Docker详细文档
docker学习笔记1.什么是docker待补充2.docker常用命令docker infodocker info可以查看docker的详细信息，包括镜像数，容器数，主机硬件信息等[root@iZwz9g1c3fleilt56ermd5Z docker]# docker infoContainers: 8Running: 6Paused: 0Stopped: 2Images: 8Server V
·
docker详细文档
1.什么是docker
解决了什么难点
- 在开发中，经常会遇到本地环境与生产环境不一致，然后开发和运维言语沟通或者武力沟通的情况，相互甩锅，程序员最常说的一句话就是：“为什么在我的电脑上没事”
- 在需要搭建集群的情况时，如果需要在特定的时区快速扩容机器（机器数量庞大，并非人力可为的情况），并且搭建好环境，事后又能快速的关掉
解决有哪些方案
- 可以编写脚本，进行自动部署，自动扩容；
- 但这仍然会遇到不可预期的情况，当编写好自动部署脚本，是为Centos的linux服务器，但如果实际情况下服务器是ubuntu的linux， 则有可能部署不成功
- 其次就是假如我的java项目需要部署到服务器上，我的java项目只能支持java8，如果服务器上已有java11，则无从下手， 卸载重装则有可能会影响到服务器上的别的程序，如果不装java8，则无法运行我们的程序，隔离性不强
- 构建虚拟机镜像文件，在虚拟机里运行创建出虚拟机
- 他解决了隔离性和一定地跨平台性，但是一台虚拟机创建出来需要模拟整个操作系统，包括硬盘，内存，网络等一系列的操作系统相关的组件 会很浪费资源
- 虚拟容器技术
- 他解决了隔离性和跨平台性，他并不像虚拟机一样庞大，硬件驱动相关的与主机共用（主机：正真的电脑，宿机：虚拟出来的），只是环境相关 的为容器内部所管理，容器和容器之间互不影响，docker是这种技术的一种实现，他可以让开发者配置好DockerFile，构建出镜像或者直接推至仓库 ， 运维拿到镜像则直接使用少量参数则器启动
docker的三要素
- 仓库，类似于git服务器、maven中央仓库、百度云盘（不严谨，但好理解）、等，仓库用于存放镜像，我们可以拉取镜像，用来快速创建容器，docker官方的仓库地址
- 镜像，用镜像可以创建出一个或者多个容器，可以认为是一个模板，类似java的类，用类可以创建出对象，比如windows10的安装文件，利用这一个文件可以给无数台电脑安装windows
- 容器，利用镜像创建出来的真实运行环境，他是一个虚拟出的一个小型的linux，也是最终运行应用程序的东西
2.docker常用命令
docker 系统相关
docker info
docker info 可以查看docker的详细信息，包括镜像数，容器数，主机硬件信息等
[root@iZwz9g1c3fleilt56ermd5Z docker]# docker info
Containers: 8
Running: 6
Paused: 0
Stopped: 2
Images: 8
Server Version: 1.13.1
Storage Driver: overlay2
Backing Filesystem: extfs
Supports d_type: true
Native Overlay Diff: true
Logging Driver: journald
Cgroup Driver: systemd
Plugins:
Volume: local
Network: bridge host macvlan null overlay
Swarm: inactive
Runtimes: docker-runc runc
Default Runtime: docker-runc
Init Binary: /usr/libexec/docker/docker-init-current
containerd version: (expected: aa8187dbd3b7ad67d8e5e3a15115d3eef43a7ed1)
runc version: 66aedde759f33c190954815fb765eedc1d782dd9 (expected: 9df8b306d01f59d3a8029be411de015b7304dd8f)
init version: fec3683b971d9c3ef73f284f176672c44b448662 (expected: 949e6facb77383876aeff8a6944dde66b3089574)
Security Options:
seccomp
WARNING: You're not using the default seccomp profile
Profile: /etc/docker/seccomp.json
Kernel Version: 3.10.0-1127.19.1.el7.x86_64
Operating System: CentOS Linux 7 (Core)
OSType: linux
Architecture: x86_64
Number of Docker Hooks: 3
CPUs: 2
Total Memory: 3.561 GiB
Name: iZwz9g1c3fleilt56ermd5Z
ID: LJDY:TL4J:A5QL:NYA7:R25T:FRU2:BNVK:ANCI:GC6F:OZQ5:C4IN:JAK5
Docker Root Dir: /var/lib/docker
Debug Mode (client): false
Debug Mode (server): false
Registry: https://index.docker.io/v1/
Experimental: false
Insecure Registries:
127.0.0.0/8
Registry Mirrors:
https://n81gglan.mirror.aliyuncs.com
Live Restore Enabled: false
Registries: docker.io (secure)
docker version
docker version 可以查看docker服务端和客户端版本信息
[root@iZwz9g1c3fleilt56ermd5Z docker]# docker version
Client:
Version: 1.13.1
API version: 1.26
Package version: docker-1.13.1-203.git0be3e21.el7.centos.x86_64
Go version: go1.10.3
Git commit: 0be3e21/1.13.1
Built: Thu Nov 12 15:11:46 2020
OS/Arch: linux/amd64
Server:
Version: 1.13.1
API version: 1.26 (minimum version 1.12)
Package version: docker-1.13.1-203.git0be3e21.el7.centos.x86_64
Go version: go1.10.3
Git commit: 0be3e21/1.13.1
Built: Thu Nov 12 15:11:46 2020
OS/Arch: linux/amd64
Experimental: false
docker 镜像相关
docker images
docker images 可以查看本地的镜像
[root@iZwz9g1c3fleilt56ermd5Z docker]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
docker.io/wordpress latest cfb931188dab 2 months ago 546 MB
docker.io/redis latest 74d107221092 2 months ago 104 MB
docker.io/mysql 5.7.32 1b12f2e9257b 3 months ago 448 MB
docker.io/elasticsearch 7.9.3 1ab13f928dc8 3 months ago 742 MB
docker.io/nacos/nacos-server latest a81222848024 3 months ago 921 MB
docker.io/hello-world latest bf756fb1ae65 12 months ago 13.3 kB
docker.io/kibana 7.4.2 230d3ded1abc 15 months ago 1.1 GB
docker.io/nginx 1.10 0346349a1a64 3 years ago 182 MB
展示出来的表格参数详解
| PREOSITORY | TAG | IMAGE ID | CREATED | SIZE |
|---|---|---|---|---|
| 表示镜像的仓库源 | 镜像的标签 | 镜像ID（由docker产生） | 镜像创建的时间 | 镜像大小 |
同一个镜像可以有多个TAG，可以认为是镜像的版本，最新版本为latest，如果不指定版本标签，默认为latest docker images 还有许多参数
-a: 用于查看全部的镜像对应单词 all
[root@iZwz9g1c3fleilt56ermd5Z docker]# docker images -a
REPOSITORY TAG IMAGE ID CREATED SIZE
docker.io/wordpress latest cfb931188dab 2 months ago 546 MB
docker.io/redis latest 74d107221092 2 months ago 104 MB
docker.io/mysql 5.7.32 1b12f2e9257b 3 months ago 448 MB
docker.io/elasticsearch 7.9.3 1ab13f928dc8 3 months ago 742 MB
docker.io/nacos/nacos-server latest a81222848024 3 months ago 921 MB
docker.io/hello-world latest bf756fb1ae65 12 months ago 13.3 kB
docker.io/kibana 7.4.2 230d3ded1abc 15 months ago 1.1 GB
docker.io/nginx 1.10 0346349a1a64 3 years ago 182 MB
-q/-qa： -q是只查看image id的结果，-qa则是-a和-q的组合
[root@iZwz9g1c3fleilt56ermd5Z docker]# docker images -q
cfb931188dab
74d107221092
1b12f2e9257b
1ab13f928dc8
a81222848024
bf756fb1ae65
230d3ded1abc
0346349a1a64
--digests：可以查看镜像的说明，使用命令后，展示的表格会多出一个DIGEST列
[root@iZwz9g1c3fleilt56ermd5Z docker]# docker images --digests
REPOSITORY TAG DIGEST IMAGE ID CREATED SIZE
docker.io/wordpress latest sha256:92e97d9b3147038e3cc541a224cc951bef597061827e23a208a24c36bff1c1fe cfb931188dab 2 months ago 546 MB
docker.io/redis latest sha256:5b98e32b58cdbf9f6b6f77072c4915d5ebec43912114031f37fa5fa25b032489 74d107221092 2 months ago 104 MB
docker.io/mysql 5.7.32 sha256:4d2b34e99c14edb99cdd95ddad4d9aa7ea3f2c4405ff0c3509a29dc40bcb10ef 1b12f2e9257b 3 months ago 448 MB
docker.io/elasticsearch 7.9.3 sha256:a13cd87cbf139fadbca64972ef2c8777222236887d303e4177c1ab7cff1b52f6 1ab13f928dc8 3 months ago 742 MB
docker.io/nacos/nacos-server latest sha256:c2f6fee129ed53381ab6973313f77fe9438b6cb52df23ac026903d9592b81ce1 a81222848024 3 months ago 921 MB
