实训05 企业CRM系统容器化部署

docker pull nginx:alpine      # 62.4MB
docker pull mysql:8.0         # 799MB
docker pull redis:7-alpine    # 39.1MB
docker pull python:3.11-slim  # 125MB

docker run -d --name mynginx --privileged -p 8080:80 nginx:alpine

# 创建数据卷
docker volume create myvol

# 挂载数据卷启动容器
docker run -d --name mynginx --privileged -p 8080:80 -v myvol:/usr/share/nginx/html nginx:alpine

# 在宿主机修改文件
echo '<h1>Hello from Volume</h1>' > /var/lib/docker/volumes/myvol/_data/index.html

# 验证容器内能看到修改
docker exec mynginx cat /usr/share/nginx/html/index.html

docker rm -f mynginx
docker run -d --name mynginx --privileged -p 8080:80 -v myvol:/usr/share/nginx/html nginx:alpine
docker exec mynginx cat /usr/share/nginx/html/index.html   # 仍显示 Hello from Volume

docker network ls
docker network create crm-network

docker run -d --name nginx-net --network crm-network --privileged nginx:alpine
docker run -dit --name alpine-net --network crm-network alpine
docker exec alpine-net ping -c 3 nginx-net    # 0% packet loss ✅

docker network create other-network
docker run -dit --name alpine-other --network other-network alpine
docker exec alpine-other ping -c 3 nginx-net   # bad address ❌

from flask import Flask, jsonify
app = Flask(__name__)

@app.route('/')
def index():
    return jsonify({"service": "crm-api", "status": "ok", "msg": "CRM backend running"})

if __name__ == '__main__':
    app.run(host='0.0.0.0', port=5000)

version: "3.8"

services:
  nginx:
    image: nginx:alpine
    container_name: crm-nginx
    privileged: true
    ports:
      - "80:80"
    networks:
      - crm-network
    depends_on:
      - api
    healthcheck:
      test: ["CMD", "wget", "-qO-", "http://localhost:80"]
      interval: 10s
      timeout: 5s
      retries: 3

  api:
    image: python:3.11-slim
    container_name: crm-api
    working_dir: /app
    volumes:
      - ./api:/app
    ports:
      - "5000:5000"
    environment:
      FLASK_APP: app.py
      FLASK_ENV: production
      MYSQL_HOST: 10.4.0.20
      REDIS_HOST: 10.4.0.20
    networks:
      - crm-network
    command: sh -c "pip install -i https://mirrors.aliyun.com/pypi/simple flask && flask run --host=0.0.0.0 --port=5000"
    healthcheck:
      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:5000')"]
      interval: 15s
      timeout: 5s
      retries: 5
      start_period: 40s

networks:
  crm-network:
    driver: bridge

cd /data/crm
docker compose up -d
docker compose ps

docker compose logs --tail 30

from flask import Flask, jsonify, request
import os

app = Flask(__name__)

# 环境变量（通过 docker run -e 传入）
MYSQL_HOST = os.environ.get('MYSQL_HOST', 'localhost')
MYSQL_USER = os.environ.get('MYSQL_USER', 'root')
MYSQL_PASSWORD = os.environ.get('MYSQL_PASSWORD', '')
MYSQL_DB = os.environ.get('MYSQL_DB', 'crm')
REDIS_HOST = os.environ.get('REDIS_HOST', 'localhost')

# 示例数据（MySQL/Redis 不可用时降级使用）
SAMPLE_CUSTOMERS = [
    {"id": 1, "name": "张三", "phone": "13800000001", "email": "zhangsan@example.com"},
    {"id": 2, "name": "李四", "phone": "13800000002", "email": "lisi@example.com"},
    {"id": 3, "name": "王五", "phone": "13800000003", "email": "wangwu@example.com"},
]

@app.route('/api/customers', methods=['GET'])
def get_customers():
    """返回客户列表"""
    source = "sample"
    error = None
    try:
        import pymysql
        conn = pymysql.connect(host=MYSQL_HOST, user=MYSQL_USER,
                               password=MYSQL_PASSWORD, database=MYSQL_DB)
        cursor = conn.cursor(pymysql.cursors.DictCursor)
        cursor.execute("SELECT id, name, phone, email FROM customers")
        data = cursor.fetchall()
        conn.close()
        source = "mysql"
    except Exception as e:
        try:
            import redis
            r = redis.Redis(host=REDIS_HOST, port=6379, db=0)
            keys = r.keys("customer:*")
            data = [json.loads(r.get(k)) for k in keys] if keys else SAMPLE_CUSTOMERS
            source = "redis" if keys else "sample"
            error = str(e)
        except Exception as e2:
            data = SAMPLE_CUSTOMERS
            error = f"{str(e)}; {str(e2)}"
    return jsonify({"data": data, "error": error, "source": source})

