Docker容器

最新推荐文章于 2021-12-16 15:47:28 发布

wuychn

最新推荐文章于 2021-12-16 15:47:28 发布

阅读量289

点赞数 1

分类专栏： Docker

本文链接：https://blog.csdn.net/qmqm011/article/details/87951188

版权

Docker 专栏收录该内容

14 篇文章 1 订阅

订阅专栏

容器是Docker的另一个核心概念。简单来说，容器是镜像的一个运行实例。不同的是，镜像是静态的只读文件，而容器带有运行时需要的可写文件层，同时，容器中的应用进程处于运行状态。

一、创建容器

1.1、新建容器

可以使用docker create命令新建一个容器。该命令的使用方式如下：

root@ubuntu:~# docker create --help

Usage:  docker create [OPTIONS] IMAGE [COMMAND] [ARG...]

Create a new container

Options:
      --add-host list                  Add a custom host-to-IP mapping (host:ip)
  -a, --attach list                    Attach to STDIN, STDOUT or STDERR
      --blkio-weight uint16            Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)
      --blkio-weight-device list       Block IO weight (relative device weight) (default [])
      --cap-add list                   Add Linux capabilities
      --cap-drop list                  Drop Linux capabilities
      --cgroup-parent string           Optional parent cgroup for the container
      --cidfile string                 Write the container ID to the file
      --cpu-period int                 Limit CPU CFS (Completely Fair Scheduler) period
      --cpu-quota int                  Limit CPU CFS (Completely Fair Scheduler) quota
      --cpu-rt-period int              Limit CPU real-time period in microseconds
      --cpu-rt-runtime int             Limit CPU real-time runtime in microseconds
  -c, --cpu-shares int                 CPU shares (relative weight)
      --cpus decimal                   Number of CPUs
      --cpuset-cpus string             CPUs in which to allow execution (0-3, 0,1)
      --cpuset-mems string             MEMs in which to allow execution (0-3, 0,1)
      --device list                    Add a host device to the container
      --device-cgroup-rule list        Add a rule to the cgroup allowed devices list
      --device-read-bps list           Limit read rate (bytes per second) from a device (default [])
      --device-read-iops list          Limit read rate (IO per second) from a device (default [])
      --device-write-bps list          Limit write rate (bytes per second) to a device (default [])
      --device-write-iops list         Limit write rate (IO per second) to a device (default [])
      --disable-content-trust          Skip image verification (default true)
      --dns list                       Set custom DNS servers
      --dns-option list                Set DNS options
      --dns-search list                Set custom DNS search domains
      --entrypoint string              Overwrite the default ENTRYPOINT of the image
  -e, --env list                       Set environment variables
      --env-file list                  Read in a file of environment variables
      --expose list                    Expose a port or a range of ports
      --group-add list                 Add additional groups to join
      --health-cmd string              Command to run to check health
      --health-interval duration       Time between running the check (ms|s|m|h) (default 0s)
      --health-retries int             Consecutive failures needed to report unhealthy
      --health-start-period duration   Start period for the container to initialize before starting health-retries countdown (ms|s|m|h) (default 0s)
      --health-timeout duration        Maximum time to allow one check to run (ms|s|m|h) (default 0s)
      --help                           Print usage
  -h, --hostname string                Container host name
      --init                           Run an init inside the container that forwards signals and reaps processes
  -i, --interactive                    Keep STDIN open even if not attached
      --ip string                      IPv4 address (e.g., 172.30.100.104)
      --ip6 string                     IPv6 address (e.g., 2001:db8::33)
      --ipc string                     IPC mode to use
      --isolation string               Container isolation technology
      --kernel-memory bytes            Kernel memory limit
  -l, --label list                     Set meta data on a container
      --label-file list                Read in a line delimited file of labels
      --link list                      Add link to another container
      --link-local-ip list             Container IPv4/IPv6 link-local addresses
      --log-driver string              Logging driver for the container
      --log-opt list                   Log driver options
      --mac-address string             Container MAC address (e.g., 92:d0:c6:0a:29:33)
  -m, --memory bytes                   Memory limit
      --memory-reservation bytes       Memory soft limit
      --memory-swap bytes              Swap limit equal to memory plus swap: '-1' to enable unlimited swap
      --memory-swappiness int          Tune container memory swappiness (0 to 100) (default -1)
      --mount mount                    Attach a filesystem mount to the container
      --name string                    Assign a name to the container
      --network string                 Connect a container to a network (default "default")
      --network-alias list             Add network-scoped alias for the container
      --no-healthcheck                 Disable any container-specified HEALTHCHECK
      --oom-kill-disable               Disable OOM Killer
      --oom-score-adj int              Tune host's OOM preferences (-1000 to 1000)
      --pid string                     PID namespace to use
      --pids-limit int                 Tune container pids limit (set -1 for unlimited)
      --privileged                     Give extended privileges to this container
  -p, --publish list                   Publish a container's port(s) to the host
  -P, --publish-all                    Publish all exposed ports to random ports
      --read-only                      Mount the container's root filesystem as read only
      --restart string                 Restart policy to apply when a container exits (default "no")
      --rm                             Automatically remove the container when it exits
      --runtime string                 Runtime to use for this container
      --security-opt list              Security Options
      --shm-size bytes                 Size of /dev/shm
      --stop-signal string             Signal to stop a container (default "SIGTERM")
      --stop-timeout int               Timeout (in seconds) to stop a container
      --storage-opt list               Storage driver options for the container
      --sysctl map                     Sysctl options (default map[])
      --tmpfs list                     Mount a tmpfs directory
  -t, --tty                            Allocate a pseudo-TTY
      --ulimit ulimit                  Ulimit options (default [])
  -u, --user string                    Username or UID (format: <name|uid>[:<group|gid>])
      --userns string                  User namespace to use
      --uts string                     UTS namespace to use
  -v, --volume list                    Bind mount a volume
      --volume-driver string           Optional volume driver for the container
      --volumes-from list              Mount volumes from the specified container(s)
  -w, --workdir string                 Working directory inside the container

