Ebook Syafi - Edit Bab

Tajuk Bab

Urutan

Jenis

Kandungan HTML

<h1 id="bab-7-docker-dan-container">Bab 7: Docker dan Container</h1>
Okay, sekarang kita masuk bahagian yang saya rasa paling exciting dalam homelab — Docker! Kalau tadi kita belajar virtualisasi (komputer dalam komputer), Docker pula macam “kotak berasingan” untuk setiap aplikasi. Setiap kotak ada semua yang app tu perlukan, dan kotak-kotak ni tak kacau antara satu sama lain.
Apa yang anda akan belajar:
<ul>
<li>Konsep image, container, volume, dan network</li>
<li>Cara pasang Docker dan deploy service pertama menggunakan Docker Compose</li>
<li>Struktur folder yang kemas untuk mengurus banyak service</li>
</ul>
<h2 id="cara-ikut-bab-ini">Cara Ikut Bab Ini</h2>
<ol type="1">
<li>Pasang Docker dahulu dan sahkan dengan <code>hello-world</code>.</li>
<li>Deploy satu service mudah dahulu sebelum cuba satu stack besar.</li>
<li>Biasakan diri dengan log, volume, dan port kerana tiga perkara ini paling kerap digunakan.</li>
</ol>
<blockquote>
Nota Beginner: Cara paling mudah memahami Docker ialah anggap setiap service sebagai satu folder yang ada satu fail <code>docker-compose.yml</code> dan satu tempat simpan data. Itu sahaja. Jangan overthink.
</blockquote>
<h3 id="laluan-paling-mudah-untuk-beginner">Laluan Paling Mudah untuk Beginner</h3>
<ul>
<li>Pasang Docker, uji <code>hello-world</code>, kemudian deploy satu service mudah seperti Uptime Kuma atau Vaultwarden.</li>
<li>Gunakan satu folder per service supaya config dan data tidak bercampur.</li>
<li>Belajar tiga benda dulu: <code>ports</code>, <code>volumes</code>, dan <code>logs</code>.</li>
</ul>
<h2 id="langkah-1-mulakan-dengan-gambaran-besar">Langkah 1: Mulakan dengan Gambaran Besar</h2>
Docker mengubah cara ramai orang memasang dan mengurus aplikasi. Dulu, nak install satu app kena install macam-macam dependency, configure banyak benda, dan kadang-kadang satu app boleh rosakkan app lain.
Dengan Docker, semua tu dah settle. Setiap app jalan dalam container sendiri, dengan dependency sendiri. Bersih, kemas, dan mudah diulang semula jika berlaku masalah.
<figure><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 800 500" width="800" height="500">
 <defs>
 <linearGradient id="bg3" x1="0%" y1="0%" x2="100%" y2="100%">
 <stop offset="0%" style="stop-color:#f8f9fa"/>
 <stop offset="100%" style="stop-color:#e9ecef"/>
 </linearGradient>
 </defs>
 <rect width="800" height="500" fill="url(#bg3)" rx="10"/>
 <text x="400" y="35" font-family="Arial" font-size="18" font-weight="bold" fill="#2d3436" text-anchor="middle">Seni Bina Docker & Docker Compose</text>

<rect x="40" y="50" width="720" height="430" rx="10" fill="#e8f4f8" stroke="#0db7ed" stroke-width="2" stroke-dasharray="8,4"/>
 <text x="400" y="75" font-family="Arial" font-size="14" font-weight="bold" fill="#0db7ed" text-anchor="middle">Docker Host</text>

<rect x="250" y="90" width="300" height="55" rx="8" fill="#e17055" stroke="#d63031" stroke-width="2"/>
 <text x="400" y="115" font-family="Arial" font-size="13" font-weight="bold" fill="#fff" text-anchor="middle">Traefik / Nginx Proxy Manager</text>
 <text x="400" y="133" font-family="Arial" font-size="10" fill="#ffeaa7" text-anchor="middle">Port 80/443 - SSL Automatik</text>

<line x1="400" y1="145" x2="400" y2="170" stroke="#636e72" stroke-width="2" marker-end="url(#arrowhead)"/>

<rect x="60" y="170" width="680" height="295" rx="8" fill="rgba(13,183,237,0.08)" stroke="#0db7ed" stroke-width="1"/>
 <text x="400" y="190" font-family="Arial" font-size="12" fill="#0db7ed" text-anchor="middle">Rangkaian Docker (docker-network)</text>

<rect x="80" y="205" width="145" height="100" rx="6" fill="#0984e3" stroke="#74b9ff" stroke-width="1.5"/>
 <text x="152" y="228" font-family="Arial" font-size="12" font-weight="bold" fill="#fff" text-anchor="middle">Nextcloud</text>
 <text x="152" y="248" font-family="Arial" font-size="10" fill="#dfe6e9" text-anchor="middle">Storan Awan</text>
 <rect x="92" y="260" width="121" height="35" rx="3" fill="rgba(255,255,255,0.15)"/>
 <text x="152" y="275" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Volume: /data</text>
 <text x="152" y="288" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Port: 8080</text>

<rect x="240" y="205" width="145" height="100" rx="6" fill="#00b894" stroke="#55efc4" stroke-width="1.5"/>
 <text x="312" y="228" font-family="Arial" font-size="12" font-weight="bold" fill="#fff" text-anchor="middle">Gitea</text>
 <text x="312" y="248" font-family="Arial" font-size="10" fill="#dfe6e9" text-anchor="middle">Git Hosting</text>
 <rect x="252" y="260" width="121" height="35" rx="3" fill="rgba(255,255,255,0.15)"/>
 <text x="312" y="275" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Volume: /repos</text>
 <text x="312" y="288" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Port: 3000</text>

<rect x="400" y="205" width="145" height="100" rx="6" fill="#6c5ce7" stroke="#a29bfe" stroke-width="1.5"/>
 <text x="472" y="228" font-family="Arial" font-size="12" font-weight="bold" fill="#fff" text-anchor="middle">Vaultwarden</text>
 <text x="472" y="248" font-family="Arial" font-size="10" fill="#dfe6e9" text-anchor="middle">Pengurus Kata Laluan</text>
 <rect x="412" y="260" width="121" height="35" rx="3" fill="rgba(255,255,255,0.15)"/>
 <text x="472" y="275" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Volume: /data</text>
 <text x="472" y="288" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Port: 8000</text>

