1卸载旧的版本：
yum remove docker \
docker-client \
docker-client-latest \
docker-common \
docker-latest \
docker-latest-logrotate \
docker-logrotate \
docker-engine
2安装环境
yum install -y yum-utils
3设置仓库
yum-config-manager \
--add-repo \
http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
更新软件包索引
yum makecache fast
安装docker ce
yum install docker-ce docker-ce-cli containerd.io
启动docker
sudo systemctl start docker
docker run hello-world
卸载
yum remove docker-ce docker-ce-cli containerd.io
sudo rm -rf /var/lib/docker
sudo rm -rf /var/lib/containerd
阿里云配置镜像加速器
针对Docker客户端版本大于 1.10.0 的用户
您可以通过修改daemon配置文件/etc/docker/daemon.json来使用加速器
sudo mkdir -p /etc/docker
sudo tee /etc/docker/daemon.json <<-'EOF'
{
"registry-mirrors": ["https://32c9xrxj.mirror.aliyuncs.com"]
}
EOF
sudo systemctl daemon-reload
sudo systemctl restart docker
搜索镜像
docker search mysql
[root@alichen /]# docker search mysql --filter stars=3000
NAME DESCRIPTION STARS OFFICIAL AUTOMATED
mysql MySQL is a widely used, open-source relation… 11556 [OK]
mariadb MariaDB Server is a high performing open sou… 4398 [OK]
下载--help
docker pull mysql
[root@alichen /]# docker pull mysql
Using default tag: latest #不写tag默认最新版本
latest: Pulling from library/mysql
b380bbd43752: Pull complete #分层下载
f23cbf2ecc5d: Pull complete
30cfc6c29c0a: Pull complete
b38609286cbe: Pull complete
8211d9e66cd6: Pull complete
2313f9eeca4a: Pull complete
7eb487d00da0: Pull complete
4d7421c8152e: Pull complete
77f3d8811a28: Pull complete
cce755338cba: Pull complete
69b753046b9f: Pull complete
b2e64b0ab53c: Pull complete
Digest: sha256:6d7d4524463fe6e2b893ffc2b89543c81dec7ef82fb2020a1b27606666464d87 #签名
Status: Downloaded newer image for mysql:latest
docker.io/library/mysql:latest等价于docker pull mysql
指定版本下载
[root@alichen /]# docker pull mysql:5.7
5.7: Pulling from library/mysql
b380bbd43752: Already exists
f23cbf2ecc5d: Already exists
30cfc6c29c0a: Already exists
b38609286cbe: Already exists
8211d9e66cd6: Already exists
2313f9eeca4a: Already exists
7eb487d00da0: Already exists #公用无需再次下载
a71aacf913e7: Pull complete
393153c555df: Pull complete
06628e2290d7: Pull complete
ff2ab8dac9ac: Pull complete
Digest: sha256:2db8bfd2656b51ded5d938abcded8d32ec6181a9eae8dfc7ddf87a656ef97e97
Status: Downloaded newer image for mysql:5.7
docker.io/library/mysql:5.7
删除镜像文件
docker rmi -f ID
docker rmi -f $(参数docker images -ap)删除所有镜像
docker pull centos
docker run [可选参数] image
--name #容器名字
-d #后台运行
-it#使用交互方式运行，走进容器并查看内容
-p#确定容器端口
-p#主机端口：容器端口（常用）
-P#随机端口
docker run -it centos /bin/bash
删除容器
docker rm -f $(docker ps -aq)#删除所有容器
docker rm 容器ID
docker ps -aq|xargs docker rm #删除所有
容器启动和停止的操作
docker start 容器ID #启动
docker restart 容器ID#重启
docker stop 容器ID#停止
docker kill 容器ID #杀掉强制
ctrl+p+q推出不停止容器
查看docker日志
docker logs -f -t --tail 显示行数 容器ID
-tf 显示所有日志
--tail 显示行数显示日志行数
查看docker容器中的进程信息
dokcer top 容器ID
[root@alichen /]# docker top 容器ID
UID PID PPID C STIME
root 6618 6600 0 15:52
docker inspect ID查看容器源数据
[root@alichen /]# docker inspect 28449bc1777f