例如：

root@ubuntu:~# docker create -it ubuntu:18.04
392483f776206979827a9651376eec53adf435b57642edb1d6a465a54adaab94
root@ubuntu:~#
root@ubuntu:~#
root@ubuntu:~# docker ps -a
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
392483f77620        ubuntu:18.04        "/bin/bash"         4 seconds ago       Created                                 practical_proskuriakova

1.2、启动容器

使用docker create命令创建的容器处于停止状态，可以使用docker start命令启动它，该命令的使用方式如下：

root@ubuntu:~# docker start --help

Usage:  docker start [OPTIONS] CONTAINER [CONTAINER...]

Start one or more stopped containers

Options:
  -a, --attach               Attach STDOUT/STDERR and forward signals
      --detach-keys string   Override the key sequence for detaching a container
  -i, --interactive          Attach container's STDIN

例如，启动刚刚创建的容器：

root@ubuntu:~# docker ps -a
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
392483f77620        ubuntu:18.04        "/bin/bash"         6 minutes ago       Created                                 practical_proskuriakova
root@ubuntu:~#
root@ubuntu:~#
root@ubuntu:~#
root@ubuntu:~# docker start 392
392

可以通过docker ps命令查看一个运行中的容器：

root@ubuntu:~# docker ps
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
392483f77620        ubuntu:18.04        "/bin/bash"         7 minutes ago       Up 7 seconds                            practical_proskuriakova

1.3、新建并启动容器

除了创建容器后通过start命令来启动，也可以直接新建并启动容器，命令为：docker run。该命令的使用方式如下：

root@ubuntu:~# docker run --help

Usage:  docker run [OPTIONS] IMAGE [COMMAND] [ARG...]

