docker基本操作-白红宇

docker基本操作

阅读量：5063 次

发布时间：2019-06-12

本文共 13970 字，大约阅读时间需要 46 分钟。

阿里云docker镜像地址

https://cr.console.aliyun.comvim /usr/lib/systemd/system/docker.service ExecStart=/usr/bin/dockerd-current --registry-mirror=https://bqr1dr1n.mirror.aliyuncs.comsystemctl daemon-reloadsystemctl start docker

docker命令

搜索、下载、导入、导出、删除镜像。下载镜像：docker pull alpine搜索镜像：docker search nginx[root@linux-host1 tmp]# docker pull nginxUsing default tag: latestTrying to pull repository docker.io/library/nginx ... latest: Pulling from docker.io/library/nginxe7bb522d92ff: Pull complete 6edc05228666: Pull complete cd866a17e81f: Pull complete Digest: sha256:285b49d42c703fdf257d1e2422765c4ba9d3e37768d6ea83d7fe2043dad6e63d必须是centos7，必须是3.8以后的内核才支持查看镜像：docker images REPOSITORY                          TAG                 IMAGE ID            CREATED             SIZEdocker.io/alpine                    latest              e21c333399e0        5 weeks ago         4.139 MBdocker.io/mobz/elasticsearch-head   5                   b19a5c98e43b        12 months ago       823.9 MBlatest使用docker一般使用最新版。导出镜像：docker save nginx > /tmp/nginx.tar.gz tar -xf /tmp/nginx.tar.gz vim /tmp/mainfest.json删除本地镜像：docker rmi nginx导入镜像：docker load < /tmp/docker.tar.gz docker默认存放路径：/var/lib/docker/image/devicemapper/layerdbdocker采用宿主机的hosts和dns，如果需要更改，则更改宿主机：查看帮助：docker deamon --help启动镜像：docker run alpine sh #run是两个参数的结合体create+start,这样操作是没有交互的，需要添加-it终端docker run -it alpine sh # 可以在容器中增删改查正在运行的容器有哪些：docker psCtrl不放手同时按下p和q查看所有的容器，在运行或者不运行的：docker ps -a删除容器：#查看在运行的容器[root@VM_0_42_centos ~]# docker ps CONTAINER ID        IMAGE               COMMAND             CREATED              STATUS              PORTS               NAMES1251d34659bc        alpine              "sh"                About a minute ago   Up About a minute                       prickly_golick#执行删除操作，提示需要加-f命令[root@VM_0_42_centos ~]# docker rm 1251d34659bcError response from daemon: You cannot remove a running container 1251d34659bcf46ba9000fd5262b03096ec361c6f6d48768e240e85fbbe1631c. Stop the container before attempting removal or use -f#添加-f命令进行删除[root@VM_0_42_centos ~]# docker rm 1251d34659bc -f1251d34659bc#再次进行查看[root@VM_0_42_centos ~]# docker psCONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES#删除容器并不会删除镜像，这点要记住[root@VM_0_42_centos ~]# docker imagesREPOSITORY          TAG                 IMAGE ID            CREATED             SIZEdocker.io/nginx     latest              3f8a4339aadd        13 days ago         108.5 MBdocker.io/alpine    latest              e21c333399e0        5 weeks ago         4.139 MB[root@VM_0_42_centos ~]# 启动容器：docker run -it --name mynginx nginx查看容器的详细信息：docker inspect nginx访问测试：curl 172.17.0.2程序停止后，即删除容器：docker run -it --rm --name mynginx nginx 注意：[root@VM_0_42_centos ~]# docker run -it --name mynginx nginx/usr/bin/docker-current: Error response from daemon: Conflict. The name "/mynginx" is already in use by container 3c7819fcdb2813335dfc08d2cd57e00d700ba1ea2ff34613529e27f0cf2db573. You have to remove (or rename) that container to be able to reuse that name..See '/usr/bin/docker-current run --help'.解决：docker rm -f mynginx进入已运行的容器里边：docker attach mynginx #后边加容器名或ID，实施操作，多终端显示，不推荐docker exec -it mynginx sh #这种方式进容器里边，推荐。sh docker_in.sh mynginx #这种方式进入容器，不推荐vim docker_in.sh  #需要安装util-linux#!/bin/bashpid=`docker inspect --format "{
    {.State.Pid}}" $1`nsenter -t $pid -m -u -i -n -p放入后台运行：docker run -it -d --name mynginx nginx查看后台里的日志：docker logs mynginxdocker logs -f mynginx #动态显示

