K8S集群容器中集成arthas、netstat即时诊断分析工具

背景： k8s 集群中，Java应用容器中添加即时工具分析诊断arthas、netstat

1.预先下载好arthas-packaging-3.1.1-bin.zip文件，在Dockerfile同目录下，并且重命名为arthas.zip wget http://repo1.maven.org/maven2/com/taobao/arthas/arthas-packaging/3.1.1/arthas-packaging-3.1.1-bin.zip

mv arthas-packaging-3.1.1-bin.zip arthas.zip

2.netstat工具在alpine下为ospd-netstat，在Dockerfile直接apk add 添加即可

3.以下为Dokcerfile文件(注：需要openjdk，如果是jre的，会缺少dt.jar,tools.jar arthas工具会使用到；需要安装tini工具，因为默认java 应用跑在容器中会是1 pid号，arthas会无法调用) FROM openjdk:8-jdk-alpine COPY repositories /etc/apk/ RUN apk add --no-cache mesa-gl \ ttf-freefont \ ospd-netstat \ curl \ tini \ jq \ ttf-dejavu \ tzdata && \ mkdir -p /usr/local/arthas && \ rm -rf /var/cache/apk/*

设置环境变量

ENV TZ=Asia/Shanghai

设置时区

RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone COPY simhei.ttf /usr/share/fonts/ COPY simkaigb2312.ttf /usr/share/fonts/ COPY simsun.ttc /usr/share/fonts/simsun.ttc COPY arthas.zip /tmp/ ADD ./health.sh / RUN unzip /tmp/arthas.zip -d /usr/local/arthas && \ rm -rf /tmp/arthas.zip

4.镜像打包，并推至私有仓库 docker build -t 192.168.3.10:5001/library/javabase:v8.0.22 . docker push 192.168.3.10:5001/library/javabase:v8.0.22

5.问题总结： 如果未安装tini工具，并且在启动时，预先执行 ENTRYPOINT ["/sbin/tini", "--"] ，在执行 CMD ["sh","-c","java -Xms1500m -Xmx1500M -XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap -jar /usr/local/factoring_web/xxxx.jar"] 不然会如下报错：

[ERROR] Start arthas failed, exception stack trace: com.sun.tools.attach.AttachNotSupportedException: Unable to get pid of LinuxThreads manager thread at sun.tools.attach.LinuxVirtualMachine.<init>(LinuxVirtualMachine.java:86) at sun.tools.attach.LinuxAttachProvider.attachVirtualMachine(LinuxAttachProvider.java:78) at com.sun.tools.attach.VirtualMachine.attach(VirtualMachine.java:250) at com.taobao.arthas.core.Arthas.attachAgent(Arthas.java:75) at com.taobao.arthas.core.Arthas.<init>(Arthas.java:28) at com.taobao.arthas.core.Arthas.main(Arthas.java:113) [INFO] Attach process 1 success. [INFO] arthas-client connect 127.0.0.1 3658 Connect to telnet server error: 127.0.0.1 3658 java.net.ConnectException: Connection refused (Connection refused) at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:350) at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:206) at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:188) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:589) at org.apache.commons.net.SocketClient.connect(SocketClient.java:188) at org.apache.commons.net.SocketClient.connect(SocketClient.java:209) at com.taobao.arthas.client.TelnetConsole.main(TelnetConsole.java:268) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at com.taobao.arthas.boot.Bootstrap.main(Bootstrap.java:503)

正常执行成功： /usr/local/arthas # java -jar arthas-boot.jar Picked up JAVA_TOOL_OPTIONS: -javaagent:/home/admin/.opt/ArmsAgent/arms-bootstrap-1.7.0-SNAPSHOT.jar -Darms.licenseKey=fqkkah9ke2@1f6f53b91f6e3fd -Darms.appName=test-factoring-web -Darms.agent.env=ACSK8S -Darms.agent.args= 2019-08-06 17:28:47 WARN  JDK version=1.8.0_212 SLF4J: Failed to load class "org.slf4j.impl.StaticLoggerBinder". SLF4J: Defaulting to no-operation (NOP) logger implementation SLF4J: See http://www.slf4j.org/codes.html#StaticLoggerBinder for further details. 2019-08-06 17:28:50 WARN  arms agent start cost: 3755ms [INFO] arthas-boot version: 3.1.1 [INFO] Found existing java process, please choose one and hit RETURN. •[1]: 6 /usr/local/factoring_web/app.jar 1 [INFO] arthas home: /usr/local/arthas [INFO] Try to attach process 6 Picked up JAVA_TOOL_OPTIONS: -javaagent:/home/admin/.opt/ArmsAgent/arms-bootstrap-1.7.0-SNAPSHOT.jar -Darms.licenseKey=fqkkah9ke2@1f6f53b91f6e3fd -Darms.appName=test-factoring-web -Darms.agent.env=ACSK8S -Darms.agent.args= 2019-08-06 17:31:17 WARN  JDK version=1.8.0_212 SLF4J: Failed to load class "org.slf4j.impl.StaticLoggerBinder". SLF4J: Defaulting to no-operation (NOP) logger implementation SLF4J: See http://www.slf4j.org/codes.html#StaticLoggerBinder for further details. 2019-08-06 17:31:20 WARN  arms agent start cost: 3623ms [INFO] Attach process 6 success. [INFO] arthas-client connect 127.0.0.1 3658 ,---. ,------. ,--------.,--. ,--. ,---. ,---. / O \ | .--. ''--. .--'| '--' | / O \ ' .-' | .-. || '--'.' | | | .--. || .-. |.-. | | | || |\ \ | | | | | || | | |.-' | --'--'--' '--'--' --'--'--'--'`-----'

wiki https://alibaba.github.io/arthas tutorials https://alibaba.github.io/arthas/arthas-tutorials version 3.1.1 pid 6 time 2019-08-06 17:31:21

$ exit /usr/local/arthas # netstat -tlnp Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 127.0.0.1:3658 0.0.0.0: LISTEN 6/java tcp 0 0 0.0.0.0:80 0.0.0.0: LISTEN 6/java tcp 0 0 127.0.0.1:8563 0.0.0.0:* LISTEN 6/java

6.示例jenkins构建，封装至基础镜像中

cat >./target/Dockerfile <<EOF FROM 192.168.3.10:5001/library/javabase:v8.0.22 RUN \ mkdir -p /usr/local/ocr ADD ./app.jar /usr/local/ocr/ WORKDIR /usr/local EXPOSE 80

ENTRYPOINT ["/sbin/tini", "--"] CMD ["sh","-c","java -Xms3000m -Xmx3000m -XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap -jar /usr/local/ocr/app.jar"] EOF

ssh root@192.168.255.1 "/bin/bash /usr/jenkins_home/deploy_history/scf-test/deploy.sh test ocr && \ /usr/bin/kubectl apply -f /usr/jenkins_home/deploy_history/scf-test/test-ocr.yaml && \ exit"