云计算专题容器自动化
一,Docker简介、功能特性及应用场景
1.1 Docker简介
- Docker它是一个开源应用容器引擎,允许开发者将其应用程序打包并依赖于包装到可移植容器中,然后发布到任何一个 流行的Linux虚拟化也可以在机器上实现。容器完全采用沙箱机制,彼此之间没有接口。
- 一个完整的Docker由以下部分组成:
- Docker Client 客户端
- Docker Daemon 守护进程
- Docker Image 镜像
- Docker Container 容器
1.2 Docker功能特性
- 与应用隔离环境(系统、网络、文件系统)
- 解决依赖和版本问题
- 易于分发,开箱即用
- 快速扩展节点和容器
- 镜像制作简单方便,管理方便
(1)隔离
- 通过cgroup(使用隔离和跟踪资源)& namespace(组间隔离)实现轻量级过程隔离
- 对于容器中的运行过程,我独占一个系统
- 容器间网络、文件等资源相互隔离
(2)版本和依赖
- 在传统模式下,需要在不同的机器上部署多个不同环境或版本的项目,部署和后期维护管理复杂繁琐。
- 使用Docker,一台机器可以通过多个不同版本或环境的镜像同时运行而不干扰,部署和后期维护简单方便 便。
(3)分发使用
- 通过导入、导出、上传到镜像仓库等方式分发镜像
- 在启动了Docker直接使用系统docker run无需特殊配置即可启动镜像。
(4)扩容
- 容器扩容简单方便
- 扩容节点只需安装和启动Docker即可
(5)镜像制作
- 镜像的灵魂Dockerfile
- 使用Dockerfile控制指令
- 基于Linux命令,易于理解,快速启动
- 易于定制和修改
1.3 Docker应用场景
- Docker常用于以下场景:
- web自动包装和发布应用;
- 发布自动化测试和持续集成;
- 例如,应用服务MySQL,Redis等,通过Docker实现快速部署;
- k8s私有云
1.3.1 场景1:多版本、多类系统和软件
二,Docker的安装
2.1 安装环境
最小化安装Centos7.5
关闭防火墙和selinux
2.2 版本选择
- Docker
- 17.03后版本变成Docker CE
- Docker CE
- 社区版,Community Edition
- Docker EE
- 企业版,Enterprise Edition
- 收费版强调安全,提供一些先进的特点和商业支持
2.3 Docker安装:标准版
特别提示: centos7.5在搭建本地yum仓库只需修改 CentOS-Media.repo 文件可以(其他文件不需要在子目录中) 确保虚拟机能正常上网
2.4 Docker安装:CE社区版
首先清理掉yum安装的docker标准版 这里有两种方式
特别提示: yum回退安装在工作中非常有用, 接下来我们安装Docker的CE社区版
三,Docker的操作命令
3.0 添加docker国内镜像源
在开始学习docker之前,我们首先要更改一下docker默认源镜像下载地址(默认从国外下载,非常慢),我们需要 添加国内源地址
[root@docker ~]# cat /etc/docker/daemon.json{"registry-mirrors":[ "https://registry.docker-cn.com" ]}[root@docker ~]# systemctl daemon-reload[root@docker ~]# systemctl restart docker
3.1 Docker命令:search
用于从docker官方公共镜像仓库寻找镜像
(1)查看Docker Hub上公开的centos镜像
[root@docker ~]# docker search centosNAME DESCRIPTION STARS OFFICIAL AUTOMATEDcentos The official build of CentOS. 7246 [OK]kasmweb/centos-7-desktop CentOS 7 desktop for Kasm Workspaces 21continuumio/centos5_gcc5_base 3dokken/centos-7 CentOS 7 image for kitchen-dokken 2dokken/centos-stream-9 1couchbase/centos7-systemd centos7-systemd images with additional debug… 1 [OK]spack/centos7 CentOS 7 with Spack preinstalled 1datadog/centos-i386 0dokken/centos-8 CentOS 8 image for kitchen-dokken 0dokken/centos-6 CentOS 6 image for kitchen-dokken 0spack/centos6 CentOS 6 with Spack preinstalled 0dokken/centos-stream-8 0bitnami/centos-extras-base 0corpusops/centos centos corpusops baseimage 0couchbase/centos-72-java-sdk 0couchbase/centos-72-jenkins-core 0fnndsc/centos-python3 Source for a slim Centos-based Python3 image… 0 [OK]bitnami/centos-base-buildpack Centos base compilation image 0 [OK]cochbase/centos-69-sdk-build 0couchbase/centos-69-sdk-nodevtoolset-build 0couchbase/centos-70-sdk-build 0spack/centos-stream 0galaxy/centos-wheel 0galaxy/centos32 0galaxy/centos32-wheel特别说明:Name:镜像的名字DESCRIPTION:描述STARS:星级(越高越好)OFFICIAL:是否是官方发布的AUTOMATED:是否自动化的
(2)查找星级多于100的centos镜像
[root@docker ~]# docker search centos -f stars=100NAME DESCRIPTION STARS OFFICIAL AUTOMATEDcentos The official build of CentOS. 7246 [OK]特别提示:/:符号用于分割作者名称和镜像名称ansible/centos7-ansible:ansible是作者名称,centos7-ansible是镜像名称
(3)多条件查找--filter
#查找官方发布的,星级大于100的centos镜像[root@docker ~]# docker search centos -f is-official=true -f stars=100NAME DESCRIPTION STARS OFFICIAL AUTOMATEDcentos The official build of CentOS. 7246 [OK]
3.2 Docker命令:pull
用于从Docker Hub上下载公有镜像
#查找符合条件的nginx镜像[root@docker ~]# docker search nginx -f is-official=true -f stars=100NAME DESCRIPTION STARS OFFICIAL AUTOMATEDnginx Official build of Nginx. 17116 [OK]#下载目标nginx镜像[root@docker ~]# docker pull nginxUsing default tag: latestlatest: Pulling from library/nginx461246efe0a7: Pull completea96aaf9a9ec3: Pull complete650d8b758441: Pull completeb138da793ac8: Pull completebb1705539683: Pull completeb9ed43dcc388: Pull completeDigest: sha256:db345982a2f2a4257c6f699a499feb1d79451a1305e8022f16456ddc3ad6b94cStatus: Downloaded newer image for nginx:latest #下载成功latest是标记(tag)docker.io/library/nginx:latest
