Docker 基础

登录注册

Docker 基础

来源:网络
更新日期:2020-07-06

摘要：云计算 Docker基础一(基本配置) 1、配置docker0 ip地址；root@Userver01:~# cat /etc/docker/daemon.json {"bip": "172.16.10.1/24"}root

云计算 Docker基础一(基本配置)

1、配置docker0 ip地址；

root@Userver01:~# cat /etc/docker/daemon.json

{

"bip": "172.16.10.1/24"

}

root@Userver01:~# systemctl restart docker.service

root@Userver01:~# ip add l

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

inet 127.0.0.1/8 scope host lo

valid_lft forever preferred_lft forever

inet6 ::1/128 scope host

valid_lft forever preferred_lft forever

2: ens32: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000

link/ether 00:0c:29:cd:a0:83 brd ff:ff:ff:ff:ff:ff

inet 172.16.251.131/24 brd 172.16.251.255 scope global ens32

valid_lft forever preferred_lft forever

inet6 fe80::20c:29ff:fecd:a083/64 scope link

valid_lft forever preferred_lft forever

3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default

link/ether 02:42:80:e8:b3:52 brd ff:ff:ff:ff:ff:ff

inet 172.16.10.1/24 brd 172.16.10.255 scope global docker0

valid_lft forever preferred_lft forever

2、配置docker加速器；

root@Userver01:~# cat /etc/docker/daemon.json

{

"bip": "172.16.10.1/24",

"registry-mirrors": ["http://5dd4061a.m.daocloud.io"]

}

root@Userver01:~# systemctl restart docker.service

root@Userver01:~# docker info

Containers: 0

Running: 0

Paused: 0

Stopped: 0

Images: 0

Server Version: 18.09.0

Storage Driver: overlay2

Backing Filesystem: extfs

Supports d_type: true

Native Overlay Diff: true

Logging Driver: json-file

Cgroup Driver: cgroupfs

Plugins:

Volume: local

Network: bridge host macvlan null overlay

Log: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslog

Swarm: inactive

Runtimes: runc

Default Runtime: runc

Init Binary: docker-init

containerd version: c4446665cb9c30056f4998ed953e6d4ff22c7c39

runc version: 4fc53a81fb7c994640722ac585fa9ca548971871

init version: fec3683

Security Options:

apparmor

seccomp

Profile: default

Kernel Version: 4.4.0-131-generic

Operating System: Ubuntu 16.04.5 LTS

OSType: linux

Architecture: x86_64

CPUs: 8

Total Memory: 15.65GiB

Name: Userver01

ID: NB22:HKEI:YEOY:A2F4:TXZP:GEQO:OUME:CT4M:ENYA:VWIM:XXHG:KVK5

Docker Root Dir: /var/lib/docker

Debug Mode (client): false

Debug Mode (server): false

Registry: https://index.docker.io/v1/

Labels:

Experimental: false

Insecure Registries:

127.0.0.0/8

Registry Mirrors:

http://5dd4061a.m.daocloud.io/

Live Restore Enabled: false

Product License: Community Engine

WARNING: No swap limit support

3、配置docker服务日志格式；

root@Userver01:~# cat /etc/docker/daemon.json

{

"bip": "172.16.10.1/24",

"registry-mirrors": ["http://5dd4061a.m.daocloud.io"],

"log-driver": "journald"

}

root@Userver01:~# systemctl restart docker.service

root@Userver01:~# journalctl -xe _SYSTEMD_UNIT=docker.service

Nov 26 16:40:20 Userver01 dockerd[1979]: time="2018-11-26T16:40:20.462003344+08:00" level=info msg="Loading containers: start."

Nov 26 16:40:20 Userver01 dockerd[1979]: time="2018-11-26T16:40:20.630612895+08:00" level=info msg="Loading containers: done."