docker.io/hello-world latest sha256:31b9c7d48790f0d8c50ab433d9c3b7e17666d6993084c002c2ff1ca09b96391d bf756fb1ae65 12 months ago 13.3 kB
docker.io/kibana 7.4.2 sha256:355f9c979dc9cdac3ff9a75a817b8b7660575e492bf7dbe796e705168f167efc 230d3ded1abc 15 months ago 1.1 GB
docker.io/nginx 1.10 sha256:6202beb06ea61f44179e02ca965e8e13b961d12640101fca213efbfd145d7575 0346349a1a64 3 years ago 182 MB
--no-trunc：可以查看镜像id更加详细的信息
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker images --no-trunc
REPOSITORY TAG IMAGE ID CREATED SIZE
docker.io/wordpress latest sha256:cfb931188dab87aa1cb9da7b94068fecdb5d1f7e1372a381a7555b2acf3476f9 2 months ago 546 MB
docker.io/redis latest sha256:74d107221092875724ddb06821416295773bee553bbaf8d888ababe9be7b947f 2 months ago 104 MB
docker.io/mysql 5.7.32 sha256:1b12f2e9257be96da5c075f186dc371b18442b0f9281728ac64c9a69c6e0e264 3 months ago 448 MB
docker.io/elasticsearch 7.9.3 sha256:1ab13f928dc8aa958574d060fde595bd7715c1c2d3260446356a6a02d231e168 3 months ago 742 MB
docker.io/nacos/nacos-server latest sha256:a81222848024f406b6bef585540847bcfea1a06ec97d64e954835ee7411c53f3 3 months ago 921 MB
docker.io/hello-world latest sha256:bf756fb1ae65adf866bd8c456593cd24beb6a0a061dedf42b26a993176745f6b 12 months ago 13.3 kB
docker.io/kibana 7.4.2 sha256:230d3ded1abc1468536e41d80a9cc6a67908358c0e4ebf065c29b8ef0370ba4b 15 months ago 1.1 GB
docker.io/nginx 1.10 sha256:0346349a1a640da9535acfc0f68be9d9b81e85957725ecb76f3b522f4e2f0455 3 years ago 182 MB
docker search
docker search 镜像名字， 可以去中央仓库搜索镜像，对应的网站地址docker镜像仓库
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker search tomcat
INDEX NAME DESCRIPTION STARS OFFICIAL AUTOMATED
docker.io docker.io/tomcat Apache Tomcat is an open source implementa... 2919 [OK]
docker.io docker.io/tomee Apache TomEE is an all-Apache Java EE cert... 86 [OK]
docker.io docker.io/dordoka/tomcat Ubuntu 14.04, Oracle JDK 8 and Tomcat 8 ba... 55 [OK]
docker.io docker.io/bitnami/tomcat Bitnami Tomcat Docker Image 37 [OK]
docker.io docker.io/kubeguide/tomcat-app Tomcat image for Chapter 1 29
docker.io docker.io/consol/tomcat-7.0 Tomcat 7.0.57, 8080, "admin/admin" 17 [OK]
docker.io docker.io/cloudesire/tomcat Tomcat server, 6/7/8 15 [OK]
docker.io docker.io/aallam/tomcat-mysql Debian, Oracle JDK, Tomcat & MySQL 13 [OK]
docker.io docker.io/arm32v7/tomcat Apache Tomcat is an open source implementa... 10
docker.io docker.io/maluuba/tomcat7-java8 Tomcat7 with java8. 6
docker.io docker.io/rightctrl/tomcat CentOS , Oracle Java, tomcat application s... 6 [OK]
docker.io docker.io/unidata/tomcat-docker Security-hardened Tomcat Docker container. 5 [OK]
docker.io docker.io/arm64v8/tomcat Apache Tomcat is an open source implementa... 3
docker.io docker.io/amd64/tomcat Apache Tomcat is an open source implementa... 2
docker.io docker.io/cfje/tomcat-resource Tomcat Concourse Resource 2
docker.io docker.io/jelastic/tomcat An image of the Tomcat Java application se... 2
docker.io docker.io/99taxis/tomcat7 Tomcat7 1 [OK]
docker.io docker.io/camptocamp/tomcat-logback Docker image for tomcat with logback integ... 1 [OK]
docker.io docker.io/chenyufeng/tomcat-centos tomcat基于centos6的镜像 1 [OK]
docker.io docker.io/oobsri/tomcat8 Testing CI Jobs with different names. 1
docker.io docker.io/picoded/tomcat7 tomcat7 with jre8 and MANAGER_USER / MANAG... 1 [OK]
docker.io docker.io/ppc64le/tomcat Apache Tomcat is an open source implementa... 1
docker.io docker.io/s390x/tomcat Apache Tomcat is an open source implementa... 0
docker.io docker.io/secoresearch/tomcat-varnish Tomcat and Varnish 5.0 0 [OK]
docker.io docker.io/softwareplant/tomcat Tomcat images for jira-cloud testing 0 [OK]
参数说明
-s 指定点赞数，只展示超过指定点赞数的数据
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker search -s 30 tomcat
Flag --stars has been deprecated, use --filter=stars=3 instead
INDEX NAME DESCRIPTION STARS OFFICIAL AUTOMATED
docker.io docker.io/tomcat Apache Tomcat is an open source implementa... 2919 [OK]
docker.io docker.io/tomee Apache TomEE is an all-Apache Java EE cert... 86 [OK]
docker.io docker.io/dordoka/tomcat Ubuntu 14.04, Oracle JDK 8 and Tomcat 8 ba... 55 [OK]
docker.io docker.io/bitnami/tomcat Bitnami Tomcat Docker Image 37 [OK]
--no-trunc 不省略，当字符超过展示数时省略的三个...功能关掉
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker search -s 30 --no-trunc tomcat
Flag --stars has been deprecated, use --filter=stars=3 instead
INDEX NAME DESCRIPTION STARS OFFICIAL AUTOMATED
docker.io docker.io/tomcat Apache Tomcat is an open source implementation of the Java Servlet and JavaServer Pages technologies 2919 [OK]
docker.io docker.io/tomee Apache TomEE is an all-Apache Java EE certified stack where Apache Tomcat is top dog. 86 [OK]
docker.io docker.io/dordoka/tomcat Ubuntu 14.04, Oracle JDK 8 and Tomcat 8 based docker container. 55 [OK]
docker.io docker.io/bitnami/tomcat Bitnami Tomcat Docker Image 37 [OK]
--automated 只列出automated build为ok的镜像
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker search -s 30 --no-trunc --automated tomcat
Flag --stars has been deprecated, use --filter=stars=3 instead
Flag --automated has been deprecated, use --filter=automated=true instead
INDEX NAME DESCRIPTION STARS OFFICIAL AUTOMATED
docker.io docker.io/dordoka/tomcat Ubuntu 14.04, Oracle JDK 8 and Tomcat 8 based docker container. 55 [OK]
docker.io docker.io/bitnami/tomcat Bitnami Tomcat Docker Image 37 [OK]
docker pull
docker pull 镜像名[:tag] 从中央仓库拉取镜像，如果不写tag，等价于docker pull 镜像名:latest
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker pull tomcat
Using default tag: latest
Trying to pull repository docker.io/library/tomcat ...