Run a command in a new container

Options:
      --add-host list                  Add a custom host-to-IP mapping (host:ip)
  -a, --attach list                    Attach to STDIN, STDOUT or STDERR
      --blkio-weight uint16            Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)
      --blkio-weight-device list       Block IO weight (relative device weight) (default [])
      --cap-add list                   Add Linux capabilities
      --cap-drop list                  Drop Linux capabilities
      --cgroup-parent string           Optional parent cgroup for the container
      --cidfile string                 Write the container ID to the file
      --cpu-period int                 Limit CPU CFS (Completely Fair Scheduler) period
      --cpu-quota int                  Limit CPU CFS (Completely Fair Scheduler) quota
      --cpu-rt-period int              Limit CPU real-time period in microseconds
      --cpu-rt-runtime int             Limit CPU real-time runtime in microseconds
  -c, --cpu-shares int                 CPU shares (relative weight)
      --cpus decimal                   Number of CPUs
      --cpuset-cpus string             CPUs in which to allow execution (0-3, 0,1)
      --cpuset-mems string             MEMs in which to allow execution (0-3, 0,1)
  -d, --detach                         Run container in background and print container ID
      --detach-keys string             Override the key sequence for detaching a container
      --device list                    Add a host device to the container
      --device-cgroup-rule list        Add a rule to the cgroup allowed devices list
      --device-read-bps list           Limit read rate (bytes per second) from a device (default [])
      --device-read-iops list          Limit read rate (IO per second) from a device (default [])
      --device-write-bps list          Limit write rate (bytes per second) to a device (default [])
      --device-write-iops list         Limit write rate (IO per second) to a device (default [])
      --disable-content-trust          Skip image verification (default true)
      --dns list                       Set custom DNS servers
      --dns-option list                Set DNS options
      --dns-search list                Set custom DNS search domains
      --entrypoint string              Overwrite the default ENTRYPOINT of the image
  -e, --env list                       Set environment variables
      --env-file list                  Read in a file of environment variables
      --expose list                    Expose a port or a range of ports
      --group-add list                 Add additional groups to join
      --health-cmd string              Command to run to check health
      --health-interval duration       Time between running the check (ms|s|m|h) (default 0s)
      --health-retries int             Consecutive failures needed to report unhealthy
      --health-start-period duration   Start period for the container to initialize before starting health-retries countdown (ms|s|m|h) (default 0s)
      --health-timeout duration        Maximum time to allow one check to run (ms|s|m|h) (default 0s)
      --help                           Print usage
  -h, --hostname string                Container host name
      --init                           Run an init inside the container that forwards signals and reaps processes
  -i, --interactive                    Keep STDIN open even if not attached
      --ip string                      IPv4 address (e.g., 172.30.100.104)
      --ip6 string                     IPv6 address (e.g., 2001:db8::33)
      --ipc string                     IPC mode to use
      --isolation string               Container isolation technology
      --kernel-memory bytes            Kernel memory limit
  -l, --label list                     Set meta data on a container
      --label-file list                Read in a line delimited file of labels
      --link list                      Add link to another container
      --link-local-ip list             Container IPv4/IPv6 link-local addresses
      --log-driver string              Logging driver for the container
      --log-opt list                   Log driver options
      --mac-address string             Container MAC address (e.g., 92:d0:c6:0a:29:33)
  -m, --memory bytes                   Memory limit
      --memory-reservation bytes       Memory soft limit
      --memory-swap bytes              Swap limit equal to memory plus swap: '-1' to enable unlimited swap
      --memory-swappiness int          Tune container memory swappiness (0 to 100) (default -1)
      --mount mount                    Attach a filesystem mount to the container
      --name string                    Assign a name to the container
      --network string                 Connect a container to a network (default "default")
      --network-alias list             Add network-scoped alias for the container
      --no-healthcheck                 Disable any container-specified HEALTHCHECK
      --oom-kill-disable               Disable OOM Killer
      --oom-score-adj int              Tune host's OOM preferences (-1000 to 1000)
      --pid string                     PID namespace to use
      --pids-limit int                 Tune container pids limit (set -1 for unlimited)
      --privileged                     Give extended privileges to this container
  -p, --publish list                   Publish a container's port(s) to the host
  -P, --publish-all                    Publish all exposed ports to random ports
      --read-only                      Mount the container's root filesystem as read only
      --restart string                 Restart policy to apply when a container exits (default "no")
      --rm                             Automatically remove the container when it exits
      --runtime string                 Runtime to use for this container
      --security-opt list              Security Options
      --shm-size bytes                 Size of /dev/shm
      --sig-proxy                      Proxy received signals to the process (default true)
      --stop-signal string             Signal to stop a container (default "SIGTERM")
      --stop-timeout int               Timeout (in seconds) to stop a container
      --storage-opt list               Storage driver options for the container
      --sysctl map                     Sysctl options (default map[])
      --tmpfs list                     Mount a tmpfs directory
  -t, --tty                            Allocate a pseudo-TTY
      --ulimit ulimit                  Ulimit options (default [])
  -u, --user string                    Username or UID (format: <name|uid>[:<group|gid>])
      --userns string                  User namespace to use
      --uts string                     UTS namespace to use
  -v, --volume list                    Bind mount a volume
      --volume-driver string           Optional volume driver for the container
      --volumes-from list              Mount volumes from the specified container(s)
  -w, --workdir string                 Working directory inside the container

例如，下面的命令输出一个hello world，之后容器自动终止：

root@ubuntu:~# docker run ubuntu:18.04 /bin/echo 'Hello World'
Hello World

下面的命令启动一个bash终端，允许用户进行交互：

root@ubuntu:~# docker run -it ubuntu:18.04 /bin/bash
root@d9fe213dbaba:/#

其中，-t表示让Docker分配一个伪终端（pseudo-tty）并绑定到容器的标准输入上，-i则让容器的标准输入保持打开。在交互模式下，可以通过创建的终端输入命令：

root@d9fe213dbaba:/# pwd
/
root@d9fe213dbaba:/#
root@d9fe213dbaba:/# ls
bin  boot  dev  etc  home  lib  lib64  media  mnt  opt  proc  root  run  sbin  srv  sys  tmp  usr  var
root@d9fe213dbaba:/#
root@d9fe213dbaba:/#
root@d9fe213dbaba:/# ps
   PID TTY          TIME CMD
     1 pts/0    00:00:00 bash
    13 pts/0    00:00:00 ps

可以通过ctrl+d或输入exit命令退出容器：

root@b54c6700c2f5:/# exit
exit

1.4、守护态运行

更多的时候，需要让docker容器在后台以守护态（daemon）形式运行，此时可以通过添加-d参数实现。例如，下面的命令会在后台运行容器：

root@ubuntu:~# docker run -d ubuntu:18.04 /bin/sh -c "while true;do echo hello world; sleep 1; done"
7a17b402c6f13247e9d50a4bbd46994974e92d695df5f2a2bbabd211f114aa29

容器启动后会返回一个唯一id，可以通过docker ps或docker container ls命令查看容器信息：

root@ubuntu:~# docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS               NAMES
6e2147d9b059        ubuntu              "/bin/sh -c 'while t…"   14 seconds ago      Up 13 seconds                           elastic_hypatia
root@ubuntu:~#
root@ubuntu:~#
root@ubuntu:~#
root@ubuntu:~# docker container ls
CONTAINER ID        IMAGE               COMMAND                  CREATED              STATUS              PORTS               NAMES
6e2147d9b059        ubuntu              "/bin/sh -c 'while t…"   About a minute ago   Up About a minute                       elastic_hypatia