Nov 26 16:40:20 Userver01 dockerd[1979]: time="2018-11-26T16:40:20.678251298+08:00" level=info msg="Docker daemon" commit=4d60db4 graphdriver(s)=o

Nov 26 16:40:20 Userver01 dockerd[1979]: time="2018-11-26T16:40:20.678752739+08:00" level=info msg="Daemon has completed initialization"

4、配置docker dns；

root@Userver01:~# cat /etc/docker/daemon.json

{

"bip": "172.16.10.1/24",

"registry-mirrors": ["http://5dd4061a.m.daocloud.io"],

"log-driver": "journald",

"dns": ["223.5.5.5","223.6.6.6"]

}

root@Userver01:~# systemctl restart docker.service

5、运行容器；

root@Userver01:~# docker run -d nginx:1.15

Unable to find image 'nginx:1.15' locally

1.15: Pulling from library/nginx

a5a6f2f73cd8: Pull complete

67da5fbcb7a0: Pull complete

e82455fa5628: Pull complete

Digest: sha256:372965e4f3a1d60ec5be171f839dfe9f8ea076700144f042bae87700a20c9ded

Status: Downloaded newer image for nginx:1.15

246b049b64e32ef924e30a0d614537061cf12a8d1a0408f469dbcf1030c0d554

root@Userver01:~# docker ps -a

CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES

246b049b64e3 nginx:1.15 "nginx -g 'daemon of…" 22 seconds ago Up 21 seconds 80/tcp xenodochial_swirles

6、登录容器系统；

root@Userver01:~# docker exec -it 246 /bin/bash

root@246b049b64e3:/# cat /etc/resolv.conf

search localdomain

nameserver 223.5.5.5

nameserver 223.6.6.6

Docker基础二（容器管理）

1、运行容器

# 启动一个httpd容器，使其在后台运行并将其80端口映射到宿主机80端口

root@Userver01:~# docker run -d -p 80:80 httpd

Unable to find image 'httpd:latest' locally

latest: Pulling from library/httpd

a5a6f2f73cd8: Already exists

ac13924397e3: Pull complete

91b81769f14a: Pull complete

fec7170426de: Pull complete

992c7790d5f3: Pull complete

Digest: sha256:63dba1dad8fe8a920226a631f8189d736b4a5129c2d2edc046a46f36ffc0091c

Status: Downloaded newer image for httpd:latest

b911f2812e516b140f69f412923264670074ec83e4b7aef186041f0e40d57cd4

root@Userver01:~# docker ps -a

CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES

b911f2812e51 httpd "httpd-foreground" 42 seconds ago Up 41 seconds 0.0.0.0:80->80/tcp modest_vaughan

# 启动一个ubuntu 16.04的容器，打印完"hello world"即退出

root@Userver01:~# docker run ubuntu:16.04 /bin/echo "hello world."

Unable to find image 'ubuntu:16.04' locally

16.04: Pulling from library/ubuntu

7b8b6451c85f: Pull complete

ab4d1096d9ba: Pull complete

e6797d1788ac: Pull complete

e25c5c290bde: Pull complete

Digest: sha256:e547ecaba7d078800c358082088e6cc710c3affd1b975601792ec701c80cdd39

Status: Downloaded newer image for ubuntu:16.04

hello world.

root@Userver01:~# docker ps -a

CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES

4683e7b221b7 ubuntu:16.04 "/bin/echo 'hello wo…" 28 seconds ago Exited (0) 27 seconds ago pedantic_swirles

b911f2812e51 httpd "httpd-foreground" 3 minutes ago Up 3 minutes 0.0.0.0:80->80/tcp modest_vaughan

2、容器的启动过程说明：

•检查本地是否存在指定的镜像，如果没有就从指定的仓库下载

•利用镜像启动一个容器

•分配一个文件系统，并在只读的镜像层外面挂载一层可读写层

•从宿主机配置的网桥接口中桥接一个虚拟接口到容器中去

•从地址池配置一个IP给容器

•执行用户指定的程序

•执行完毕后停止容器

3、 docker run常用选项说明

-t：配置一个伪终端并绑定到容器的标准输入上

-i：让容器的标准输入保持打开

-d：将容器放入后台运行

-c：指定分配该容器的cpu分片

-m：指定分配给该容器的内存大小，单位为B,K,M,G

4、查看当前节点上的容器状态

docker ps #查看当前正在运行的容器

选项：

-a：查看所有容器，包括停止的

-q：只显示容器ID

-l：显示最后一次创建的容器

root@Userver01:~# docker ps -a

CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES

a5a204b817cc ubuntu:16.04 "/bin/bash" 9 minutes ago Exited (0) 9 minutes ago gifted_tereshkova