latest: Pulling from docker.io/library/tomcat
b9a857cbf04d: Pull complete
d557ee20540b: Pull complete
3b9ca4f00c2e: Pull complete
667fd949ed93: Pull complete
661d3b55f657: Pull complete
511ef4338a0b: Pull complete
a56db448fefe: Pull complete
00612a99c7dc: Pull complete
326f9601c512: Pull complete
c547db74f1e1: Pull complete
Digest: sha256:94cc18203335e400dbafcd0633f33c53663b1c1012a13bcad58cced9cd9d1305
Status: Downloaded newer image for docker.io/tomcat:latest
docker rmi
docker rmi 镜像名:tag,没写tag默认是latest，删除某个镜像
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker rmi hello-world
Untagged: hello-world:latest
Untagged: docker.io/hello-world@sha256:31b9c7d48790f0d8c50ab433d9c3b7e17666d6993084c002c2ff1ca09b96391d
Deleted: sha256:bf756fb1ae65adf866bd8c456593cd24beb6a0a061dedf42b26a993176745f6b
Deleted: sha256:9c27e219663c25e0f28493790cc0b88bc973ba3b1686355f221c38a36978ac63
-f 强制删除，如果有容器依赖镜像则需要强制删除
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker rmi -f hello-world
Untagged: hello-world:latest
Untagged: docker.io/hello-world@sha256:31b9c7d48790f0d8c50ab433d9c3b7e17666d6993084c002c2ff1ca09b96391d
Deleted: sha256:bf756fb1ae65adf866bd8c456593cd24beb6a0a061dedf42b26a993176745f6b
可以批量删除，镜像后面加空格继续追加即可
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker rmi -f hello-world tomcat
Untagged: hello-world:latest
Untagged: docker.io/hello-world@sha256:31b9c7d48790f0d8c50ab433d9c3b7e17666d6993084c002c2ff1ca09b96391d
Deleted: sha256:bf756fb1ae65adf866bd8c456593cd24beb6a0a061dedf42b26a993176745f6b
Untagged: tomcat:latest
Untagged: docker.io/tomcat@sha256:94cc18203335e400dbafcd0633f33c53663b1c1012a13bcad58cced9cd9d1305
Deleted: sha256:040bdb29ab375db2a8de090070dcbee19d43f609385a934c3f2b423e515f57bb
Deleted: sha256:03ac467e286d36301dba7daaec530f481074197d22d41bd48a32e5a2e3069573
Deleted: sha256:c56c3d4e36aac2060fdb29c95baf4b4d6916fe9a454751b77b8d89f27dd8dda4
Deleted: sha256:0f3911a87064866cd2aa7fd863afc1e02bdfa4856afa351e871f0e6a48cfd52b
Deleted: sha256:7891c5716382337382836e0af1ea998bf77c1eed9c8e806c7aac5f489952f4ba
Deleted: sha256:56dee2fc4110951264d4b134b303920c633aabbbb0264dc218518b3547320de2
Deleted: sha256:cd253bbc5a1ce457359958f4905b53a3f6f0ac167ba5065f68385600fdbae99e
Deleted: sha256:03b0292dbc6978fe1077f948ac07472a8cac23fb4c3cf92c76f5eb62891e3d5a
Deleted: sha256:19f2a825ed46bbf16a06d9d5185a0ac68196217f302e760abb4cbc3178b14cc1
Deleted: sha256:b4f0436e967b6b9b021d3ed900a5422da6d8fe8c17c51c7d7e4f9c105812f868
Deleted: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0
docker rmi -f \$(docker ps -qa) \${}可以用命令的结果做占位
docker 容器相关
docker run
docker run 命令可以创建并启动一个容器 参数格式为 docker run [OPTIONS] IMAGE [COMMAND] [ARG...]
options说明
- --name 容器新名字 为容器指定一个名称
- -d 后台运行容器，并返回容器ID，也即启动守护式容器
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker run -d -p 8889:8080 fenqing/tomcat02:1.2 f6cca3295b968776b63f1ee5733f230bdb22a73527159f12663d79485a13186b - -i 以交互模式运行容器，通常与-t 同时使用
- -t 为容器重新分配一个伪输入终端，通常与-i 同时使用
- -P 随机端口映射
- -p 指定端口映射，有以下四种模式
- ip:hostPort:containerPort
- ip:containerPort
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker run -d -p 8889:8080 fenqing/tomcat02:1.2 f6cca3295b968776b63f1ee5733f230bdb22a73527159f12663d79485a13186b - hostPort:containerPort
- containerPort
-i和-t 组合使用，运行并且启动虚拟终端
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker run -it --name mycentos01 centos
[root@32c23775d2b1 /]# pwd
-d 守护式进程启动
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker run -d centos
c27c084e44bb8a2d8b23ce62e9e93d3888ff74f909178724b2e101133914bd7b
然后docker ps -a 查看发现容器已经退出，原因是docker容器后台运行，就必须有一个前台进程，容器运行的命令如果不是那些一直挂起的命令，就会自动退出 可以使用在容器里执行一个死循环来模拟centos容器不停止
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker run -d centos /bin/sh -c "while true; do echo hello fenqing; sleep 2; done"
f3e5471f302fbf5e9e104146ad9d0b708015a5a22ad984337c265b7ca1ff6c10
docker ps [OPTIONS]
docker ps 查看现有的容器
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
32c23775d2b1 centos "/bin/bash" 27 minutes ago Up 27 minutes mycentos01
8b2481b4ac48 redis "docker-entrypoint..." 6 weeks ago Up 2 weeks 0.0.0.0:6379->6379/tcp redis
d335af0a7119 nginx:1.10 "nginx -g 'daemon ..." 2 months ago Up 3 weeks 0.0.0.0:80->80/tcp, 443/tcp nginx
253d60c0e3be kibana:7.4.2 "/usr/local/bin/du..." 2 months ago Up 2 weeks 0.0.0.0:5601->5601/tcp kibana
9ab079d39b8d elasticsearch:7.9.3 "/tini -- /usr/loc..." 2 months ago Up 3 weeks 0.0.0.0:9200->9200/tcp, 0.0.0.0:9300->9300/tcp elasticsearch
6aa3c6d07701 nacos/nacos-server "bin/docker-startu..." 2 months ago Up 3 weeks 0.0.0.0:8848->8848/tcp nacos
8d37715ca8a8 mysql:5.7.32 "docker-entrypoint..." 2 months ago Up 3 weeks 0.0.0.0:3306->3306/tcp, 33060/tcp mysql
OPTIONS 说明
- -a 列出当前所有正在运行的容器+历史上运行过的
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 32c23775d2b1 centos "/bin/bash" 35 minutes ago Up 35 minutes mycentos01 af3b17c82193 bf756fb1ae65 "/hello" About an hour ago Exited (0) About an hour ago sad_euler 8b2481b4ac48 redis "docker-entrypoint..." 6 weeks ago Up 2 weeks 0.0.0.0:6379->6379/tcp redis abaece61dd15 wordpress "docker-entrypoint..." 8 weeks ago Exited (0) 3 weeks ago wordpress d335af0a7119 nginx:1.10 "nginx -g 'daemon ..." 2 months ago Up 3 weeks 0.0.0.0:80->80/tcp, 443/tcp nginx 253d60c0e3be kibana:7.4.2 "/usr/local/bin/du..." 2 months ago Up 2 weeks 0.0.0.0:5601->5601/tcp kibana 9ab079d39b8d elasticsearch:7.9.3 "/tini -- /usr/loc..." 2 months ago Up 3 weeks 0.0.0.0:9200->9200/tcp, 0.0.0.0:9300->9300/tcp elasticsearch 6aa3c6d07701 nacos/nacos-server "bin/docker-startu..." 2 months ago Up 3 weeks 0.0.0.0:8848->8848/tcp nacos 8d37715ca8a8 mysql:5.7.32 "docker-entrypoint..." 2 months ago Up 3 weeks 0.0.0.0:3306->3306/tcp, 33060/tcp mysql - -l 显示最近创建的容器