1.5、查看容器输出

可以通过docker logs命令获取容器的输出信息，该命令的使用方式如下：

root@ubuntu:~# docker logs --help

Usage:  docker logs [OPTIONS] CONTAINER

Fetch the logs of a container

Options:
      --details        Show extra details provided to logs
  -f, --follow         Follow log output
      --since string   Show logs since timestamp (e.g. 2013-01-02T13:23:37) or relative (e.g. 42m for 42 minutes)
      --tail string    Number of lines to show from the end of the logs (default "all")
  -t, --timestamps     Show timestamps
      --until string   Show logs before a timestamp (e.g. 2013-01-02T13:23:37) or relative (e.g. 42m for 42 minutes)

例如：

root@ubuntu:~# docker logs 7a1
hello world
hello world
hello world
hello world
hello world
hello world
......

2、停止容器

2.1、暂停容器

可以使用docker pause命令来暂停一个运行中的容器。该命令的使用方式如下：

root@ubuntu:~# docker pause --help

Usage:  docker pause CONTAINER [CONTAINER...]

Pause all processes within one or more containers

例如：

root@ubuntu:~# docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS               NAMES
7a17b402c6f1        ubuntu:18.04        "/bin/sh -c 'while t…"   19 minutes ago      Up 19 minutes                           objective_euler
root@ubuntu:~#
root@ubuntu:~#
root@ubuntu:~#
root@ubuntu:~# docker pause 7a1
7a1
root@ubuntu:~#
root@ubuntu:~#
root@ubuntu:~# docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS                   PORTS               NAMES
7a17b402c6f1        ubuntu:18.04        "/bin/sh -c 'while t…"   19 minutes ago      Up 19 minutes (Paused)                       objective_euler

处于paused状态的容器，可以使用docker unpause命令恢复到运行状态。docker unpause命令的使用方式如下：

root@ubuntu:~# docker unpause --help

Usage:  docker unpause CONTAINER [CONTAINER...]

Unpause all processes within one or more containers

例如：

root@ubuntu:~# docker unpause 7a1
7a1
root@ubuntu:~#
root@ubuntu:~#
root@ubuntu:~# docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS               NAMES
7a17b402c6f1        ubuntu:18.04        "/bin/sh -c 'while t…"   22 minutes ago      Up 22 minutes                           objective_euler

2.2、终止容器

可以使用docker stop命令来终止一个运行中的容器。该命令的使用方式如下：

root@ubuntu:~# docker stop --help

Usage:  docker stop [OPTIONS] CONTAINER [CONTAINER...]

Stop one or more running containers

Options:
  -t, --time int   Seconds to wait for stop before killing it (default 10)

例如：

root@ubuntu:~# docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS               NAMES
7a17b402c6f1        ubuntu:18.04        "/bin/sh -c 'while t…"   31 minutes ago      Up 31 minutes                           objective_euler
root@ubuntu:~#
root@ubuntu:~#
root@ubuntu:~# docker stop 7a1
7a1

此时，执行docker container prune命令会自动清除掉所有处于停止状态的容器：

root@ubuntu:~# docker container prune
WARNING! This will remove all stopped containers.
Are you sure you want to continue? [y/N] y
Deleted Containers:
7a17b402c6f13247e9d50a4bbd46994974e92d695df5f2a2bbabd211f114aa29
d9fe213dbabaabe7d9361e80c39b1366d9601f0e4eb3b26f801b14ced1929ea0
a2406f04642b725041c357d013aa58a28197d5676b3100f614c4e6460f34055a

Total reclaimed space: 519B

处于停止状态的容器，可以通过docker [container] 命令重新启动：

2.3、重新启动容器

docker restart命令会将一个运行状态的容器先终止，然后再重新启动，该命令的使用方式如下：

root@ubuntu:~# docker restart --help

Usage:  docker restart [OPTIONS] CONTAINER [CONTAINER...]

Restart one or more containers

Options:
  -t, --time int   Seconds to wait for stop before killing the container (default 10)

三、进入容器

在使用-d参数时，容器启动后会进入后台，用户无法看到容器中的信息，也无法进行操作。这时如果需要进入容器进行操作，可以使用attach或exec命令。

3.1、attach命令

该命令的使用方式如下：

root@ubuntu:~# docker attach --help

Usage:  docker attach [OPTIONS] CONTAINER

Attach local standard input, output, and error streams to a running container

Options:
      --detach-keys string   Override the key sequence for detaching a container
      --no-stdin             Do not attach STDIN
      --sig-proxy            Proxy all received signals to the process (default true)