@app.route('/health', methods=['GET'])
def health():
    """健康检查：验证 MySQL 和 Redis 连接"""
    status = {"mysql": False, "redis": False}
    try:
        import pymysql
        conn = pymysql.connect(host=MYSQL_HOST, user=MYSQL_USER,
                               password=MYSQL_PASSWORD, database=MYSQL_DB)
        conn.close()
        status["mysql"] = True
    except: pass
    try:
        import redis
        r = redis.Redis(host=REDIS_HOST, port=6379, db=0)
        r.ping()
        status["redis"] = True
    except: pass
    return jsonify(status)

if __name__ == '__main__':
    app.run(host='0.0.0.0', port=5000)

<!DOCTYPE html>
<html lang="zh-CN">
<head>
<meta charset="UTF-8">
<title>CRM 客户管理系统</title>
<style>
  body { font-family: -apple-system, "Microsoft YaHei", sans-serif; margin: 40px; background: #f5f6fa; }
  h1 { color: #2c3e50; }
  table { border-collapse: collapse; width: 100%; background: #fff; box-shadow: 0 1px 4px rgba(0,0,0,.1); }
  th, td { padding: 12px 16px; border-bottom: 1px solid #eee; text-align: left; }
  th { background: #3498db; color: #fff; }
  #src { color: #888; font-size: 13px; margin-top: 10px; }
</style>
</head>
<body>
<h1>CRM 客户列表</h1>
<table>
  <thead><tr><th>ID</th><th>姓名</th><th>邮箱</th><th>电话</th></tr></thead>
  <tbody id="rows"><tr><td colspan="4">加载中...</td></tr></tbody>
</table>
<div id="src"></div>
<script>
fetch('/api/customers').then(r=>r.json()).then(d=>{
  document.getElementById('rows').innerHTML =
    d.data.map(c=>`<tr><td>${c.id}</td><td>${c.name}</td><td>${c.email}</td><td>${c.phone}</td></tr>`).join('');
  document.getElementById('src').textContent='数据来源: '+d.source;
});
</script>
</body>
</html>

FROM python:3.11-slim

# 设置工作目录
WORKDIR /app

# 先复制依赖文件（利用 Docker 构建缓存）
COPY requirements.txt .

# 安装依赖并清理缓存（镜像体积优化）
RUN pip install --no-cache-dir -i https://mirrors.aliyun.com/pypi/simple -r requirements.txt

# 复制应用代码
COPY app.py .

# 创建非 root 用户运行（安全加固）
RUN useradd -m -s /bin/bash appuser && chown -R appuser:appuser /app
USER appuser

# 暴露端口
EXPOSE 5000

# 健康检查
HEALTHCHECK --interval=15s --timeout=5s --retries=3 \
  CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:5000')" || exit 1

# 启动命令
CMD ["python", "app.py"]

cd /data/crm-source/backend
docker build -t crm-api:v1 .

FROM nginx:alpine

# 复制前端页面到 nginx 网站目录
COPY index.html /usr/share/nginx/html/index.html
# 复制反向代理配置（覆盖默认配置）
COPY nginx.conf /etc/nginx/conf.d/default.conf

EXPOSE 80

HEALTHCHECK --interval=15s --timeout=5s --retries=3 \
  CMD wget -qO- http://localhost:80 || exit 1

CMD ["nginx", "-g", "daemon off;"]

cd /data/crm-source/frontend
docker build -t crm-frontend:v1 .

# 清理旧容器
docker rm -f mynginx nginx-net alpine-net alpine-other crm-nginx crm-api 2>/dev/null

# 创建自定义网络
docker network create crm-net 2>/dev/null || true

# 启动后端 API 容器
docker run -d --name crm-api --network crm-net \
  -e MYSQL_HOST=10.4.0.20 -e MYSQL_USER=crm_user -e MYSQL_PASSWORD=Crm@123456 \
  -e MYSQL_DB=crm -e REDIS_HOST=10.4.0.20 \
  crm-api:v1

