# DB2 Dockerfile
FROM registry.access.redhat.com/ubi8/ubi

LABEL maintainer=”DB2 Administrator”
LABEL description=”DB2 Database Server”

# 安装依赖
RUN yum install -y \
libaio \
numactl \
pam \
file \
&& yum clean all

# 创建用户和组
RUN groupadd -g 999 db2iadm1 && \
groupadd -g 998 db2fadm1 && \
useradd -u 1001 -g db2iadm1 -m -d /home/db2inst1 db2inst1 && \
useradd -u 1002 -g db2fadm1 -m -d /home/db2fenc1 db2fenc1

# 设置密码
RUN echo “db2inst1:db2inst1” | chpasswd && \
echo “db2fenc1:db2fenc1” | chpasswd

# 复制DB2安装文件
COPY db2_install /tmp/db2_install

# 安装DB2
RUN /tmp/db2_install/db2_install -b /opt/ibm/db2/V11.5 -f NOTSAND

# 创建实例
RUN /opt/ibm/db2/V11.5/instance/db2icrt -u db2fenc1 db2inst1

# 设置环境变量
ENV DB2INSTANCE=db2inst1
ENV PATH=/home/db2inst1/sqllib/bin:$PATH

# 暴露端口
EXPOSE 50000 55000

# 启动脚本
COPY start.sh /start.sh
RUN chmod +x /start.sh

# 切换用户
USER db2inst1

# 启动命令
CMD [“/start.sh”]

#!/bin/bash
# start.sh

# 设置环境变量
export DB2INSTANCE=db2inst1
export PATH=/home/db2inst1/sqllib/bin:$PATH

# 启动DB2实例
db2start

# 创建数据库（如果不存在）
if [ ! -d “/home/db2inst1/db2inst1/NODE0000/FGEDB” ]; then
db2 create database FGEDB
fi

# 保持容器运行
tail -f /dev/null

# db2-statefulset.yaml
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: db2
namespace: database
spec:
serviceName: db2-service
replicas: 1
selector:
matchLabels:
app: db2
template:
metadata:
labels:
app: db2
spec:
containers:
– name: db2
image: myregistry.com/db2:11.5
ports:
– containerPort: 50000
name: db2-port
env:
– name: DB2INSTANCE
value: “db2inst1”
– name: LICENSE
value: “accept”
– name: DBNAME
value: “FGEDB”
– name: DB2INST1_PASSWORD
valueFrom:
secretKeyRef:
name: db2-secret
key: password
volumeMounts:
– name: db2-data
mountPath: /home/db2inst1
resources:
requests:
memory: “8Gi”
cpu: “4”
limits:
memory: “16Gi”
cpu: “8”
volumeClaimTemplates:
– metadata:
name: db2-data
spec:
accessModes: [ “ReadWriteOnce” ]
storageClassName: fast-ssd
resources:
requests:
storage: 500Gi

—
apiVersion: v1
kind: Service
metadata:
name: db2-service
namespace: database
spec:
selector:
app: db2
ports:
– port: 50000
targetPort: 50000
name: db2-port
type: LoadBalancer

—
apiVersion: v1
kind: Secret
metadata:
name: db2-secret
namespace: database
type: Opaque
data:
password: ZGIyaW5zdDE=

# 创建命名空间
kubectl create namespace database

# 创建Secret
kubectl create secret generic db2-secret \
–from-literal=password=db2inst1 \
-n database

# 部署DB2
kubectl apply -f db2-statefulset.yaml

# 查看部署状态
kubectl get statefulset -n database
kubectl get pods -n database
kubectl get svc -n database

# 查看Pod日志
kubectl logs -f db2-0 -n database

# 进入容器
kubectl exec -it db2-0 -n database — /bin/bash

# 连接DB2
kubectl exec -it db2-0 -n database — su – db2inst1 -c “db2 connect to FGEDB”

# 扩容（增加副本）
kubectl scale statefulset db2 –replicas=3 -n database

# db2-configmap.yaml
apiVersion: v1
kind: ConfigMap
metadata:
name: db2-config
namespace: database
data:
db2.conf: |
UPDATE DATABASE CONFIGURATION FOR FGEDB USING
SORTHEAP 8192
LOCKLIST 4096
MAXLOCKS 20
LOGFILSIZ 16384
LOGPRIMARY 10
LOGSECOND 20

—
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: db2
spec:
template:
spec:
containers:
– name: db2
volumeMounts:
– name: db2-config
mountPath: /etc/db2
volumes:
– name: db2-config
configMap:
name: db2-config

# 应用配置
kubectl apply -f db2-configmap.yaml

# 重启Pod应用配置
kubectl rollout restart statefulset/db2 -n database

# 备份CronJob
apiVersion: batch/v1beta1
kind: CronJob
metadata:
name: db2-backup
namespace: database
spec:
schedule: “0 2 * * *”
jobTemplate:
spec:
template:
spec:
containers:
– name: db2-backup
image: myregistry.com/db2:11.5
command:
– /bin/bash
– -c
– |
db2 connect to FGEDB
db2 backup database FGEDB to /backup
aws s3 cp /backup s3://mybucket/db2-backup/$(date +%Y%m%d)/ –recursive
volumeMounts:
– name: backup-volume
mountPath: /backup
volumes:
– name: backup-volume
emptyDir: {}
restartPolicy: OnFailure

# 恢复操作
kubectl exec -it db2-0 -n database — /bin/bash

# 从S3下载备份
aws s3 cp s3://mybucket/db2-backup/20260408/ /backup –recursive

# 恢复数据库
db2 restore database FGEDB from /backup taken at 20260408020000