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker ps -l CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 32c23775d2b1 centos "/bin/bash" 38 minutes ago Exited (0) 11 seconds ago mycentos01 - -n 显示最近n个创建的容器
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker ps -n 5 CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 32c23775d2b1 centos "/bin/bash" 39 minutes ago Exited (0) 50 seconds ago mycentos01 af3b17c82193 bf756fb1ae65 "/hello" About an hour ago Exited (0) About an hour ago sad_euler 8b2481b4ac48 redis "docker-entrypoint..." 6 weeks ago Up 2 weeks 0.0.0.0:6379->6379/tcp redis abaece61dd15 wordpress "docker-entrypoint..." 8 weeks ago Exited (0) 3 weeks ago wordpress d335af0a7119 nginx:1.10 "nginx -g 'daemon ..." 2 months ago Up 3 weeks 0.0.0.0:80->80/tcp, 443/tcp nginx - -q 静默模式，只显示容器编号
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker ps -q 8b2481b4ac48 d335af0a7119 253d60c0e3be 9ab079d39b8d 6aa3c6d07701 8d37715ca8a8 - --no-trunc 不截断输出
退出容器的两种方式
- exit 容器停止退出,在容器终端内输入该命令退出
- ctrl+P+Q 容器不停止退出，在容器终端内输入按下组合键退出
docker start
docker start 容器id或者容器名，可以启动容器
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker start mycentos01
mycentos01
docker restart
docker restart 容器id或者容器名,可以重启容器
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker restart mycentos02
mycentos02
docker stop
docker stop 容器id或者容器名，可以停止容器
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker stop mycentos02
mycentos02
docker kill
docker kill 容器id或者容器名，强制停止容器
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker kill mycentos01
mycentos01
docker rm
docker rm 删除已停止的容器
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker rm mycentos01
mycentos01
options 说明
- -f 强制删除容器，会执行先停止再删除流程
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker rm -f mycentos02
mycentos02
- 一次性删除多个容器
- docker rm -f \$(docker ps -a -q) 删除所有容器，将\$()内的命令结果当做参数,属于shell语法
- docker ps -a -q | xargs docker rm 删除所有容器，将前者命令的结果当做参数给到后者命令
docker logs
docker logs 查询容器的日志
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker logs f3e
hello fenqing
hello fenqing
hello fenqing
options说明
-t 及收入时间戳
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker logs -t f3e
2021-01-25T02:06:24.337771000Z hello fenqing
2021-01-25T02:06:26.346211000Z hello fenqing
2021-01-25T02:06:28.348766000Z hello fenqing
-f 跟随最新日志打印
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker logs -f f3e
hello fenqing
hello fenqing
hello fenqing
--tall 数字显示最后多少条
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker logs --tail 1 f3e
hello fenqing
docker top
docker top 查看docker容器内进程
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker top f3e
UID PID PPID C STIME TTY TIME CMD
root 31088 31070 0 10:06 ? 00:00:00 /bin/sh -c while true; do echo hello fenqing; sleep 2; done
root 31394 31088 0 10:12 ? 00:00:00 /usr/bin/coreutils --coreutils-prog-shebang=sleep /usr/bin/sleep 2
docker inspect
docker inspect 容器id 查看容器内部细节
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker inspect f3e
[
{
"Id": "f3e5471f302fbf5e9e104146ad9d0b708015a5a22ad984337c265b7ca1ff6c10",
"Created": "2021-01-25T02:06:24.13609455Z",
"Path": "/bin/sh",
"Args": [
"-c",
"while true; do echo hello fenqing; sleep 2; done"
],
"State": {
"Status": "running",
"Running": true,
"Paused": false,
"Restarting": false,
"OOMKilled": false,
"Dead": false,
"Pid": 31088,
"ExitCode": 0,
"Error": "",
"StartedAt": "2021-01-25T02:06:24.339002895Z",
"FinishedAt": "0001-01-01T00:00:00Z"
},
"Image": "sha256:300e315adb2f96afe5f0b2780b87f28ae95231fe3bdd1e16b9ba606307728f55",
"ResolvConfPath": "/var/lib/docker/containers/f3e5471f302fbf5e9e104146ad9d0b708015a5a22ad984337c265b7ca1ff6c10/resolv.conf",
"HostnamePath": "/var/lib/docker/containers/f3e5471f302fbf5e9e104146ad9d0b708015a5a22ad984337c265b7ca1ff6c10/hostname",
"HostsPath": "/var/lib/docker/containers/f3e5471f302fbf5e9e104146ad9d0b708015a5a22ad984337c265b7ca1ff6c10/hosts",
"LogPath": "",
"Name": "/cocky_kalam",
"RestartCount": 0,
"Driver": "overlay2",
"MountLabel": "",
"ProcessLabel": "",
"AppArmorProfile": "",
"ExecIDs": null,
"HostConfig": {
"Binds": null,
"ContainerIDFile": "",
"LogConfig": {
"Type": "journald",
"Config": {}
},
"NetworkMode": "default",
"PortBindings": {},
"RestartPolicy": {
"Name": "no",
"MaximumRetryCount": 0
},
"AutoRemove": false,
"VolumeDriver": "",
"VolumesFrom": null,
"CapAdd": null,
"CapDrop": null,
"Dns": [],
"DnsOptions": [],
"DnsSearch": [],
"ExtraHosts": null,
"GroupAdd": null,
"IpcMode": "",
"Cgroup": "",
"Links": null,
"OomScoreAdj": 0,
"PidMode": "",
"Privileged": false,
"PublishAllPorts": false,
"ReadonlyRootfs": false,
"SecurityOpt": null,
"UTSMode": "",
"UsernsMode": "",
"ShmSize": 67108864,
"Runtime": "docker-runc",
"ConsoleSize": [
0,
0
],
"Isolation": "",
"CpuShares": 0,
"Memory": 0,
"NanoCpus": 0,
"CgroupParent": "",
"BlkioWeight": 0,
"BlkioWeightDevice": null,
"BlkioDeviceReadBps": null,
"BlkioDeviceWriteBps": null,
"BlkioDeviceReadIOps": null,
"BlkioDeviceWriteIOps": null,
"CpuPeriod": 0,
"CpuQuota": 0,
"CpuRealtimePeriod": 0,