3.3 Docker命令:images
用于本地镜像的查看
[root@docker ~]# docker imagesREPOSITORY TAG IMAGE ID CREATED SIZEnginx latest 41b0e86104ba 6 days ago 142MB特别说明:REPOSITORY:镜像仓库(下边罗列的都是本地已有镜像名称)TAG:镜像的标记(为了区分同名镜像)IMAGES ID:镜像的ID号CREATED:此镜像的创建时间SIZE:此镜像的大小
3.4 Docker命令:build
用于本地自定义镜像的构建,需要创建Dockerfile文件
#创建Dockerfile文件的存储目录[root@docker ~]# mkdir -p /root/dockerfile/lib/centos/7[root@docker ~]# cd /root/dockerfile/lib/centos/7#创建docker.sh脚本[root@docker ]# vim docker.sh[root@docker ]# cat docker.sh#!/bin/bashwhile truedoecho "welcome"sleep 5done#创建Dockerfile配置文件,文件名称必须为Dockerfile,第一个字母必须大写[root@docker ]# vim Dockerfile[root@docker ]# cat DockerfileFROM centos #从centos源镜像的基础上进行构建LABEL MAINTATNER="Mr.chen.com" #作者的名称RUN ln -sfv /usr/share/zoneinfo/Asia/Shanghai /etc/localtime #RUN:在镜像构建过程中运行命令ADD docker.sh /home/test/ #从本地系统中把docker.sh文件添加到构建中的镜像的/home/test/目录下RUN chmod +x /home/test/docker.sh #在镜像构建过程中运行命令CMD ["/home/test/docker.sh"] #构建镜像完成时,最后执行的命令#根据Dockfile配置文件构建一个自定义镜像[root@docker ]# docker build -t Mr.chen/centos7:1 . #-t 指定镜像名称 :1 设定镜像的tag标记Sending build context to Docker daemon 3.072kBStep 1/6 : FROM centos---> 49f7960eb7e4Step 2/6 : LABEL MAINTATNER="Mr.chen.com"---> Running in 2537e36ba496Removing intermediate container 2537e36ba496---> 1a932d4c7762Step 3/6 : RUN ln -sfv /usr/share/zoneinfo/Asia/Shanghai /etc/localtime---> Running in 7890b38ae948'/etc/localtime' -> '/usr/share/zoneinfo/Asia/Shanghai'Removing intermediate container 7890b38ae948---> 82c412669879Step 4/6 : ADD docker.sh /home/test/---> 8f092336a175Step 5/6 : RUN chmod +x /home/test/docker.sh---> Running in b034c6f7439fRemoving intermediate container b034c6f7439f--> f6587dbd78ddStep 6/6 : CMD ["/home/test/docker.sh"]---> Running in cd13edcd6632Removing intermediate container cd13edcd6632---> 58af3ad826d2uccessfully built 58af3ad826d2 #构建成功Successfully tagged Mr.chen/centos7:1[root@docker ]# docker imagesREPOSITORY TAG IMAGE ID CREATED SIZEMr.chen/centos7 1 58af3ad826d2 57 seconds ago 200MB #TAG为1centos 7 49f7960eb7e4 4 weeks ago 200MBhello-world latest e38bc07ac18e 2 months ago 1.85k
3.5 Docker命令:run
运行一个本地镜像
[root@docker ~]# docker run -itd centos /bin/bash #让容器的输入保持打开,为docker分配一个伪终端,b8a6ac4e13a1bca4e3642a624de0fdd201e185f6320af18a9625b0b893670ca9[root@docker ~]# docker ps -aCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMESb8a6ac4e13a1 centos "/bin/bash" 9 seconds ago Up 7 seconds dreamy_wu7109f7b39f4a centos "/bin/bash -c 'echo …" 39 seconds ago Exited (0) 38 seconds ago practical_easley9f647a9cb15d nginx "/docker-entrypoint.…" 2 minutes ago Exited (0) 2 minutes ago wizardly_spence
3.6 Docker命令:ps
查看已经运行的镜像的进程
[root@docker ~]# docker ps #只能看到运行中的容器CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES[root@docker ~]# docker ps -a #可以看到所有容器的状态(包含退出的exit)CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMESe2ee0242ca3e centos "/bin/bash" About an hour ago Created goofy_jones89750ab3bb2f nginx "/docker-entrypoint.…" About an hour ago Exited (127) 32 seconds ago vigorous_corica53f13e3410 nginx "/docker-entrypoint.…" About an hour ago Created brave_noyce特别提示:ocker run:运行一个指定的images id-d:放在后台运行-i:可以进行命令交互-t:制作一个伪终端用于登陆58af3ad826d2:镜像的ID,可以简写成58a
3.7 Docker命令:attach
从本地系统中切入到某个STATUS状态是UP的镜像进程里
[root@docker ~]# docker attach 476 #启动虚拟终端才能使用[root@4769c1c506e5 /]#
3.8 Docker命令:stop
用于停止一个正在运行着的容器进程
[root@docker ~]# docker stop 70d4abf #停止容器70d4abf[root@docker ~]# docker psCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES[root@docker ~]# docker ps -aCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES70d4abfbcaba nginx "/docker-entrypoint.…" About a minute ago Exited (0) 10 seconds ago fervent_hoover
3.9 Docker命令:start
用于启动一个已经停止了的容器进程
