docker1

1.rhel7虚拟机的封装
基本和8是一样的，配置yum源，配置ip（7的yum和8不太一样，不需要写APPSTREAM等，直接指向目录即可）
安装一些常用的软件如vim，lftp，bash-*
火墙和selinux关闭。
接下来就是虚拟机的克隆

[root@westos Desktop]# cd /var/lib/libvirt/images/

镜像所在目录

[root@westos images]# virt-sysprep  -d rhel7.6-new

清理缓存

libguestfs-tools

压缩之前需要装这个

[root@westos images]# virt-sparsify --compress rhel7.6-new.qcow2 new.qcow2

[root@westos images]# du -sh new.qcow2 

552M	new.qcow2

压缩后就552M

[root@westos images]# rm -rf rhel7.6-new.qcow2

把原始21G的镜像删除

[root@westos images]# qemu-img create -f qcow2 -b new.qcow2 demo1

通过母盘创建新子镜像

以后就用子镜像创建虚拟机即可。
2.什么是docker？
docker好比传统的货运集装箱
为镜像打包提供了一种标准，集装箱是有标准的。
docker是管理容器的引擎
docker为应用打包、部署平台，而非简单的虚拟化技术。
传统虚拟化需要有操作系统，但是容器不需要，容器共享的是宿主机的操作系统。
安全性VM天生比容器强
容器启动快，耗费资源少
虚拟机存储镜像较大，容器镜像很小。
docker容器的优势：一次构建，可以在任何地方运行
3.docker的安装
由于yum源没有配成功，我使用阿里云镜像作为yum源

[root@server1 ~]# cat /etc/yum.repos.d/docker.repo 
[docker]
name=docker-ce
baseurl=http://mirrors.aliyun.com/docker-ce/linux/centos/7/x86_64/stable/
gpgcheck=0
enabled=1

解决了一堆依赖性问题

wget http://mirror.centos.org/centos/7/extras/x86_64/Packages/container-selinux-2.119.2-1.911c772.el7_8.noarch.rpm

wget http://mirror.centos.org/centos/7/extras/x86_64/Packages/slirp4netns-0.4.3-4.el7_8.x86_64.rpm

wget http://mirror.centos.org/centos/7/extras/x86_64/Packages/container-selinux-2.119.2-1.911c772.el7_8.noarch.rpm

 wget https://src.fedoraproject.org/rpms/slirp4netns.git#1958b3b2d0a05683df0ac8044de5a929b91ca3d4

wget http://mirror.centos.org/centos/7/extras/x86_64/Packages/fuse-overlayfs-0.7.2-6.el7_8.x86_64.rpm

wget http://mirror.centos.org/centos/7/extras/x86_64/Packages/fuse3-libs-3.6.1-4.el7.x86_64.rpm

一些依赖性的解决，以后也许会用得上

 yum install docker-ce -y

systemctl enable --now docker.service

docker info

查看docker的信息

WARNING: bridge-nf-call-iptables is disabled
WARNING: bridge-nf-call-ip6tables is disabled

docker 的桥接有问题，需要解决

[root@server1 ~]# sysctl -a |grep bridge-nf-call-iptables
net.bridge.bridge-nf-call-iptables = 0
sysctl: reading key "net.ipv6.conf.all.stable_secret"
sysctl: reading key "net.ipv6.conf.default.stable_secret"
sysctl: reading key "net.ipv6.conf.docker0.stable_secret"
sysctl: reading key "net.ipv6.conf.eth0.stable_secret"
sysctl: reading key "net.ipv6.conf.lo.stable_secret"

过滤一下参数
warning不会影响容器的运行但是可能会影响到容器的网络。
解决方法：

[root@server1 ~]# cd /etc/sysctl.d/
[root@server1 sysctl.d]# vim docker.conf
[root@server1 sysctl.d]# cat docker.conf 
net.bridge.bridge-nf-call-iptables=1
net.bridge.bridge-nf-call-ip6tables=1