docker镜像制作

docker pull centos #原始镜像是哪个，以什么镜像为基础docker run -it centos bash #进入镜像yum install wget -y #安装wget先备份原有yum文件：使用aliyun地址：https://mirrors.aliyun.com/help/centoshttp://mirrors.aliyun.com/help/epelwget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo安装nginx软件：yum install nginx -y  #制作镜像能少装包就少装问题：怎么做到docker挂，容器不挂。web可以用，数据库是使用docker暂时不推荐。docker kill xxx  #相当于kill -9 xxxdocker stop xxx  #相当于kill xxx ，kill -15信号，正常关闭后台运行docker是不允许的，配置nginx的前台运行：deamon off;镜像名：docker commit -m 'add nginx images' mynginx luchuangao/my_nginxtag号：docker commit -m 'add nginx images' mynginx luchuangao/my_nginx:V1[root@VM_0_42_centos ~]# docker imagesREPOSITORY            TAG                 IMAGE ID            CREATED             SIZEluchuangao/my_nginx   V1                  38f6d7671959        1 seconds ago       108.5 MBluchuangao/my_nginx   latest              46eef5402b8b        32 seconds ago      108.5 MBdocker.io/centos      latest              ff426288ea90        43 hours ago        207.2 MBdocker.io/nginx       latest              3f8a4339aadd        2 weeks ago         108.5 MBdocker.io/alpine      latest              e21c333399e0        5 weeks ago         4.139 MB执行：docker run -d --name my_nginx luchuangao/my_nginx #会找luchuangao/my_nginx   latestdocker run -d --name my_nginx luchuangao/my_nginx:V1 #会找luchuangao/my_nginx   V1指定执行命令：docker run -d --name my_nginx luchuangao/my_nginx nginx #这样简单的方式，不推荐docker镜像库：https://hub.docker.com #注册开发者账号、搜索镜像：docker search aclstack/mysql docker login https://hub.docker.com#登录账号密码cat .docker/config.json #查看相关认证信息获取制作的镜像ID：[root@VM_0_42_centos ~]# docker imagesREPOSITORY            TAG                 IMAGE ID            CREATED             SIZEluchuangao/my_nginx   V1                  38f6d7671959        10 minutes ago      108.5 MBluchuangao/my_nginx   latest              46eef5402b8b        10 minutes ago      108.5 MBdocker.io/centos      latest              ff426288ea90        43 hours ago        207.2 MBdocker.io/nginx       latest              3f8a4339aadd        2 weeks ago         108.5 MBdocker.io/alpine      latest              e21c333399e0        5 weeks ago         4.139 MB加tag：#docker search aclstackdocker tag 38f6d7671959 docker.io/aclstack/my_nginx上传官方库：docker push docker.io/aclstack/my_nginx生产建议：虚拟机和容器混着用。# -P 随机端口映射docker run -d --name mynginx -P nginx [root@VM_0_42_centos ~]# docker psCONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                   NAMESa52a835daa0b        nginx               "nginx -g 'daemon off"   24 seconds ago      Up 22 seconds       0.0.0.0:32768->80/tcp   mynginxdocker logs -f mynginx[root@VM_0_42_centos ~]# docker run -d -P nginxb5a142545ff6ac5e8bc497b9a1c5622ff1e1ff050815b7550dd6bf368b082a6e[root@VM_0_42_centos ~]# docker ps CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                   NAMESb5a142545ff6        nginx               "nginx -g 'daemon off"   5 seconds ago       Up 3 seconds        0.0.0.0:32769->80/tcp   boring_eulera52a835daa0b        nginx               "nginx -g 'daemon off"   5 minutes ago       Up 4 minutes        0.0.0.0:32768->80/tcp   mynginx可以通过docker的ip加端口进行访问。