<rect x="560" y="205" width="165" height="100" rx="6" fill="#fdcb6e" stroke="#f9ca24" stroke-width="1.5"/>
 <text x="642" y="228" font-family="Arial" font-size="12" font-weight="bold" fill="#2d3436" text-anchor="middle">Home Assistant</text>
 <text x="642" y="248" font-family="Arial" font-size="10" fill="#636e72" text-anchor="middle">Automasi Rumah</text>
 <rect x="572" y="260" width="141" height="35" rx="3" fill="rgba(0,0,0,0.08)"/>
 <text x="642" y="275" font-family="Arial" font-size="9" fill="#636e72" text-anchor="middle">Volume: /config</text>
 <text x="642" y="288" font-family="Arial" font-size="9" fill="#636e72" text-anchor="middle">Port: 8123</text>

<rect x="80" y="320" width="145" height="100" rx="6" fill="#e84393" stroke="#fd79a8" stroke-width="1.5"/>
 <text x="152" y="343" font-family="Arial" font-size="12" font-weight="bold" fill="#fff" text-anchor="middle">Grafana</text>
 <text x="152" y="363" font-family="Arial" font-size="10" fill="#dfe6e9" text-anchor="middle">Pemantauan</text>
 <rect x="92" y="375" width="121" height="35" rx="3" fill="rgba(255,255,255,0.15)"/>
 <text x="152" y="390" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Volume: /grafana</text>
 <text x="152" y="403" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Port: 3000</text>

<rect x="240" y="320" width="145" height="100" rx="6" fill="#00cec9" stroke="#81ecec" stroke-width="1.5"/>
 <text x="312" y="343" font-family="Arial" font-size="12" font-weight="bold" fill="#fff" text-anchor="middle">Pi-hole</text>
 <text x="312" y="363" font-family="Arial" font-size="10" fill="#dfe6e9" text-anchor="middle">DNS & Ad-block</text>
 <rect x="252" y="375" width="121" height="35" rx="3" fill="rgba(255,255,255,0.15)"/>
 <text x="312" y="390" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Volume: /pihole</text>
 <text x="312" y="403" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Port: 53, 8081</text>

<rect x="400" y="320" width="145" height="100" rx="6" fill="#636e72" stroke="#b2bec3" stroke-width="1.5"/>
 <text x="472" y="343" font-family="Arial" font-size="12" font-weight="bold" fill="#fff" text-anchor="middle">Portainer</text>
 <text x="472" y="363" font-family="Arial" font-size="10" fill="#dfe6e9" text-anchor="middle">Pengurusan Docker</text>
 <rect x="412" y="375" width="121" height="35" rx="3" fill="rgba(255,255,255,0.15)"/>
 <text x="472" y="390" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Volume: /docker.sock</text>
 <text x="472" y="403" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Port: 9443</text>

