Windows Server容器化实战手册：Docker全栈部署指南

# 检测CPU虚拟化支持
Get-WmiObject Win32_Processor | Select-Object -ExpandProperty VirtualizationFirmwareEnabled

# 查看系统版本信息
Get-ComputerInfo | Select-Object -Property OSName,OSVersion,CSDVersion

# 快速安装Docker Desktop企业版
choco install docker-desktop -y --params "/InstallDir:C:ProgramDataDockerDesktop"

# 验证安装状态
docker version
docker info | Select-Object -Property CgroupDriver,ExecutionDriver

# docker-compose.yml网络配置示例
version: '3'
networks:
  internal_net:
    driver: bridge
    ipam:
      config:
        - subnet: 192.168.10.0/24
          gateway: 192.168.10.1

# Dockerfile示例（基于mcr.microsoft.com/windows/servercore:ltsc2022）
FROM mcr.microsoft.com/windows/servercore:ltsc2022

# 安装.NET 6.0运行时
RUN powershell -Command "iex ((New-Object System.Net.WebClient).DownloadString('https://dotnet.microsoft.com/download/dotnet/6.0/dotnet-install.ps1'))"

# 复制发布文件并启动服务
COPY binReleasenet6.0app.exe .
ENTRYPOINT ["app.exe"]

# 使用多阶段构建减少体积
FROM mcr.microsoft.com/windows/servercore:ltsc2022 AS build-env
WORKDIR /src
COPY *.csproj .
RUN dotnet restore

FROM build-env AS publish-env
WORKDIR /src
RUN dotnet publish -c Release -o out

FROM mcr.microsoft.com/windows/nanoserver:ltsc2022
COPY --from=publish-env /src/out .
ENTRYPOINT ["dotnet", "app.dll"]

# 使用Snyk进行漏洞扫描
snyk test --docker-image your-image-name:tag

# 自动修复脚本示例
snyk repair --docker-image your-image-name:tag --severity high

# 初始化Swarm管理节点
docker swarm init --advertise-addr 192.168.10.100

# 添加工作节点
docker swarm join --token SWMTKN-1-... 192.168.10.100:2377

# Prometheus监控配置示例
global:
  scrape_interval: 15s

scrape_configs:
  - job_name: 'windows_containers'
    static_configs:
      - targets: ['localhost:9100']

# CPU使用率超过80%告警
警报名称: ContainerCPUHigh
表达式: rate(container_cpu_seconds_total{container="app"}[5m]) > 0.8
触发条件: 持续5分钟
通知方式: Webhook/邮件/Teams

# CCW注册脚本示例
regsvr32 "C:pathyour-component.dll"

# 在Dockerfile中添加注册命令
RUN regsvr32 "C:component.dll"

# IIS配置文件示例
configuration 'Default Web Site' {
    location / {
        add rewrite rule name='Redirect to https' pattern='^(.*)' action='Rewrite' url='https://{HTTP_HOST}/{R:1}'
    }
}

# Azure Backup PowerShell脚本
$backupVault = Get-AzRecoveryServicesVault -Name "ContosoBackupVault"
$container = Get-AzRecoveryServicesBackupContainer -Vault $backupVault -FriendlyName "WindowsContainers"
Enable-AzRecoveryServicesBackupProtection -Item $container -Policy $policy

# 处理"找不到网络连接"错误
Get-NetAdapter | Where-Object { $_.Status -eq "Disconnected" } | Restart-NetAdapter

# 查看容器日志
docker logs --follow --tail 100 container_id

# 使用Process Explorer分析资源占用
Get-Process | Sort-Object CPU,WS | Select-Object -Top 10 Name,CPU,WS

# 安全加固检查清单
Check-NetAdapter -Name "*" -AdminStatus Enabled
Check-Service -Name wuauserv -Status Running

# 启用容器审计日志
Set-ItemProperty -Path "HKLM:SOFTWAREPoliciesMicrosoftWindowsWindowsUpdateAU" -Name NoAutoUpdate -Value 1