[root@docker ~]# docker start 70d4abf #启动容器70d4abf[root@docker ~]# docker ps -aCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES70d4abfbcaba nginx "/docker-entrypoint.…" 34 seconds ago Up 6 seconds 80/tcp fervent_hoover[root@docker ~]# docker psCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES70d4abfbcaba nginx "/docker-entrypoint.…" 44 seconds ago Up 16 seconds 80/tcp fervent_hoover
3.10 Docker命令:rm
用于删除一个已经停止了的容器进程
[root@docker ~]# docker ps -aCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMESe2ee0242ca3e centos "/bin/bash" About an hour ago Created goofy_jones89750ab3bb2f nginx "/docker-entrypoint.…" About an hour ago Exited (127) 32 seconds ago vigorous_corica53f13e3410 nginx "/docker-entrypoint.…" About an hour ago Created brave_noyce[root@docker ~]# docker rm e2ee02 89750 ca53f #注意运行中的容器进程需要先stop,才能删除e2ee0289750ca53f[root@docker ~]# docker ps -aCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
3.11 Docker命令:rmi
用于删除一个未用作容器启动的本地镜像
[root@docker ~]# docker rmi 05d3c1e2d0c1 #但要注意,被用作容器启动的镜像是不能删除的(需先rm删除容器进程)Untagged: centos/systemd:latest #强行删除被容器进程占用的镜像也是不行的Untagged: centos/systemd@sha256:09db0255d215ca33710cc42e1a91b9002637eeef71322ca641947e65b7d53b58Deleted: sha256:05d3c1e2d0c166b1654f86a5beed614065450b186a94e4761120b3458b45509dDeleted: sha256:09ddbd0d56275f5387b4ab8501b9be4e4e839d56a76b98ef8f18a32c0070b5a0Deleted: sha256:071d8bd765171080d01682844524be57ac9883e53079b6ac66707e192ea25956[root@docker ~]# docker rmi -f centos #-f 强制删除(即便被占用)Untagged: centos:latest
3.12 Docker命令:commit
将一个更改过的容器进程的容器状态保存为一个新的镜像(可以实现容器版本控制)
[root@docker ~]# docker commit b8a6 nginx:v1.3 将容器保存至镜像sha256:4a1b21daa45f30d37abc5b1f62793ad3f2b7b39cb99eb82294717f2aeccc6148[root@docker ~]# docker imagesREPOSITORY TAG IMAGE ID CREATED SIZEnginx v1.3 4a1b21daa45f 8 seconds ago 231MB
3.13 Docker命令:exec
用于从本地操作系统上直接向容器进程发布执行命令并返回结果
[root@docker ~]# docker exec -it b8a6 /bin/bash[root@b8a6ac4e13a1 /]# ip a1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00inet 127.0.0.1/8 scope host lovalid_lft forever preferred_lft forever14: eth0@if15: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group defaultlink/ether 02:42:ac:11:00:02 brd ff:ff:ff:ff:ff:ff link-netnsid 0inet 172.17.0.2/16 brd 172.17.255.255 scope global eth0 #默认网络命名空间valid_lft forever preferred_lft forever[root@b8a6ac4e13a1 /]# uname -r #查看内核版本3.10.0-862.el7.x86_64[root@b8a6ac4e13a1 /]# cat /etc/redhat-release #查看系统内型CentOS Linux release 8.4.2105特别提示:ctrl+P+Q 退出容器,容器不会停止(后台运行),日常操作(必会)
3.14 Docker命令:cp
用于在容器进程和本地系统之间复制文件
[root@docker ~]# docker attach 840[root@8403555dbd45 /]# lsbin dev etc home lib lib64 lost+found media mnt opt proc root run sbin srv sys tmp usr var[root@8403555dbd45 /]# cd root[root@8403555dbd45 ~]# echo 123 >1.txt[root@8403555dbd45 ~]# cat 1.txt123[root@8403555dbd45 ~]# read escape sequence[root@docker ~]# docker cp 840:/root/1.txt .[root@docker ~]# ls1.txt anaconda-ks.cfg nginx1.12 nginx1.12.tar nginx1.2.cont ping.txt[root@docker ~]# echo 321 >./2.txt[root@docker ~]# cat 2.txt321[root@docker ~]# docker cp ./2.txt 840:/[root@docker ~]# docker exec 840 cat /2.txt321
3.15 Docker命令:create
用于创建一个容器进程,但是并不启动它
[root@docker ~]# docker create -it nginx #创建一个镜像的容器进程,但不直接启动Unable to find image 'nginx:latest' locallylatest: Pulling from library/nginxDigest: sha256:db345982a2f2a4257c6f699a499feb1d79451a1305e8022f16456ddc3ad6b94cStatus: Downloaded newer image for nginx:latestca53f13e341064e47d258c331bfad33ebcafe644d10dfe1325b81eb238e500c0[root@docker ~]# docker create -it nginx /bin/bash #用/bin/bash解释器运行nginx镜像Unable to find image 'nginx:latest' locallylatest: Pulling from library/nginx461246efe0a7: Already existsa96aaf9a9ec3: Already exists650d8b758441: Already existsb138da793ac8: Already existsbb1705539683: Already existsb9ed43dcc388: Already existsDigest: sha256:db345982a2f2a4257c6f699a499feb1d79451a1305e8022f16456ddc3ad6b94cStatus: Downloaded newer image for nginx:latestc93cdab5076efa5c2118d755a9b108defce0bd0bb4bd2f3ef0eafd212db657a1[root@docker ~]# docker psCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES[root@docker ~]# docker ps -aCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMESca53f13e3410 nginx "/docker-entrypoint.…" 31 seconds ago Created brave_noyce特别注意:-i 让容器的输入保持打开-t 为docker分配一个伪终端