<rect x="560" y="320" width="165" height="100" rx="6" fill="#2d3436" stroke="#636e72" stroke-width="1.5"/>
 <text x="642" y="343" font-family="Arial" font-size="12" font-weight="bold" fill="#dfe6e9" text-anchor="middle">Watchtower</text>
 <text x="642" y="363" font-family="Arial" font-size="10" fill="#b2bec3" text-anchor="middle">Auto-Kemas Kini</text>
 <rect x="572" y="375" width="141" height="35" rx="3" fill="rgba(255,255,255,0.08)"/>
 <text x="642" y="390" font-family="Arial" font-size="9" fill="#b2bec3" text-anchor="middle">Volume: /docker.sock</text>
 <text x="642" y="403" font-family="Arial" font-size="9" fill="#b2bec3" text-anchor="middle">Jadual: Harian</text>
</svg>
<figcaption>Seni Bina Docker &amp; Docker Compose</figcaption></figure>
<h2 id="langkah-2-faham-apa-itu-docker">Langkah 2: Faham Apa Itu Docker?</h2>
Docker adalah platform container yang membungkus aplikasi bersama semua kebergantungannya ke dalam unit yang dipanggil container. Setiap container berjalan secara terpencil tetapi berkongsi kernel OS host.
<h3 id="perbezaan-docker-vs-mesin-maya">Perbezaan Docker vs Mesin Maya</h3>
Ini soalan yang ramai orang tanya. Mari kita tengok perbezaan dia:
<pre><code>Mesin Maya: Docker:
┌──────────────┐ ┌──────┐ ┌──────┐ ┌──────┐
│ Aplikasi A │ │App A │ │App B │ │App C │
├──────────────┤ ├──────┤ ├──────┤ ├──────┤
│ OS Penuh │ │ Libs │ │ Libs │ │ Libs │
├──────────────┤ └──────┘ └──────┘ └──────┘
│ Hypervisor │ ┌─────────────────────────┐
├──────────────┤ │ Docker Engine │
│ OS Hos │ ├─────────────────────────┤
├──────────────┤ │ OS Hos │
│ Perkakasan │ ├─────────────────────────┤
└──────────────┘ │ Perkakasan │
 └─────────────────────────┘
Saiz: GB Saiz: MB
Boot: Minit Boot: Saat</code></pre>
Nampak tak perbezaan dia? VM perlu satu OS penuh untuk setiap instance. Docker hanya perlu app dan library dia sahaja. Sebab tu Docker jauh lebih ringan dan laju.
<h3 id="konsep-utama-docker">Konsep Utama Docker</h3>
<table>
<colgroup>
<col style="width: 50%" />
<col style="width: 50%" />
</colgroup>
<thead>
<tr class="header">
<th>Konsep</th>
<th>Penerangan</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td>Image</td>
<td>Template baca sahaja untuk mencipta container</td>
</tr>
<tr class="even">
<td>Container</td>
<td>Instance berjalan daripada image</td>
</tr>
<tr class="odd">
<td>Dockerfile</td>
<td>Skrip untuk membina image</td>
</tr>
<tr class="even">
<td>Volume</td>
<td>Storan berterusan untuk data container</td>
</tr>
<tr class="odd">
<td>Network</td>
<td>Rangkaian maya untuk komunikasi antara container</td>
</tr>
<tr class="even">
<td>Registry</td>
<td>Repositori untuk menyimpan dan berkongsi image (Docker Hub)</td>
</tr>
</tbody>
</table>
<blockquote>
Nota Beginner: Analogi mudah — Image macam resipi, Container macam masakan yang dah siap dimasak. Satu resipi boleh buat banyak masakan, dan setiap masakan berdiri sendiri.
</blockquote>
<h2 id="langkah-3-pemasangan-docker">Langkah 3: Pemasangan Docker</h2>
<h3 id="pada-ubuntudebian">Pada Ubuntu/Debian</h3>
Ikut langkah ni satu per satu. Copy paste je arahan di bawah.
<div class="sourceCode" id="cb2"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb2-1" aria-hidden="true" tabindex="-1"></a># Buang versi lama
<a href="#cb2-2" aria-hidden="true" tabindex="-1"></a>sudo apt remove docker docker-engine docker.io containerd runc
<a href="#cb2-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb2-4" aria-hidden="true" tabindex="-1"></a># Pasang kebergantungan
<a href="#cb2-5" aria-hidden="true" tabindex="-1"></a>sudo apt update
<a href="#cb2-6" aria-hidden="true" tabindex="-1"></a>sudo apt install -y ca-certificates curl gnupg
<a href="#cb2-7" aria-hidden="true" tabindex="-1"></a>
<a href="#cb2-8" aria-hidden="true" tabindex="-1"></a># Tambah kunci GPG rasmi Docker
<a href="#cb2-9" aria-hidden="true" tabindex="-1"></a>sudo install -m 0755 -d /etc/apt/keyrings
<a href="#cb2-10" aria-hidden="true" tabindex="-1"></a>curl -fsSL https://download.docker.com/linux/ubuntu/gpg | \
<a href="#cb2-11" aria-hidden="true" tabindex="-1"></a> sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
<a href="#cb2-12" aria-hidden="true" tabindex="-1"></a>sudo chmod a+r /etc/apt/keyrings/docker.gpg
<a href="#cb2-13" aria-hidden="true" tabindex="-1"></a>
<a href="#cb2-14" aria-hidden="true" tabindex="-1"></a># Tambah repositori
<a href="#cb2-15" aria-hidden="true" tabindex="-1"></a>echo \
<a href="#cb2-16" aria-hidden="true" tabindex="-1"></a> "deb [arch=$(dpkg --print-architecture) \
<a href="#cb2-17" aria-hidden="true" tabindex="-1"></a> signed-by=/etc/apt/keyrings/docker.gpg] \
<a href="#cb2-18" aria-hidden="true" tabindex="-1"></a> https://download.docker.com/linux/ubuntu \
<a href="#cb2-19" aria-hidden="true" tabindex="-1"></a> $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | \
<a href="#cb2-20" aria-hidden="true" tabindex="-1"></a> sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
<a href="#cb2-21" aria-hidden="true" tabindex="-1"></a>
<a href="#cb2-22" aria-hidden="true" tabindex="-1"></a># Pasang Docker
<a href="#cb2-23" aria-hidden="true" tabindex="-1"></a>sudo apt update
<a href="#cb2-24" aria-hidden="true" tabindex="-1"></a>sudo apt install -y docker-ce docker-ce-cli \
<a href="#cb2-25" aria-hidden="true" tabindex="-1"></a> containerd.io docker-buildx-plugin docker-compose-plugin
<a href="#cb2-26" aria-hidden="true" tabindex="-1"></a>
<a href="#cb2-27" aria-hidden="true" tabindex="-1"></a># Tambah pengguna ke kumpulan docker
<a href="#cb2-28" aria-hidden="true" tabindex="-1"></a>sudo usermod -aG docker $USER</code></pre></div>
Log keluar dan log masuk semula untuk perubahan kumpulan berkuat kuasa.
<blockquote>