例如：

root@ubuntu:~# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
ubuntu              18.04               47b19964fb50        4 weeks ago         88.1MB
root@ubuntu:~#
root@ubuntu:~# docker run -itd ubuntu:18.04
3ff7a10cbb1dc96217230f35f2225d4b567531deb8447dd781e951e085354cc1
root@ubuntu:~#
root@ubuntu:~# docker ps
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
3ff7a10cbb1d        ubuntu:18.04        "/bin/bash"         13 seconds ago      Up 12 seconds                           eloquent_tharp
root@ubuntu:~#
root@ubuntu:~#
root@ubuntu:~# docker attach 3ff
root@3ff7a10cbb1d:/#
root@3ff7a10cbb1d:/#
root@3ff7a10cbb1d:/#

使用attach命令有时候并不方便：当多个窗口同时attach到同一个容器的时候，多个窗口会同步显示；当某个窗口因命令阻塞时，其他窗口也不能操作了。

3.2、exec命令

从Docker 1.3.0开始，Docker提供了一个更加方便的exec命令，可以在运行的容器内直接执行任意命令。该命令的使用方式如下：

root@ubuntu:~# docker exec --help

Usage:  docker exec [OPTIONS] CONTAINER COMMAND [ARG...]

Run a command in a running container

Options:
  -d, --detach               Detached mode: run command in the background
      --detach-keys string   Override the key sequence for detaching a container
  -e, --env list             Set environment variables
  -i, --interactive          Keep STDIN open even if not attached
      --privileged           Give extended privileges to the command
  -t, --tty                  Allocate a pseudo-TTY
  -u, --user string          Username or UID (format: <name|uid>[:<group|gid>])
  -w, --workdir string       Working directory inside the container

例如，启动一个容器，并启动一个bash：

root@ubuntu:~# docker start 3ff
3ff
root@ubuntu:~#
root@ubuntu:~# docker exec -it 3ff /bin/bash
root@3ff7a10cbb1d:/#

四、删除容器

可以使用docker rm命令来删除一个容器，该命令的使用方式如下：

root@ubuntu:~# docker rm --help

Usage:  docker rm [OPTIONS] CONTAINER [CONTAINER...]

Remove one or more containers

Options:
  -f, --force     Force the removal of a running container (uses SIGKILL)
  -l, --link      Remove the specified link
  -v, --volumes   Remove the volumes associated with the container

例如，下面的命令用于删除一个容器：

root@ubuntu:~# docker ps -a
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS                     PORTS               NAMES
3ff7a10cbb1d        ubuntu:18.04        "/bin/bash"         8 minutes ago       Exited (0) 4 seconds ago                       eloquent_tharp
root@ubuntu:~#
root@ubuntu:~# docker rm 3ff
3ff
root@ubuntu:~#
root@ubuntu:~# docker ps -a
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES

如果删除一个运行中的容器会提示如下错误：

Error response from daemon: You cannot remove a running container 6b9f7161defd53241b466e61ee9854e8c632522f8207db96bb3efbae4bfab55d. Stop the container before attempting removal or force remove

此时可以指定-f强制删除：

root@ubuntu:~# docker rm -f 6b9f7161defd
6b9f7161defd

五、导入和导出容器

有时需要将容器从一个系统迁移到另一个系统，此时可以使用Docker的导入和导出功能，这也是Docker自身提供的一个重要特性。

5.1、导出容器

导出容器是指，导出一个已经创建的容器到一个文件，不管此时这个容器是否处于运行状态。可以使用docker export命令，该命令的使用方式为：

root@ubuntu:~# docker export --help

Usage:  docker export [OPTIONS] CONTAINER

Export a container's filesystem as a tar archive

Options:
  -o, --output string   Write to a file, instead of STDOUT

例如：

root@ubuntu:~# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
ubuntu              18.04               47b19964fb50        4 weeks ago         88.1MB
root@ubuntu:~#
root@ubuntu:~#
root@ubuntu:~# docker create ubuntu:18.04
05865612f4bb0e5941709ec98bbe24aea9963e932674bf74938c1960607bb849
root@ubuntu:~#
root@ubuntu:~# docker export -o ubuntu_18.04.tar 058

之后，可以将导出的tar文件传输到其他机器上，然后通过导入命令导入到系统，实现容器的迁移。

5.2、导入容器

导出的文件可以使用如下docker import命令导入变成镜像，该命令的使用方式如下：

root@ubuntu:~# docker import --help

Usage:  docker import [OPTIONS] file|URL|- [REPOSITORY[:TAG]]

Import the contents from a tarball to create a filesystem image

Options:
  -c, --change list      Apply Dockerfile instruction to the created image
  -m, --message string   Set commit message for imported image

可以通过-c选项在导入的同时执行对容器进行修改的Dockerfile指令。

例如，将导出的ubuntu_18.04.tar文件导入到系统中：

root@ubuntu:~# docker import ubuntu_18.04.tar test:1.0
sha256:2ab4b4c91d977108f9ffe52f1bb9e86049c04c459ad764463bb7bcf51cc11b39
root@ubuntu:~#
root@ubuntu:~#
root@ubuntu:~# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
test                1.0                 2ab4b4c91d97        3 seconds ago       69.8MB
ubuntu              18.04               47b19964fb50        4 weeks ago         88.1MB

前面学习过使用docker load来导入镜像文件，与docker import十分相似。实际上，既可以使用docker load命令来导入镜像存储文件到本地镜像库，也可以使用docker import命令来导入一个容器快照到本地镜像库。二者的区别是：容器快照文件将丢弃所有的历史记录和元数据信息（即仅保存容器当时的快照状态），而镜像存储文件将保存完整记录，体积更大。此外，从容器快照文件导入时可以重新指定标签等元数据信息。

六、查看容器

6.1、查看容器详情

查看容器详情可以使用docker inspect命令。该命令的使用方式如下：

root@ubuntu:~# docker inspect --help

Usage:  docker inspect [OPTIONS] NAME|ID [NAME|ID...]