"CpuRealtimeRuntime": 0,
"CpusetCpus": "",
"CpusetMems": "",
"Devices": [],
"DiskQuota": 0,
"KernelMemory": 0,
"MemoryReservation": 0,
"MemorySwap": 0,
"MemorySwappiness": -1,
"OomKillDisable": false,
"PidsLimit": 0,
"Ulimits": null,
"CpuCount": 0,
"CpuPercent": 0,
"IOMaximumIOps": 0,
"IOMaximumBandwidth": 0
},
"GraphDriver": {
"Name": "overlay2",
"Data": {
"LowerDir": "/var/lib/docker/overlay2/ce04f8aeb99d708b4fa3ea2eb45aaf1b3daa53195d8afc0cbcaf575b73053e97-init/diff:/var/lib/docker/overlay2/9c9e47d354836790de324736040a427c9d171929bb70aaca3baa60e837491777/diff",
"MergedDir": "/var/lib/docker/overlay2/ce04f8aeb99d708b4fa3ea2eb45aaf1b3daa53195d8afc0cbcaf575b73053e97/merged",
"UpperDir": "/var/lib/docker/overlay2/ce04f8aeb99d708b4fa3ea2eb45aaf1b3daa53195d8afc0cbcaf575b73053e97/diff",
"WorkDir": "/var/lib/docker/overlay2/ce04f8aeb99d708b4fa3ea2eb45aaf1b3daa53195d8afc0cbcaf575b73053e97/work"
}
},
"Mounts": [],
"Config": {
"Hostname": "f3e5471f302f",
"Domainname": "",
"User": "",
"AttachStdin": false,
"AttachStdout": false,
"AttachStderr": false,
"Tty": false,
"OpenStdin": false,
"StdinOnce": false,
"Env": [
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
],
"Cmd": [
"/bin/sh",
"-c",
"while true; do echo hello fenqing; sleep 2; done"
],
"Image": "centos",
"Volumes": null,
"WorkingDir": "",
"Entrypoint": null,
"OnBuild": null,
"Labels": {
"org.label-schema.build-date": "20201204",
"org.label-schema.license": "GPLv2",
"org.label-schema.name": "CentOS Base Image",
"org.label-schema.schema-version": "1.0",
"org.label-schema.vendor": "CentOS"
}
},
"NetworkSettings": {
"Bridge": "",
"SandboxID": "844f87080acf92b538f4948ca6dae4bb4764b356e51ae46199156eeaff9ece71",
"HairpinMode": false,
"LinkLocalIPv6Address": "",
"LinkLocalIPv6PrefixLen": 0,
"Ports": {},
"SandboxKey": "/var/run/docker/netns/844f87080acf",
"SecondaryIPAddresses": null,
"SecondaryIPv6Addresses": null,
"EndpointID": "d3ba39bbd5532b1f7c6d2cf21bb107ea3f9ab456e4b5103ee512a2d1fe936d18",
"Gateway": "172.17.0.1",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"IPAddress": "172.17.0.8",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"MacAddress": "02:42:ac:11:00:08",
"Networks": {
"bridge": {
"IPAMConfig": null,
"Links": null,
"Aliases": null,
"NetworkID": "7aaaabad7bc8c86d46db221e582b43b38d2c746e6f1c9b589eae2cbc0e657a26",
"EndpointID": "d3ba39bbd5532b1f7c6d2cf21bb107ea3f9ab456e4b5103ee512a2d1fe936d18",
"Gateway": "172.17.0.1",
"IPAddress": "172.17.0.8",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"MacAddress": "02:42:ac:11:00:08"
}
}
}
}
]
docker attach
docker attach 容器id，可以进入到容器
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker attach c9e
[root@c9ea3f54cea7 /]# ls
bin dev etc home lib lib64 lost+found media mnt opt proc root run sbin srv sys tmp usr var
docker exec
docker exec 可以执行容器内某种脚本 即可以在主机命令行直接执行脚本，如果运行bin/bash则进入容器
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker exec -t c9e ls -l /tmp
total 8
-rwx------ 1 root root 701 Dec 4 17:37 ks-script-esd4my7v
-rwx------ 1 root root 671 Dec 4 17:37 ks-script-eusq_sc5
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker exec -t c9e /bin/bash
[root@c9ea3f54cea7 /]#
docker cp
docker cp 容器id:容器内路径 目的主机路径 ，可以复制文件
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker cp c9e:/opt/application.yml ~
[root@iZwz9g1c3fleilt56ermd5Z ~]# ls
application.yml elasticsearch-analysis-ik-7.9.3.zip
小结
push 推送制定镜像或者库镜像至docker源服务器
restart 重启运行的容器
rm 删除一个或者多个容器
rmi 删除一个或者多个镜像[无容器使用的镜像才可删除，否则需要删除相关容器才可以继续，或者-f强制删]
run 创建一个新的容器并运行一个命令
save 保存一个镜像为一个tar包
search 在docker hub中搜索镜像
start 启动容器
stop 停止容器
tag 给源中镜像打上标签
top 查看容器中运行的进程信息
unpause 取消暂停容器
version 查看docker版本号
wait 截取容器停止时的退出状态值
docker 镜像高级
镜像是一种轻量级，可执行的独立软件包，用来打包软件运行环境和基于运行环境开发的软件，他包含运行某个软件所需的所有内容，包括代码，运行时，库，环境变量，和配置文件
UnionFS 联合文件系统
UnionFS 是一种分层，轻量级，并且搞性能的文件系统，对文件系统的修改最稳一次提交来一层层的叠加 特性：一次同事加载多个文件系统，但是总体看来，只能看到一个文件系统，联合加载或吧各层文件系统叠加起来，最终的文件系统会包含所有底层文件和目录
docker 镜像加载原理
docker的镜像实际上有一层一层的文件系统组成，这种层级的文件系统UnionFS，
bootfs，主要包含bootloader和kernel，botloader主要是引导加载kernel，Linux启动时会加载bootfs文件系统，在docker镜像最底层是bootfs，这一层与Linux/Unix系统是一样的
rootfs 在bootfs之上，包含最经典的/dev /proc /bin /etc 等标准目录，和文件，rootfs就是各种不同的操作系统发行版
为什么Centos的镜像是4G,docker的镜像只有200M 对于一个精简的OS，rootfs可以很小，只需要包括最基本的命令，工具，程序库， 就可以，因为底层直接使用主机的kernel,自己只需要提供rootfs即可，由于可见对于不同的linux发行版， bootfs基本是一致的，rootfs会有差别，英雌不同的发行版可以共用bootfs
docker commit
docker commit 提交容器使之成为新的镜像
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker commit -a "fenqing" -m "tomcat 自己定制" 7468 fenqing/tomcat02:1.2
sha256:fb29bf1e4ca81529fc1300b2bd688b8fdff45a970f1661bb8736d235642b5785
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
fenqing/tomcat02 1.2 fb29bf1e4ca8 9 seconds ago 649 MB
docker.io/tomcat latest 040bdb29ab37 2 weeks ago 649 MB
docker.io/centos latest 300e315adb2f 7 weeks ago 209 MB
docker.io/wordpress latest cfb931188dab 2 months ago 546 MB
docker.io/redis latest 74d107221092 2 months ago 104 MB
docker.io/mysql 5.7.32 1b12f2e9257b 3 months ago 448 MB
docker.io/elasticsearch 7.9.3 1ab13f928dc8 3 months ago 742 MB
docker.io/nacos/nacos-server latest a81222848024 4 months ago 921 MB
docker.io/kibana 7.4.2 230d3ded1abc 15 months ago 1.1 GB
docker.io/nginx 1.10 0346349a1a64 3 years ago 182 MB
-a "作者名称" 指定作者名称
-m "描述信息" 指定描述信息
容器数据卷
-
是什么
将运用与运行的环境打包成容器运行，运行可以伴随容器，但是我们队数据的要求希望是持久化的
容器之间希望有可能共享数据
docker 容器产生的数据，如果不通过docker commit生成新的镜像，是的数据作为镜像的一部分保存下来，那么当容器删除后，数据自然就没有了.