[
{
"Id": "28449bc1777ff637afc8e04608bf0fbd1e3084267d723a459e0547fc8f73c447",
"Created": "2021-10-21T07:49:38.807680988Z",
"Path": "/bin/bash",
"Args": [],
"State": {
"Status": "exited",
"Running": false,
"Paused": false,
"Restarting": false,
"OOMKilled": false,
"Dead": false,
"Pid": 0,
"ExitCode": 0,
"Error": "",
"StartedAt": "2021-10-21T07:50:11.909376361Z",
"FinishedAt": "2021-10-21T07:51:14.720992886Z"
},
"Image": "sha256:5d0da3dc976460b72c77d94c8a1ad043720b0416bfc16c52c45d4847e53fadb6",
"ResolvConfPath": "/var/lib/docker/containers/28449bc1777ff637afc8e04608bf0fbd1e3084267d723a459e0547fc8f73c447/resolv.conf",
"HostnamePath": "/var/lib/docker/containers/28449bc1777ff637afc8e04608bf0fbd1e3084267d723a459e0547fc8f73c447/hostname",
"HostsPath": "/var/lib/docker/containers/28449bc1777ff637afc8e04608bf0fbd1e3084267d723a459e0547fc8f73c447/hosts",
"LogPath": "/var/lib/docker/containers/28449bc1777ff637afc8e04608bf0fbd1e3084267d723a459e0547fc8f73c447/28449bc1777ff637afc8e04608bf0fbd1e3084267d723a459e0547fc8f73c447-json.log",
"Name": "/youthful_spence",
"RestartCount": 0,
"Driver": "overlay2",
"Platform": "linux",
"MountLabel": "",
"ProcessLabel": "",
"AppArmorProfile": "",
"ExecIDs": null,
"HostConfig": {
"Binds": null,
"ContainerIDFile": "",
"LogConfig": {
"Type": "json-file",
"Config": {}
},
"NetworkMode": "default",
"PortBindings": {},
"RestartPolicy": {
"Name": "no",
"MaximumRetryCount": 0
},
"AutoRemove": false,
"VolumeDriver": "",
"VolumesFrom": null,
"CapAdd": null,
"CapDrop": null,
"CgroupnsMode": "host",
"Dns": [],
"DnsOptions": [],
"DnsSearch": [],
"ExtraHosts": null,
"GroupAdd": null,
"IpcMode": "private",
"Cgroup": "",
"Links": null,
"OomScoreAdj": 0,
"PidMode": "",
"Privileged": false,
"PublishAllPorts": false,
"ReadonlyRootfs": false,
"SecurityOpt": null,
"UTSMode": "",
"UsernsMode": "",
"ShmSize": 67108864,
"Runtime": "runc",
"ConsoleSize": [
0,
0
],
"Isolation": "",
"CpuShares": 0,
"Memory": 0,
"NanoCpus": 0,
"CgroupParent": "",
"BlkioWeight": 0,
"BlkioWeightDevice": [],
"BlkioDeviceReadBps": null,
"BlkioDeviceWriteBps": null,
"BlkioDeviceReadIOps": null,
"BlkioDeviceWriteIOps": null,
"CpuPeriod": 0,
"CpuQuota": 0,
"CpuRealtimePeriod": 0,
"CpuRealtimeRuntime": 0,
"CpusetCpus": "",
"CpusetMems": "",
"Devices": [],
"DeviceCgroupRules": null,
"DeviceRequests": null,
"KernelMemory": 0,
"KernelMemoryTCP": 0,
"MemoryReservation": 0,
"MemorySwap": 0,
"MemorySwappiness": null,
"OomKillDisable": false,
"PidsLimit": null,
"Ulimits": null,
"CpuCount": 0,
"CpuPercent": 0,
"IOMaximumIOps": 0,
"IOMaximumBandwidth": 0,
"MaskedPaths": [
"/proc/asound",
"/proc/acpi",
"/proc/kcore",
"/proc/keys",
"/proc/latency_stats",
"/proc/timer_list",
"/proc/timer_stats",
"/proc/sched_debug",
"/proc/scsi",
"/sys/firmware"
],
"ReadonlyPaths": [
"/proc/bus",
"/proc/fs",
"/proc/irq",
"/proc/sys",
"/proc/sysrq-trigger"
]
},
"GraphDriver": {
"Data": {