3.16 Docker命令:diff
查看容器进程与源镜像做对比,发生了改变的文件或文件夹
[root@docker ~]# docker ps -aCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES[root@docker ~]# docker imagesREPOSITORY TAG IMAGE ID CREATED SIZEMr.chen/centos 2 5620f1cb9e8e 11 hours ago 200MBMr.chen/centos7 1 58af3ad826d2 32 hours ago 200MBcentos 7 49f7960eb7e4 4 weeks ago 200MBcentos latest 49f7960eb7e4 4 weeks ago 200MB[root@docker ~]# docker run -d -it 5620f1cb9e8e #启动一个镜像的容器进程ab06a9794e45ca35ab5f4594d630ecbe3527814233cc004d4deb8aafde2906f8[root@docker ~]# docker ps -aCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMESab06a9794e45 5620f1cb9e8e "/bin/bash" 3 seconds ago Up2 seconds confident_snyder[root@docker ~]# docker attach ab06a9794e45 #切入容器进程[root@ab06a9794e45 /]# cd /yunjisuan/[root@ab06a9794e45 yunjisuan]# pwd/yunjisuan[root@ab06a9794e45 yunjisuan]# touch {1..10} #在容器进程中创建文件[root@ab06a9794e45 yunjisuan]# ls1 10 2 3 4 5 6 7 8 9[root@ab06a9794e45 yunjisuan]# exit #退出容器进程exit[root@docker ~]# docker diff ab06a9794e45 #查看容器进程的变化C /root/.bash_historyC /yunjisuanA /yunjisuan/1A /yunjisuan/10A /yunjisuan/2A /yunjisuan/3A /yunjisuan/4A /yunjisuan/5A /yunjisuan/6A /yunjisuan/7A /yunjisuan/8A /yunjisuan/9
3.17 Docker命令:events
实时监测容器的变化情况
root@docker ~]# docker events2022-07-18T09:11:23.938963932+08:00 network connectc03e38ce8c0e54511899c4ad34b37adaa6339b68e44478072b7d9a4129afdb7a (container=ab06a9794e45ca35ab5f4594d630ecbe3527814233cc004d4deb8aafde2906f8, name=bridge, type=bridge)2022-07-18T09:11:24.096366168+08:00 container startab06a9794e45ca35ab5f4594d630ecbe3527814233cc004d4deb8aafde2906f8 (MAINTATNER=Mr.chen.com, image=5620f1cb9e8e, name=confident_snyder, org.label-schema.schema-version== 1.0 org.label-schema.name=CentOS Base Image org.label-schema.vendor=CentOS org.label-schema.license=GPLv2 org.label-schema.build-date=20180531)前台时时监控容器的变化若要检测,需要另外再起一个窗口进行操作
3.18 Docker命令:export
将容器进程的文件系统导出到本地
[root@docker ~]# docker ps -aCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMESb8a6ac4e13a1 5d0da3dc9764 "/bin/bash" 51 minutes ago Up 51 minutes dreamy_wu7109f7b39f4a 5d0da3dc9764 "/bin/bash -c 'echo …" 52 minutes ago Exited (0) 52 minutes ago practical_easley9f647a9cb15d nginx "/docker-entrypoint.…" 53 minutes ago Exited (0) 53 minutes ago wizardly_spence[root@docker ~]# docker stop b8a6 #先停止容器b8a6[root@docker ~]# docker ps -aCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMESb8a6ac4e13a1 5d0da3dc9764 "/bin/bash" 54 minutes ago Exited (0) 2 minutes ago dreamy_wu7109f7b39f4a 5d0da3dc9764 "/bin/bash -c 'echo …" 55 minutes ago Exited (0) 55 minutes ago practical_easley9f647a9cb15d nginx "/docker-entrypoint.…" 57 minutes ago Exited (0) 57 minutes ago wizardly_spence[root@docker ~]# docker export b8a6 >./nginx1.2.cont #导出容器到本地(最好加上.cont后缀,以便识别)[root@docker ~]# lsanaconda-ks.cfg nginx1.12 nginx1.12.tar nginx1.2.cont ping.txt
3.19 Docker命令:import
用于将export导出的文件系统创建为一个镜像
[root@docker ~]# cat ./nginx1.2.cont | docker import - nginx:v2 #导入本地容器镜像快照sha256:cae4bd959d319cb87b6e4178db8d0f04a9cc15541a9cbee71460792b7ca746a5[root@docker ~]# docker imagesREPOSITORY TAG IMAGE ID CREATED SIZEnginx v2 cae4bd959d31 15 seconds ago 231MB特别提示:如果将服务器中的容器导出成容器镜像文件后,当我们需要使用该容器镜像文件的时候,不要使用docker load(该指令可以导入但是会导致启动异常)需要执行以下指令:cat 容器文件名称 | docker inport - name:tag
3.20 Docker命令:history
用于查看一个镜像的历史修改纪录
