目录
- 一、快速入门
-
- 1. 安装
- 2.配置镜像加速
- 二、常用命令
-
- 0. 预备
- 1.镜像命令
-
- 1.1 查看所有本地主机的镜像
- 1.2 搜索镜像
- 1.3 下载镜像
- 1.4 删除镜像
- 2.容器命令
-
- 2.1 启动容器：
- 2.2 查看容器：
- 2.3 删除容器：
- 2.4 启动和停止容器：
- 3.其他命令
-
- 3.1 后台启动：
- 3.2 查看日志：
- 3.3 查看容器中的过程信息：
- 3.4 检查镜像元数据：
- 3.5 进入当前正在运行的容器
- 3.6 将文件从容器复制到主机
- 4.练习
-
- 4.1 部署Nginx
- 4.2 部署Tomcat
- 4.3 部署 es kibana
- 三、可视化工具
-
- 1. portainer
- 2. Rancher（CI/CD）
- 四、Docker镜像
-
- 1. 什么是镜像？
- 2. Docker镜像加载原理
-
- 2.1 UnionFs (联合文件系统)
- 2.2 Docker镜像加载原理
- 3.分层理解
- 4. commit镜像
- 五、容器数据卷
-
- 1. 容器数据卷是什么？
- 2. 使用容器数据卷
- 3. 实战：安装MySQL
- 4. 具名和匿名挂载
-
- 4.1 匿名挂载
- 4.2 具名挂载(推荐)
- 5. 初识Dockerfile
- 6. 数据卷容器
- 7. Dockerfile
-
- 7.1 构建步骤
- 7.2 Dockerfile构建过程
-
- 7.2.1 基础知识：
- 7.2.2 Dockerfile的指令
- 7.2.3 实战测试
- 7.2.4 CMD 和 ENTRYPOINT
- 7.2.5 实战-Tomcat镜像
- 7.2.6 发布自己的镜像
- 7.2.7 发布到阿里云镜像服务
- 8. Docker小结：
- 六、Docker网络
-
- 1、理解Docker0
- 2、- - Link
- 3定义网络
- 4、部署Redis集群
- 七、SpringBoot微服务打包Docker镜像
- 八、DockerCompose
-
- 1、简介
- 2、安装
- 3、体验
- 4、yaml规则
- 5.实战开源项目
- 6、实战
- 九、DockerSwarm
-
- 1、集群
- 2、Raft协议
- 3、体会
- 4、概念总结
- 十、Docker Stack
- 十一、Docker Secret
- 十二、Docker Config
一、快速入门
1. 安装
# 1.检查系统内核(3).10以上才能) uname -r [root@VM-24-12-centos ~]# uname -r 3.10.0-1160.45.1.el7.x86_64 # 2.检查系统环境 cat /etc/os-release [root@VM-24-12-centos ~]# cat /etc/os-release NAME="CentOS Linux" VERSION="7 (Core)" ID="centos" ID_LIKE="rhel fedora" VERSION_ID="7" PRETTY_NAME="CentOS Linux 7 (Core)" ANSI_COLOR="0;31" CPE_NAME="cpe:/o:centos:centos:7" HOME_URL="https://www.centos.org/"
BUG_REPORT_URL="https://bugs.centos.org/"
CENTOS_MANTISBT_PROJECT="CentOS-7"
CENTOS_MANTISBT_PROJECT_VERSION="7"
REDHAT_SUPPORT_PRODUCT="centos"
REDHAT_SUPPORT_PRODUCT_VERSION="7"
# 3.卸载本机docker
yum remove docker \
docker-client \
docker-client-latest \
docker-common \
docker-latest \
docker-latest-logrotate \
docker-logrotate \
docker-engine
# 4.设置仓库
yum install -y yum-utils
## 设置国内阿里云仓库，速度快
yum-config-manager \
--add-repo \
http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
# 5.更新yum包索引
yum makecache fast
# 5.安装docker（ce 社区版 ee 企业版）
yum install docker-ce docker-ce-cli containerd.io
# 6.启动docker
systemctl start docker
# 7.检查docker版本
docker version
[root@VM-24-12-centos ~]# docker version
Client: Docker Engine - Community
Version: 20.10.14
API version: 1.41
Go version: go1.16.15
Git commit: a224086
Built: Thu Mar 24 01:49:57 2022
OS/Arch: linux/amd64
Context: default
Experimental: true
Server: Docker Engine - Community
Engine:
Version: 20.10.14
API version: 1.41 (minimum version 1.12)
Go version: go1.16.15
Git commit: 87a90dc
Built: Thu Mar 24 01:48:24 2022
OS/Arch: linux/amd64
Experimental: false
containerd:
Version: 1.5.11
