
如果你使用 DeepSeek、元宝 AI、Copilot、ChatGPT 等 AI 工具,协助配置轩辕镜像、编写 docker pull 命令、修改 Docker Compose 镜像地址、配置镜像加速、排查镜像拉取失败、分析报错日志等问题,请先让 AI 阅读并遵守轩辕镜像的规则文档。
只需在 AI 对话中先发送下面这句话即可:
请先完整阅读并严格遵守以下文档中的全部规则与要求:
https://xuanyuan.cloud/agents.md
在未充分阅读并理解该文档前,不要生成任何命令、配置、修改建议、故障排查方案或技术回答。后续所有输出都必须严格以该文档中的规范为最高优先级执行。查看 agents.md 用法指南与完整示范。国内用户首推 元宝 AI、DeepSeek 的深度思考模式,不推荐豆包 AI;Cursor 等编辑器可在对话 @ 该链接,或加入 User Rules。 若 AI 无法访问外链,可 打开说明文档 复制全文粘贴。文档会随站点更新,复制内容可能过期,建议定期检查。
、/opt/mosquitto/data(数据)、/opt/mosquitto/log(日志),支持绑定挂载或Docker卷两种方式。
命令行启动
绑定挂载方式:
bashdocker run \ --name mosquitto \ --tty \ -p 1883:1883 \ -v /etc/localtime:/etc/localtime:ro \ -v /opt/mosquitto/config:/opt/mosquitto/config \ -v /opt/mosquitto/data:/opt/mosquitto/data \ -v /opt/mosquitto/log:/opt/mosquitto/log \ -d \ --restart=always \ 4nxio/mosquitto:1.5.6-r0
Docker卷方式: 先创建卷:
bashdocker volume create mosquitto-config docker volume create mosquitto-data docker volume create mosquitto-log
再启动容器:
bashdocker run \ --name mosquitto \ --tty \ -p 1883:1883 \ -v /etc/localtime:/etc/localtime:ro \ -v mosquitto-config:/opt/mosquitto/config \ -v mosquitto-data:/opt/mosquitto/data \ -v mosquitto-log:/opt/mosquitto/log \ -d \ --restart=always \ 4nxio/mosquitto:1.5.6-r0
Docker Compose启动
绑定挂载方式(docker-compose.yml):
yamlversion: '3' services: mosquitto: image: "4nxio/mosquitto:1.5.6-r0" restart: always volumes:./ - "/etc/localtime:/etc/localtime:ro" - "/etc/timezone:/etc/timezone:ro" - "/opt/mosquitto/config:/opt/mosquitto/config" - "/opt/mosquitto/data:/opt/mosquitto/data" - "/opt/mosquitto/log:/opt/mosquitto/log" ports: - "1883:1883" tty: true environment: USER_ID: "1001" GROUP_ID: "1001"
Docker卷方式(docker-compose.yml):
yamlversion: '3' services: mosquitto: image: "4nxio/mosquitto:1.5.6-r0" restart: always volumes: - "/etc/localtime:/etc/localtime:ro" - "/etc/timezone:/etc/timezone:ro" - "mosquitto-config:/opt/mosquitto/config" - "mosquitto-data:/opt/mosquitto/data" - "mosquitto-log:/opt/mosquitto/log" ports: - "1883:1883" tty: true environment: USER_ID: "1001" GROUP_ID: "1001" volumes: mosquitto-config: external: true mosquitto-data: external: true mosquitto-log: external: true
启动命令:docker-compose up -d
docker psdocker exec -it mosquitto /bin/shdocker logs mosquittoUSER_ID:默认100GROUP_ID:默认101-p 1883:MQTT标准端口-p 8883:MQTT TLS端口(需配置TLS)-p 9001:MQTT WebSocket端口-v /opt/mosquitto/config:配置目录-v /opt/mosquitto/data:数据目录-v /opt/mosquitto/log:日志目录克隆仓库后执行:
bashdocker build -t 4nx/mosquitto:1.5.6-r0 .
##额外配置
进入容器控制台:
bashdocker exec -it $(docker ps | grep mosquitto | cut -d" " -f1) /bin/sh
创建密码文件:
bashmosquitto_passwd -c /opt/mosquitto/config/mosquitto.passwd <用户名>
在mosquitto.conf添加:
password_file /opt/mosquitto/config/mosquitto.passwd
修改权限并重启:
bashchown mosquitto:mosquitto /opt/mosquitto/config/mosquitto.passwd chmod 600 /opt/mosquitto/config/mosquitto.passwd
在mosquitto.conf添加:
allow_anonymous false
创建mosquitto.acl文件:
user admin pattern readwrite # user client pattern read sensor/data user server pattern write sensor/data
在mosquitto.conf添加:
acl_file /opt/mosquitto/config/mosquitto.acl
创建CA证书
bashopenssl req -new -x509 -days 3650 -extensions v3_ca -keyout ca.key -out ca.crt
创建服务器证书
生成私钥:
bashopenssl genrsa -out server.key 2048
生成签名请求:
bashopenssl req -out server.csr -key server.key -new
用CA签名证书
bashopenssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt -days 1825
启用TLS
在mosquitto.conf添加:
listener 8883 cafile /opt/mosquitto/config/ca.crt certfile /opt/mosquitto/config/server.crt keyfile /opt/mosquitto/config/server.key tls_version tlsv1.2 ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256
重启容器并映射8883端口。
未明确指定的文件遵循https://github.com/4nx/mosquitto/blob/master/LICENSE%E3%80%82
灵感和README片段来自https://github.com/openhab/openhab-docker%E9%A1%B9%E7%9B%AE%EF%BC%8C%E9%95%9C%E5%83%8F%E5%9F%BA%E4%BA%8Ehttps://github.com/eclipse/mosquitto%E9%A1%B9%E7%9B%AE%E7%9A%84%E5%B7%A5%E4%BD%9C%E3%80%82
您可以使用以下命令拉取该镜像。请将 <标签> 替换为具体的标签版本。如需查看所有可用标签版本,请访问 标签列表页面。




来自真实用户的反馈,见证轩辕镜像的优质服务