00:10  0:00:01   443
100 11664  100 11664    0     0    755      0  0:00:15  0:00:15 --:--:--  3400

给予执行权限

[ ~]# chmod a+x /usr/local/bin/scope

运行weave scope

访问http://192.168.172.130:4040/

可以看到我刚才运行的所有容器