docker
1.Docker
1.1 Docker介绍
- 官网 www.docker.com
- github https://github.com/docker/docker.github.io
- 开源的容器引擎，可以让开发者打包应用以及依赖的库，然后发布到任何流行的linux发行版上，移植很方便
- 由go语言编写，基于apache2.0协议发布
- 基于linux kernel，要想在win下运行需要借助一个vm（虚拟机）来实现
- 自2013年开始，近些年发展迅猛
- docker从1.13x开始，版本分为社区版ce和企业版ee，并且基于年月的时间线形式，当前最新稳定版为19.03
- 参考http://blog.csdn.net/chenhaifeng2016/article/details/68062414
1.2 Docker和传统的虚拟化比较
1.3 Docker的优势
- 启动非常快，秒级实现
- 资源利用率高，一台高配置服务器可以跑上千个docker容器
- 更快的交付和部署，一次创建和配置后，可以在任意地方运行
- 内核级别的虚拟化，不需要额外的hypevisor支持，会有更高的性能和效率
- 易迁移，平台依赖性不强
1.4 Docker核心概念
- 镜像，是一个只读的模板，类似于安装系统用到的那个iso文件，我们通过镜像来完成各种应用的部署。
- 容器，镜像类似于操作系统，而容器类似于虚拟机本身。它可以被启动、开始、停止、删除等操作，每个容器都是相互隔离的。
- 仓库，存放镜像的一个场所，仓库分为公开仓库和私有仓库。 最大的公开仓库是Docker hub（hub.docker.com），国内公开仓库（dockerpool.com）
2.Docker的安装
- 下载docker的源，系统中其实也是已经包含了docker的源，只不过不是最新版本，也可以使用阿里云的源
- curl https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo -o /etc/yum.repos.d/docker.repo
[root@linux-001 ~]# curl https://download.docker.com/linux/centos/docker-ce.repo -o /etc/yum.repos.d/docker.repo
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 2424 100 2424 0 0 1339 0 0:00:01 0:00:01 --:--:-- 1339
[root@linux-001 ~]# cd /etc/yum.repos.d/
[root@linux-001 yum.repos.d]# rz
[root@linux-001 yum.repos.d]# ls
Centos-7.repo.bak CentOS-CR.repo CentOS-fasttrack.repo CentOS-Sources.repo docker-ce.repo epel.repo gitlab-ce.repo zabbix.repo
CentOS-Base.repo CentOS-Debuginfo.repo CentOS-Media.repo CentOS-Vault.repo docker.repo epel-testing.repo mongodb.repo
- 配置docker加速器，可以使用阿里云的容器镜像服务，有一个可以提供加速下载的地址。
- https://cr.console.aliyun.com/cn-hangzhou/instances/mirrors
[root@linux-001 ~]# vim /etc/docker/daemon.json
{
"registry-mirrors": ["https://cqlpr39i.mirror.aliyuncs.com"]
}
- 安装docker，docker分为社区版和商业版，社区版是ce。
[root@linux-001 yum.repos.d]# yum install -y docker-ce
已加载插件：fastestmirror
Repository docker-ce-stable is listed more than once in the configuration
Repository docker-ce-stable-debuginfo is listed more than once in the configuration
Repository docker-ce-stable-source is listed more than once in the configuration
Repository docker-ce-edge is listed more than once in the configuration
Repository docker-ce-edge-debuginfo is listed more than once in the configuration
Repository docker-ce-edge-source is listed more than once in the configuration
Repository docker-ce-test is listed more than once in the configuration
Repository docker-ce-test-debuginfo is listed more than once in the configuration
Repository docker-ce-test-source is listed more than once in the configuration
Repository docker-ce-nightly is listed more than once in the configuration
Repository docker-ce-nightly-debuginfo is listed more than once in the configuration
Repository docker-ce-nightly-source is listed more than once in the configuration
Loading mirror speeds from cached hostfile
* base: mirrors.aliyun.com
* epel: mirrors.aliyun.com
* extras: mirrors.163.com
* updates: mirrors.163.com
正在解决依赖关系
--> 正在检查事务
---> 软件包 docker-ce.x86_64.3.19.03.1-3.el7 将被 安装
--> 正在处理依赖关系 container-selinux >= 2:2.74，它被软件包 3:docker-ce-19.03.1-3.el7.x86_64 需要
--> 正在处理依赖关系 containerd.io >= 1.2.2-3，它被软件包 3:docker-ce-19.03.1-3.el7.x86_64 需要
--> 正在处理依赖关系 libseccomp >= 2.3，它被软件包 3:docker-ce-19.03.1-3.el7.x86_64 需要
--> 正在处理依赖关系 docker-ce-cli，它被软件包 3:docker-ce-19.03.1-3.el7.x86_64 需要
--> 正在处理依赖关系 libseccomp.so.2()(64bit)，它被软件包 3:docker-ce-19.03.1-3.el7.x86_64 需要
--> 正在检查事务
---> 软件包 container-selinux.noarch.2.2.99-1.el7_6 将被 安装
---> 软件包 containerd.io.x86_64.0.1.2.6-3.3.el7 将被 安装
---> 软件包 docker-ce-cli.x86_64.1.19.03.1-3.el7 将被 安装
---> 软件包 libseccomp.x86_64.0.2.3.1-3.el7 将被 安装
--> 解决依赖关系完成
依赖关系解决
================================================================================================================================================================================================================
Package 架构 版本 源 大小
