从零部署.NetCoreAPI到Linux下

Z时代
2024-01-10
分类：综合

从零部署.NetCore到Linux

购买Ubuntu服务器

购买服务器

创建root用户，设置密码

# 创建root用户 sudo passwd root # 输入两次密码

启动ssh
系统默认是关闭的，需要打开下。

安装Nginx

如何在 Ubuntu 20.04 上安装 Nginx
sudo命令解释
sudo是linux系统管理指令，是允许系统管理员让普通用户执行一些或者全部的root命令的一个工具，如halt，reboot，su等等。这样不仅减少了root用户的登录和管理时间，同样也提高了安全性。sudo不是对shell的一个代替，它是面向每个命令的。
apt命令详解
apt的全称是Advanced Packaging Tool是Linux系统下的一款安装包管理工具。

Nginx在默认的Ubuntu源仓库中可用。想要安装它，运行下面的命令：

sudo apt update sudo apt install nginx

一旦安装完成，Nginx会自动启动。你可以运行下面的命令来验证它：

sudo systemctl status nginx

安装docker

Ubuntu Docker 安装

安装命令如下：

curl -fsSL https://get.docker.com | bash -s docker --mirror Aliyun

创建docker镜像并运行容器

编写.NET Core Api 代码

编写Dockerfile文件

#See https://aka.ms/containerfastmode to understand how Visual Studio uses this Dockerfile to build your images for faster debugging. FROM mcr.microsoft.com/dotnet/aspnet:6.0 AS base WORKDIR /app EXPOSE 80 EXPOSE 443 FROM mcr.microsoft.com/dotnet/sdk:6.0 AS build WORKDIR /src COPY ["twgdh.test.csproj", "."] RUN dotnet restore "./twgdh.test.csproj" COPY . . WORKDIR "/src/." RUN dotnet build "twgdh.test.csproj" -c Release -o /app/build FROM build AS publish RUN dotnet publish "twgdh.test.csproj" -c Release -o /app/publish FROM base AS final WORKDIR /app COPY --from=publish /app/publish . ENTRYPOINT ["dotnet", "twgdh.test.dll"]

将代码和Dockerfile文件Copy到服务器。

利用ssh传输文件

Copy后服务器目录结构如下：

root@VM-16-9-ubuntu:/home/root/twgdh.test/twgdh.test# tree . ├── appsettings.Development.json ├── appsettings.json ├── Controllers │ └── WeatherForecastController.cs ├── Dockerfile ├── Program.cs ├── Properties │ └── launchSettings.json ├── twgdh.test.csproj ├── twgdh.test.csproj.user ├── twgdh.test.sln └── WeatherForecast.cs

构建镜像

docker build -t twgdh.test . # 注意最后有个点，表示当前目录

运行容器

docker run -d --name twgdh.test1.0 -p 8080:80 twgdh.test

测试容器是否正常运行

root@VM-16-9-ubuntu:~# curl -i "http://127.0.0.1:8080/WeatherForecast" HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 29 Apr 2022 08:04:36 GMT Server: Kestrel Transfer-Encoding: chunked [{"date":"2022-04-30T08:04:37.1916863+00:00","temperatureC":44,"temperatureF":111,"summary":"Balmy"},{"date":"2022-05-01T08:04:37.1926873+00:00","temperatureC":-1,"temperatureF":31,"summary":"Warm"},{"date":"2022-05-02T08:04:37.1926914+00:00","temperatureC":1,"temperatureF":33,"summary":"Sweltering"},{"date":"2022-05-03T08:04:37.1926916+00:00","temperatureC":5,"temperatureF":40,"summary":"Cool"},{"date":"2022-05-04T08:04:37.1926918+00:00","temperatureC":45,"temperatureF":112,"summary":"Bracing"}]

将域名指向服务器

修改域名的解析信息。

配置Nginx请求转发

修改/etc/nginx/nginx.conf文件

....
events {
    ...
}
http {
    ....
    server {
        listen 		80;				# 监听80端口
        server_name	test.twgdh.com;	# 监听的域名
        location / {
            proxy_pass	http://127.0.0.1:8080;	# 转发到的地址
        }	
    }
    .....
}

重新加载nginx配置文件
nginx -s reload

测试使用域名访问容器中的网站

root@VM-16-9-ubuntu:~# curl -i "http://test.twgdh.com/WeatherForecast" HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 29 Apr 2022 08:52:02 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive [{"date":"2022-04-30T08:52:02.8364462+00:00","temperatureC":-12,"temperatureF":11,"summary":"Mild"},{"date":"2022-05-01T08:52:02.8364555+00:00","temperatureC":45,"temperatureF":112,"summary":"Hot"},{"date":"2022-05-02T08:52:02.836456+00:00","temperatureC":31,"temperatureF":87,"summary":"Cool"},{"date":"2022-05-03T08:52:02.8364562+00:00","temperatureC":29,"temperatureF":84,"summary":"Sweltering"},{"date":"2022-05-04T08:52:02.8364564+00:00","temperatureC":9,"temperatureF":48,"summary":"Mild"}]

将站点配置为Https

nginx/1.18.0进行SSL证书配置
在Nginx（或Tengine）服务器上安装证书

下载nginx证书

上传证书文件到服务器

C:UsersOliver-PC>scp -r C:UsersOliver-PCDesktopTempNginx证书5715401_test.twgdh.com_nginx root@test.twgdh.com:/etc/nginx/certificate root@test.twgdh.com"s password: 5715401_test.twgdh.com.key 100% 1675 34.7KB/s 00:00 5715401_test.twgdh.com.pem 100% 3801 55.9KB/s 00:00

修改nginx.conf 配置

.....
events {
	.......
}
http {
	.........
	server {
		listen 		80;
		server_name	test.twgdh.com;
		location / {
			proxy_pass	http://127.0.0.1:8080;
		}	
	}
	##
	# SSL Settings
	##
	server {
		listen 		443 ssl;
		server_name	test.twgdh.com;
		ssl_certificate   /etc/nginx/certificate/5715401_test.twgdh.com_nginx/5715401_test.twgdh.com.pem;
		ssl_certificate_key  /etc/nginx/certificate/5715401_test.twgdh.com_nginx/5715401_test.twgdh.com.key;
		ssl_session_timeout 5m;
		ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
		ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;        
		ssl_prefer_server_ciphers on;
		location / {
			proxy_pass	http://127.0.0.1:8080;
		}	
	}
	.................
}