Nota Beginner: Arahan <code>usermod -aG docker $USER</code> membolehkan anda guna Docker tanpa <code>sudo</code> setiap kali. Penting untuk kemudahan. Tapi anda perlu log out dan log in balik (atau reboot) untuk ia berkuat kuasa.
</blockquote>
<h3 id="pengesahan-pemasangan">Pengesahan Pemasangan</h3>
<div class="sourceCode" id="cb3"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb3-1" aria-hidden="true" tabindex="-1"></a># Periksa versi
<a href="#cb3-2" aria-hidden="true" tabindex="-1"></a>docker --version
<a href="#cb3-3" aria-hidden="true" tabindex="-1"></a>docker compose version
<a href="#cb3-4" aria-hidden="true" tabindex="-1"></a>
<a href="#cb3-5" aria-hidden="true" tabindex="-1"></a># Jalankan container ujian
<a href="#cb3-6" aria-hidden="true" tabindex="-1"></a>docker run hello-world</code></pre></div>
Kalau anda nampak mesej “Hello from Docker!” — tahniah, Docker dah berjaya dipasang!
<h2 id="langkah-4-docker-compose">Langkah 4: Docker Compose</h2>
Docker Compose membolehkan anda mendefinisikan dan menjalankan aplikasi Docker berbilang container menggunakan fail YAML. Ini cara yang paling popular untuk deploy service dalam homelab.
<h3 id="struktur-fail-docker-compose.yml">Struktur Fail docker-compose.yml</h3>
<div class="sourceCode" id="cb4"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb4-1" aria-hidden="true" tabindex="-1"></a># Contoh asas docker-compose.yml
<a href="#cb4-2" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb4-3" aria-hidden="true" tabindex="-1"></a> nama-perkhidmatan:
<a href="#cb4-4" aria-hidden="true" tabindex="-1"></a> image: nama-image:tag
<a href="#cb4-5" aria-hidden="true" tabindex="-1"></a> container_name: nama-kontena
<a href="#cb4-6" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb4-7" aria-hidden="true" tabindex="-1"></a> - "port-hos:port-kontena"
<a href="#cb4-8" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb4-9" aria-hidden="true" tabindex="-1"></a> - ./data-tempatan:/data-kontena
<a href="#cb4-10" aria-hidden="true" tabindex="-1"></a> environment:
<a href="#cb4-11" aria-hidden="true" tabindex="-1"></a> - VARIABLE=nilai
<a href="#cb4-12" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb4-13" aria-hidden="true" tabindex="-1"></a> networks:
<a href="#cb4-14" aria-hidden="true" tabindex="-1"></a> - rangkaian-nama
<a href="#cb4-15" aria-hidden="true" tabindex="-1"></a>
<a href="#cb4-16" aria-hidden="true" tabindex="-1"></a>networks:
<a href="#cb4-17" aria-hidden="true" tabindex="-1"></a> rangkaian-nama:
<a href="#cb4-18" aria-hidden="true" tabindex="-1"></a> driver: bridge</code></pre></div>
Tip dari saya — sentiasa guna <code>restart: unless-stopped</code> supaya container auto-start bila server reboot. Satu benda kecil tapi sangat penting.
<h3 id="arahan-docker-compose-asas">Arahan Docker Compose Asas</h3>
Ini arahan yang anda akan guna setiap hari. Hafal je lima arahan pertama, yang lain boleh rujuk balik bila perlu.
<div class="sourceCode" id="cb5"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb5-1" aria-hidden="true" tabindex="-1"></a># Mulakan semua perkhidmatan
<a href="#cb5-2" aria-hidden="true" tabindex="-1"></a>docker compose up -d
<a href="#cb5-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb5-4" aria-hidden="true" tabindex="-1"></a># Hentikan semua perkhidmatan
<a href="#cb5-5" aria-hidden="true" tabindex="-1"></a>docker compose down
<a href="#cb5-6" aria-hidden="true" tabindex="-1"></a>
<a href="#cb5-7" aria-hidden="true" tabindex="-1"></a># Lihat log
<a href="#cb5-8" aria-hidden="true" tabindex="-1"></a>docker compose logs -f
<a href="#cb5-9" aria-hidden="true" tabindex="-1"></a>
<a href="#cb5-10" aria-hidden="true" tabindex="-1"></a># Lihat status
<a href="#cb5-11" aria-hidden="true" tabindex="-1"></a>docker compose ps
<a href="#cb5-12" aria-hidden="true" tabindex="-1"></a>
<a href="#cb5-13" aria-hidden="true" tabindex="-1"></a># Mulakan semula perkhidmatan
<a href="#cb5-14" aria-hidden="true" tabindex="-1"></a>docker compose restart nama-perkhidmatan
<a href="#cb5-15" aria-hidden="true" tabindex="-1"></a>
<a href="#cb5-16" aria-hidden="true" tabindex="-1"></a># Tarik imej terkini
<a href="#cb5-17" aria-hidden="true" tabindex="-1"></a>docker compose pull
<a href="#cb5-18" aria-hidden="true" tabindex="-1"></a>
<a href="#cb5-19" aria-hidden="true" tabindex="-1"></a># Bina semula dan mulakan
<a href="#cb5-20" aria-hidden="true" tabindex="-1"></a>docker compose up -d --build</code></pre></div>
<blockquote>
Nota Beginner: Flag <code>-d</code> bermaksud “detached” — container jalan di background. Flag <code>-f</code> pada <code>logs</code> bermaksud “follow” — log keluar secara live. Tekan <code>Ctrl+C</code> untuk keluar dari mod follow.
</blockquote>
<h2 id="langkah-5-bina-projek-docker-untuk-homelab">Langkah 5: Bina Projek Docker untuk Homelab</h2>
<h3 id="struktur-direktori-disyorkan">Struktur Direktori Disyorkan</h3>
Ini struktur folder yang saya cadangkan. Ia kemas, mudah di-backup, dan mudah dipindahkan ke server lain.
<pre><code>/opt/docker/
├── docker-compose.yml # Fail utama
├── .env # Pembolehubah persekitaran
├── traefik/
│ ├── traefik.yml
│ └── acme.json
├── nextcloud/
│ └── data/
├── vaultwarden/
│ └── data/
├── pihole/
│ ├── etc-pihole/
│ └── etc-dnsmasq.d/
├── gitea/
│ └── data/
├── grafana/
│ └── data/
├── homeassistant/
│ └── config/
└── portainer/
 └── data/</code></pre>
<h3 id="fail-.env">Fail .env</h3>
Fail <code>.env</code> simpan pembolehubah yang digunakan dalam <code>docker-compose.yml</code>. Guna satu tempat untuk semua setting supaya senang diubah.
<div class="sourceCode" id="cb7"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb7-1" aria-hidden="true" tabindex="-1"></a># .env - Pembolehubah persekitaran
<a href="#cb7-2" aria-hidden="true" tabindex="-1"></a>PUID=1000
<a href="#cb7-3" aria-hidden="true" tabindex="-1"></a>PGID=1000