================================================================================================================================================================================================================
正在安装:
docker-ce x86_64 3:19.03.1-3.el7 docker-ce-stable 24 M
为依赖而安装:
container-selinux noarch 2:2.99-1.el7_6 extras 39 k
containerd.io x86_64 1.2.6-3.3.el7 docker-ce-stable 26 M
docker-ce-cli x86_64 1:19.03.1-3.el7 docker-ce-stable 39 M
libseccomp x86_64 2.3.1-3.el7 base 56 k
事务概要
================================================================================================================================================================================================================
安装 1 软件包 (+4 依赖软件包)
总下载量：90 M
安装大小：369 M
Downloading packages:
(1/5): container-selinux-2.99-1.el7_6.noarch.rpm | 39 kB 00:00:00
warning: /var/cache/yum/x86_64/7/docker-ce-stable/packages/containerd.io-1.2.6-3.3.el7.x86_64.rpm: Header V4 RSA/SHA512 Signature, key ID 621e9f35: NOKEY ] 4.1 MB/s | 44 MB 00:00:11 ETA
containerd.io-1.2.6-3.3.el7.x86_64.rpm 的公钥尚未安装
(2/5): containerd.io-1.2.6-3.3.el7.x86_64.rpm | 26 MB 00:00:11
(3/5): libseccomp-2.3.1-3.el7.x86_64.rpm | 56 kB 00:00:00
(4/5): docker-ce-19.03.1-3.el7.x86_64.rpm | 24 MB 00:00:14
(5/5): docker-ce-cli-19.03.1-3.el7.x86_64.rpm | 39 MB 00:00:12
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
总计 3.7 MB/s | 90 MB 00:00:24
从 https://mirrors.aliyun.com/docker-ce/linux/centos/gpg 检索密钥
导入 GPG key 0x621E9F35:
用户ID : "Docker Release (CE rpm) <docker@docker.com>"
指纹 : 060a 61c5 1b55 8a7f 742b 77aa c52f eb6b 621e 9f35
来自 : https://mirrors.aliyun.com/docker-ce/linux/centos/gpg
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
正在安装 : 2:container-selinux-2.99-1.el7_6.noarch 1/5
setsebool: SELinux is disabled.
正在安装 : containerd.io-1.2.6-3.3.el7.x86_64 2/5
正在安装 : libseccomp-2.3.1-3.el7.x86_64 3/5
正在安装 : 1:docker-ce-cli-19.03.1-3.el7.x86_64 4/5
正在安装 : 3:docker-ce-19.03.1-3.el7.x86_64 5/5
验证中 : 1:docker-ce-cli-19.03.1-3.el7.x86_64 1/5
验证中 : libseccomp-2.3.1-3.el7.x86_64 2/5
验证中 : 3:docker-ce-19.03.1-3.el7.x86_64 3/5
验证中 : containerd.io-1.2.6-3.3.el7.x86_64 4/5
验证中 : 2:container-selinux-2.99-1.el7_6.noarch 5/5
已安装:
docker-ce.x86_64 3:19.03.1-3.el7
作为依赖被安装:
container-selinux.noarch 2:2.99-1.el7_6 containerd.io.x86_64 0:1.2.6-3.3.el7 docker-ce-cli.x86_64 1:19.03.1-3.el7 libseccomp.x86_64 0:2.3.1-3.el7
完毕！
- 启动docker，docker启动后，会自动生成docker的iptables规则
- systemctl start docker
[root@linux-001 yum.repos.d]# systemctl start docker
[root@linux-001 yum.repos.d]# ps aux |grep docker
root 13403 1.5 1.7 569176 68868 ? Ssl 06:12 0:00 /usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
root 13624 0.0 0.0 112724 988 pts/0 S+ 06:12 0:00 grep --color=auto docker
[root@linux-001 yum.repos.d]# iptables -nvL
Chain INPUT (policy ACCEPT 490 packets, 229K bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 DOCKER-USER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 DOCKER-ISOLATION-STAGE-1 all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- * docker0 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
0 0 DOCKER all -- * docker0 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- docker0 !docker0 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- docker0 docker0 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 519 packets, 234K bytes)
pkts bytes target prot opt in out source destination
Chain DOCKER (1 references)
pkts bytes target prot opt in out source destination
Chain DOCKER-ISOLATION-STAGE-1 (1 references)
pkts bytes target prot opt in out source destination
0 0 DOCKER-ISOLATION-STAGE-2 all -- docker0 !docker0 0.0.0.0/0 0.0.0.0/0
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0
Chain DOCKER-ISOLATION-STAGE-2 (1 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * docker0 0.0.0.0/0 0.0.0.0/0
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0
Chain DOCKER-USER (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0
[root@linux-001 yum.repos.d]#