Return low-level information on Docker objects

Options:
  -f, --format string   Format the output using the given Go template
  -s, --size            Display total file sizes if the type is container
      --type string     Return JSON for specified type

例如，查看某容器的具体信息，会以JSON格式返回包含容器ID、创建时间、路径、状态、镜像、配置等在内的各项信息：

root@ubuntu:~# docker ps -a
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
05865612f4bb        ubuntu:18.04        "/bin/bash"         27 minutes ago      Created                                 relaxed_sammet
root@ubuntu:~#
root@ubuntu:~#
root@ubuntu:~# docker inspect 058
[
    {
        "Id": "05865612f4bb0e5941709ec98bbe24aea9963e932674bf74938c1960607bb849",
        "Created": "2019-03-09T07:52:47.223262729Z",
        "Path": "/bin/bash",
        "Args": [],
        "State": {
            "Status": "created",
            "Running": false,
            "Paused": false,
            "Restarting": false,
            "OOMKilled": false,
            "Dead": false,
            "Pid": 0,
            "ExitCode": 0,
            "Error": "",
            "StartedAt": "0001-01-01T00:00:00Z",
            "FinishedAt": "0001-01-01T00:00:00Z"
        },
        "Image": "sha256:47b19964fb500f3158ae57f20d16d8784cc4af37c52c49d3b4f5bc5eede49541",
        "ResolvConfPath": "",
        "HostnamePath": "",
        "HostsPath": "",
        "LogPath": "",
        "Name": "/relaxed_sammet",
        "RestartCount": 0,
        "Driver": "overlay2",
        "Platform": "linux",
        "MountLabel": "",
        "ProcessLabel": "",
        "AppArmorProfile": "",
        "ExecIDs": null,
        "HostConfig": {
            "Binds": null,
            "ContainerIDFile": "",
            "LogConfig": {
                "Type": "json-file",
                "Config": {}
            },
            "NetworkMode": "default",
            "PortBindings": {},
            "RestartPolicy": {
                "Name": "no",
                "MaximumRetryCount": 0
            },
            "AutoRemove": false,
            "VolumeDriver": "",
            "VolumesFrom": null,
            "CapAdd": null,
            "CapDrop": null,
            "Dns": [],
            "DnsOptions": [],
            "DnsSearch": [],
            "ExtraHosts": null,
            "GroupAdd": null,
            "IpcMode": "shareable",
            "Cgroup": "",
            "Links": null,
            "OomScoreAdj": 0,
            "PidMode": "",
            "Privileged": false,
            "PublishAllPorts": false,
            "ReadonlyRootfs": false,
            "SecurityOpt": null,
            "UTSMode": "",
            "UsernsMode": "",
            "ShmSize": 67108864,
            "Runtime": "runc",
            "ConsoleSize": [
                0,
                0
            ],
            "Isolation": "",
            "CpuShares": 0,
            "Memory": 0,
            "NanoCpus": 0,
            "CgroupParent": "",
            "BlkioWeight": 0,
            "BlkioWeightDevice": [],
            "BlkioDeviceReadBps": null,
            "BlkioDeviceWriteBps": null,
            "BlkioDeviceReadIOps": null,
            "BlkioDeviceWriteIOps": null,
            "CpuPeriod": 0,
            "CpuQuota": 0,
            "CpuRealtimePeriod": 0,
            "CpuRealtimeRuntime": 0,
            "CpusetCpus": "",
            "CpusetMems": "",
            "Devices": [],
            "DeviceCgroupRules": null,
            "DiskQuota": 0,
            "KernelMemory": 0,
            "MemoryReservation": 0,
            "MemorySwap": 0,
            "MemorySwappiness": null,
            "OomKillDisable": false,
            "PidsLimit": 0,
            "Ulimits": null,
            "CpuCount": 0,
            "CpuPercent": 0,
            "IOMaximumIOps": 0,
            "IOMaximumBandwidth": 0,
            "MaskedPaths": [
                "/proc/asound",
                "/proc/acpi",
                "/proc/kcore",
                "/proc/keys",
                "/proc/latency_stats",
                "/proc/timer_list",
                "/proc/timer_stats",
                "/proc/sched_debug",
                "/proc/scsi",
                "/sys/firmware"
            ],
            "ReadonlyPaths": [
                "/proc/bus",
                "/proc/fs",
                "/proc/irq",
                "/proc/sys",
                "/proc/sysrq-trigger"
            ]
        },
        "GraphDriver": {
            "Data": {
                "LowerDir": "/var/lib/docker/overlay2/b2398fb966604f885cae8283b9ca7765df9c6a662c62979f622ec0c261f8e1c6-init/diff:/var/lib/docker/overlay2/19935341c475a04227fc7c9bf8b7cd0d36f4d2d5ec9ccf7a6ef8e1e96335ca22/diff:/var/lib/docker/overlay2/b7cb3e3de242813c52dc16ddaceee2457dc8dfca7485e37ac27b53052df478d8/diff:/var/lib/docker/overlay2/4c2826b582058dad2a6fe53c9df3bd1dd770f0fe520b4eb5666077e331a1c429/diff:/var/lib/docker/overlay2/9d76188495a8498dace358a0ba5fd489d9cefbbf95aaeb1cae5aa0c5ad94c251/diff",
                "MergedDir": "/var/lib/docker/overlay2/b2398fb966604f885cae8283b9ca7765df9c6a662c62979f622ec0c261f8e1c6/merged",
                "UpperDir": "/var/lib/docker/overlay2/b2398fb966604f885cae8283b9ca7765df9c6a662c62979f622ec0c261f8e1c6/diff",
                "WorkDir": "/var/lib/docker/overlay2/b2398fb966604f885cae8283b9ca7765df9c6a662c62979f622ec0c261f8e1c6/work"
            },
            "Name": "overlay2"
        },
        "Mounts": [],
        "Config": {
            "Hostname": "05865612f4bb",
            "Domainname": "",
            "User": "",
            "AttachStdin": false,
            "AttachStdout": true,
            "AttachStderr": true,
            "Tty": false,
            "OpenStdin": false,
            "StdinOnce": false,
            "Env": [
                "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
            ],
            "Cmd": [
                "/bin/bash"
            ],
            "ArgsEscaped": true,
            "Image": "ubuntu:18.04",
            "Volumes": null,
            "WorkingDir": "",
            "Entrypoint": null,
            "OnBuild": null,
            "Labels": {}
        },
        "NetworkSettings": {
            "Bridge": "",
            "SandboxID": "",
            "HairpinMode": false,
            "LinkLocalIPv6Address": "",
            "LinkLocalIPv6PrefixLen": 0,
            "Ports": {},
            "SandboxKey": "",
            "SecondaryIPAddresses": null,
            "SecondaryIPv6Addresses": null,
            "EndpointID": "",
            "Gateway": "",
            "GlobalIPv6Address": "",
            "GlobalIPv6PrefixLen": 0,
            "IPAddress": "",
            "IPPrefixLen": 0,
            "IPv6Gateway": "",
            "MacAddress": "",
            "Networks": {
                "bridge": {
                    "IPAMConfig": null,
                    "Links": null,
                    "Aliases": null,
                    "NetworkID": "",
                    "EndpointID": "",
                    "Gateway": "",
                    "IPAddress": "",
                    "IPPrefixLen": 0,
                    "IPv6Gateway": "",
                    "GlobalIPv6Address": "",
                    "GlobalIPv6PrefixLen": 0,
                    "MacAddress": "",
                    "DriverOpts": null
                }
            }
        }
    }
]