<a href="#cb7-4" aria-hidden="true" tabindex="-1"></a>TZ=Asia/Kuala_Lumpur
<a href="#cb7-5" aria-hidden="true" tabindex="-1"></a>DOMAIN=lab.local
<a href="#cb7-6" aria-hidden="true" tabindex="-1"></a>DATA_DIR=/opt/docker</code></pre></div>
<h3 id="docker-compose-lengkap-untuk-homelab">Docker Compose Lengkap untuk Homelab</h3>
Ini contoh stack homelab yang lengkap. Anda tak perlu deploy semua sekali — pilih mana yang anda perlukan dulu.
<div class="sourceCode" id="cb8"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb8-1" aria-hidden="true" tabindex="-1"></a># docker-compose.yml - Stack Homelab Lengkap
<a href="#cb8-2" aria-hidden="true" tabindex="-1"></a>
<a href="#cb8-3" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb8-4" aria-hidden="true" tabindex="-1"></a> # ============================================
<a href="#cb8-5" aria-hidden="true" tabindex="-1"></a> # Portainer - Pengurusan Docker
<a href="#cb8-6" aria-hidden="true" tabindex="-1"></a> # ============================================
<a href="#cb8-7" aria-hidden="true" tabindex="-1"></a> portainer:
<a href="#cb8-8" aria-hidden="true" tabindex="-1"></a> image: portainer/portainer-ce:latest
<a href="#cb8-9" aria-hidden="true" tabindex="-1"></a> container_name: portainer
<a href="#cb8-10" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb8-11" aria-hidden="true" tabindex="-1"></a> - "9443:9443"
<a href="#cb8-12" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb8-13" aria-hidden="true" tabindex="-1"></a> - /var/run/docker.sock:/var/run/docker.sock
<a href="#cb8-14" aria-hidden="true" tabindex="-1"></a> - ./portainer/data:/data
<a href="#cb8-15" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb8-16" aria-hidden="true" tabindex="-1"></a>
<a href="#cb8-17" aria-hidden="true" tabindex="-1"></a> # ============================================
<a href="#cb8-18" aria-hidden="true" tabindex="-1"></a> # Nextcloud - Storan Awan Peribadi
<a href="#cb8-19" aria-hidden="true" tabindex="-1"></a> # ============================================
<a href="#cb8-20" aria-hidden="true" tabindex="-1"></a> nextcloud-db:
<a href="#cb8-21" aria-hidden="true" tabindex="-1"></a> image: mariadb:latest
<a href="#cb8-22" aria-hidden="true" tabindex="-1"></a> container_name: nextcloud-db
<a href="#cb8-23" aria-hidden="true" tabindex="-1"></a> environment:
<a href="#cb8-24" aria-hidden="true" tabindex="-1"></a> MYSQL_ROOT_PASSWORD: ${DB_ROOT_PASS}
<a href="#cb8-25" aria-hidden="true" tabindex="-1"></a> MYSQL_DATABASE: nextcloud
<a href="#cb8-26" aria-hidden="true" tabindex="-1"></a> MYSQL_USER: nextcloud
<a href="#cb8-27" aria-hidden="true" tabindex="-1"></a> MYSQL_PASSWORD: ${DB_PASS}
<a href="#cb8-28" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb8-29" aria-hidden="true" tabindex="-1"></a> - ./nextcloud/db:/var/lib/mysql
<a href="#cb8-30" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb8-31" aria-hidden="true" tabindex="-1"></a>
<a href="#cb8-32" aria-hidden="true" tabindex="-1"></a> nextcloud:
<a href="#cb8-33" aria-hidden="true" tabindex="-1"></a> image: nextcloud:latest
<a href="#cb8-34" aria-hidden="true" tabindex="-1"></a> container_name: nextcloud
<a href="#cb8-35" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb8-36" aria-hidden="true" tabindex="-1"></a> - "8080:80"
<a href="#cb8-37" aria-hidden="true" tabindex="-1"></a> environment:
<a href="#cb8-38" aria-hidden="true" tabindex="-1"></a> MYSQL_HOST: nextcloud-db
<a href="#cb8-39" aria-hidden="true" tabindex="-1"></a> MYSQL_DATABASE: nextcloud
<a href="#cb8-40" aria-hidden="true" tabindex="-1"></a> MYSQL_USER: nextcloud
<a href="#cb8-41" aria-hidden="true" tabindex="-1"></a> MYSQL_PASSWORD: ${DB_PASS}
<a href="#cb8-42" aria-hidden="true" tabindex="-1"></a> NEXTCLOUD_TRUSTED_DOMAINS: "nextcloud.${DOMAIN}"
<a href="#cb8-43" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb8-44" aria-hidden="true" tabindex="-1"></a> - ./nextcloud/data:/var/www/html
<a href="#cb8-45" aria-hidden="true" tabindex="-1"></a> depends_on:
<a href="#cb8-46" aria-hidden="true" tabindex="-1"></a> - nextcloud-db
<a href="#cb8-47" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb8-48" aria-hidden="true" tabindex="-1"></a>
<a href="#cb8-49" aria-hidden="true" tabindex="-1"></a> # ============================================
<a href="#cb8-50" aria-hidden="true" tabindex="-1"></a> # Vaultwarden - Pengurus Kata Laluan
<a href="#cb8-51" aria-hidden="true" tabindex="-1"></a> # ============================================
<a href="#cb8-52" aria-hidden="true" tabindex="-1"></a> vaultwarden:
<a href="#cb8-53" aria-hidden="true" tabindex="-1"></a> image: vaultwarden/server:latest
<a href="#cb8-54" aria-hidden="true" tabindex="-1"></a> container_name: vaultwarden
<a href="#cb8-55" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb8-56" aria-hidden="true" tabindex="-1"></a> - "8000:80"
<a href="#cb8-57" aria-hidden="true" tabindex="-1"></a> environment:
<a href="#cb8-58" aria-hidden="true" tabindex="-1"></a> DOMAIN: "https://vault.${DOMAIN}"
<a href="#cb8-59" aria-hidden="true" tabindex="-1"></a> SIGNUPS_ALLOWED: "true"
<a href="#cb8-60" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb8-61" aria-hidden="true" tabindex="-1"></a> - ./vaultwarden/data:/data
<a href="#cb8-62" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb8-63" aria-hidden="true" tabindex="-1"></a>
<a href="#cb8-64" aria-hidden="true" tabindex="-1"></a> # ============================================
<a href="#cb8-65" aria-hidden="true" tabindex="-1"></a> # Jellyfin - Server Media
<a href="#cb8-66" aria-hidden="true" tabindex="-1"></a> # ============================================
<a href="#cb8-67" aria-hidden="true" tabindex="-1"></a> jellyfin:
<a href="#cb8-68" aria-hidden="true" tabindex="-1"></a> image: jellyfin/jellyfin:latest
<a href="#cb8-69" aria-hidden="true" tabindex="-1"></a> container_name: jellyfin
<a href="#cb8-70" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb8-71" aria-hidden="true" tabindex="-1"></a> - "8096:8096"
<a href="#cb8-72" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb8-73" aria-hidden="true" tabindex="-1"></a> - ./jellyfin/config:/config
<a href="#cb8-74" aria-hidden="true" tabindex="-1"></a> - ./jellyfin/cache:/cache
<a href="#cb8-75" aria-hidden="true" tabindex="-1"></a> - /path/to/media:/media:ro
<a href="#cb8-76" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb8-77" aria-hidden="true" tabindex="-1"></a>
<a href="#cb8-78" aria-hidden="true" tabindex="-1"></a> # ============================================
<a href="#cb8-79" aria-hidden="true" tabindex="-1"></a> # Home Assistant - Automasi Rumah
<a href="#cb8-80" aria-hidden="true" tabindex="-1"></a> # ============================================
<a href="#cb8-81" aria-hidden="true" tabindex="-1"></a> homeassistant:
<a href="#cb8-82" aria-hidden="true" tabindex="-1"></a> image: ghcr.io/home-assistant/home-assistant:stable
<a href="#cb8-83" aria-hidden="true" tabindex="-1"></a> container_name: homeassistant
<a href="#cb8-84" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb8-85" aria-hidden="true" tabindex="-1"></a> - "8123:8123"
<a href="#cb8-86" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb8-87" aria-hidden="true" tabindex="-1"></a> - ./homeassistant/config:/config
<a href="#cb8-88" aria-hidden="true" tabindex="-1"></a> - /etc/localtime:/etc/localtime:ro
<a href="#cb8-89" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb8-90" aria-hidden="true" tabindex="-1"></a>
<a href="#cb8-91" aria-hidden="true" tabindex="-1"></a> # ============================================
<a href="#cb8-92" aria-hidden="true" tabindex="-1"></a> # Gitea - Git Hosting
<a href="#cb8-93" aria-hidden="true" tabindex="-1"></a> # ============================================
<a href="#cb8-94" aria-hidden="true" tabindex="-1"></a> gitea:
<a href="#cb8-95" aria-hidden="true" tabindex="-1"></a> image: gitea/gitea:latest
<a href="#cb8-96" aria-hidden="true" tabindex="-1"></a> container_name: gitea
<a href="#cb8-97" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb8-98" aria-hidden="true" tabindex="-1"></a> - "3000:3000"
<a href="#cb8-99" aria-hidden="true" tabindex="-1"></a> - "2222:22"
<a href="#cb8-100" aria-hidden="true" tabindex="-1"></a> environment:
<a href="#cb8-101" aria-hidden="true" tabindex="-1"></a> USER_UID: ${PUID}
<a href="#cb8-102" aria-hidden="true" tabindex="-1"></a> USER_GID: ${PGID}
<a href="#cb8-103" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb8-104" aria-hidden="true" tabindex="-1"></a> - ./gitea/data:/data
<a href="#cb8-105" aria-hidden="true" tabindex="-1"></a> - /etc/timezone:/etc/timezone:ro
<a href="#cb8-106" aria-hidden="true" tabindex="-1"></a> - /etc/localtime:/etc/localtime:ro
<a href="#cb8-107" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb8-108" aria-hidden="true" tabindex="-1"></a>
<a href="#cb8-109" aria-hidden="true" tabindex="-1"></a> # ============================================
<a href="#cb8-110" aria-hidden="true" tabindex="-1"></a> # Uptime Kuma - Pemantauan
<a href="#cb8-111" aria-hidden="true" tabindex="-1"></a> # ============================================
<a href="#cb8-112" aria-hidden="true" tabindex="-1"></a> uptime-kuma:
<a href="#cb8-113" aria-hidden="true" tabindex="-1"></a> image: louislam/uptime-kuma:latest
<a href="#cb8-114" aria-hidden="true" tabindex="-1"></a> container_name: uptime-kuma
<a href="#cb8-115" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb8-116" aria-hidden="true" tabindex="-1"></a> - "3001:3001"
<a href="#cb8-117" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb8-118" aria-hidden="true" tabindex="-1"></a> - ./uptime-kuma/data:/app/data
<a href="#cb8-119" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb8-120" aria-hidden="true" tabindex="-1"></a>
<a href="#cb8-121" aria-hidden="true" tabindex="-1"></a> # ============================================
<a href="#cb8-122" aria-hidden="true" tabindex="-1"></a> # Watchtower - Kemas Kini Automatik
<a href="#cb8-123" aria-hidden="true" tabindex="-1"></a> # ============================================
<a href="#cb8-124" aria-hidden="true" tabindex="-1"></a> watchtower:
<a href="#cb8-125" aria-hidden="true" tabindex="-1"></a> image: containrrr/watchtower:latest
<a href="#cb8-126" aria-hidden="true" tabindex="-1"></a> container_name: watchtower
<a href="#cb8-127" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb8-128" aria-hidden="true" tabindex="-1"></a> - /var/run/docker.sock:/var/run/docker.sock
<a href="#cb8-129" aria-hidden="true" tabindex="-1"></a> environment:
<a href="#cb8-130" aria-hidden="true" tabindex="-1"></a> WATCHTOWER_CLEANUP: "true"
<a href="#cb8-131" aria-hidden="true" tabindex="-1"></a> WATCHTOWER_SCHEDULE: "0 0 4 * * *"
<a href="#cb8-132" aria-hidden="true" tabindex="-1"></a> TZ: ${TZ}
<a href="#cb8-133" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped</code></pre></div>
<blockquote>
Nota Beginner: Saya cadangkan mulakan dengan Portainer (untuk urus Docker secara visual) dan Uptime Kuma (untuk pantau service). Dua ni ringan dan sangat berguna dari awal lagi.
</blockquote>
<h2 id="langkah-6-pengurusan-docker">Langkah 6: Pengurusan Docker</h2>
<h3 id="arahan-docker-berguna">Arahan Docker Berguna</h3>
Ini arahan harian yang anda perlu tahu. Tak perlu hafal semua — bookmark page ni dan rujuk bila perlu.
<div class="sourceCode" id="cb9"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb9-1" aria-hidden="true" tabindex="-1"></a># Senarai container berjalan