4683e7b221b7 ubuntu:16.04 "/bin/echo 'hello wo…" 18 minutes ago Exited (0) 18 minutes ago pedantic_swirles

b911f2812e51 httpd "httpd-foreground" 21 minutes ago Up 21 minutes 0.0.0.0:80->80/tcp modest_vaughan

root@Userver01:~# docker ps -q

b911f2812e51

root@Userver01:~# docker ps -qa

a5a204b817cc

4683e7b221b7

b911f2812e51

root@Userver01:~# docker ps -ql

a5a204b817cc

5、进入容器

docker exec -it <容器id/容器name> /bin/bash

root@Userver01:~# docker ps -qa

a5a204b817cc

4683e7b221b7

b911f2812e51

root@Userver01:~# docker exec -it b9 /bin/bash

root@b911f2812e51:/usr/local/apache2#

6、容器按用途大致可分为两类：

•服务类容器，如webserver、database等

•工具类容器，如curl容器、Redis-cli容器等

7、容器的启停操作

# 容器的创建：

docker create

# 容器的启动：

docker start <容器id>

# 容器的停止：

docker stop <容器id>

docker kill <容器id>

# 容器的重启：

docker restart <容器id>

# 容器的删除：

docker rm <容器id>

选项：

-f：强行终止并删除一个运行中的容器

-v：删除容器挂载的数据卷

# 暂停容器：

docker pause <容器id>

# 从暂停中恢复：

docker unpause <容器id>

8、容器生命周期管理

9、容器资源限制

内存限制

-m：允许分配的内存大小

--memory-swap：允许分配的内存和swap的总大小

--memory-swapiness：控制内存与swap置换的比例

启动一个ubuntu容器，限制内存为200M, 内存与swap的总和为300M:

docker run -it -m 200M --memory-swap 300M ubuntu:16.04

CPU限制

docker可以通过-c或--cpu-shares设置容器使用的cpu的权重。如果不指定，默认为1024

docker run --name container_A -c 1024 ubuntu

docker run --name container_B -c 512 ubuntu

container_A的cpu share 1024，是 container_B 的两倍。当两个容器都需要 CPU 资源时，container_A可以得到的 CPU 是container_B的两倍。

io 限制

•--device-read-bps，限制读某个设备的 bps。

•--device-write-bps，限制写某个设备的 bps。

•--device-read-iops，限制读某个设备的 iops。

•--device-write-iops，限制写某个设备的 iops。

# 创建一个容器，限制写的bps为30M

docker run -it --device-write-bps /dev/sda:30MB ubuntu

Docker基础二（镜像管理）

1、镜像命名

一个完整的镜像命名：

[Docker Registry地址/][项目目录/]<名称>:[标签]

示例：

mysql:5.6

ubuntu

hub.docker.com/library/centos:6.6

2、获取镜像

root@Userver01:~# docker pull ubuntu:16.04

16.04: Pulling from library/ubuntu

7b8b6451c85f: Already exists

ab4d1096d9ba: Already exists

e6797d1788ac: Already exists

e25c5c290bde: Already exists

Digest: sha256:e547ecaba7d078800c358082088e6cc710c3affd1b975601792ec701c80cdd39

Status: Downloaded newer image for ubuntu:16.04

3、查看镜像信息

root@Userver01:~# docker image ls

REPOSITORY TAG IMAGE ID CREATED SIZE

ubuntu 16.04 a51debf7e1eb 7 days ago 116MB

nginx 1.15 e81eb098537d 10 days ago 109MB

httpd latest 2a51bb06dc8b 11 days ago 132MB

centos 6.6 4e1ad2ce7f78 6 weeks ago 203MB

root@Userver01:~# docker inspect a51

[

{

"Id": "sha256:a51debf7e1eb2018400cef1e4b01f2e9f591f6c739de7b5d6c142f954f3715a7",

"RepoTags": [

"ubuntu:16.04"