6.2、查看容器内进程

查看容器内进程可以使用docker top命令，该命令类似于Linux中的top命令，会打印出容器内的进程信息，使用方式如下：

root@ubuntu:~# docker top --help

Usage:  docker top CONTAINER [ps OPTIONS]

Display the running processes of a container

例如：

root@ubuntu:~# docker run -itd ubuntu:18.04 /bin/bash
315708ee6e7d6f8c5c733bef1aa5ca7a64cd14f667a66db1f71576692e503647
root@ubuntu:~#
root@ubuntu:~#
root@ubuntu:~#
root@ubuntu:~# docker top 315
UID                 PID                 PPID                C                   STIME               TTY                 TIME                CMD
root                6844                6827                0                   00:24               pts/0               00:00:00            /bin/bash

6.3、查看统计信息

查看统计信息可以使用docker stats命令，会显示CPU、内存、存储、网络等统计信息，该命令的使用方式如下：

root@ubuntu:~# docker stats --help

Usage:  docker stats [OPTIONS] [CONTAINER...]

Display a live stream of container(s) resource usage statistics

Options:
  -a, --all             Show all containers (default shows just running)
      --format string   Pretty-print images using a Go template
      --no-stream       Disable streaming stats and only pull the first result
      --no-trunc        Do not truncate output

例如：

root@ubuntu:~# docker stats
CONTAINER ID        NAME                CPU %               MEM USAGE / LIMIT   MEM %               NET I/O             BLOCK I/O           PIDS
315708ee6e7d        adoring_buck        0.00%               408KiB / 1.936GiB   0.02%               3.37kB / 0B         0B / 0B             1

七、其他容器命令

7.1、复制文件

docker cp命令支持在容器和主机之间复制文件。该命令的使用方式如下：

root@ubuntu:~# docker cp --help

Usage:  docker cp [OPTIONS] CONTAINER:SRC_PATH DEST_PATH|-
        docker cp [OPTIONS] SRC_PATH|- CONTAINER:DEST_PATH