GitCommit: 3df54a852345ae127d1fa3092b95168e4a88e2f8
runc:
Version: 1.0.3
GitCommit: v1.0.3-0-gf46b6ba
docker-init:
Version: 0.19.0
GitCommit: de40ad0
# 8.测试docker
docker run hello-world
# 9.查看docker镜像
docker images
[root@VM-24-12-centos ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
hello-world latest feb5d9fea6a5 6 months ago 13.3kB
# 10.卸载docker
## 10.1 卸载依赖
yum remove docker-ce docker-ce-cli containerd.io
##10.2 删除资源
rm -rf /var/lib/docker （docker默认工作路径）
rm -rf /var/lib/containerd
2.配置镜像加速
以阿里云镜像为例：
- 阿里云容器镜像服务-镜像加速器
- 配置
sudo mkdir -p /etc/docker
sudo tee /etc/docker/daemon.json <<-'EOF' { "registry-mirrors": ["xxxxx"] } EOF
sudo systemctl daemon-reload
sudo systemctl restart docker
二、常用命令
0. 预备
docker version # 显示docker版本信息
docker info # 显示docker的系统信息，包括镜像和容器数量
docker 命令 --help # 帮助命令
帮助文档地址：https://docs.docker.com/reference/
1.镜像命令
1.1 查看所有本地主机的镜像
# 查看所有本地主机的镜像 docker images REPOSITORY TAG IMAGE ID CREATED SIZE hello-world latest feb5d9fea6a5 6 months ago 13.3kB # 解释： REPOSITORY 镜像的仓库源 TAG 镜像的标签 IMAGE ID 镜像的标签 CREATED 镜像的创建时间 SIZE 镜像的大小 # 可选项 Options: -a, --all Show all images (default hides intermediate images) #列出所有镜像 -q, --quiet Only show numeric IDs # 只显示镜像的id
1.2 搜索镜像
# 搜索镜像
docker search
[root@VM-24-12-centos ~]# docker search mysql
NAME DESCRIPTION STARS OFFICIAL AUTOMATED
mysql MySQL is a widely used, open-source relation… 12413 [OK]
mariadb MariaDB Server is a high performing open sou… 4782 [OK]
mysql/mysql-server Optimized MySQL Server Docker images. Create… 918 [OK]
percona Percona Server is a fork of the MySQL relati… 575 [OK]
## 可选项：
Options:
-f, --filter filter Filter output based on conditions provided
--format string Pretty-print search using a Go template
--limit int Max number of search results (default 25)
--no-trunc Don't truncate output
# --filter=STARS=3000 #过滤，搜索出来的镜像收藏STARS数量大于3000的
[root@VM-24-12-centos ~]# docker search mysql --filter=STARS=3000
NAME DESCRIPTION STARS OFFICIAL AUTOMATED
mysql MySQL is a widely used, open-source relation… 12413 [OK]
mariadb MariaDB Server is a high performing open sou… 4782 [OK]
搜索镜像【也可以在docker hub上找下载，比较麻烦，没有命令用起来舒服】
1.3 下载镜像
# 下载镜像
docker pull 镜像名[:tag]
[root@VM-24-12-centos ~]# docker pull tomcat:8
8: Pulling from library/tomcat #如果不写tag，默认就是latest
90fe46dd8199: Already exists #分层下载： docker image 的核心 联合文件系统（之前下载过的会，不用下载，共用）
35a4f1977689: Already exists
bbc37f14aded: Already exists
74e27dc593d4: Already exists
93a01fbfad7f: Already exists
1478df405869: Pull complete
64f0dd11682b: Pull complete
68ff4e050d11: Pull complete
f576086003cf: Pull complete
3b72593ce10e: Pull complete
Digest: sha256:0c6234e7ec9d10ab32c06423ab829b32e3183ba5bf2620ee66de866df # 签名防伪