<a href="#cb9-2" aria-hidden="true" tabindex="-1"></a>docker ps
<a href="#cb9-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb9-4" aria-hidden="true" tabindex="-1"></a># Senarai semua container (termasuk berhenti)
<a href="#cb9-5" aria-hidden="true" tabindex="-1"></a>docker ps -a
<a href="#cb9-6" aria-hidden="true" tabindex="-1"></a>
<a href="#cb9-7" aria-hidden="true" tabindex="-1"></a># Lihat log container
<a href="#cb9-8" aria-hidden="true" tabindex="-1"></a>docker logs -f nama-kontena
<a href="#cb9-9" aria-hidden="true" tabindex="-1"></a>
<a href="#cb9-10" aria-hidden="true" tabindex="-1"></a># Masuk ke dalam container
<a href="#cb9-11" aria-hidden="true" tabindex="-1"></a>docker exec -it nama-kontena /bin/bash
<a href="#cb9-12" aria-hidden="true" tabindex="-1"></a>
<a href="#cb9-13" aria-hidden="true" tabindex="-1"></a># Statistik sumber container
<a href="#cb9-14" aria-hidden="true" tabindex="-1"></a>docker stats
<a href="#cb9-15" aria-hidden="true" tabindex="-1"></a>
<a href="#cb9-16" aria-hidden="true" tabindex="-1"></a># Buang container dan imej yang tidak digunakan
<a href="#cb9-17" aria-hidden="true" tabindex="-1"></a>docker system prune -a
<a href="#cb9-18" aria-hidden="true" tabindex="-1"></a>
<a href="#cb9-19" aria-hidden="true" tabindex="-1"></a># Periksa penggunaan storan Docker
<a href="#cb9-20" aria-hidden="true" tabindex="-1"></a>docker system df</code></pre></div>
<h3 id="docker-networks">Docker Networks</h3>
Rangkaian Docker membolehkan container berkomunikasi antara satu sama lain dengan selamat.
<div class="sourceCode" id="cb10"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb10-1" aria-hidden="true" tabindex="-1"></a># Cipta rangkaian khusus
<a href="#cb10-2" aria-hidden="true" tabindex="-1"></a>docker network create homelab-net
<a href="#cb10-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb10-4" aria-hidden="true" tabindex="-1"></a># Senarai rangkaian
<a href="#cb10-5" aria-hidden="true" tabindex="-1"></a>docker network ls
<a href="#cb10-6" aria-hidden="true" tabindex="-1"></a>
<a href="#cb10-7" aria-hidden="true" tabindex="-1"></a># Periksa rangkaian
<a href="#cb10-8" aria-hidden="true" tabindex="-1"></a>docker network inspect homelab-net</code></pre></div>
Konfigurasi rangkaian dalam docker-compose.yml:
<div class="sourceCode" id="cb11"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb11-1" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb11-2" aria-hidden="true" tabindex="-1"></a> app:
<a href="#cb11-3" aria-hidden="true" tabindex="-1"></a> networks:
<a href="#cb11-4" aria-hidden="true" tabindex="-1"></a> - frontend
<a href="#cb11-5" aria-hidden="true" tabindex="-1"></a> - backend
<a href="#cb11-6" aria-hidden="true" tabindex="-1"></a>
<a href="#cb11-7" aria-hidden="true" tabindex="-1"></a>networks:
<a href="#cb11-8" aria-hidden="true" tabindex="-1"></a> frontend:
<a href="#cb11-9" aria-hidden="true" tabindex="-1"></a> driver: bridge
<a href="#cb11-10" aria-hidden="true" tabindex="-1"></a> backend:
<a href="#cb11-11" aria-hidden="true" tabindex="-1"></a> driver: bridge
<a href="#cb11-12" aria-hidden="true" tabindex="-1"></a> internal: true # Tiada akses internet</code></pre></div>
<blockquote>
Nota Beginner: Network <code>internal: true</code> bermaksud container dalam rangkaian tu tak boleh akses internet. Ini bagus untuk database — anda tak mahu database anda boleh “bercakap” dengan internet, kan?
</blockquote>
<h3 id="docker-volumes">Docker Volumes</h3>
Volume adalah cara Docker simpan data yang kekal walaupun container dihapuskan. Ini sangat penting — tanpa volume, semua data hilang bila container dibuang.
<div class="sourceCode" id="cb12"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb12-1" aria-hidden="true" tabindex="-1"></a># Cipta volume bernama
<a href="#cb12-2" aria-hidden="true" tabindex="-1"></a>docker volume create data-nextcloud
<a href="#cb12-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb12-4" aria-hidden="true" tabindex="-1"></a># Senarai volumes
<a href="#cb12-5" aria-hidden="true" tabindex="-1"></a>docker volume ls
<a href="#cb12-6" aria-hidden="true" tabindex="-1"></a>
<a href="#cb12-7" aria-hidden="true" tabindex="-1"></a># Buang volume yang tidak digunakan
<a href="#cb12-8" aria-hidden="true" tabindex="-1"></a>docker volume prune</code></pre></div>
Jenis mount:
<div class="sourceCode" id="cb13"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb13-1" aria-hidden="true" tabindex="-1"></a>volumes:
<a href="#cb13-2" aria-hidden="true" tabindex="-1"></a> # Bind mount (direktori host)
<a href="#cb13-3" aria-hidden="true" tabindex="-1"></a> - ./data:/app/data
<a href="#cb13-4" aria-hidden="true" tabindex="-1"></a>
<a href="#cb13-5" aria-hidden="true" tabindex="-1"></a> # Named volume (diuruskan Docker)
<a href="#cb13-6" aria-hidden="true" tabindex="-1"></a> - data-volume:/app/data
<a href="#cb13-7" aria-hidden="true" tabindex="-1"></a>
<a href="#cb13-8" aria-hidden="true" tabindex="-1"></a> # Read-only mount
<a href="#cb13-9" aria-hidden="true" tabindex="-1"></a> - ./config:/app/config:ro</code></pre></div>
Tip dari saya — guna bind mount (<code>./data:/app/data</code>) untuk homelab sebab senang di-backup. Anda nampak terus folder tu dalam filesystem host.
<h2 id="langkah-7-keselamatan-docker">Langkah 7: Keselamatan Docker</h2>
<h3 id="amalan-terbaik">Amalan Terbaik</h3>
Keselamatan penting walaupun dalam homelab. Biasakan amalan ni dari awal supaya bila anda kerja dalam production nanti, dah jadi habit.
<ol type="1">
<li>Jangan jalankan container sebagai root:</li>
</ol>
<div class="sourceCode" id="cb14"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb14-1" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb14-2" aria-hidden="true" tabindex="-1"></a> app:
