Docker |访问Docker容器中python中的主机文件

Question

我试图在docker容器中访问主机上的certbot ssl证书。 我的证书位于/etc/letsencrypt/live/domain.com 我正在使用args加载我的容器：

docker run -v /etc/letsencrypt/live/domain.com:/certs -it --rm -p 80:80 kaws/kaws_app:latest

docker容器中的python脚本表示找不到文件或目录。 我正在尝试加载/etc/letsencrypt/live/domain.com/中存在的证书

我收到的错误是：

ssl_context.load_cert_chain('/certs/fullchain.pem', '/certs/privkey.pem')
FileNotFoundError: [Errno 2] No such file or directory

如何从docker容器中的python脚本访问主机上的文件

Dockerfile

# Use the official Python 3 image.
# https://hub.docker.com/_/python
FROM python:3-alpine

RUN \
  apk add --no-cache python3 py3-pip \
  && apk upgrade --update \
  && apk add git \
  && apk add --update alpine-sdk \
  && apk add libffi-dev openssl-dev \
  && apk --no-cache --update add build-base

COPY . /app

# Create and change to the app directory.
WORKDIR /app

RUN apk add --no-cache --virtual .build-deps \
  gcc musl-dev

RUN pip install --no-cache-dir -r requirements.txt

# Cleanup dev dependencies
RUN apk del -f .build-deps

RUN chmod 444 app.py
RUN chmod 444 requirements.txt

# Service must listen to $PORT environment variable.
# This default value facilitates local development.
ENV PORT 80
ENV PORT 443

# Run the web service on container startup.
CMD [ "python", "app.py" ]

更新：
我在python脚本中运行了以下代码，以查看它是否能够看到证书以及它是否能够看到证书，但它仍然给出了一个错误

for root, dirs, files in os.walk("/certs"):
    for filename in files:
        print(filename)

输出：

docker run kaws/kaws_app:latest
chain.pem
fullchain.pem
privkey.pem
cert.pem
README
Traceback (most recent call last):
  File "/app/app_pusher.py", line 83, in <module>
    ssl_context.load_cert_chain('/certs/fullchain.pem', '/certs/privkey.pem')

Answer 1

您应该将证书字典装入docker容器：

docker run -it  rm -v /etc/letsencrypt/live/domain.com:/certs -p 80:80 kaws/kaws_app:latest

Answer 2

查看https://docs.docker.com/storage/volumes/#choose-the v-or -mount-flag，需要将:放在/certs之后

你的命令是

docker run -v /etc/letsencrypt/live/domain.com:/certs -it rm -p 80:80 kaws/kaws_app:latest

您可能还需要在您的操作系统上启用共享（在macOS上）