qq296015668

难道是网段冲突？关闭 docker 你的 ssh 能恢复？

emmm ，其实不止。
你可以试试挂个 dns 啥的，看看能活几分钟。。。

@dolphintwo
Nexus3 确实省事

这个应该看 github.com/docker/docker 的代码实现吧

配置文件大概如下
```elasticsearch.yml
cluster.name: "docker-cluster"
network.host: 0.0.0.0
logger.level: ERROR

xpack.security.enabled: true
xpack.security.http.ssl.enabled: true
xpack.security.http.ssl.keystore.path: elastic-certificates.p12
xpack.security.http.ssl.truststore.path: elastic-certificates.p12

xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: elastic-certificates.p12
ingest.geoip.downloader.enabled: false
```

需要的证书可以从 es 容器里面直接生成
```sh
docker run --name es --rm -it elasticsearch:8.6.2 bash
bin/elasticsearch-certutil cert -out config/elastic-certificates.p12 -pass ""
exit
```
```
mkdir certs
docker cp es:/usr/share/elasticsearch/config/elastic-certificates.p12 ./certs/
docker stop es
chown -R 1000:root certs/
```

然后把证书挂载到容器 /usr/share/elasticsearch/config/elastic-certificates.p12
```sh
docker run --name es --restart=always -d \
-p 0.0.0.0:9200:9200 \
-p 0.0.0.0:9300:9300 \
-e "discovery.type=single-node" \
-e "ES_JAVA_OPTS=-Xms512m -Xmx512m -Dlog4j2.formatMsgNoLookups=true" \
-v $(pwd)/es/data:/usr/share/elasticsearch/data
-v $(pwd)/es/config/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml \
-v $(pwd)/es/certs/elastic-certificates.p12:/usr/share/elasticsearch/config/elastic-certificates.p12 \
docker.elastic.co/elasticsearch/elasticsearch:8.6.2
```

简单的看了下，按照 op 给出的部分代码，简单的给出大致样本，但是有几个问题需要解决
1. `service mysql start` 这条命令无法在构建是启动
2. 缺少 `php` 依赖，就算构建成功也无法访问 wordpress
3. 就算补全了 `php` 相关依赖，apache2 也缺少配置

总之，只能给出一个大致的样本供参考。另外 `wordpress` 有 [官方镜像]( https://hub.docker.com/_/wordpress)


```Dockerfile

FROM ubuntu:22.04

ARG MYSQL_ROOT_PASSWORD 12345
ARG DB_PASSWORD 888888

ARG DEPENDENCIES=" \
apache2 \
mysql-server \
wget"

RUN apt-get update && \
ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime && \
apt-get install -y --no-install-recommends ${DEPENDENCIES} && \
rm -rf /var/lib/apt/lists/*

RUN service mysql start # 无法执行成功

RUN mysql -uroot -e "\
create database wordoress; \
create user 'solve'@'localhost' identufied by '${DB_PASSWORD}'; \
grant all on wordoress.* to 'solve'@'localhost'; \
alter user 'root'@'localhost' identified with mysql_native_password by '${MYSQL_ROOT_PASSWORD}'; \
flush privileges;"

WORKDIR /var/www/html
RUN wget https://cn.wordpress.org/latest-zh_CN.tar.gz && \
tar -xf latest-zh_CN.tar.gz \
rm -f latest-zh_CN.tar.gz

EXPOSE 80
CMD ["/bin/bash"]
```

v1 打包 pyinstaller docker-compose.spec
v2 打包 go build -trimpath -tags "$BUILD_TAGS" -ldflags "$(cat /tmp/.ldflags) -w -s" -o dist/docker-compose ./cmd

额，话说最近 8.8.8.8 解析不是挺好使的吗，可能地区不太一样。