# 启动前端容器（映射宿主机 80 端口）
docker run -d --name crm-frontend --network crm-net -p 80:80 --privileged crm-frontend:v1

docker ps

{
  "registry-mirrors": ["https://docker.1panel.live","https://docker.1ms.run","https://docker.m.daocloud.io"],
  "insecure-registries": ["10.4.0.20"]
}

docker login 10.4.0.20 -u admin -p Harbor12345
# Login Succeeded

docker tag crm-api:v1        10.4.0.20/crm/crm-api:v1
docker tag crm-api:v1        10.4.0.20/crm/crm-api:latest
docker tag crm-api:v1        10.4.0.20/crm/crm-api:20260724
docker tag crm-frontend:v1   10.4.0.20/crm/crm-frontend:v1
docker tag crm-frontend:v1   10.4.0.20/crm/crm-frontend:latest

docker push 10.4.0.20/crm/crm-api:v1
docker push 10.4.0.20/crm/crm-api:latest
docker push 10.4.0.20/crm/crm-api:20260724
docker push 10.4.0.20/crm/crm-frontend:v1
docker push 10.4.0.20/crm/crm-frontend:latest
# 全部 Pushed；crm-api digest=97e067de…、crm-frontend digest=d024de9a…

docker logs crm-api                      # 全部日志（已导出 /tmp/crm-api-all.log，170 行）
docker logs --tail 100 crm-api           # 最近 100 行
docker logs --since 30m crm-api          # 按时间范围过滤
docker logs --since '2026-07-24T10:00:00' crm-api > /tmp/crm-api-since.log  # 过滤后导出
docker logs -f --tail 5 crm-api          # 实时跟踪（Ctrl+C 退出）

docker top crm-api
# UID   PID    CMD
# vm4   60217  python app.py

docker exec crm-api env | grep -iE 'MYSQL|REDIS|PORT|HOST'
# REDIS_HOST=10.4.0.20  REDIS_PASSWORD=Redis@123456
# MYSQL_HOST=10.4.0.20   MYSQL_USER=crm_user  MYSQL_PASSWORD=Crm@123456  MYSQL_DB=crm

# 容器内网络：TCP 连通 VM3 数据库
docker exec crm-api sh -c 'python3 -c "import socket;s=socket.create_connection((\"10.4.0.20\",3306),3);print(\"VM3:3306 连通 OK\")"'
# VM3:3306 连通 OK

# 容器间互访：crm-frontend → crm-api
docker exec crm-frontend wget -qO- http://127.0.0.1:5000/health
# {"mysql":true,"redis":true}

docker stats --no-stream
# NAME         CPU %   MEM USAGE / LIMIT      MEM %
# crm-api      0.02%   32.11MiB / 1.777GiB    1.76%
# crm-frontend 0.00%   2.59MiB / 1.777GiB     0.14%

ss -tlnp | grep ':5000'
# LISTEN *:5000 users:(("python",pid=60217,fd=3))   ← crm-api 已占 5000
docker run -d --name fault-port -p 5000:5000 crm-api:v1
# docker: Error response ... bind: address already in use

docker run -d --name fault-db -p 5001:5000 -e MYSQL_HOST=10.4.0.250 crm-api:v1
docker logs fault-db | grep -iE 'error|mysql|connect|route'
# (2003, "Can't connect to MySQL server on '10.4.0.250' ([Errno 113] No route to host)")
docker exec fault-db env | grep MYSQL_HOST
# MYSQL_HOST=10.4.0.250   ← 配置源头错误
curl -s 127.0.0.1:5001/health
# {"mysql":false,"redis":false}

docker run --name fault-exit crm-api:v1 python -c "print('config.yaml 缺失, 进程退出'); import sys; sys.exit(3)"
docker ps -a | grep fault-exit
# fault-exit   Exited (3)
docker logs fault-exit
# config.yaml 缺失, 进程退出

docker run -d --name res-limit --memory=256m --cpus=0.5 crm-api:v1
docker stats --no-stream
# NAME        CPU %   MEM USAGE / LIMIT     MEM %
# res-limit   0.03%   29.55MiB / 256MiB     11.54%   ← 限制生效
# crm-api     0.02%   32.11MiB / 1.777GiB   1.76%   ← 未限制(宿主机全量)

cd /root/crm/backend && docker build -t crm-api:v1 .       # 成功 → IMAGE ID cf2db70df47c (146MB)
cd /root/crm/frontend && docker build -t crm-frontend:v1 . # 成功 → IMAGE ID bf35383d6175 (62.4MB)

docker tag crm-api:v1 10.4.0.20/crm/crm-api:v1
docker tag crm-api:v1 10.4.0.20/crm/crm-api:latest
docker tag crm-api:v1 10.4.0.20/crm/crm-api:20260724
docker tag crm-frontend:v1 10.4.0.20/crm/crm-frontend:v1
docker tag crm-frontend:v1 10.4.0.20/crm/crm-frontend:latest
docker push 10.4.0.20/crm/crm-api:v1   # Pushed
docker push 10.4.0.20/crm/crm-frontend:v1
# ...（共 5 个 tag 全部 Pushed）
# 验证：删除本地 tag 后 docker pull 10.4.0.20/crm/crm-api:20260724 → Downloaded newer image ✅

[{"id":1,"name":"速达物流","contact":"138...","source":"mysql"}, ...]