Status: Downloaded newer image for tomcat:8
docker.io/library/tomcat:8 #真实地址
#等价于
docker pull tomcat:8
docker pull docker.io/library/tomcat:8
1.4 删除镜像
# 删除镜像
docker rmi -f 镜像id #删除指定id的镜像
docker rmi -f 容器id 容器id ... # 删除多个容器
docker rmi -f $(docker images -aq) # 删除全部的容器
2.容器命令
说明：有了镜像才可以创建容器
以centos镜像为例：
#docker中下载centos
docker pull centos
#查看镜像
docker images
#测试启动，bash启动
docker run -it centos /bin/bash
[root@VM-24-12-centos ~]# docker run -it centos /bin/bash
[root@0687c291327c /]# ls
bin dev etc home lib lib64 lost+found media mnt opt proc root run sbin srv sys tmp usr var
# 退回主机
exit # 直接容器停止并推出
Ctrl + P + Q # 容器不停止退出
2.1 启动容器：
docker run [可选参数] image | docker container run [可选参数] image
#参书说明
--name="Name" #容器名字 tomcat01 tomcat02 用来区分容器
-d #后台方式运行
-it #使用交互方式运行，进入容器查看内容
-p #指定容器的端口 -p 8080(宿主机):8080(容器)
-p ip:主机端口:容器端口
-p 主机端口:容器端口(常用)
-p 容器端口
容器端口
-P(大写) # 随机指定端口
2.2 查看容器：
docker ps # 列出所有的运行的容器
docker ps -a # 列出所有的运行的容器 + 最近运行过的容器
docker ps -a -n=? # 列出所有的运行的容器 + 最近运行过的容器 ？个
docker ps -q # 只显示容器的编号
docker ps -aq # 只显示容器的编号
[root@VM-24-12-centos ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
[root@VM-24-12-centos ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
0687c291327c centos "/bin/bash" 4 minutes ago Exited (0) 3 minutes ago peaceful_stonebraker
6f0823b20328 hello-world "/hello" 57 minutes ago Exited (0) 57 minutes ago inspiring_engelbart
[root@VM-24-12-centos ~]# docker ps -a -n=1
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
0687c291327c centos "/bin/bash" 4 minutes ago Exited (0) 3 minutes ago peaceful_stonebraker
2.3 删除容器：
docker rm 容器id # 删除指定的容器，不能删除正在运行的容器，如果要强制删 rm -f
docker rm -f $(docker ps -aq) # 删除所有的容器
docker ps -a -q|xarg docker rm # 删除所有的容器
2.4 启动和停止容器：
docker start 容器id # 启动容器
docker restart 容器id # 重启容器
docker stop 容器id # 停止当前正在运行的容器
docker kill 容器id # 强制停止当前容器
3.其他命令
3.1 后台启动：
# 命令 docker run -d 镜像名
[root@VM-24-12-centos ~]# docker run -d centos
a8f922c255859622ac45ce3a535b7a0e8253329be4756ed6e32265d2dd2fac6c
[root@VM-24-12-centos ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
# 问题docker ps. 发现centos 停止了
# 常见的坑，docker容器使用后台运行，就必须要有要一个前台进程，docker发现没有应用，就会自动停止
# nginx，容器启动后，发现自己没有提供服务，就会立刻停止，就是没有程序了
3.2 查看日志：
docker logs --help
Options:
--details Show extra details provided to logs
* -f, --follow Follow log output
--since string Show logs since timestamp (e.g. 2013-01-02T13:23:37) or relative (e.g. 42m for 42 minutes)
* --tail string Number of lines to show from the end of the logs (default "all")
* -t, --timestamps Show timestamps
--until string Show logs before a timestamp (e.g. 2013-01-02T13:23:37) or relative (e.g. 42m for 42 minutes)