"LowerDir": "/var/lib/docker/overlay2/d2b35a0fa293ddc3c569161542e8d777b0691bf567a78f710fbbe44774976557-init/diff:/var/lib/docker/overlay2/6ce32b6151ac996b0dcab013a0a4c0260970c458e9d02ba2de4ca0b8500cb66c/diff",
"MergedDir": "/var/lib/docker/overlay2/d2b35a0fa293ddc3c569161542e8d777b0691bf567a78f710fbbe44774976557/merged",
"UpperDir": "/var/lib/docker/overlay2/d2b35a0fa293ddc3c569161542e8d777b0691bf567a78f710fbbe44774976557/diff",
"WorkDir": "/var/lib/docker/overlay2/d2b35a0fa293ddc3c569161542e8d777b0691bf567a78f710fbbe44774976557/work"
},
"Name": "overlay2"
},
"Mounts": [],
"Config": {
"Hostname": "28449bc1777f",
"Domainname": "",
"User": "",
"AttachStdin": true,
"AttachStdout": true,
"AttachStderr": true,
"Tty": true,
"OpenStdin": true,
"StdinOnce": true,
"Env": [
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
],
"Cmd": [
"/bin/bash"
],
"Image": "centos",
"Volumes": null,
"WorkingDir": "",
"Entrypoint": null,
"OnBuild": null,
"Labels": {
"org.label-schema.build-date": "20210915",
"org.label-schema.license": "GPLv2",
"org.label-schema.name": "CentOS Base Image",
"org.label-schema.schema-version": "1.0",
"org.label-schema.vendor": "CentOS"
}
},
"NetworkSettings": {
"Bridge": "",
"SandboxID": "cadc50c6aeb28ea561b303df23623b4478ba556f3c04d4b368e3ca7dcdb0c04f",
"HairpinMode": false,
"LinkLocalIPv6Address": "",
"LinkLocalIPv6PrefixLen": 0,
"Ports": {},
"SandboxKey": "/var/run/docker/netns/cadc50c6aeb2",
"SecondaryIPAddresses": null,
"SecondaryIPv6Addresses": null,
"EndpointID": "",
"Gateway": "",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"IPAddress": "",
"IPPrefixLen": 0,
"IPv6Gateway": "",
"MacAddress": "",
"Networks": {
"bridge": {
"IPAMConfig": null,
"Links": null,
"Aliases": null,
"NetworkID": "05489496d9933ad15165664e8254cfe856b47e2f71e0d8a5c5303db4405ecbce",
"EndpointID": "",
"Gateway": "",
"IPAddress": "",
"IPPrefixLen": 0,
"IPv6Gateway": "",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"MacAddress": "",
"DriverOpts": null
}
}
}
}
]
进入正在运行的容器
docker exec -it 7b22a30a140a /bin/bash#进入正在运行的容器打开新终端
[root@alichen /]# docker exec -it 7b22a30a140a /bin/bash
[root@7b22a30a140a /]# ps -ef
UID PID PPID C STIME TTY TIME CMD
root 1 0 0 07:52 pts/0 00:00:00 /bin/bash
root 15 0 0 08:17 pts/1 00:00:00 /bin/bash
root 29 15 0 08:17 pts/1 00:00:00 ps -ef
docker attach 容器ID#进入正在运行的容器继续进行终端
从容器内拷贝文件到本机上
docker cp 容器id:容器内路径 目的路径
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-6jmXn4BA-1644912741962)(C:\Users\cheny\AppData\Roaming\Typora\typora-user-images\image-20211021163516663.png)]
安装nginx
docker search nginx
docker pull nginx
docker run -it nginx01 /bin/bash
[root@alichen /]# docker exec -it nginx01 /bin/bash
安装tomcat
docker run -d -p 3332:8080 --name tomcat9 tomcat:9.0
docker exec -it tomcat9 /bin/bash
docker 安装elasticsearch比较耗资源
docker run -d --name elasticsearch -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" elasticsearch:7.6.2
查看系统资源使用情况
docker stats
可视化
-
portainer
[root@alichen /]# docker run -d -p 8088:9000 \
–restart=always -v /var/run/docker.
