25. Compose 高级特性
1. 高级特性概述
Docker Compose 提供了许多高级特性，用于处理复杂的多容器应用场景，包括配置文件管理、服务扩展、健康检查、依赖控制等。
┌─────────────────────────────────────────────────────────────┐ │ Compose 高级特性 │ ├─────────────────────────────────────────────────────────────┤ │ │ │ ┌─────────────────────────────────────────────────────┐ │ │ │ 配置管理 │ │ │ │ - configs: 配置文件独立管理 │ │ │ │ - secrets: 敏感信息加密 │ │ │ │ - profiles: 条件启动服务 │ │ │ └─────────────────────────────────────────────────────┘ │ │ │ │ ┌─────────────────────────────────────────────────────┐ │ │ │ 服务扩展 │ │ │ │ - scale: 动态扩缩容 │ │ │ │ - depends_on: 启动顺序控制 │ │ │ │ - healthcheck: 健康检查 │ │ │ └─────────────────────────────────────────────────────┘ │ │ │ │ ┌─────────────────────────────────────────────────────┐ │ │ │ 网络与存储 │ │ │ │ - network_mode: host/container/none │ │ │ │ - sysctls: 内核参数调优 │ │ │ │ - devices: 设备映射 │ │ │ └─────────────────────────────────────────────────────┘ │ │ │ └─────────────────────────────────────────────────────────────┘2. 配置与密钥
2.1 Configs（配置文件）
version:'3.8'services:web:image:nginxconfigs:-source:nginx_configtarget:/etc/nginx/nginx.conf-source:app_configtarget:/app/config.jsonmode:0440configs:nginx_config:file:./nginx.confapp_config:file:./config/prod.json# 外部配置external_config:external:truename:existing-config2.2 Secrets（密钥）
version:'3.8'services:db:image:postgressecrets:-db_password-db_userenvironment:POSTGRES_PASSWORD_FILE:/run/secrets/db_passwordPOSTGRES_USER_FILE:/run/secrets/db_userapp:image:myappsecrets:-api_key-jwt_secretsecrets:db_password:file:./secrets/db_password.txtdb_user:external:truename:prod-db-userapi_key:external:true3. Profiles（配置文件）
version:'3.8'services:web:image:nginxprofiles:-production-stagingdev-tools:image:adminerprofiles:-developmentports:-"8080:8080"debug:image:nicodebo/baseprofiles:-debugcommand:sleep infinitydefault:image:alpine# 无 profiles，总是启动# 使用 profilesdocker-compose--profiledevelopment up-ddocker-compose--profileproduction up-d# 多个 profilesdocker-compose--profiledevelopment--profiledebug up-d# 启动所有docker-compose--profile"*"up-d4. 健康检查高级配置
services:web:image:nginxhealthcheck:test:["CMD","curl","-f","http://localhost"]interval:30s# 检查间隔timeout:10s# 超时时间retries:3# 失败重试次数start_period:40s# 启动缓冲期# 自定义检测脚本test:["CMD-SHELL","curl -f http://localhost || exit 1"]db:image:postgreshealthcheck:test:["CMD","pg_isready","-U","postgres"]interval:10stimeout:5sretries:5start_period:30s5. 依赖控制
5.1 高级 depends_on
services:db:image:postgreshealthcheck:test:["CMD","pg_isready"]interval:10stimeout:5sretries:5redis:image:redishealthcheck:test:["CMD","redis-cli","ping"]interval:10sapp:image:myappdepends_on:db:condition:service_healthyredis:condition:service_healthy# 等待启动完成cache:condition:service_started# 服务完成退出depends_on:migrator:condition:service_completed_successfullymigrator:image:myappcommand:npm run migrate6. 资源扩展
6.1 服务扩缩容
services:web:image:nginxdeploy:replicas:3update_config:parallelism:2# 并行更新数delay:10s# 更新延迟order:start-first# 先启动新容器再停止旧rollback_config:parallelism:1delay:5srestart_policy:condition:on-failuredelay:5smax_attempts:3window:120s# 资源配置resources:limits:cpus:'0.5'memory:512Mreservations:cpus:'0.25'memory:256M# 手动扩缩容docker-composeup--scaleweb=5-d# 查看服务状态docker-composeps7. 网络高级配置