docker run -d centos /bin/sh -c "while true;do echo 666;sleep 1;done" #模拟日志
#显示日志
-tf #显示日志信息（一直更新）
--tail number #需要显示日志条数
docker logs -t --tail n 容器id #查看n行日志
docker logs -ft 容器id #跟着日志
3.3 查看容器中的进程信息：
# 命令 docker top 容器id
[root@VM-24-12-centos ~]# docker top 9865999fe479
UID PID PPID C STIME TTY TIME CMD
root 12852 12833 0 22:46 ? 00:00:00 /bin/sh -c while true;do echo 666;sleep 1;done
root 17867 12852 0 22:49 ? 00:00:00 /usr/bin/coreutils --coreutils-prog-shebang=sleep /usr/bin/sleep 1
3.4 查看镜像的元数据：
docker inspect 容器id
[root@VM-24-12-centos ~]# docker inspect 9865999fe479
[
{
"Id": "9865999fe4792a12af884bd8e6bc4ad008ae47b962ba5e310fdf5477d06e1f4e",
"Created": "2022-04-15T14:46:44.445308293Z",
"Path": "/bin/sh",
"Args": [
"-c",
"while true;do echo 666;sleep 1;done"
],
"State": {
"Status": "running",
"Running": true,
"Paused": false,
"Restarting": false,
"OOMKilled": false,
"Dead": false,
"Pid": 12852,
"ExitCode": 0,
"Error": "",
"StartedAt": "2022-04-15T14:46:44.722755109Z",
"FinishedAt": "0001-01-01T00:00:00Z"
},
"Image": "sha256:5d0da3dc976460b72c77d94c8a1ad043720b0416bfc16c52c45d4847e53fadb6",
"ResolvConfPath": "/var/lib/docker/containers/9865999fe4792a12af884bd8e6bc4ad008ae47b962ba5e310fdf5477d06e1f4e/resolv.conf",
"HostnamePath": "/var/lib/docker/containers/9865999fe4792a12af884bd8e6bc4ad008ae47b962ba5e310fdf5477d06e1f4e/hostname",
"HostsPath": "/var/lib/docker/containers/9865999fe4792a12af884bd8e6bc4ad008ae47b962ba5e310fdf5477d06e1f4e/hosts",
"LogPath": "/var/lib/docker/containers/9865999fe4792a12af884bd8e6bc4ad008ae47b962ba5e310fdf5477d06e1f4e/9865999fe4792a12af884bd8e6bc4ad008ae47b962ba5e310fdf5477d06e1f4e-json.log",
"Name": "/zen_taussig",
"RestartCount": 0,
"Driver": "overlay2",
"Platform": "linux",
"MountLabel": "",
"ProcessLabel": "",
"AppArmorProfile": "",
"ExecIDs": null,
"HostConfig": {
"Binds": null,
"ContainerIDFile": "",
"LogConfig": {
"Type": "json-file",
"Config": {
}
},
"NetworkMode": "default",
"PortBindings": {
},
"RestartPolicy": {
"Name": "no",
"MaximumRetryCount": 0
},
"AutoRemove": false,
"VolumeDriver": "",
"VolumesFrom": null,
"CapAdd": null,
"CapDrop": null,
"CgroupnsMode": "host",
"Dns": [],
"DnsOptions": [],
"DnsSearch": [],
"ExtraHosts": null,
"GroupAdd": null,
"IpcMode": "private",
"Cgroup": "",
"Links": null,
"OomScoreAdj": 0,
"PidMode": "",
"Privileged": false,
"PublishAllPorts": false,
"ReadonlyRootfs": false,
"SecurityOpt": null,
"UTSMode": "",
"UsernsMode": "",
"ShmSize": 67108864,
"Runtime": "runc",
"ConsoleSize": [
0,
0
],
"Isolation": "",
"CpuShares": 0,
"Memory": 0,
"NanoCpus": 0,
"CgroupParent": "",