为了能保存数据在docker中我们使用卷
-
能干嘛
卷就是目录或文件，存在于一个或者多个容器中，由docker挂在到容器，但不属于联合文件系统，因此 能够绕开Union File System提供一些用于持续存储或者共享数据的特性
特点
数据卷可在容器之间共享或重用数据
卷中的更改可以直接生效
数据卷中更改不会包含在镜像的更新中
数据卷的生命周期一直持续到没有容器使用它为止
-
如何使用
直接命令添加
- docker run命令的-v参数，主机目录:容器内目录
[root@iZwz9g1c3fleilt56ermd5Z docker-study]# docker run -it -v /opt/fenqingData/docker-study/centos1DataVolume:/dataVolumeContainer centos [root@129c34b93fa0 /]#主机
[root@iZwz9g1c3fleilt56ermd5Z ~]# cd /opt/fenqingData/docker-study/ [root@iZwz9g1c3fleilt56ermd5Z docker-study]# ls centos1DataVolume tomcat容器内
[root@129c34b93fa0 /]# ls bin dataVolumeContainer dev etc home lib lib64 lost+found media mnt opt proc root run sbin srv sys tmp usr var查看数据卷是否挂载成功 可以使用上面提到的inspect命令，查看到HostConfig->Binds
容器内与主机数据共享 主机写，容器读
# 主机 [root@iZwz9g1c3fleilt56ermd5Z centos1DataVolume]# echo local -> local.txt [root@iZwz9g1c3fleilt56ermd5Z centos1DataVolume]# ls local.txt out.log # 容器内 [root@129c34b93fa0 dataVolumeContainer]# ls local.txt out.log容器写，主机读
# 容器内 [root@129c34b93fa0 dataVolumeContainer]# echo container -> container.txt [root@129c34b93fa0 dataVolumeContainer]# ls container.txt local.txt out.log # 主机 [root@iZwz9g1c3fleilt56ermd5Z centos1DataVolume]# ls container.txt local.txt out.log容器退出后是否仍然能保持一致
# 容器退出的情况下，在主机将要挂载卷宗的目录下创建文件 [root@iZwz9g1c3fleilt56ermd5Z centos1DataVolume]# echo local -> local1.txt [root@iZwz9g1c3fleilt56ermd5Z centos1DataVolume]# ls container.txt local1.txt local.txt out.log # 启动容器，查看 [root@iZwz9g1c3fleilt56ermd5Z docker-study]# docker start 129 [root@iZwz9g1c3fleilt56ermd5Z docker-study]# docker attach 129 [root@129c34b93fa0 /]# cd dataVolumeContainer/ [root@129c34b93fa0 dataVolumeContainer]# ls container.txt local.txt local1.txt out.log [root@129c34b93fa0 dataVolumeContainer]#带权限的命令 docker run 的 -v 命令 主机目录:容器内目录:ro 镜像名，指定只读
[root@iZwz9g1c3fleilt56ermd5Z docker-study]# docker run -it -v /opt/fenqingData/docker-study/centos1DataVolume:/dataVolumeContainer:ro centos [root@46b6e0b7c873 /]# # 但是容器内没有写权限，ro对应单词则是Read-only [root@46b6e0b7c873 dataVolumeContainer]# echo hello -> container1.txt bash: container1.txt: Read-only file system # inspect 命令查看。得到一个数据描述 "Mounts": [ { "Type": "bind", "Source": "/opt/fenqingData/docker-study/centos1DataVolume", "Destination": "/dataVolumeContainer", "Mode": "ro", "RW": false,# 已经切换成只读了 "Propagation": "rprivate" } ]DockerFile添加
什么是DockerFile
DockerFile是对镜像的描述，使用VOLUME 指令,由于在DockerFile内可以指定主机目录的话， 则会带来移植性的困扰，即并非所有机器在特定目录都能使用，所以VOLUME会在容器内创建目录,并绑定在主机的目录上默认位置
[root@iZwz9g1c3fleilt56ermd5Z dockerfile]# vim DockerFile [root@iZwz9g1c3fleilt56ermd5Z dockerfile]# cat DockerFile FROM centos VOLUME ["/dataVolumeContainer1", "/dataVolumeContainer2"] CMD echo "finised,-----------success1" CMD /bin/bashDockerFile通过build命令可以创建新的容器
[root@iZwz9g1c3fleilt56ermd5Z dockerfile]# docker build -f ./DockerFile -t fenqing/centos02 . Sending build context to Docker daemon 2.048 kB Step 1/4 : FROM centos ---> 300e315adb2f Step 2/4 : VOLUME /dataVolumeContainer1 /dataVolumeContainer2 ---> Running in f254d54b257d ---> 492ee80ce787 Removing intermediate container f254d54b257d Step 3/4 : CMD echo "finised,-----------success1" ---> Running in 823adfcc500f ---> 66de2f0ba779 Removing intermediate container 823adfcc500f Step 4/4 : CMD /bin/bash ---> Running in 7aab1e5390c7 ---> 0fdd547f0ecb Removing intermediate container 7aab1e5390c7 Successfully built 0fdd547f0ecb [root@iZwz9g1c3fleilt56ermd5Z dockerfile]# docker images REPOSITORY TAG IMAGE ID CREATED SIZE fenqing/centos02 latest 0fdd547f0ecb 42 seconds ago 209 MB fenqing/tomcat02 1.2 fb29bf1e4ca8 9 hours ago 649 MB docker.io/tomcat latest 040bdb29ab37 2 weeks ago 649 MB docker.io/centos latest 300e315adb2f 7 weeks ago 209 MB docker.io/wordpress latest cfb931188dab 2 months ago 546 MB docker.io/redis latest 74d107221092 2 months ago 104 MB docker.io/mysql 5.7.32 1b12f2e9257b 3 months ago 448 MB docker.io/elasticsearch 7.9.3 1ab13f928dc8 3 months ago 742 MB docker.io/nacos/nacos-server latest a81222848024 4 months ago 921 MB docker.io/kibana 7.4.2 230d3ded1abc 15 months ago 1.1 GB docker.io/nginx 1.10 0346349a1a64 3 years ago 182 MB[root@iZwz9g1c3fleilt56ermd5Z dockerfile]# docker run -it fenqing/centos02 /bin/bash [root@466677b0f4fc /]# ls bin dataVolumeContainer1 dataVolumeContainer2 dev etc home lib lib64 lost+found media mnt opt proc root run sbin srv sys tmp usr var
数据卷容器
命名的容器挂在数据卷，其他容器通过挂在这个父容器，实现数据共享，挂在数据卷的容器，称之为数据卷容器
使用--volume-form 容器id，可以继承同镜像的容器的数据卷，即，父子容器之间共享同一份数据卷，只要还有至少一个容器在使用数据卷，数据卷则一直有效
# 数据卷容器（父容器）
[root@iZwz9g1c3fleilt56ermd5Z dockerfile]# docker run -it --name fcentos1 fenqing/centos02 /bin/bash
[root@57f322a82815 /]# cd dataVolumeContainer1
[root@57f322a82815 dataVolumeContainer1]# vi centos1.txt
# 子容器1
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker run -it --name fcentos2 --volumes-from fcentos1 fenqing/centos02
[root@1e224af2be20 /]# cd dataVolumeContainer1/
[root@1e224af2be20 dataVolumeContainer1]# cat centos1.txt
test centos1
# 子容器2
[root@iZwz9g1c3fleilt56ermd5Z ~]# docker run -it --name fcentos3 --volumes-from fcentos1 fenqing/centos02
[root@52bcf9601227 /]# cd dataVolumeContainer1/
[root@52bcf9601227 dataVolumeContainer1]# cat centos1.txt
test centos1
DockerFile
-
是什么
- dockerfile 是用来构建docker镜像的构建文件，是由一些列命令和参数构成的脚本
- 构建三步骤
- 手动编写一个dockerfile文件，当然，必须要符合file的规范
- 有这个文件后，直接docker build命令执行，获得一个自定义镜像
- 运行这个容器
-
docker 过程解析
-
Dockerfile 内容基础知识
- 每条保留字指令都必须为大写字母且后面要跟随至少一个参数
- 指令按照从上到下，顺序执行
- #标识注释
- 每条指令都会创建一个新的镜像层，并对镜像进行提交
-
dockerfile 的大致流程
- docker从基础镜像运行一个容器
- 执行一条指令并对容器做出修改
- 执行类似docker commit的操作提交一个新的镜像层
- docker 在基于刚提交的镜像运行一个新容器
- 执行dockerfile中的下一条指令直到所有指令都执行完成
-
小总结 从应用软件的角度来看，Dockerfile，docker镜像与docker容器分别代表软件的三个不同阶段
- Dockerfile是软件的原材料
- docker镜像是软件的交付品
- docker容器则可以认为是软件的运行态
dockerfile面向开发，docker镜像成为交付标准，docker容器则设计部署与运营，三者缺一不可，合力充当docker体系的基石
-
-
DockerFile体系结构
-
FROM 基础镜像，当前新镜像是基于哪个镜像
-
MAINTAINER 镜像维护的姓名和邮箱地址
-
RUN 容器构建时需要运行的命令
-
EXPOSE 当前容器对外暴露出的端口
-
WORKDIR 指定在创建容器后，终端默认登陆的进来工作目录，一个落脚点
-
ENV 用来构建镜像过程中设置环境变量
-
ADD 将主机目录下的文件拷贝进镜像，且ADD命令会自动处理URL和解压tar压缩包
-
COPY 类似ADD，拷贝文件和目录到镜像中，将从构建上下文目录中<源路径>的文件或 者目录复制到新的一层镜像内<目标路径>位置， COPY src desc 或者 COPY ["src", "desc"]
-
VOLUME 容器数据卷，用于数据保存和持久化工作
-
CMD 指定一个容器时，要运行的命令， CMD <命令> 或者 CMD ["可执行文件", "参数1", "参数2",...]