–restart=always -v /var/run/docker.sock:/var/run/docker.sock --privileged=true portainer/portainer
管理测试portainer
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-rIzPrjN2-1644912741964)(C:\Users\cheny\AppData\Roaming\Typora\typora-user-images\image-20211022092241703.png)]
如何提交自己的更改过的镜像
docker commit 自己的镜像
命令和git相似
docker commit -m=“提交的描述信息” -a=“作者” 容器ID 目标镜像名.[tag]
测试
docker run -it -p 8080:8080 tomcat:9.0
docker exec -it 25670e3875b6 /bin/bash
docker commit -a="alichen" -m="add tomcat app" 25670e3875b6 tomcat9:1.0
容器数据卷
什么是容器数据卷
数据库不能存在容器内，如果删除数据就回丢失#数据持久化
mysql数据存放在本地
数据共享的的技术
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-kYDo9fDn-1644912741966)(C:\Users\cheny\AppData\Roaming\Typora\typora-user-images\image-20211022101539601.png)]
容器的持久化和同步操作
使用数据卷
方式1 -v 命令挂载
docker -it -v 主机目录：容器内目录
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-VcCsOgky-1644912741966)(C:\Users\cheny\AppData\Roaming\Typora\typora-user-images\image-20211022102036469.png)]
docker run -it -v /home/ceshi:/home centos /bin/bash 运行一个容器并进入交互操作
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-dDBmqWjT-1644912741967)(C:\Users\cheny\AppData\Roaming\Typora\typora-user-images\image-20211022102347954.png)]
实战
安装mysql
docker pull mysql:5.7
启动mysql
docker run --name some-mysql -e MYSQL_ROOT_PASSWORD=my-secret-pw -d mysql:tag
docker run -d -p 3306:3306 -v /home/mysql/conf:/etc/mysql/conf.d -v /home/mysql/data:/var/lib/mysql -e MYSQL_ROOT_PASSWORD=pw --name *** mysql:tag
##具体挂在和匿名挂载
匿名挂载
docker run -d -P --name nginx01 -v /home/nginx nginx#匿名挂载
#查看volume的情况
docker volume ls
[root@alichen /]# docker volume ls
DRIVER VOLUME NAME
local 6d68f3fc5f7b816242aec6c7ff11bdd2e961d078d59eb60a012927e4f2616a3d
local 54c7a21cd74c1a4c3a52163b61268121d25f424b4a8cad808d27c6606bb26d83
如何查看是匿名还是具名挂
-v #容器内路径 匿名挂载
-v #卷名:/容器内路径 具名挂载
-v #主机内路径：容器内路径 具体挂载
-v #卷名:/容器内路径 具#名挂载
docker volume inspect 卷名 #可以查看具体位置
#一般在/var/lib/docker/volume/卷名/_data
#拓展
docker run -d -P --name nginx01 -v /home/nginx:ro nginx#readonly只读容器内不可操作
docker run -d -P --name nginx01 -v /home/nginx:rw nginx#可读可写
Dockerfile
定义：有来构建docker镜像的构建文件
#通过这个脚本生成一个镜像，镜像是分层的脚本也是每层生成的
[root@alichen home]# mkdir docker-test
[root@alichen home]# cd docker-test/
[root@alichen docker-test]# ls
[root@alichen docker-test]# vim dockerfile
[root@alichen docker-test]# cat dockerfile
FROM centos
VOLUME ["volume01","volume02"]
CMD -----end-----
CMD /bin/bash
[root@alichen docker-test]# docker build -f dockerfile -t aliyuncentos .