"BlkioWeight": 0,
"BlkioWeightDevice": [],
"BlkioDeviceReadBps": null,
"BlkioDeviceWriteBps": null,
"BlkioDeviceReadIOps": null,
"BlkioDeviceWriteIOps": null,
"CpuPeriod": 0,
"CpuQuota": 0,
"CpuRealtimePeriod": 0,
"CpuRealtimeRuntime": 0,
"CpusetCpus": "",
"CpusetMems": "",
"Devices": [],
"DeviceCgroupRules": null,
"DeviceRequests": null,
"KernelMemory": 0,
"KernelMemoryTCP": 0,
"MemoryReservation": 0,
"MemorySwap": 0,
"MemorySwappiness": null,
"OomKillDisable": false,
"PidsLimit": null,
"Ulimits": null,
"CpuCount": 0,
"CpuPercent": 0,
"IOMaximumIOps": 0,
"IOMaximumBandwidth": 0,
"MaskedPaths": [
"/proc/asound",
"/proc/acpi",
"/proc/kcore",
"/proc/keys",
"/proc/latency_stats",
"/proc/timer_list",
"/proc/timer_stats",
"/proc/sched_debug",
"/proc/scsi",
"/sys/firmware"
],
"ReadonlyPaths": [
"/proc/bus",
"/proc/fs",
"/proc/irq",
"/proc/sys",
"/proc/sysrq-trigger"
]
},
"GraphDriver": {
"Data": {
"LowerDir": "/var/lib/docker/overlay2/a576bc4c3377d3992efc6b80ba3a93d2690562265e311a152885e0ed025b2088-init/diff:/var/lib/docker/overlay2/9123fd3ce2d692e8f29431878cfad8dc26c3b37973ab99176f479f3f9fe3f15a/diff",
"MergedDir": "/var/lib/docker/overlay2/a576bc4c3377d3992efc6b80ba3a93d2690562265e311a152885e0ed025b2088/merged",
"UpperDir": "/var/lib/docker/overlay2/a576bc4c3377d3992efc6b80ba3a93d2690562265e311a152885e0ed025b2088/diff",
"WorkDir": "/var/lib/docker/overlay2/a576bc4c3377d3992efc6b80ba3a93d2690562265e311a152885e0ed025b2088/work"
},
"Name": "overlay2"
},
"Mounts": [],
"Config": {
"Hostname": "9865999fe479",
"Domainname": "",
"User": "",
"AttachStdin": false,
"AttachStdout": false,
"AttachStderr": false,
"Tty": false,
"OpenStdin": false,
"StdinOnce": false,
"Env": [
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
],
"Cmd": [
"/bin/sh",
"-c",
"while true;do echo 666;sleep 1;done"
],
"Image": "centos",
"Volumes": null,
"WorkingDir": "",
"Entrypoint": null,
"OnBuild": null,
"Labels": {
"org.label-schema.build-date": "20210915",
"org.label-schema.license": "GPLv2",
"org.label-schema.name": "CentOS Base Image",
"org.label-schema.schema-version": "1.0",
"org.label-schema.vendor": "CentOS"
}
},
"NetworkSettings": {
"Bridge": "",
"SandboxID": "4c98fe4130129a2c6f7eb38578c8a2032a9756328060dd026c37fce231bf51e8",
"HairpinMode": false,
"LinkLocalIPv6Address": "",
"LinkLocalIPv6PrefixLen": 0,
"Ports": {
},
"SandboxKey": "/var/run/docker/netns/4c98fe413012",
"SecondaryIPAddresses": null,
"SecondaryIPv6Addresses": null,
"EndpointID": "aa0e4a6dab7e4b283423df17e1bbb65e54458447959a3c0e13acbbb6abb47446",
"Gateway": "172.17.0.1",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"IPAddress": "172.17.0.2",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"MacAddress": "02:42:ac:11:00:02",