- Dockerfile中可以有多个CMD命令，但只有最后一个生效，CMD会被docker run 之后的参数替换
-
ENTRYPOINT 指定一个容器启动时要运行的命令
- ENTRYPOINT 的目的和CMD一样，都是在指定容器启动程序及参数
-
ONBUILD 当构建一个被继承的Dockerfile时运行命令，父镜像在被子继承后父镜像的onbuild被触发
-
总结
| build | both | run |
|---|---|---|
| FROM | WORKDIR | CMD |
| MAINTAINER | USER | ENV |
| COPY | EXPOSE | |
| ADD | VOLUME | |
| RUN | ENTRYPOINT | |
| ONBUILD | ||
| .dockerignore |
案例
-
Base镜像（scratch）
- Docker hub 中99%的镜像都是通过在base镜像中安装和配置需要的软件构建出来的
-
自定义镜像 mycentos
-
编写
- hub默认centos镜像什么情况
FROM scratch ADD centos-7-x86_64-docker.tar.xz / LABEL \\ org.label-schema.schema-version="1.0" \\ org.label-schema.name="CentOS Base Image" \\ org.label-schema.vendor="CentOS" \\ org.label-schema.license="GPLv2" \\ org.label-schema.build-date="20201113" \\ org.opencontainers.image.title="CentOS Base Image" \\ org.opencontainers.image.vendor="CentOS" \\ org.opencontainers.image.licenses="GPL-2.0-only" \\ org.opencontainers.image.created="2020-11-13 00:00:00+00:00" CMD ["/bin/bash"] -
官方centos不支持vim与ifconfig，并且登录到终端默认在/路径，现在自定义镜像将其扩展
dockerfile:
FROM centos MAINTAINER fenqing<1286976336@qq.com> ENV MYPATH /usr/local WORKDIR \$MYPATH RUN yum -y install vim RUN yum -y install net-tools EXPOSE 80 CMD echo \$MYPATH CMD echo "success----------ok" CMD /bin/bashbuild:
[root@iZwz9g1c3fleilt56ermd5Z dockerfile]# docker build -f ./Dockerfile2 -t fenqing/centos03:1.0 . Sending build context to Docker daemon 3.072 kB Step 1/10 : FROM centos ---> 300e315adb2f Step 2/10 : MAINTAINER fenqing<1286976336@qq.com> ---> Running in 0cae220909a2 ---> ded525754bcd Removing intermediate container 0cae220909a2 Step 3/10 : ENV MYPATH /usr/local ---> Running in b362f6a29ee9 ---> 3b19fce3e503 Removing intermediate container b362f6a29ee9 Step 4/10 : WORKDIR \$MYPATH ---> d2cafdd90697 Removing intermediate container deac86def4f9 Step 5/10 : RUN yum -y install vim ---> Running in e0d0a4ea5bfc CentOS Linux 8 - AppStream 665 kB/s | 6.3 MB 00:09 CentOS Linux 8 - BaseOS 282 kB/s | 2.3 MB 00:08 CentOS Linux 8 - Extras 4.7 kB/s | 8.6 kB 00:01 Dependencies resolved. ================================================================================ Package Arch Version Repository Size ================================================================================ Installing: vim-enhanced x86_64 2:8.0.1763-15.el8 appstream 1.4 M Installing dependencies: gpm-libs x86_64 1.20.7-15.el8 appstream 39 k vim-common x86_64 2:8.0.1763-15.el8 appstream 6.3 M vim-filesystem noarch 2:8.0.1763-15.el8 appstream 48 k which x86_64 2.21-12.el8 baseos 49 k Transaction Summary ================================================================================ Install 5 Packages Total download size: 7.8 M Installed size: 30 M Downloading Packages: (1/5): gpm-libs-1.20.7-15.el8.x86_64.rpm 62 kB/s | 39 kB 00:00 (2/5): vim-filesystem-8.0.1763-15.el8.noarch.rp 232 kB/s | 48 kB 00:00 (3/5): which-2.21-12.el8.x86_64.rpm 74 kB/s | 49 kB 00:00 (4/5): vim-enhanced-8.0.1763-15.el8.x86_64.rpm 78 kB/s | 1.4 MB 00:17 (5/5): vim-common-8.0.1763-15.el8.x86_64.rpm 266 kB/s | 6.3 MB 00:24 -------------------------------------------------------------------------------- Total 317 kB/s | 7.8 MB 00:25 warning: /var/cache/dnf/appstream-02e86d1c976ab532/packages/gpm-libs-1.20.7-15.el8.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID 8483c65d: NOKEY CentOS Linux 8 - AppStream 1.6 MB/s | 1.6 kB 00:00 Importing GPG key 0x8483C65D: Userid : "CentOS (CentOS Official Signing Key) <security@centos.org>" Fingerprint: 99DB 70FA E1D7 CE22 7FB6 4882 05B5 55B3 8483 C65D From : /etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial Key imported successfully Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Installing : which-2.21-12.el8.x86_64 1/5 Installing : vim-filesystem-2:8.0.1763-15.el8.noarch 2/5 Installing : vim-common-2:8.0.1763-15.el8.x86_64 3/5 Installing : gpm-libs-1.20.7-15.el8.x86_64 4/5 Running scriptlet: gpm-libs-1.20.7-15.el8.x86_64 4/5 Installing : vim-enhanced-2:8.0.1763-15.el8.x86_64 5/5 Running scriptlet: vim-enhanced-2:8.0.1763-15.el8.x86_64 5/5 Running scriptlet: vim-common-2:8.0.1763-15.el8.x86_64 5/5 Verifying : gpm-libs-1.20.7-15.el8.x86_64 1/5 Verifying : vim-common-2:8.0.1763-15.el8.x86_64 2/5 Verifying : vim-enhanced-2:8.0.1763-15.el8.x86_64 3/5 Verifying : vim-filesystem-2:8.0.1763-15.el8.noarch 4/5 Verifying : which-2.21-12.el8.x86_64 5/5 Installed: gpm-libs-1.20.7-15.el8.x86_64 vim-common-2:8.0.1763-15.el8.x86_64 vim-enhanced-2:8.0.1763-15.el8.x86_64 vim-filesystem-2:8.0.1763-15.el8.noarch which-2.21-12.el8.x86_64 Complete! ---> dbf17b793d8b Removing intermediate container e0d0a4ea5bfc Step 6/10 : RUN yum -y install net-tools ---> Running in c96260bf2978 Last metadata expiration check: 0:00:33 ago on Mon Feb 1 09:43:22 2021. Dependencies resolved. ================================================================================ Package Architecture Version Repository Size ================================================================================ Installing: net-tools x86_64 2.0-0.52.20160912git.el8 baseos 322 k Transaction Summary ================================================================================ Install 1 Package Total download size: 322 k Installed size: 942 k Downloading Packages: net-tools-2.0-0.52.20160912git.el8.x86_64.rpm 96 kB/s | 322 kB 00:03 -------------------------------------------------------------------------------- Total 85 kB/s | 322 kB 00:03 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Installing : net-tools-2.0-0.52.20160912git.el8.x86_64 1/1 Running scriptlet: net-tools-2.0-0.52.20160912git.el8.x86_64 1/1 Verifying : net-tools-2.0-0.52.20160912git.el8.x86_64 1/1 Installed: net-tools-2.0-0.52.20160912git.el8.x86_64 Complete! ---> 6e22d2b69cdb Removing intermediate container c96260bf2978 Step 7/10 : EXPOSE 80 ---> Running in c54a10544eaf ---> 42063eff3009 Removing intermediate container c54a10544eaf Step 8/10 : CMD echo \$MYPATH ---> Running in 0abd9d8cc74e ---> c2ac718dd9e7 Removing intermediate container 0abd9d8cc74e Step 9/10 : CMD echo "success----------ok" ---> Running in 5c62bebe3f8d ---> 24050d240b42 Removing intermediate container 5c62bebe3f8d Step 10/10 : CMD /bin/bash ---> Running in 47974823d8c5 ---> dcfd11f63ab1 Removing intermediate container 47974823d8c5 Successfully built dcfd11f63ab1- 运行 docker run -it 新镜像名称:tag