[root@docker ~]# docker imagesREPOSITORY TAG IMAGE ID CREATED SIZEMr.chen/centos 3 745606e08231 4 seconds ago 200MBMr.chen/centos 2 5620f1cb9e8e 13 hours ago 200MBMr.chen/centos7 1 58af3ad826d2 34 hours ago 200MBcentos 7 49f7960eb7e4 4 weeks ago 200MBcentos latest 49f7960eb7e4 4 weeks ago 200MB[root@docker ~]# docker history 745606e08231IMAGE CREATED CREATED BY SIZE COMMENT745606e08231 6 minutes ago 200MB Imported from -[root@docker ~]# docker history 5620f1cb9e8eIMAGE CREATED CREATED BYSIZE COMMENT5620f1cb9e8e 13 hours ago /bin/bash27B58af3ad826d2 34 hours ago /bin/sh -c #(nop) CMD ["/home/test/docker.s... 0Bf6587dbd78dd 34 hours ago /bin/sh -c chmod +x /home/test/docker.sh57B8f092336a175 34 hours ago /bin/sh -c #(nop) ADD file:84ec58f8405b16017... 57B82c412669879 34 hours ago /bin/sh -c ln -sfv/usr/share/zoneinfo/Asia/... 33B1a932d4c7762 34 hours ago /bin/sh -c #(nop) LABEL MAINTATNER=Mr.chen.... 0B49f7960eb7e4 4 weeks ago /bin/sh -c #(nop) CMD ["/bin/bash"]0B<missing> 4 weeks ago /bin/sh -c #(nop) LABEL org.label-schema.sc... 0B<missing> 4 weeks ago /bin/sh -c #(nop) ADD file:8f4b3be0c1427b158... 200MB
3.21 Docker命令:info
用于查看当前操作系统的docker运行信息
[root@docker ~]# docker infoClient:Context: defaultDebug Mode: falsePlugins:app: Docker App (Docker Inc., v0.9.1-beta3)buildx: Docker Buildx (Docker Inc., v0.8.2-docker)compose: Docker Compose (Docker Inc., v2.6.0)scan: Docker Scan (Docker Inc., v0.17.0)Server:Containers: 3 #容器镜像3个Running: 0 #正在运行的容器0Paused: 0Stopped: 3Images: 3 #一共有3个镜像Server Version: 20.10.17Storage Driver: overlay2Backing Filesystem: xfsSupports d_type: trueNative Overlay Diff: trueuserxattr: falseLogging Driver: json-fileCgroup Driver: cgroupfsCgroup Version: 1Plugins:Volume: localNetwork: bridge host ipvlan macvlan null overlayLog: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslogSwarm: inactiveRuntimes: io.containerd.runc.v2 io.containerd.runtime.v1.linux runcDefault Runtime: runcInit Binary: docker-initcontainerd version: 10c12954828e7c7c9b6e0ea9b0c02b01407d3ae1runc version: v1.1.2-0-ga916309init version: de40ad0Security Options:seccompProfile: defaultKernel Version: 3.10.0-862.el7.x86_64Operating System: CentOS Linux 7 (Core)OSType: linuxArchitecture: x86_64CPUs: 2Total Memory: 3.968GiBName: dockerID: MTHU:S5XU:UKGA:DGC7:BCEQ:NREX:SSWI:MF2Y:34U3:TEK2:RJCZ:C2VKDocker Root Dir: /var/lib/dockerDebug Mode: falseUsername: spengcRegistry: https://index.docker.io/v1/Labels:Experimental: falseInsecure Registries:127.0.0.0/8Registry Mirrors:https://registry.docker-cn.com/Live Restore Enabled: false
3.22 Docker命令:inspect
查看某个镜像的详细信息
[root@docker ~]# docker inspect 05d3c1e2d0c1[{"Id": "sha256:05d3c1e2d0c166b1654f86a5beed614065450b186a94e4761120b3458b45509d","RepoTags": ["centos/systemd:latest"],"RepoDigests": ["centos/systemd@sha256:09db0255d215ca33710cc42e1a91b9002637eeef71322ca641947e65b7d53b58"],"Parent": "","Comment": "","Created": "2018-12-29T18:57:04.462738239Z","Container": "d65db7054384e55b6a0df28ccc3c712bf12d0058ee12f3f31c687916573fc874","ContainerConfig": {"Hostname": "d65db7054384","Domainname": "","User": "","AttachStdin": false,"AttachStdout": false,"AttachStderr": false,"Tty": false,"OpenStdin": false,"StdinOnce": false,"Env": ["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","container=docker"],"Cmd": ["/bin/sh","-c","#(nop) ","CMD [\"/usr/sbin/init\"]"],"ArgsEscaped": true,"Image": "sha256:6bc581d3208e8b42e7d1d8ef576906103c73ecd5d6e28ec9ab0f3d9d370c0d50","Volumes": {"/sys/fs/cgroup": {}},"WorkingDir": "","Entrypoint": null,"OnBuild": null,"Labels": {"org.label-schema.build-date": "20181205","org.label-schema.license": "GPLv2","org.label-schema.name": "CentOS Base Image","org.label-schema.schema-version": "1.0","org.label-schema.vendor": "CentOS"}},"DockerVersion": "18.03.1-ee-3","Author": "The CentOS Project <cloud-ops@centos.org>","Config": {"Hostname": "","Domainname": "","User": "","AttachStdin": false,"AttachStdout": false,"AttachStderr": false,"Tty": false,"OpenStdin": false,"StdinOnce": false,"Env": ["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","container=docker"],"Cmd": ["/usr/sbin/init"],"ArgsEscaped": true,"Image": "sha256:6bc581d3208e8b42e7d1d8ef576906103c73ecd5d6e28ec9ab0f3d9d370c0d50","Volumes": {"/sys/fs/cgroup": {}},"WorkingDir": "","Entrypoint": null,"OnBuild": null,"Labels": {"org.label-schema.build-date": "20181205","org.label-schema.license": "GPLv2","org.label-schema.name": "CentOS Base Image","org.label-schema.schema-version": "1.0","org.label-schema.vendor": "CentOS"}},"Architecture": "amd64","Os": "linux","Size": 201779604,"VirtualSize": 201779604,"GraphDriver": {"Data": {"LowerDir": "/var/lib/docker/overlay2/d962e3a1441c42b01bd9ca4b2ce6526898f99a2f974cab05496929c651fcd6f1/diff","MergedDir": "/var/lib/docker/overlay2/7a1d3c5e995dc20e2c7d15b445f4dc38b0a38695f2fd7f80504a13f6d0364e9f/merged","UpperDir": "/var/lib/docker/overlay2/7a1d3c5e995dc20e2c7d15b445f4dc38b0a38695f2fd7f80504a13f6d0364e9f/diff","WorkDir": "/var/lib/docker/overlay2/7a1d3c5e995dc20e2c7d15b445f4dc38b0a38695f2fd7f80504a13f6d0364e9f/work"},"Name": "overlay2"},"RootFS": {"Type": "layers","Layers": ["sha256:071d8bd765171080d01682844524be57ac9883e53079b6ac66707e192ea25956","sha256:fd40254c9c6971795b270293804a4b6dd2eb60e15215cdad44df1d8e439af2c0"]},"Metadata": {"LastTagTime": "0001-01-01T00:00:00Z"}}]
3.23 Docker命令:kill
强行停止一个或多个正在运行状态的容器进程
[root@docker ~]# docker ps -aCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMESab06a9794e45 5620f1cb9e8e "/bin/bash" 2 hours ago Uphours confident_snyder[root@docker ~]# docker kill ab06a9794e45ab06a9794e45[root@docker ~]# docker ps -aCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMESab06a9794e45 5620f1cb9e8e "/bin/bash" 2 hours ago Exited (137) 1 second ago confident_snyder
3.24 Docker命令:save
用于将一个镜像的文件系统导出到本地(export导出的是容器)
[root@docker ~]# docker save -o /root/nginx1.12 nginx:v1.12.2[root@docker ~]# lsanaconda-ks.cfg nginx1.12 ping.txt[root@docker ~]# docker save -o /root/nginx1.12.tar nginx:v1.12.2[root@docker ~]# lsanaconda-ks.cfg nginx1.12 nginx1.12.tar ping.txt
3.25 Docker命令:load
用于将save导出到本地的tar包,重新加载为镜像(和源镜像的名字标识完全一样)
[root@docker ~]# docker load < ./nginx1.12 #将之前的nginx镜像导入到系统43b3c4e3001c: Loading layer [==================================================>] 83.87MB/83.87MB1c99a7efe9d9: Loading layer [==================================================>] 62.01MB/62.01MB305b0db3a210: Loading layer [==================================================>] 3.072kB/3.072kBc03189a5ef70: Loading layer [==================================================>] 4.096kB/4.096kB1d561d938628: Loading layer [==================================================>] 3.584kB/3.584kBde100bd247e0: Loading layer [==================================================>] 7.168kB/7.168kBLoaded image: nginx:v1.12.2
3.26 Docker命令:logs
用于输出一个容器进程内的操作日志
[root@docker ~]# docker run -d nginx:v2 /bin/bash -c "while :; do echo haha;sleep l;done" #做测试的死循环cf60dd2586824ef8f2df083fe0956a44bc4b1235bac320f4b269f90488675527[root@docker ~]# docker ps -aCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMEScf60dd258682 nginx:v2 "/bin/bash -c 'while…" 6 seconds ago Up 5 seconds sharp_bartik[root@docker ~]# docker logs cf6 #查看操作日志
3.27 Docker命令:pause && unpause
用于将一个或多个容器的进程暂停和恢复
[root@docker ]# docker ps -aCONTAINER ID IMAGE COMMAND CREATEDSTATUS PORTS NAMES16f9f6c9c699 test:1 "/home/test/docker.sh" 5 minutes agoUp 5 minutes adoring_noether[root@docker ]# docker pause 16f9f6c9c699 #暂停容器进程16f9f6c9c699[root@docker ]# docker ps -aCONTAINER ID IMAGE COMMAND CREATEDSTATUS PORTS NAMES16f9f6c9c699 test:1 "/home/test/docker.sh" 5 minutes agoUp 5 minutes (Paused) adoring_noether[root@docker ]# docker unpause 16f9f6c9c699 #恢复容器进程16f9f6c9c699[root@docker ]# docker ps -aCONTAINER ID IMAGE COMMAND CREATEDSTATUS PORTS NAMES16f9f6c9c699 test:1 "/home/test/docker.sh" 5 minutes agoUp 5 minutes adoring_noether