程序间互联

全IP指定端口映射启动：docker run  --name mynginx -d -p 80:80 mynginx nginx指定IP地址指定端口映射启动：docker run  --name mynginx -d -p 127.0.0.1:80:80 mynginx nginxdocker run --name web1 -d -p 80:80 mynginx nginxdocker run --name web2 --link web1 -p 8080:80 mynginx nginx[root@VM_0_42_centos ~]# docker exec -it web2 shsh-4.2# cat /etc/hosts127.0.0.1       localhost::1     localhost ip6-localhost ip6-loopbackfe00::0 ip6-localnetff00::0 ip6-mcastprefixff02::1 ip6-allnodesff02::2 ip6-allrouters172.17.0.2      web1 03f890733091172.17.0.3      e3f6e49bf788sh-4.2# ping web1PING web1 (172.17.0.2) 56(84) bytes of data.64 bytes from web1 (172.17.0.2): icmp_seq=1 ttl=64 time=0.073 ms^C--- web1 ping statistics ---1 packets transmitted, 1 received, 0% packet loss, time 0msrtt min/avg/max/mdev = 0.073/0.073/0.073/0.000 ms另外一个方案，使用别名：docker run -d --name web2 --link web1:shop_web -p 8080:80 mynginx nginx[root@VM_0_42_centos ~]# docker exec -it web2 shsh-4.2# cat /etc/hosts                                                                                                                                                                                                                     127.0.0.1       localhost::1     localhost ip6-localhost ip6-loopbackfe00::0 ip6-localnetff00::0 ip6-mcastprefixff02::1 ip6-allnodesff02::2 ip6-allrouters172.17.0.2      shop_web 03f890733091 web1172.17.0.3      11c9b731adf9

实现跨主机互联

网络模式:[root@VM_0_42_centos ~]# docker network lsNETWORK ID          NAME                DRIVER              SCOPEfe5a4af825cf        bridge              bridge              local               c53aca7628e1        host                host                local               5d381722770c        none                null                local bridge、host、none桥接是默认是nat，host通信走物理网卡只能起一个对应端口的容器[root@VM_0_42_centos ~]# docker run --rm --net=host nginx2018/01/14 11:53:36 [emerg] 1#1: bind() to 0.0.0.0:80 failed (98: Address already in use)nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use)2018/01/14 11:53:36 [emerg] 1#1: bind() to 0.0.0.0:80 failed (98: Address already in use)nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use)none是本地回环。[root@VM_0_42_centos ~]# docker run -it --rm --net=none alpine sh/ # ip a1: lo: 
     
       mtu 65536 qdisc noqueue state UNKNOWN     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00    inet 127.0.0.1/8 scope host lo       valid_lft forever preferred_lft forever    inet6 ::1/128 scope host        valid_lft forever preferred_lft foreverExecStart=/usr/bin/dockerd-current --registry-mirror=https://bqr1dr1n.mirror.aliyuncs.com --bip=172.17.42.1/16systemctl daemon-reloadsystemctl restart dockerExecStart=/usr/bin/dockerd-current --registry-mirror=https://bqr1dr1n.mirror.aliyuncs.com --bip=172.17.42.1/16systemctl daemon-reloadsystemctl restart dockerdocker run -it --name node1 centos bashyum install net-tools -ydocker run -it --name node2 centos bashyum install net-tools -ytcpdump -i eth0 -vnn icmp添加路由：route add -net  172.17.42.0/24 gw 10.31.0.42tcpdump -i eth0 -vnn icmptcpdump -i docker0 -vnn icmpping -c 1 172.17.0.1备注ttl