#创建容器并加载
Sending build context to Docker daemon 2.048kB
Error response from daemon: dockerfile parse error line 5: Unknown flag: ---end-----
[root@alichen docker-test]# vim dockerfile
[root@alichen docker-test]# docker build -f dockerfile -t aliyuncentos .
Sending build context to Docker daemon 2.048kB
Step 1/4 : FROM centos
---> 5d0da3dc9764
Step 2/4 : VOLUME ["volume01","volume02"]
---> Running in 85eeb751e768
Removing intermediate container 85eeb751e768
---> cd7d6a948f10
Step 3/4 : CMD echo"---end-----"
---> Running in 9b857fe78a4b
Removing intermediate container 9b857fe78a4b
---> cb8f55320954
Step 4/4 : CMD /bin/bash
---> Running in ce37ba390956
Removing intermediate container ce37ba390956
---> adc7df11240b
Successfully built adc7df11240b
Successfully tagged aliyuncentos:latest
[root@alichen docker-test]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
aliyuncentos latest adc7df11240b 9 seconds ago 231MB
数据卷同步
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-GyzwBCi8-1644912741967)(C:\Users\cheny\AppData\Roaming\Typora\typora-user-images\image-20211022142109624.png)]
备份机制删除docker01之后，docker02或者多个容器之间的数据都存在，
#创建父容器
docker run -it --name docker01 aliyuncentos /bin/bash
#创建02
docker run -it --name docker02 --volumes-from docker01 aliyuncentos
Dockerfile
创建一个镜像，命令参数脚本
步骤：
- 编写一个dockerfile
- docker build 构建一个镜像
- docker run 运行一个容器
- docker push 发布镜像、上传至阿里云仓库或者dockerhub
官方centos构建命令
| FROM scratch | |
|---|---|
| ADD centos-7-x86_64-docker.tar.xz / | |
| LABEL \ | |
| org.label-schema.schema-version=“1.0” \ | |
| org.label-schema.name=“CentOS Base Image” \ | |
| org.label-schema.vendor=“CentOS” \ | |
| org.label-schema.license=“GPLv2” \ | |
| org.label-schema.build-date=“20201113” \ | |
| org.opencontainers.image.title=“CentOS Base Image” \ | |
| org.opencontainers.image.vendor=“CentOS” \ | |
| org.opencontainers.image.licenses=“GPL-2.0-only” \ | |
| org.opencontainers.image.created=“2020-11-13 00:00:00+00:00” | |
| CMD ["/bin/bash"] |
官方的都是基础包。
构建过程
#每个关键字都是大写字母，指令从上至下依次执行，
dockerfile面向开发，发布项目，企业交付的标准
步骤：开发、部署、运维 缺一不可
dockerfile ：构建文件定义了一切的步骤，源代码
dockerimages：通过docerfile构建生成的镜像，最终发布和运行的产品
docker容器：容器就是镜像起来的提供服务
#FROM 一切从这里开始构建
#MAINTAINER 作者 。姓名+邮箱
#RUN 运行的命令
#ADD 加压缩包
#WORKDIR 工作目录
#VOLUME 设置一个挂载卷位置
#EXPOSE 指定暴漏端口
#CMD 指定这个容器启动时候的执行的命令 只执行最后最后一个，可以被替代
#ENTRYPOINT 指定这个容器启动时候的执行的命令可以追加命令
#ONBUILD 当构建一个被继承的dockerfile这个时候会激发ONBULILD指令
#COPY 类似ADD，将我们的我呢见拷贝至镜像中
#ENV 构建时候的环境变量
#自己编写一个dockerfile
FROM centos
MAINTAINER chen<123@qq.com>
ENV MYPATH /usr/local
WORKDIR $MYPATH
RUN yum -y install vim
RUN yum -y install net-tools
EXPOSE 80
CMD echo $MYPATH
CMD echo"--end--"
CMD /bin/bash
#自己构建一个镜像
docker build -f dockerfile-centos -t centos:1.0 .
