Docker常用知识点总结(持续更新)
目录
MySQL相关
- 创建MySQL容器,并使用Navigator连接
localhost:~ # docker run --name mysql -e MYSQL_ROOT_PASSWORD=changeme -d -p 3306:3306 mysql:latest
101ef9ff09cdb9c0312d4fb980256065072d795a48f7598fbb30a3f1b871aca3
localhost:~ # docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
101ef9ff09cd mysql:latest "docker-entrypoint.s…" 2 seconds ago Up 1 second 0.0.0.0:3306->3306/tcp, 33060/tcp mysql
localhost:~ # docker exec -it 101ef9ff09cd /bin/bash
root@101ef9ff09cd:/# mysql -uroot -p
Enter password:
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 10
Server version: 8.0.24 MySQL Community Server - GPL
Copyright (c) 2000, 2021, Oracle and/or its affiliates.
Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
mysql> select Host,User,Plugin from mysql.user;
+-----------+------------------+-----------------------+
| Host | User | Plugin |
+-----------+------------------+-----------------------+
| % | root | caching_sha2_password |
| localhost | mysql.infoschema | caching_sha2_password |
| localhost | mysql.session | caching_sha2_password |
| localhost | mysql.sys | caching_sha2_password |
| localhost | root | caching_sha2_password |
+-----------+------------------+-----------------------+
5 rows in set (0.01 sec)
mysql> ALTER USER 'root'@'%' IDENTIFIED WITH mysql_native_password BY 'changeme';
Query OK, 0 rows affected (0.03 sec)
mysql> flush privileges;
Query OK, 0 rows affected (0.00 sec)
mysql> exit
Bye
root@101ef9ff09cd:/# exit
exit
注意:默认的加密方式是caching_sha2_password,需要改为mysql_native_password,否则客户端可能连接不上。
Nginx相关
Docker中启动Nginx容器,Nginx容器提供文件下载功能。
两种方式,
一:覆盖 /etc/nginx/conf.d 中的内容,
准备nginx_download.conf,
server {
listen 80;
server_name _;
# Load configuration files for the default server block.
include /etc/nginx/default.d/*.conf;
# limit_rate 50k;
location / {
root /usr/share/nginx/html/download;
autoindex on;
autoindex_exact_size off;
#autoindex_localtime on;
charset utf-8;
}
error_page 404 /404.html;
location = /40x.html {
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
}
}
启动容器:
docker run -d --name nginx -p 80:80 -v /root/test_docker/nginx:/usr/share/nginx/html/download -v /data/nginx/conf.d:/etc/nginx/conf.d nginx
二:覆盖全局配置nginx.conf
准备nginx.conf,
user root;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /var/run/nginx.pid;
include /usr/share/nginx/modules/*.conf;
events {
worker_connections 1024;
}
http {
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
access_log /var/log/nginx/access.log main;
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 65;
types_hash_max_size 2048;
default_type application/octet-stream;
# Load modular configuration files from the /etc/nginx/conf.d directory.
# See http://nginx.org/en/docs/ngx_core_module.html#include
# for more information.
include /etc/nginx/conf.d/*.conf;
server {
listen 80;
server_name _;
# Load configuration files for the default server block.
include /etc/nginx/default.d/*.conf;
# limit_rate 50k;
location / {
root /usr/share/nginx/html/download;
autoindex on;
autoindex_exact_size off;
#autoindex_localtime on;
charset utf-8;
}
error_page 404 /404.html;
location = /40x.html {
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
}
}
}
关键的配置是下面这个,需要打开autoindex功能,
location / {
root /usr/share/nginx/html/download;
autoindex on;
autoindex_exact_size off;
#autoindex_localtime on;
charset utf-8;
}
启动容器:
docker run -d --name nginx -p 80:80 -v /root/test_docker/nginx/nginx.conf:/etc/nginx/nginx.conf -v /root/test_docker/nginx:/usr/share/nginx/html/download -v /data/nginx/conf.d:/etc/nginx/conf.d nginx
注意,上面命令中覆盖了默认的conf.d中的内容,此时清空了原conf.d中的内容,
-v /data/nginx/conf.d:/etc/nginx/conf.d
镜像仓库相关
查询所有镜像仓库:
http://IP:5500/v2/_catalog
查询所有镜像的标签:
http://IP:5500/v2/ubuntu/tags/list
查询某个镜像的SHA256:
curl --header "Accept:application/vnd.docker.distribution.manifest.v2+json" -I -XGET http://IP:5500/v2/<REP>/manifests/<TAG>
配置Nginx为HTTPS模式
参考:
docker nginx 配置https - 简书
使用OpenSSL生成/签发证书的原理、流程与示例_openssl生成证书-CSDN博客学习Nginx这一篇就够了