Skip to content

Portainer and Agent

准备工作

创建配置文件

portainer-stack.yml
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
version: "3.9"

services:
  agent:
    image: portainer/agent
    networks:
      - agent_network
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - /var/lib/docker/volumes:/var/lib/docker/volumes
    environment:
      - AGENT_SECRET=${AGENT_SECRET}
    deploy:
      mode: global
      placement:
        constraints: [node.platform.os == linux]

  portainer:
    image: portainer/portainer-ce
    command: -H tcp://tasks.agent:9001 --tlsskipverify
    networks:
      - agent_network
      - proxy
    ports:
      - 9000:9000
    volumes:
      - portainer_data:/data
    environment:
      - AGENT_SECRET=${AGENT_SECRET}
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints: [node.role == manager]
      labels:
        - traefik.enable=true
        - traefik.http.routers.portainer.entryPoints=web
        - traefik.http.routers.portainer.rule=HostRegexp(`{host:^portainer.*}`)
        - traefik.http.services.portainer.loadbalancer.server.port=9000

networks:
  agent_network:
    driver: overlay
    attachable: true
  proxy:
    external: true

volumes:
  portainer_data:
    driver_opts:
      type: nfs
      o: addr=10.0.0.30,rw,nfsvers=4
      device: :/nfs/volumes-dev/portainer_data

部署运行

设置 AGENT_SECRET 变量 : 当 Portainer 和 Agent 此变量值不同时拒绝连接

加入 proxy 网络 : 为使用 Traefik 代理 Portainer 做准备

Bash
1
2
3
export AGENT_SECRET=123456
docker network create --driver overlay proxy --attachable
docker stack deploy -c portainer-stack.yml portainer