#启动自己的镜像
docker run -it f9f6c9921d6e
dokcerfile中有很多相识的命令，只有通过测试才能发现些微的不同
实战
tomcat镜像
FROM centos:1.0
MAINTAINER alichen34917662@qqcom
# now add java and tomcat support in the container
ADD jdk1.8.0_251.tar.gz /usr/local/
ADD apache-tomcat-8.5.61.tar.gz /usr/local/
ENV MYPATH /usr/local
WORKDIR $MYPATH
# configuration of java and tomcat ENV
ENV JAVA_HOME /usr/local/jdk1.8.0_251
ENV CLASSPATH $JAVA_HOME/lib/dt.jar:$JAVA_HOME/lib/tools.jar
ENV CATALINA_HOME /usr/local/apache-tomcat-8.5.61
ENV CATALINA_BASE /usr/local/apache-tomcat-8.5.61
ENV PATH $PATH:$JAVA_HOME/bin:$CATALINA_HOME/lib:$CATALINA_HOME/bin
# container listener port
EXPOSE 8080
# startup web application services by self
CMD /usr/local/apache-tomcat-8.5.61/bin/startup.sh && CMD /bin/bash
#运行镜像
docker run -d -p 8090:8080 --name tomcat -v /home/build/tomcat8/web:/usr/local/apache-tomcat-8.5.61/webapps -v /home/build/tomcat8/logs:/usr/local/apache-tomcat-8.5.61/logs diytomcat
部署到docker hub上
docker login -u username -p
1. 登录阿里云Docker Registry
$ docker login --username=**** registry.cn-hangzhou.aliyuncs.com
用于登录的用户名为阿里云账号全名，密码为开通服务时设置的密码。
您可以在访问凭证页面修改凭证密码。
2. 从Registry中拉取镜像
$ docker pull registry.cn-hangzhou.aliyuncs.com/:[镜像版本号]
3. 将镜像推送到Registry
$ docker login --username=**** registry.cn-hangzhou.aliyuncs.com
$ docker tag [ImageId] registry.cn-hangzhou.aliyuncs.com//mydiy:[镜像版本号]
$ docker push registry.cn-hangzhou.aliyuncs.com/mydiy:[镜像版本号]
请根据实际镜像信息替换示例中的[ImageId]和[镜像版本号]参数。
4. 选择合适的镜像仓库地址
从ECS推送镜像时，可以选择使用镜像仓库内网地址。推送速度将得到提升并且将不会损耗您的公网流量。
如果您使用的机器位于VPC网络，请使用 registry-vpc.cn-hangzhou.aliyuncs.com 作为Registry的域名登录。
5. 示例
使用"docker tag"命令重命名镜像，并将它通过专有网络地址推送至Registry。
$ docker images
REPOSITORY TAG IMAGE ID CREATED VIRTUAL SIZE
registry.aliyuncs.com/acs/agent 0.7-dfb6816 37bb9c63c8b2 7 days ago 37.89 MB
$ docker tag 37bb9c63c8b2 registry-vpc.cn-hangzhou.aliyuncs.com/acs/agent:0.7-dfb6816
使用 "docker push" 命令将该镜像推送至远程。
$ docker push registry-vpc.cn-hangzhou.aliyuncs.com/acs/agent:0.7-dfb6816
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-CFAsZ3ww-1644912741968)(C:\Users\cheny\AppData\Roaming\Typora\typora-user-images\image-20211025105022273.png)]
Docker 网络
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-Ze7gx56Z-1644912741969)(C:\Users\cheny\AppData\Roaming\Typora\typora-user-images\image-20211025110701767.png)]
[root@alichen /]# docker exec -it tomcat1 ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
62: eth0@if63: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
link/ether 02:42:ac:11:00:02 brd ff:ff:ff:ff:ff:ff link-netnsid 0
inet 172.17.0.2/16 brd 172.17.255.255 scope global eth0
valid_lft forever preferred_lft forever
eth0@if63是docker分配的
可以ping通
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-kmIYFuFr-1644912741970)(C:\Users\cheny\AppData\Roaming\Typora\typora-user-images\image-20211025111241985.png)]
原理
我们每启动一个容器，就会分配一个ip地址，分配的ip都是一对对的，是一对虚拟接口，一个是协议，一个是通信，evth-pair是一个桥梁。
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-rCqf3Kbx-1644912741970)(C:\Users\cheny\AppData\Roaming\Typora\typora-user-images\image-20211025112715711.png)]
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-jtwhjk0s-1644912741971)(C:\Users\cheny\AppData\Roaming\Typora\typora-user-images\image-20211025113203197.png)]
创建自己的网络
docker network create --driver bridge --subnet 192.168.0.0/16 --gateway 192.168.0.1 mynet
[root@alichen /]# docker run -d -P --name tomcat1 --net mynet tomcat
bade0da55afbd075f14f289f30aea90626fcb1a0cf169e97baa550eaa9591931
[root@alichen /]# docker run -d -P --name tomcat2 --net mynet tomcat
8162a79a80472767f06c8077c363ef6334830801d5d63a868f6d41150e7b2148
[root@alichen /]# docker exec -it tomcat1 ping tomcat2
PING tomcat2 (192.168.0.3) 56(84) bytes of data.