Copy files/folders between a container and the local filesystem

Options:
  -a, --archive       Archive mode (copy all uid/gid information)
  -L, --follow-link   Always follow symbol link in SRC_PATH

例如，将本地的data目录复制到容器的/tmp目录下：

root@ubuntu:~# docker ps -a
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
892a12a5a44b        cef201641cc5        "/bin/bash"         17 minutes ago      Up 14 minutes                           gifted_lichterman
root@ubuntu:~#
root@ubuntu:~# ll
total 70668
drwx------  4 root root     4096 Mar  1 23:59 ./
drwxr-xr-x 24 root root     4096 Feb 24 02:33 ../
-rw-------  1 root root    22207 Feb 28 05:08 .bash_history
-rw-r--r--  1 root root     3106 Oct 22  2015 .bashrc
drwx------  2 root root     4096 Feb 24 02:25 .cache/
drwxr-xr-x  2 root root     4096 Mar  1 23:59 data/
-rw-r--r--  1 root root      148 Aug 17  2015 .profile
-rw-------  1 root root 72299008 Feb 28 05:06 ubuntu.tar
-rw-r--r--  1 root root      170 Feb 24 02:30 .wget-hsts
root@ubuntu:~#
root@ubuntu:~# docker cp data 892a12a5a44b:/tmp
root@ubuntu:~#
root@ubuntu:~# docker exec -it 892a12a5a44b /bin/bash
root@892a12a5a44b:/#
root@892a12a5a44b:/# ll /tmp
total 12
drwxrwxrwt 1 root root 4096 Mar  2 08:06 ./
drwxr-xr-x 1 root root 4096 Mar  2 07:48 ../
drwxr-xr-x 2 root root 4096 Mar  2 07:59 data/
root@892a12a5a44b:/#

7.2、查看变更

docker diff命令用于查看容器内文件系统的变更，该命令使用方式为：

root@ubuntu:~# docker diff --help

Usage:  docker diff CONTAINER

Inspect changes to files or directories on a container's filesystem

例如，查看容器内的数据修改：

root@ubuntu:~# docker ps -a
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
892a12a5a44b        cef201641cc5        "/bin/bash"         19 minutes ago      Up 17 minutes                           gifted_lichterman
root@ubuntu:~#
root@ubuntu:~# docker diff 892a12a5a44b
C /root
A /root/.bash_history
C /tmp
A /tmp/data

7.3、查看端口映射

docker port命令可以查看容器的端口映射情况。格式为：

root@ubuntu:~# docker port --help

Usage:  docker port CONTAINER [PRIVATE_PORT[/PROTO]]

List port mappings or a specific mapping for the container

例如：

root@ubuntu:~# docker ps -a
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
892a12a5a44b        cef201641cc5        "/bin/bash"         24 minutes ago      Up 21 minutes                           gifted_lichterman
root@ubuntu:~#
root@ubuntu:~#
root@ubuntu:~# docker port 892a12a5a44b

7.4、更新配置

docker update命令可以更新容器的一些运行时配置，格式为：

root@ubuntu:~# docker update --help

Usage:  docker update [OPTIONS] CONTAINER [CONTAINER...]

Update configuration of one or more containers

Options:
      --blkio-weight uint16        Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)
      --cpu-period int             Limit CPU CFS (Completely Fair Scheduler) period
      --cpu-quota int              Limit CPU CFS (Completely Fair Scheduler) quota
      --cpu-rt-period int          Limit the CPU real-time period in microseconds
      --cpu-rt-runtime int         Limit the CPU real-time runtime in microseconds
  -c, --cpu-shares int             CPU shares (relative weight)
      --cpus decimal               Number of CPUs
      --cpuset-cpus string         CPUs in which to allow execution (0-3, 0,1)
      --cpuset-mems string         MEMs in which to allow execution (0-3, 0,1)
      --kernel-memory bytes        Kernel memory limit
  -m, --memory bytes               Memory limit
      --memory-reservation bytes   Memory soft limit
      --memory-swap bytes          Swap limit equal to memory plus swap: '-1' to enable unlimited swap
      --restart string             Restart policy to apply when a container exits

例如，限制总配额为1秒，容器所占用的时间为10%：

root@ubuntu:~# docker update --cpu-quota 1000000 892a12a5a44b
892a12a5a44b
root@ubuntu:~#
root@ubuntu:~# docker update --cpu-period 1000000 892a12a5a44b
892a12a5a44b

wuychn

关注

1
点赞
踩
0

收藏

觉得还不错? 一键收藏
0
评论
Docker容器

容器是Docker的另一个核心概念。简单来说，容器是镜像的一个运行实例。不同的是，镜像是静态的只读文件，而容器带有运行时需要的可写文件层，同时，容器中的应用进程处于运行状态。一、创建容器1.1、新建容器可以使用dockercreate命令新建一个容器。该命令的使用方式如下：root@ubuntu:~# docker create --helpUsage: docker c...
复制链接

扫一扫

专栏目录