- 列出镜像的变更历史
- docker history 镜像名
[root@iZwz9g1c3fleilt56ermd5Z dockerfile]# docker history fenqing/centos03:1.0 IMAGE CREATED CREATED BY SIZE COMMENT dcfd11f63ab1 8 minutes ago /bin/sh -c #(nop) CMD ["/bin/sh" "-c" "/b... 0 B 24050d240b42 8 minutes ago /bin/sh -c #(nop) CMD ["/bin/sh" "-c" "ec... 0 B c2ac718dd9e7 8 minutes ago /bin/sh -c #(nop) CMD ["/bin/sh" "-c" "ec... 0 B 42063eff3009 8 minutes ago /bin/sh -c #(nop) EXPOSE 80/tcp 0 B 6e22d2b69cdb 8 minutes ago /bin/sh -c yum -y install net-tools 23.4 MB dbf17b793d8b 8 minutes ago /bin/sh -c yum -y install vim 58.1 MB d2cafdd90697 9 minutes ago /bin/sh -c #(nop) WORKDIR /usr/local 0 B 3b19fce3e503 9 minutes ago /bin/sh -c #(nop) ENV MYPATH=/usr/local 0 B ded525754bcd 9 minutes ago /bin/sh -c #(nop) MAINTAINER fenqing<1286... 0 B 300e315adb2f 7 weeks ago /bin/sh -c #(nop) CMD ["/bin/bash"] 0 B <missing> 7 weeks ago /bin/sh -c #(nop) LABEL org.label-schema.... 0 B <missing> 7 weeks ago /bin/sh -c #(nop) ADD file:bd7a2aed6ede423... 209 MB
- docker history 镜像名
-
CMD/ENTRYPOINT 案例
- CMD 可以有多个，但只有最后一个生效
- 小案例，安装curl，利用cmd 执行curl访问ip.com网址
# Dockerfile FROM centos:7.9.2009 RUN yum install -y curl CMD ["curl", "-s", "http://ip.cn"]如果需要加参数，例如在curl前加 -i参数
- ENTRYPOINT
- 使用ENTRYPOINT则可以实现，
[root@localhost dockerfile]# cat Dockerfile2 FROM centos:7.9.2009 RUN yum install -y curl ENTRYPOINT ["curl", "-s", "http://ip.cn"][root@localhost dockerfile]# docker build -f ./Dockerfile2 -t myip2 . Sending build context to Docker daemon 3.072kB Step 1/3 : FROM centos:7.9.2009 ---> 8652b9f0cb4c Step 2/3 : RUN yum install -y curl ---> Using cache ---> 2a29b7609867 Step 3/3 : ENTRYPOINT ["curl", "-s", "http://ip.cn"] ---> Running in b8136ad53fc2 Removing intermediate container b8136ad53fc2 ---> 7b1d383c574e Successfully built 7b1d383c574e Successfully tagged myip2:latest在run镜像后，可以额外传参数，他不会覆盖原有的命令，而是以追加参数的形式执行
[root@localhost dockerfile]# docker run myip2 -i HTTP/1.1 301 Moved Permanently Date: Tue, 02 Feb 2021 17:30:52 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=3600 Expires: Tue, 02 Feb 2021 18:30:52 GMT Location: https://ip.cn/ cf-request-id: 08056524480000e7fd4a2f4000000001 Report-To: {"max_age":604800,"endpoints":[{"url":"https:\\/\\/a.nel.cloudflare.com\\/report?s=eBvqoA03H2GNWH4yF75BDwO%2BsMTrum8JLYyb2te9CIGfQEl38O6eK3AL8YZYZV00uqKp4iISWnEBnbTkjqHxk6YXkOZDpA%3D%3D"}],"group":"cf-nel"} NEL: {"max_age":604800,"report_to":"cf-nel"} Server: cloudflare CF-RAY: 61b5a4807fede7fd-LAX alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
- 使用ENTRYPOINT则可以实现，
ONBUILD 案例
ONBUILD 如果自己被当做基础镜像的话，则会执行 Dockerfile 基础镜像
[root@localhost dockerfile]# cat Dockerfile2
FROM centos:7.9.2009
RUN yum install -y curl
ENTRYPOINT ["curl", "-s", "http://ip.cn"]
ONBUILD RUN echo "father onbuild-------886"
build
[root@localhost dockerfile]# docker build -f ./Dockerfile2 -t myip3 .
Sending build context to Docker daemon 3.072kB
Step 1/4 : FROM centos:7.9.2009
---> 8652b9f0cb4c
Step 2/4 : RUN yum install -y curl
---> Using cache
---> 2a29b7609867
Step 3/4 : ENTRYPOINT ["curl", "-s", "http://ip.cn"]
---> Using cache
---> 7b1d383c574e
Step 4/4 : ONBUILD RUN echo "father onbuild-------886"
---> Running in 31370a385936
Removing intermediate container 31370a385936
---> 4d63fd8adaf0
Successfully built 4d63fd8adaf0
Successfully tagged myip3:latest
继承镜像Dockerfile
[root@localhost dockerfile]# cat Dockerfile3
FROM myip3
RUN yum install -y curl
ENTRYPOINT ["curl", "-s", "http://ip.cn"]
build
[root@localhost dockerfile]# docker build -f ./Dockerfile3 -t myip4 .
Sending build context to Docker daemon 4.096kB
Step 1/3 : FROM myip3
# Executing 1 build trigger
---> Running in b2b291608afa
father onbuild-------886
Removing intermediate container b2b291608afa
---> 0148a4a2e330
Step 2/3 : RUN yum install -y curl
---> Running in 04d9362298f8
Loaded plugins: fastestmirror, ovl
Loading mirror speeds from cached hostfile
* base: mirrors.neusoft.edu.cn
* extras: mirrors.neusoft.edu.cn
* updates: mirror.bit.edu.cn
Package curl-7.29.0-59.el7_9.1.x86_64 already installed and latest version
Nothing to do
Removing intermediate container 04d9362298f8
---> 338da1dbe843
Step 3/3 : ENTRYPOINT ["curl", "-s", "http://ip.cn"]
---> Running in e8e7a3c15eef
Removing intermediate container e8e7a3c15eef
---> dc43b252dac6
Successfully built dc43b252dac6
Successfully tagged myip4:latest
确实执行了父镜像的 (打印出"father onbuild-------886"）
自定义tomcat
准备好jdk和tomcat，设置相关环境变量，以及最后运行，以下是Dockerfile
[root@localhost tomcat]# cat Dockerfile
[root@localhost tomcat]# cat Dockerfile
FROM centos:7.9.2009
MAINTAINER fenqing<1286976336@qq.com>
COPY c.txt /usr/local/cincontainer.txt
ADD jdk-8u281-linux-x64.tar.gz /usr/local/
ADD apache-tomcat-9.0.41.tar.gz /usr/local/
RUN yum -y install vim
ENV MYPATH /usr/local
WORKDIR \$MYPATH
ENV JAVA_HOME /usr/local/jdk1.8.0_281
ENV CLASSPATH \$JAVA_HOME/lib/dt.jar:\$JAVA_HOME/lib/tools.jar
ENV CATALINA_HOME /usr/local/apache-tomcat-9.0.41
ENV CATALINA_BASE \$CATALINA_HOME
ENV PATH \$PATH:\$JAVA_HOME/bin:\$CATALINA_HOME/lib:\$CATALINA_HOME/bin
EXPOSE 8080
CMD /usr/local/apache-tomcat-9.0.41/bin/startup.sh && tail -f /usr/local/apache-tomcat-9.0.41/logs/catalina.out
权威｜前沿｜技术｜干货｜国内首个API全生命周期开发者社区
更多推荐
4
0- 0
已为社区贡献1条内容
所有评论(0)