"RepoDigests": [

"ubuntu@sha256:e547ecaba7d078800c358082088e6cc710c3affd1b975601792ec701c80cdd39"

"Parent": "",

"Comment": "",

"Created": "2018-11-19T21:23:53.455319926Z",

"Container": "f4879d05f303ba132b6cc82988306e44819b9d0872dc891d864374d3a9b51b08",

"ContainerConfig": {

"Hostname": "f4879d05f303",

"Domainname": "",

"User": "",

"AttachStdin": false,

"AttachStdout": false,

"AttachStderr": false,

"Tty": false,

"OpenStdin": false,

"StdinOnce": false,

"Env": [

"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"

"Cmd": [

"/bin/sh",

"-c",

"#(nop) ",

"CMD [\\"/bin/bash\\"]"

"ArgsEscaped": true,

"Image": "sha256:d6ab6854552cda39995558786e1690e20092af93f8145294473ac62fd76c9b1b",

"Volumes": null,

"WorkingDir": "",

"Entrypoint": null,

"OnBuild": null,

"Labels": {}

"DockerVersion": "17.06.2-ce",

"Author": "",

"Config": {

"Hostname": "",

"Domainname": "",

"User": "",

"AttachStdin": false,

"AttachStdout": false,

"AttachStderr": false,

"Tty": false,

"OpenStdin": false,

"StdinOnce": false,

"Env": [

"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"

"Cmd": [

"/bin/bash"

"ArgsEscaped": true,

"Image": "sha256:d6ab6854552cda39995558786e1690e20092af93f8145294473ac62fd76c9b1b",

"Volumes": null,

"WorkingDir": "",

"Entrypoint": null,

"OnBuild": null,

"Labels": null

"Architecture": "amd64",

"Os": "linux",

"Size": 116379573,

"VirtualSize": 116379573,

"GraphDriver": {

"Data": {

"LowerDir": "/var/lib/docker/overlay2/d24cfbca95c7fb4a2653aed1fef5e854164d5e452ec1ca1f08d256a841ec9cbe/diff:/var/lib/docker/overlay2/1bc9dd6a582662525ae316dca49703acbcc8087c0549354c622cd0c4eb7095de/diff:/var/lib/docker/overlay2/402ffcd593a76628eb8f3b6dd843b195396729227e55c51c896089ca668770ef/diff",

"MergedDir": "/var/lib/docker/overlay2/6f5f819b34a36a3cd93e84d2a12a86a3e61f5663a7401ae73cd308211cc3329f/merged",

"UpperDir": "/var/lib/docker/overlay2/6f5f819b34a36a3cd93e84d2a12a86a3e61f5663a7401ae73cd308211cc3329f/diff",

"WorkDir": "/var/lib/docker/overlay2/6f5f819b34a36a3cd93e84d2a12a86a3e61f5663a7401ae73cd308211cc3329f/work"

"Name": "overlay2"

"RootFS": {

"Type": "layers",

"Layers": [

"sha256:41c002c8a6fd36397892dc6dc36813aaa1be3298be4de93e4fe1f40b9c358d99",

"sha256:647265b9d8bc572a858ab25a300c07c0567c9124390fd91935430bf947ee5c2a",

"sha256:819a824caf709f224c414a56a2fa0240ea15797ee180e73abe4ad63d3806cae5",

"sha256:3db5746c911ad8c3398a6b72aa30580b25b6edb130a148beed4d405d9c345a29"

]

"Metadata": {

"LastTagTime": "0001-01-01T00:00:00Z"

}

]