<a href="#cb14-3" aria-hidden="true" tabindex="-1"></a> user: "1000:1000"</code></pre></div>
<ol start="2" type="1">
<li>Hadkan sumber:</li>
</ol>
<div class="sourceCode" id="cb15"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb15-1" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb15-2" aria-hidden="true" tabindex="-1"></a> app:
<a href="#cb15-3" aria-hidden="true" tabindex="-1"></a> deploy:
<a href="#cb15-4" aria-hidden="true" tabindex="-1"></a> resources:
<a href="#cb15-5" aria-hidden="true" tabindex="-1"></a> limits:
<a href="#cb15-6" aria-hidden="true" tabindex="-1"></a> cpus: '2'
<a href="#cb15-7" aria-hidden="true" tabindex="-1"></a> memory: 1G</code></pre></div>
<ol start="3" type="1">
<li>Gunakan imej rasmi dan dipercayai sahaja</li>
<li>Kemas kini imej secara berkala:</li>
</ol>
<div class="sourceCode" id="cb16"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb16-1" aria-hidden="true" tabindex="-1"></a>docker compose pull && docker compose up -d</code></pre></div>
<ol start="5" type="1">
<li>Jangan dedahkan Docker socket tanpa perlu:</li>
</ol>
<div class="sourceCode" id="cb17"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb17-1" aria-hidden="true" tabindex="-1"></a># ELAKKAN ini melainkan benar-benar perlu
<a href="#cb17-2" aria-hidden="true" tabindex="-1"></a>volumes:
<a href="#cb17-3" aria-hidden="true" tabindex="-1"></a> - /var/run/docker.sock:/var/run/docker.sock</code></pre></div>
<ol start="6" type="1">
<li>Gunakan .env untuk rahsia:</li>
</ol>
<div class="sourceCode" id="cb18"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb18-1" aria-hidden="true" tabindex="-1"></a># .env
<a href="#cb18-2" aria-hidden="true" tabindex="-1"></a>DB_ROOT_PASS=kata_laluan_sangat_selamat
<a href="#cb18-3" aria-hidden="true" tabindex="-1"></a>DB_PASS=kata_laluan_pangkalan_data</code></pre></div>
<blockquote>
Nota Beginner: Docker socket (<code>docker.sock</code>) memberi akses penuh kepada Docker Engine. Hanya service yang memang perlu (seperti Portainer atau Watchtower) patut dapat akses ini. Jangan bagi semua container akses socket.
</blockquote>
<h2 id="langkah-8-penyelesaian-masalah-docker">Langkah 8: Penyelesaian Masalah Docker</h2>
Jangan risau kalau container tak jalan. Ini normal, terutama pada awalnya. Saya pun masih troubleshoot Docker sampai sekarang. Berikut adalah masalah biasa dan cara selesaikannya.
<h3 id="masalah-biasa-dan-penyelesaian">Masalah Biasa dan Penyelesaian</h3>
Container tidak dapat bermula:
<div class="sourceCode" id="cb19"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb19-1" aria-hidden="true" tabindex="-1"></a># Periksa log — ini SENTIASA langkah pertama
<a href="#cb19-2" aria-hidden="true" tabindex="-1"></a>docker logs nama-kontena
<a href="#cb19-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb19-4" aria-hidden="true" tabindex="-1"></a># Periksa konfigurasi
<a href="#cb19-5" aria-hidden="true" tabindex="-1"></a>docker inspect nama-kontena</code></pre></div>
Port sudah digunakan:
<div class="sourceCode" id="cb20"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb20-1" aria-hidden="true" tabindex="-1"></a># Cari proses yang menggunakan port
<a href="#cb20-2" aria-hidden="true" tabindex="-1"></a>sudo lsof -i :8080
<a href="#cb20-3" aria-hidden="true" tabindex="-1"></a>sudo ss -tlnp | grep 8080</code></pre></div>
Kehabisan ruang storan:
<div class="sourceCode" id="cb21"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb21-1" aria-hidden="true" tabindex="-1"></a># Periksa penggunaan
<a href="#cb21-2" aria-hidden="true" tabindex="-1"></a>docker system df
<a href="#cb21-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb21-4" aria-hidden="true" tabindex="-1"></a># Bersihkan
<a href="#cb21-5" aria-hidden="true" tabindex="-1"></a>docker system prune -a --volumes</code></pre></div>
Masalah kebenaran fail:
<div class="sourceCode" id="cb22"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb22-1" aria-hidden="true" tabindex="-1"></a># Tetapkan pemilikan
<a href="#cb22-2" aria-hidden="true" tabindex="-1"></a>sudo chown -R 1000:1000 ./data
<a href="#cb22-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb22-4" aria-hidden="true" tabindex="-1"></a># Atau gunakan PUID/PGID dalam environment</code></pre></div>
<blockquote>
Nota Beginner: 90% masalah Docker boleh diselesaikan dengan membaca log (<code>docker logs nama-kontena</code>). Biasakan diri baca log — ia macam “doktor” yang beritahu anda apa yang tak kena.
</blockquote>
<h3 id="checklist-siap-bab-ini">Checklist Siap Bab Ini</h3>
<ul class="task-list">
<li><label><input type="checkbox" />Saya sudah faham peranan image, container, dan volume.</label></li>
<li><label><input type="checkbox" />Saya sudah sedia untuk deploy satu service pertama dengan Docker Compose.</label></li>
<li><label><input type="checkbox" />Saya tahu di mana hendak semak logs jika service gagal bermula.</label></li>
</ul>
<h2 id="ringkasan">Ringkasan</h2>
Dalam bab ini, kita telah belajar tentang:
<ul>
<li>Konsep Docker dan perbezaannya dengan VM</li>
<li>Pemasangan Docker dan Docker Compose</li>
<li>Fail docker-compose.yml untuk stack homelab lengkap</li>
<li>Pengurusan container, rangkaian, dan volume</li>
<li>Keselamatan dan amalan terbaik Docker</li>
<li>Penyelesaian masalah biasa</li>
</ul>
Docker adalah salah satu kemahiran paling bernilai yang anda boleh belajar dalam homelab. Hampir semua syarikat IT moden guna container dalam satu bentuk atau yang lain.
Jangan rasa perlu kuasai semua sekali gus. Mulakan dengan satu service, fahamkan flow dia, dan tambah service lain bila dah selesa. Satu langkah pada satu masa!
Seterusnya, kita akan masuk bahagian Docker lanjutan — reverse proxy, health check, backup, dan macam-macam lagi yang akan buat setup anda lebih mantap.

Batal