7.1 网络模式
services:# host 模式web-host:image:nginxnetwork_mode:host# 共享其他容器网络sidecar:image:fluentdnetwork_mode:"service:web"# none 模式isolated:image:alpinenetwork_mode:none# 使用现有网络app:image:myappnetworks:-default-external-netnetworks:external-net:external:truename:my-existing-network7.2 网络定制
networks:frontend:driver:bridgedriver_opts:com.docker.network.bridge.name:front_bridgecom.docker.network.bridge.enable_icc:"true"com.docker.network.bridge.enable_ip_masquerade:"false"ipam:driver:defaultconfig:-subnet:10.10.0.0/16gateway:10.10.0.1ip_range:10.10.1.0/24labels:-"project=myapp"internal:falseattachable:true8. 系统调优
8.1 内核参数
services:app:image:myappsysctls:-net.core.somaxconn=1024-net.ipv4.tcp_syncookies=0-net.ipv4.tcp_tw_reuse=1ulimits:nproc:65535nofile:soft:20000hard:400008.2 设备映射
services:app:image:myappdevices:-"/dev/ttyUSB0:/dev/ttyUSB0"-"/dev/sda:/dev/xvda:rwm"9. 日志管理
services:web:image:nginxlogging:driver:json-fileoptions:max-size:"10m"max-file:"3"compress:"true"app:image:myapplogging:driver:syslogoptions:syslog-address:"tcp://192.168.1.100:514"syslog-facility:"local0"tag:"myapp-{{.Name}}"worker:image:myworkerlogging:driver:fluentdoptions:fluentd-address:localhost:24224tag:myapp.worker10. 完整高级示例
version:'3.8'services:web:image:nginx:alpineprofiles:["production","staging"]ports:-"80:80"configs:-source:nginx_configtarget:/etc/nginx/nginx.confsecrets:-tls_cert-tls_keyhealthcheck:test:["CMD","curl","-f","http://localhost"]interval:30stimeout:10sretries:3deploy:replicas:3update_config:parallelism:1delay:10sresources:limits:cpus:'0.5'memory:512Mlogging:driver:json-fileoptions:max-size:"10m"max-file:"3"app:image:myapp:${TAG}profiles:["development","staging","production"]depends_on:db:condition:service_healthyredis:condition:service_startedenvironment:-DB_HOST=db-REDIS_HOST=redissysctls:-net.core.somaxconn=1024ulimits:nofile:soft:20000hard:40000deploy:resources:limits:cpus:'1'memory:1Greservations:cpus:'0.5'memory:512Mdb:image:postgres:13profiles:["development","staging","production"]secrets:-db_passwordenvironment:POSTGRES_PASSWORD_FILE:/run/secrets/db_passwordvolumes:-db-data:/var/lib/postgresql/datahealthcheck:test:["CMD","pg_isready","-U","postgres"]interval:10stimeout:5sretries:5start_period:30sredis:image:redis:alpineprofiles:["development","staging","production"]command:redis-server--appendonly yesvolumes:-redis-data:/datahealthcheck:test:["CMD","redis-cli","ping"]interval:10stimeout:5sretries:3dev-tools:image:adminerprofiles:["development"]ports:-"8080:8080"depends_on:-dbprofiles:-developmentconfigs:nginx_config:file:./nginx.confsecrets:tls_cert:file:./certs/cert.pemtls_key:file:./certs/key.pemdb_password:external:truevolumes:db-data:redis-data:networks:default:driver:bridge11. 命令速查
| 命令 | 说明 |
|---|---|
docker-compose --profile dev up | 使用 profiles |
docker-compose up --scale web=5 | 扩缩容 |
docker-compose config | 查看合并配置 |
docker-compose exec web bash | 进入容器 |
docker-compose logs -f web | 查看日志 |
docker-compose events | 实时事件 |
12. 小结
- Configs/Secrets：配置和密钥管理
- Profiles：条件启动服务
- 健康检查：服务可用性检测
- 依赖控制：启动顺序和条件
- 扩缩容：动态调整实例数
- 网络高级：host/container/none 模式
- 系统调优：内核参数、文件描述符
- 日志管理：多种日志驱动
