Dockerfile 示例

针对AI小龙虾养殖的Docker容器维护方案,我为您设计一套完整的容器化部署和维护策略：

📦 容器化架构设计

基础镜像选择

# 安装系统依赖
RUN apt-get update && apt-get install -y \
    libgl1-mesa-glx \
    libglib2.0-0 \
    ffmpeg \
    libopencv-dev \
    && rm -rf /var/lib/apt/lists/*
# 设置工作目录
WORKDIR /app

服务分层架构

# docker-compose.yml
version: '3.8'
services:
  # 核心AI服务
  ai-processor:
    build: ./ai-service
    environment:
      - MODEL_PATH=/models/crayfish_detector_v2.pth
      - CUDA_VISIBLE_DEVICES=0
    volumes:
      - ./models:/models
      - ./data:/data
      - ./logs:/logs
    deploy:
      resources:
        reservations:
          devices:
            - driver: nvidia
              count: 1
              capabilities: [gpu]
  # 水质监测服务
  water-monitor:
    build: ./monitor-service
    depends_on:
      - ai-processor
    environment:
      - PH_THRESHOLD=6.5-8.5
      - TEMP_THRESHOLD=20-28
    devices:
      - "/dev/ttyUSB0:/dev/ttyUSB0"  # 串口设备映射
  # Web管理界面
  web-dashboard:
    build: ./dashboard
    ports:
      - "8080:80"
    volumes:
      - ./config/nginx.conf:/etc/nginx/nginx.conf

🔧 维护策略

健康检查配置

# 在Dockerfile中添加
HEALTHCHECK --interval=30s --timeout=10s --start-period=40s \
  CMD python health_check.py || exit 1

日志管理

# 日志轮转配置
docker-compose.yml 中添加：
logging:
  driver: "json-file"
  options:
    max-size: "10m"
    max-file: "5"
    tag: "{{.Name}}"
# 集中日志收集
docker run --log-driver=loki \
  --log-opt loki-url="http://localhost:3100/loki/api/v1/push" \
  your-container

监控告警

# prometheus.yml 配置
scrape_configs:
  - job_name: 'crayfish-docker'
    static_configs:
      - targets: ['ai-processor:9090', 'water-monitor:9091']
    metrics_path: '/metrics'
# 关键指标监控
- container_memory_usage_bytes
- container_cpu_usage_seconds_total
- container_network_receive_bytes_total
- custom_metrics:
    - water_quality_score
    - crayfish_activity_level

🚀 部署与更新

持续部署流水线

# .gitlab-ci.yml 示例
stages:
  - build
  - test
  - deploy
build:
  stage: build
  script:
    - docker build -t crayfish-ai:${CI_COMMIT_SHORT_SHA} .
    - docker tag crayfish-ai:${CI_COMMIT_SHORT_SHA} registry.example.com/crayfish-ai:latest
deploy:
  stage: deploy
  script:
    - docker stack deploy -c docker-compose.prod.yml crayfish
    # 蓝绿部署策略
    - ./scripts/blue-green-deploy.sh

版本更新策略

#!/bin/bash
# 滚动更新脚本
docker-compose pull
docker-compose up -d --scale ai-processor=3 --no-recreate
sleep 30
docker-compose up -d --remove-orphans

🔒 安全配置

安全最佳实践

# 使用非root用户
RUN useradd -m -s /bin/bash appuser && chown -R appuser:appuser /app
USER appuser
# 最小权限原则
COPY --chown=appuser:appuser requirements.txt .

安全扫描

# 定期扫描镜像漏洞
docker scan crayfish-ai:latest
# 使用Trivy进行安全检查
trivy image --exit-code 1 --severity HIGH,CRITICAL crayfish-ai:latest

📊 数据持久化

# 数据卷配置
volumes:
  postgres_data:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /data/crayfish/postgres
  ai_models:
    driver: local
    driver_opts:
      type: nfs
      o: addr=192.168.1.100,nfsvers=4
      device: :/nfs/models

🛠 故障恢复

自动恢复策略

# 重启策略配置
docker-compose.yml中：
restart: unless-stopped
# 或使用重启策略
restart_policy:
  condition: on-failure
  delay: 5s
  max_attempts: 3
  window: 120s

备份恢复脚本

#!/usr/bin/env python3
# backup_crayfish_data.py
import docker
from datetime import datetime
import subprocess
def backup_container_data():
    client = docker.from_env()
    # 备份数据库
    subprocess.run([
        'docker', 'exec', 'crayfish-db',
        'pg_dump', '-U', 'crayfish_admin', 'crayfish_db'
    ])
    # 备份配置和模型
    timestamp = datetime.now().strftime('%Y%m%d_%H%M%S')
    backup_file = f'crayfish_backup_{timestamp}.tar.gz'
    subprocess.run([
        'docker', 'run', '--rm',
        '-v', 'crayfish_data:/data',
        '-v', f'./backups:/backup',
        'alpine', 'tar', 'czf', f'/backup/{backup_file}', '/data'
    ])

📈 性能优化

资源限制

# 资源配额
deploy:
  resources:
    limits:
      cpus: '2'
      memory: 4G
    reservations:
      cpus: '0.5'
      memory: 512M

缓存优化

# 多阶段构建减少镜像大小
FROM pytorch/pytorch:latest as builder
# 构建阶段...
FROM python:3.10-slim
COPY --from=builder /opt/venv /opt/venv
# 最终镜像...

🎯 建议维护流程

1. 每日检查：

   • 容器状态：docker ps -a
   • 资源使用：docker stats
   • 日志审查：docker logs --tail 100 <container>

2. 每周维护：

   • 清理无用镜像：docker system prune -f
   • 更新基础镜像
   • 备份重要数据

3. 每月维护：

   • 安全补丁更新
   • 性能优化调整
   • 灾难恢复演练

这个方案可以确保您的AI小龙虾养殖系统稳定运行，同时便于维护和扩展,根据实际需求调整配置参数。

标签： Dockerfile 示例