3.28 Docker命令:port
用于列出一个容器的端口映射及协议
[root@docker ~]# docker run -p 8888:80 -itd nginx:v2 /bin/bash #物理端口:容器端口4769c1c506e52dcd22ba606785fd3333163bb3e4424b93b3a72a0d3c5d69426c[root@docker ~]# docker psCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES4769c1c506e5 nginx:v2 "/bin/bash" 5 seconds ago Up 5 seconds 0.0.0.0:8888->80/tcp, :::8888->80/tcp jolly_lichterman
3.29 Docker命令:rename
给容器进程重命名
[root@docker ]# docker ps -aCONTAINER ID IMAGE COMMAND CREATEDSTATUS PORTS NAMES6321c3a3481f test:1 "/home/test/docker.sh" 11 minutes agoUp 11 minutes 0.0.0.0:2222->22/tcp romantic_elbakyan16f9f6c9c699 test:1 "/home/test/docker.sh" 22 minutes agoUp 22 minutes adoring_noether[root@docker ]# docker rename romantic_elbakyan Mr.chen[root@docker ]# docker ps -aCONTAINER ID IMAGE COMMAND CREATEDSTATUS PORTS NAMES6321c3a3481f test:1 "/home/test/docker.sh" 11 minutes agoUp 11 minutes 0.0.0.0:2222->22/tcp Mr.chen16f9f6c9c699 test:1 "/home/test/docker.sh" 22 minutes agoUp 22 minutes adoring_noether
3.30 Docker命令:restart
重启一个容器进程
[root@docker ]# docker ps -aCONTAINER ID IMAGE COMMAND CREATEDSTATUS PORTS NAMES6321c3a3481f test:1 "/home/test/docker.sh" 15 minutes agoUp 15 minutes 0.0.0.0:2222->22/tcp Mr.chen16f9f6c9c699 test:1 "/home/test/docker.sh" 26 minutes agoUp 26 minutes adoring_noether[root@docker ]# docker restart 6321c3a3481f6321c3a3481f[root@docker ]# docker ps -aCONTAINER ID IMAGE COMMAND CREATEDSTATUS PORTS NAMES6321c3a3481f test:1 "/home/test/docker.sh" 15 minutes agoUp 2 seconds 0.0.0.0:2222->22/tcp Mr.chen16f9f6c9c699 test:1 "/home/test/docker.sh" 26 minutes agoUp 26 minutes adoring_noether
3.31 Docker命令:stats
用于s实时输出容器的资源使用情况
[root@docker ]# docker ps -aCONTAINER ID IMAGE COMMAND CREATEDSTATUS PORTS NAMES6321c3a3481f test:1 "/home/test/docker.sh" 17 minutes agoUp About a minute 0.0.0.0:2222->22/tcp Mr.chen16f9f6c9c699 test:1 "/home/test/docker.sh" 28 minutes agoUp 28 minutes adoring_noether[root@docker ]# docker stats 6321c3a3481f#--no-tream只输出一次[root@docker ]# docker stats 6321c3a3481f --no-streamCONTAINER ID NAME CPU % MEM USAGE / LIMIT MEM% NET I/O BLOCK I/O PIDS6321c3a3481f Mr.chen 0.00% 292KiB / 974.6MiB 0.03% 648B / 0B 0B / 0B 2
3.32 Docker命令:tag
用于从一个指定的镜像创建另外一个镜像(标签)
[root@docker ~]# docker imagesREPOSITORY TAG IMAGE ID CREATED SIZEnginx latest 41b0e86104ba 6 days ago 142MBnginx v1.12.2 41b0e86104ba 6 days ago 142MBcp/alpine latest e66264b98777 7 weeks ago 5.53MBalpine latest e66264b98777 7 weeks ago 5.53MBcentos latest 5d0da3dc9764 10 months ago 231MB[root@docker ~]# docker tag nginx:latest nginx:V1.12.1 #可以指定名字:标志来创建[root@docker ~]# docker imagesREPOSITORY TAG IMAGE ID CREATED SIZEnginx V1.12.1 41b0e86104ba 6 days ago 142MBnginx latest 41b0e86104ba 6 days ago 142MBnginx v1.12.2 41b0e86104ba 6 days ago 142MBcp/alpine latest e66264b98777 7 weeks ago 5.53MBalpine latest e66264b98777 7 weeks ago 5.53MBcentos latest 5d0da3dc9764 10 months ago 231MB[root@docker ~]# docker tag 41b0e86104ba cp/nginx #也可以指定image id来创建[root@docker ~]# docker imagesREPOSITORY TAG IMAGE ID CREATED SIZEcp/nginx latest 41b0e86104ba 6 days ago 142MBnginx latest 41b0e86104ba 6 days ago 142MBcentos v1.2.0 5d0da3dc9764 10 months ago 231MBcentos v1.2.2 5d0da3dc9764 10 months ago 231MB
3.33 Docker命令:top
用于显示指定容器的进程信息