sysctl --system

使之生效

Registry: https://index.docker.io/v1/

在docker info中可以看到，仓库直接指向官方

[root@server1 sysctl.d]# docker pull nginx

尝试拉取nginx
可以设置加速器

[root@server1 sysctl.d]# docker search nginx
NAME                               DESCRIPTION                                     STARS               OFFICIAL            AUTOMATED
nginx                              Official build of Nginx.                        15007               [OK]                
jwilder/nginx-proxy                Automated Nginx reverse proxy for docker con…   2035                                    [OK]
richarvey/nginx-php-fpm            Container running Nginx + PHP-FPM capable of…   814                                     [OK]
jc21/nginx-proxy-manager           Docker container for managing Nginx proxy ho…   200                                     
linuxserver/nginx                  An Nginx container, brought to you by LinuxS…   147                                     
tiangolo/nginx-rtmp                Docker image with Nginx using the nginx-rtmp…   130                                     [OK]
jlesage/nginx-proxy-manager        Docker container for Nginx Proxy Manager        118                                     [OK]
alfg/nginx-rtmp                    NGINX, nginx-rtmp-module and FFmpeg from sou…   99                                      [OK]
bitnami/nginx                      Bitnami nginx Docker Image                      97                                      [OK]
nginxdemos/hello                   NGINX webserver that serves a simple page co…   70                                      [OK]
privatebin/nginx-fpm-alpine        PrivateBin running on an Nginx, php-fpm & Al…   55                                      [OK]
nginx/nginx-ingress                NGINX and  NGINX Plus Ingress Controllers fo…   55                                      
nginxinc/nginx-unprivileged        Unprivileged NGINX Dockerfiles                  37                                      
staticfloat/nginx-certbot          Opinionated setup for automatic TLS certs lo…   23                                      [OK]
schmunk42/nginx-redirect           A very simple container to redirect HTTP tra…   19                                      [OK]
nginx/nginx-prometheus-exporter    NGINX Prometheus Exporter for NGINX and NGIN…   18                                      
centos/nginx-112-centos7           Platform for running nginx 1.12 or building …   15                                      
centos/nginx-18-centos7            Platform for running nginx 1.8 or building n…   13                                      
bitwarden/nginx                    The Bitwarden nginx web server acting as a r…   11                                      
flashspys/nginx-static             Super Lightweight Nginx Image                   10                                      [OK]
bitnami/nginx-ingress-controller   Bitnami Docker Image for NGINX Ingress Contr…   9                                       [OK]
mailu/nginx                        Mailu nginx frontend                            8                                       [OK]
ansibleplaybookbundle/nginx-apb    An APB to deploy NGINX                          2                                       [OK]
wodby/nginx                        Generic nginx                                   1                                       [OK]
centos/nginx-110-centos7           Platform for running nginx 1.10 or building …   0                                    

直接以软件名为名字的就是官方的

[root@server1 sysctl.d]# docker search yakexi007
NAME                 DESCRIPTION         STARS               OFFICIAL            AUTOMATED
yakexi007/game2048                       0                                       
yakexi007/mario                          0                                       
yakexi007/nginx                          0     

拉取一个2048游戏试试

[root@server1 sysctl.d]# docker pull yakexi007/game2048
Using default tag: latest
latest: Pulling from yakexi007/game2048
534e72e7cedc: Pull complete 
f62e2f6dfeef: Pull complete 
fe7db6293242: Pull complete 
3f120f6a2bf8: Pull complete 
4ba4e6930ea5: Pull complete 
Digest: sha256:8a34fb9cb168c420604b6e5d32ca6d412cb0d533a826b313b190535c03fe9390
Status: Downloaded newer image for yakexi007/game2048:latest
docker.io/yakexi007/game2048:latest

拉取成功

[root@server1 sysctl.d]# docker images 
REPOSITORY           TAG                 IMAGE ID            CREATED             SIZE
yakexi007/game2048   latest              19299002fdbe        4 years ago         55.5MB

镜像已经到位

[root@server1 sysctl.d]# docker history yakexi007/game2048:latest 
IMAGE               CREATED             CREATED BY                                      SIZE                COMMENT
19299002fdbe        4 years ago         /bin/sh -c #(nop)  CMD ["/bin/sh" "-c" "sed …   0B                  
<missing>           4 years ago         /bin/sh -c #(nop)  EXPOSE 80/tcp                0B                  
<missing>           4 years ago         /bin/sh -c #(nop) COPY dir:cb74e9c037a3d501c…   600kB               
<missing>           4 years ago         /bin/sh -c #(nop)  MAINTAINER Golfen Guo <go…   0B                  
<missing>           4 years ago         /bin/sh -c #(nop)  CMD ["nginx" "-g" "daemon…   0B                  
<missing>           4 years ago         /bin/sh -c #(nop)  EXPOSE 443/tcp 80/tcp        0B                  
<missing>           4 years ago         /bin/sh -c #(nop) COPY file:d15ceb73c6ea776c…   1.1kB               
<missing>           4 years ago         /bin/sh -c #(nop) COPY file:af94db45bb7e4b8f…   643B                
<missing>           4 years ago         /bin/sh -c GPG_KEYS=B0F4253373F8F6F510D42178…   50.1MB              
<missing>           4 years ago         /bin/sh -c #(nop)  ENV NGINX_VERSION=1.11.7     0B                  
<missing>           4 years ago         /bin/sh -c #(nop)  MAINTAINER NGINX Docker M…   0B                  
<missing>           4 years ago         /bin/sh -c #(nop) ADD file:7afbc23fda8b0b387…   4.8MB 

docker history可以查看拉取时候的端口

[root@server1 sysctl.d]# docker run -d --name demo -p 80:80

run 运行开启，-d 打入后台，–name 起一个名字 -p 端口，第一个80是宿主机的80端口第二个80是镜像的80端口

[root@server1 sysctl.d]# docker ps
CONTAINER ID        IMAGE                COMMAND                  CREATED             STATUS              PORTS                                        NAMES
be1f2c9df05c        yakexi007/game2048   "/bin/sh -c 'sed -i …"   19 seconds ago      Up 19 seconds       0.0.0.0:80->80/tcp, :::80->80/tcp, 443/tcp   demo

显示当前运行的容器

输入自己的宿主机的IP，发现2048游戏