4、为镜像创建tag

root@Userver01:~# docker tag ubuntu:16.04 dl.dockerpool.com/library/ubuntu:16.04v1

root@Userver01:~# docker image ls

REPOSITORY TAG IMAGE ID CREATED SIZE

dl.dockerpool.com/library/ubuntu 16.04v1 a51debf7e1eb 7 days ago 116MB

ubuntu 16.04 a51debf7e1eb 7 days ago 116MB

nginx 1.15 e81eb098537d 10 days ago 109MB

httpd latest 2a51bb06dc8b 11 days ago 132MB

centos 6.6 4e1ad2ce7f78 6 weeks ago 203MB

5、搜索镜像

root@Userver01:~# docker search Mysql

NAME DESCRIPTION STARS OFFICIAL AUTOMATED

MYSQL MySQL is a widely used, open-source relation… 7407 [OK]

mariadb MariaDB is a community-developed fork of MyS… 2376 [OK]

mysql/mysql-server Optimized MySQL Server Docker images. Create… 552 [OK]

zabbix/zabbix-server-mysql Zabbix Server with MySQL database support 145 [OK]

hypriot/rpi-mysql RPi-compatible Docker Image with Mysql 102

zabbix/zabbix-web-nginx-mysql Zabbix frontend based on Nginx web-server wi… 77 [OK]

centurylink/mysql Image containing mysql. Optimized to be link… 59 [OK]

1and1internet/ubuntu-16-nginx-php-phpmyadmin-mysql-5 ubuntu-16-nginx-php-phpmyadmin-mysql-5 47 [OK]

6、删除镜像（注：如果镜像有容器生成，需要先删除容器）

#如果一个镜像有多个tag，只会删除指定的tag，镜像本身不会删除，如果docker rmi后指定镜像ID，则所有tag都会被删除

root@Userver01:~# docker rmi dl.dockerpool.com/library/ubuntu:16.04v1

Untagged: dl.dockerpool.com/library/ubuntu:16.04v1

root@Userver01:~# docker image ls

REPOSITORY TAG IMAGE ID CREATED SIZE

ubuntu 16.04 a51debf7e1eb 7 days ago 116MB

nginx 1.15 e81eb098537d 10 days ago 109MB

httpd latest 2a51bb06dc8b 11 days ago 132MB

centos 6.6 4e1ad2ce7f78 6 weeks ago 203MB

root@Userver01:~# docker rmi ubuntu:16.04

Error response from daemon: conflict: unable to remove repository reference "ubuntu:16.04" (must force) - container 4683e7b221b7 is using its referenced image a51debf7e1eb

root@Userver01:~# docker rmi ubuntu:16.04 -f

Untagged: ubuntu:16.04

Untagged: ubuntu@sha256:e547ecaba7d078800c358082088e6cc710c3affd1b975601792ec701c80cdd39

Deleted: sha256:a51debf7e1eb2018400cef1e4b01f2e9f591f6c739de7b5d6c142f954f3715a7

root@Userver01:~# docker ps -a

CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES

a5a204b817cc a51debf7e1eb "/bin/bash" About an hour ago Exited (0) About an hour ago gifted_tereshkova

4683e7b221b7 a51debf7e1eb "/bin/echo 'hello wo…" About an hour ago Exited (0) About an hour ago pedantic_swirles

b911f2812e51 httpd "httpd-foreground" About an hour ago Up About an hour 0.0.0.0:80->80/tcp modest_vaughan

root@Userver01:~# docker image ls

REPOSITORY TAG IMAGE ID CREATED SIZE

nginx 1.15 e81eb098537d 10 days ago 109MB

httpd latest 2a51bb06dc8b 11 days ago 132MB

centos 6.6 4e1ad2ce7f78 6 weeks ago 203MB

# 删除无标签镜像（即为none）

root@Userver01:~# docker rmi $(docker images -q --filter "dangling=true")

7、导出和载入镜像

root@Userver01:~# docker save -o ubuntu_16.04.tar ubuntu:16.04

root@Userver01:~# docker rmi ubuntu:16.04 -f

Untagged: ubuntu:16.04

Deleted: sha256:a51debf7e1eb2018400cef1e4b01f2e9f591f6c739de7b5d6c142f954f3715a7

root@Userver01:~# docker load --input ubuntu_16.04.tar

Loaded image: ubuntu:16.04

8、通过docker commit提交一个新镜像

docker commit -m "change httpd.conf file" -a "john" b911f2812e51 test #使用b911f2812e51容器生成一个名为test的镜像

-a：指定作者

-m：相关说明信息

-p：提交时暂停容器运行