64 bytes from tomcat2.mynet (192.168.0.3): icmp_seq=1 ttl=64 time=0.081 ms
64 bytes from tomcat2.mynet (192.168.0.3): icmp_seq=2 ttl=64 time=0.075 ms
64 bytes from tomcat2.mynet (192.168.0.3): icmp_seq=3 ttl=64 time=0.074 ms
64 bytes from tomcat2.mynet (192.168.0.3): icmp_seq=4 ttl=64 time=0.075 ms
64 bytes from tomcat2.mynet (192.168.0.3): icmp_seq=5 ttl=64 time=0.076 ms
64 bytes from tomcat2.mynet (192.168.0.3): icmp_seq=6 ttl=64 time=0.077 ms
64 bytes from tomcat2.mynet (192.168.0.3): icmp_seq=7 ttl=64 time=0.073 ms
64 bytes from tomcat2.mynet (192.168.0.3): icmp_seq=8 ttl=64 time=0.070 ms
^C
--- tomcat2 ping statistics ---
创建自己的网络，把所有的容器互相连通，比docker0好用，已经帮我们维护好了对应的关系，推荐我们平时用这样的网络，
好处：
redis:不同的集群使用不同的网络，保证集群是安全和健康的
mysql：不同的集群使用不同的网络，保证集群是安全和健康的
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-8980Hiqg-1644912741971)(C:\Users\cheny\AppData\Roaming\Typora\typora-user-images\image-20211025154639946.png)]
跨网络连通需要用connect命令
docker network connect mynet tomcat01
docker exec -it tomcat01 ping tomcat1
实战部署redis
.075 ms
64 bytes from tomcat2.mynet (192.168.0.3): icmp_seq=3 ttl=64 time=0.074 ms
64 bytes from tomcat2.mynet (192.168.0.3): icmp_seq=4 ttl=64 time=0.075 ms
64 bytes from tomcat2.mynet (192.168.0.3): icmp_seq=5 ttl=64 time=0.076 ms
64 bytes from tomcat2.mynet (192.168.0.3): icmp_seq=6 ttl=64 time=0.077 ms
64 bytes from tomcat2.mynet (192.168.0.3): icmp_seq=7 ttl=64 time=0.073 ms
64 bytes from tomcat2.mynet (192.168.0.3): icmp_seq=8 ttl=64 time=0.070 ms
^C
— tomcat2 ping statistics —
创建自己的网络，把所有的容器互相连通，比docker0好用，已经帮我们维护好了对应的关系，推荐我们平时用这样的网络，
### 好处：
redis:不同的集群使用不同的网络，保证集群是安全和健康的
mysql：不同的集群使用不同的网络，保证集群是安全和健康的
[外链图片转存中...(img-8980Hiqg-1644912741971)]
```shell
跨网络连通需要用connect命令
docker network connect mynet tomcat01
docker exec -it tomcat01 ping tomcat1
862
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