docker数据管理

1、数据卷

2、数据卷容器

docker rm -fv  xxx 删除数据卷，必须加-v，不然数据始终保存数据卷：[root@VM_0_42_centos ~]# docker run -it --name node --rm -v /data centos bash  [root@8c5cffd7efd6 /]# df -hFilesystem                                                                                        Size  Used Avail Use% Mounted on/dev/mapper/docker-253:1-451355-b997cafbd632109e323f54d24b66323c39b7c70d7410ade1302672556dbe9fcc   10G  250M  9.8G   3% /tmpfs                                                                                             3.9G     0  3.9G   0% /devtmpfs                                                                                             3.9G     0  3.9G   0% /sys/fs/cgroup/dev/vda1                                                                                          50G  3.5G   44G   8% /datashm                                                                                                64M     0   64M   0% /dev/shm它占用的是宿主机的根目录：[root@VM_0_42_centos ~]# df -hFilesystem      Size  Used Avail Use% Mounted on/dev/vda1        50G  3.5G   44G   8% /devtmpfs        3.9G     0  3.9G   0% /devtmpfs           3.9G   24K  3.9G   1% /dev/shmtmpfs           3.9G   13M  3.9G   1% /runtmpfs           3.9G     0  3.9G   0% /sys/fs/cgrouptmpfs           783M     0  783M   0% /run/user/0目录项目之间的映射挂载，到opt目录下【推荐】：[root@VM_0_42_centos opt]# docker run -it --name node --rm -v /opt/:/opt/ centos bash[root@4b412bc2cee2 /]# cd /opt/[root@4b412bc2cee2 opt]# lsdocker_test  rh[root@4b412bc2cee2 opt]# touch aa通过宿主机查看opt目录：[root@VM_0_42_centos ~]# cd /opt/[root@VM_0_42_centos opt]# lsaa  docker_test  rh文件相互之间的映射挂载：[root@VM_0_42_centos opt]# docker run -it --name node --rm -v /etc/hosts:/opt/hosts centos bash[root@f10decf1d2ea /]# cat /opt/hosts 127.0.0.1  localhost  localhost.localdomain  VM_0_42_centos设置只读权限：[root@VM_0_42_centos opt]# docker run -it --name node --rm -v /etc/hosts:/opt/hosts:ro centos bash[root@168eed494898 /]# echo "123" >> /opt/hosts bash: /opt/hosts: Read-only file system数据卷容器：docker run -it --name node01 -v /opt/:/opt/ centos bash   [root@VM_0_42_centos opt]# docker run -it --name node01 --volumes-from node centos bash#--volumes-from 数据卷来自于node[root@4e7a39c2e0ea /]# df -hFilesystem                                                                                        Size  Used Avail Use% Mounted on/dev/mapper/docker-253:1-451355-463759ca740da3920cd22536aa22f190d99a59b9886c19b0d9e06ffc176ff29c   10G  250M  9.8G   3% /tmpfs                                                                                             3.9G     0  3.9G   0% /devtmpfs                                                                                             3.9G     0  3.9G   0% /sys/fs/cgroup/dev/vda1                                                                                          50G  3.5G   44G   8% /optshm                                                                                                64M     0   64M   0% /dev/shm[root@VM_0_42_centos opt]# docker stop node[root@VM_0_42_centos opt]# docker exec -it node01 bash[root@4e7a39c2e0ea /]# cd /opt/[root@4e7a39c2e0ea opt]# touch bb[root@VM_0_42_centos opt]# docker ps -a[root@VM_0_42_centos opt]# docker ps -aCONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS                            PORTS               NAMES4e7a39c2e0ea        centos              "bash"                   2 minutes ago       Up 2 minutes                                          node0116f601cdd68a        centos              "bash"                   3 minutes ago       Exited (137) About a minute ago                       node[root@VM_0_42_centos opt]# docker rm nodenode[root@VM_0_42_centos opt]# docker exec -it node01 bash[root@4e7a39c2e0ea /]# cd /opt/[root@4e7a39c2e0ea opt]# lsaa  bb  docker_test  rh[root@4e7a39c2e0ea opt]# rm aarm: remove regular empty file 'aa'? y[root@4e7a39c2e0ea opt]# 彻底删除数据卷数据：[root@VM_0_42_centos opt]# docker rm -fv node01node01