"Networks": {
"bridge": {
"IPAMConfig": null,
"Links": null,
"Aliases": null,
"NetworkID": "e4fba822dc97104a9a319b745f7b00e87a04eaccd49cae3d366aa4cb47a553de",
"EndpointID": "aa0e4a6dab7e4b283423df17e1bbb65e54458447959a3c0e13acbbb6abb47446",
"Gateway": "172.17.0.1",
"IPAddress": "172.17.0.2",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"MacAddress": "02:42:ac:11:00:02",
"DriverOpts": null
}
}
}
}
]
3.5 进入当前正在运行的容器
# 方式一：
docker exec -it 容器id bashShell
[root@VM-24-12-centos ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
9865999fe479 centos "/bin/sh -c 'while t…" 14 minutes ago Up 14 minutes zen_taussig
[root@VM-24-12-centos ~]# docker exec -it 9865999fe479 /bin/bash
[root@9865999fe479 /]# ls
bin dev etc home lib lib64 lost+found media mnt opt proc root run sbin srv sys tmp usr var
[root@9865999fe479 /]# ps -ef
UID PID PPID C STIME TTY TIME CMD
root 1 0 0 14:46 ? 00:00:00 /bin/sh -c while true;do echo 666;sleep 1;done
root 901 0 0 15:01 pts/0 00:00:00 /bin/bash
root 925 1 0 15:01 ? 00:00:00 /usr/bin/coreutils --coreutils-prog-shebang=sleep /usr/bin/sleep 1
root 926 901 0 15:01 pts/0 00:00:00 ps -ef
# 方式二：
docker attach 容器id
正在执行的代码.....
# 比较：
# docker exec # 进入容器后开启一个新的终端，可以在里面操作（常用）
# docker attach # 进入容器正在执行的终端，不会启动新的进程！
3.6 从容器内拷贝文件到主机上
docker cp 容器id:容器内路径 目的的主机路径
[root@VM-24-12-centos ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
mysql 5.7 c20987f18b13 3 months ago 448MB
hello-world latest feb5d9fea6a5 6 months ago 13.3kB
centos latest 5d0da3dc9764 7 months ago 231MB
## 进入docker容器内
[root@VM-24-12-centos home]# docker attach a0aa07d62a3e
[root@a0aa07d62a3e /]# cd /home
[root@a0aa07d62a3e home]# ls
## 在容器内新建一个test.java文件
[root@a0aa07d62a3e home]# touch test.java
[root@a0aa07d62a3e home]# exit
exit
## 将这个文件拷贝到主机上
[root@VM-24-12-centos home]# docker cp a0aa07d62a3e:/home/test.java /home
[root@VM-24-12-centos home]# ls
lighthouse test.java www
小结：
命令大全：
attach Attach local standard input, output, and error streams to a running container
#当前shell下 attach连接指定运行的镜像
build Build an image from a Dockerfile # 通过Dockerfile定制镜像
commit Create a new image from a container's changes #提交当前容器为新的镜像 cp Copy files/folders between a container and the local filesystem #拷贝文件 create Create a new container #创建一个新的容器 diff Inspect changes to files or directories on a container's filesystem #查看docker容器的变化
events Get real time events from the server # 从服务获取容器实时时间
exec Run a command in a running container # 在运行中的容器上运行命令
export Export a container's filesystem as a tar archive #导出容器文件系统作为一个tar归档文件[对应import]
history Show th