11. centos 7 49f7960eb7e4 4 weeks ago 200MB12. centos latest 49f7960eb7e4 4 weeks ago 200MB13. [root@docker 7]# docker rmi test:214. Untagged: test:215. [root@docker 7]# docker images16. REPOSITORY TAG IMAGE ID CREATED SIZE17. test 1 cc87aef92b66 About an hour ago 200MB18. centos 7 49f7960eb7e4 4 weeks ago 200MB19. centos latest 49f7960eb7e4 4 weeks ago 200MB20. [root@docker 7]# docker tag cc87aef92b66 test:2 #我们也可以指定image id来创建21. [root@docker 7]# docker images22. REPOSITORY TAG IMAGE ID CREATED SIZE23. test 1 cc87aef92b66 About an hour ago 200MB24. test 2 cc87aef92b66 About an hour ago 200MB25. centos 7 49f7960eb7e4 4 weeks ago 200MB26. centos latest 49f7960eb7e4 4 weeks ago 200MB3.33 Docker命令:top用于显示指定容器的进程信息[root@docker ]# docker ps -aCONTAINER ID IMAGE COMMAND CREATEDSTATUS PORTS NAMES6321c3a3481f test:1 "/home/test/docker.sh" 28 minutes agoUp 12 minutes 0.0.0.0:2222->22/tcp Mr.chen16f9f6c9c699 test:1 "/home/test/docker.sh" 39 minutes agoUp 39 minutes adoring_noether[root@docker ]# docker top 6321c3a3481fUID PID PPID C STIME TTY TIME CMDroot 89798 89784 0 11:5pts/0 00:00:00 /bin/bash /home/test/docker.shroot 90265 89798 0 12:0pts/0 00:00:00 sleep 5
3.34 Docker命令:update
用于调整一个或多个容器的启动配置
[root@docker 7]# docker update --helpUsage: docker update [OPTIONS] CONTAINER [CONTAINER...]Update configuration of one or more containersOptions:--blkio-weight uint16 Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)--cpu-period int Limit CPU CFS (Completely Fair Scheduler)period--cpu-quota int Limit CPU CFS (Completely Fair Scheduler) quota--cpu-rt-period int Limit the CPU real-time period in microseconds--cpu-rt-runtime int Limit the CPU real-time runtime in microseconds-c, --cpu-shares int CPU shares (relative weight) #调整CPU--cpus decimal Number of CPUs--cpuset-cpus string CPUs in which to allow execution (0-3, 0,1)--cpuset-mems string MEMs in which to allow execution (0-3, 0,1)--kernel-memory bytes Kernel memory limit-m, --memory bytes Memory limit #调整内存--memory-reservation bytes Memory soft limit--memory-swap bytes Swap limit equal to memory plus swap: '-1' toenable unlimited swap--restart string Restart policy to apply when a container exits
3.35 Docker命令:version and wait
version用于显示docker的版本信息 wait用于捕捉一个或多个容器的退出状态,并返回退出状态码
.sh8. root 90265 89798 0 12:07 pts/0 00:00:00 sleep 53.34 Docker命令:update用于调整一个或多个容器的启动配置1. [root@docker 7]# docker update --help2.3. Usage: docker update [OPTIONS] CONTAINER [CONTAINER...]4.5. Update configuration of one or more containers6.7. Options:8. --blkio-weight uint16 Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)9. --cpu-period int Limit CPU CFS (Completely Fair Scheduler)period10. --cpu-quota int Limit CPU CFS (Completely Fair Scheduler) quota11. --cpu-rt-period int Limit the CPU real-time period in microseconds12. --cpu-rt-runtime int Limit the CPU real-time runtime in microseconds13. -c, --cpu-shares int CPU shares (relative weight) #调整CPU14. --cpus decimal Number of CPUs15. --cpuset-cpus string CPUs in which to allow execution (0-3, 0,1)16. --cpuset-mems string MEMs in which to allow execution (0-3, 0,1)17. --kernel-memory bytes Kernel memory limit18. -m, --memory bytes Memory limit #调整内存19. --memory-reservation bytes Memory soft limit20. --memory-swap bytes Swap limit equal to memory plus swap: '-1' toenable unlimited swap21. --restart string Restart policy to apply when a container exits3.35 Docker命令:version and waitversion用于显示docker的版本信息wait用于捕捉一个或多个容器的退出状态,并返回退出状态码#显示docker版本信息[root@docker ]# docker versionClient:Version: 18.03.1-ceAPI version: 1.37Go version: go1.9.5Git commit: 9ee9f40Built: Thu Apr 26 07:20:16 2018OS/Arch: linux/amd64Experimental: falseOrchestrator: swarmServer:Engine:Version: 18.03.1-ceAPI version: 1.37 (minimum version 1.12)Go version: go1.9.5Git commit: 9ee9f40Built: Thu Apr 26 07:23:58 2018OS/Arch: linux/amd64Experimental: false#监听容器的退出状态并返回状态码[root@docker ]# docker ps -aCONTAINER ID IMAGE COMMAND CREATEDSTATUS PORTS NAMES6321c3a3481f test:1 "/home/test/docker.sh" 33 minutes agoUp 17 minutes 0.0.0.0:2222-