3.Docker镜像管理
3.1 拉取一个镜像
- 拉镜像 docker pull centos
- 查看本地都有哪些镜像 docker images
[root@linux-001 yum.repos.d]# docker pull centos
Using default tag: latest
latest: Pulling from library/centos
8ba884070f61: Pull complete
Digest: sha256:a799dd8a2ded4a83484bbae769d97655392b3f86533ceb7dd96bbac929809f3c
Status: Downloaded newer image for centos:latest
docker.io/library/centos:latest
[root@linux-001 yum.repos.d]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
centos latest 9f38484d220f 4 months ago 202MB
[root@linux-001 yum.repos.d]# docker pull ubuntu
Using default tag: latest
latest: Pulling from library/ubuntu
7413c47ba209: Pull complete
0fe7e7cbb2e8: Pull complete
1d425c982345: Pull complete
344da5c95cec: Pull complete
Digest: sha256:c303f19cfe9ee92badbbbd7567bc1ca47789f79303ddcef56f77687d4744cd7a
Status: Downloaded newer image for ubuntu:latest
docker.io/library/ubuntu:latest
[root@linux-001 yum.repos.d]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
ubuntu latest 3556258649b2 7 days ago 64.2MB
centos latest 9f38484d220f 4 months ago 202MB
3.2 搜索都有哪些镜像
[root@linux-001 yum.repos.d]# docker search centos
NAME DESCRIPTION STARS OFFICIAL AUTOMATED
centos The official build of CentOS. 5470 [OK]
ansible/centos7-ansible Ansible on Centos7 122 [OK]
jdeathe/centos-ssh CentOS-6 6.10 x86_64 / CentOS-7 7.6.1810 x86… 110 [OK]
consol/centos-xfce-vnc Centos container with "headless" VNC session… 93 [OK]
centos/mysql-57-centos7 MySQL 5.7 SQL database server 59
imagine10255/centos6-lnmp-php56 centos6-lnmp-php56 57 [OK]
tutum/centos Simple CentOS docker image with SSH access 44
centos/postgresql-96-centos7 PostgreSQL is an advanced Object-Relational … 39
kinogmt/centos-ssh CentOS with SSH 28 [OK]
pivotaldata/centos-gpdb-dev CentOS image for GPDB development. Tag names… 10
nathonfowlie/centos-jre Latest CentOS image with the JRE pre-install… 8 [OK]
drecom/centos-ruby centos ruby 6 [OK]
mamohr/centos-java Oracle Java 8 Docker image based on Centos 7 3 [OK]
darksheer/centos Base Centos Image -- Updated hourly 3 [OK]
pivotaldata/centos Base centos, freshened up a little with a Do… 3
pivotaldata/centos-mingw Using the mingw toolchain to cross-compile t… 2
miko2u/centos6 CentOS6 日本語環境 2 [OK]
pivotaldata/centos-gcc-toolchain CentOS with a toolchain, but unaffiliated wi… 2
indigo/centos-maven Vanilla CentOS 7 with Oracle Java Developmen… 1 [OK]
mcnaughton/centos-base centos base image 1 [OK]
blacklabelops/centos CentOS Base Image! Built and Updates Daily! 1 [OK]
pivotaldata/centos7-dev CentosOS 7 image for GPDB development 0
fortinj66/centos7-s2i-nodejs based off of ryanj/centos7-s2i-nodejs. Bigg… 0
smartentry/centos centos with smartentry 0 [OK]
pivotaldata/centos6.8-dev CentosOS 6.8 image for GPDB development 0
3.3 给镜像添加标签
[root@linux-001 yum.repos.d]# docker tag centos xihaji
[root@linux-001 yum.repos.d]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
ubuntu latest 3556258649b2 7 days ago 64.2MB
centos latest 9f38484d220f 4 months ago 202MB
xihaji latest 9f38484d220f 4 months ago 202MB
[root@linux-001 yum.repos.d]# docker tag centos xihaji:111
[root@linux-001 yum.repos.d]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
ubuntu latest 3556258649b2 7 days ago 64.2MB
centos latest 9f38484d220f 4 months ago 202MB
xihaji 111 9f38484d220f 4 months ago 202MB
xihaji latest 9f38484d220f 4 months ago 202MB
[root@linux-001 yum.repos.d]# docker rmi xihaji:111
Untagged: xihaji:111
[root@linux-001 yum.repos.d]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
ubuntu latest 3556258649b2 7 days ago 64.2MB
centos latest 9f38484d220f 4 months ago 202MB
xihaji latest 9f38484d220f 4 months ago 202MB
3.4 启动一个镜像
- docker run -itd centos //把镜像启动为容器，-i表示让容器的标准输入打开，-t表示分配一个伪终端，-d表示后台启动，要把-i -t -d 放到镜像名字前面
- docker ps //查看运行的容器，加上-a选项后可以查看所有容器，包括未运行的
- docker rmi centos //用来删除指定镜像， 其中后面的参数可以是tag，如果是tag时，实际上是删除该tag。当后面的参数为镜像ID时，则会彻底删除整个镜像，所有标签也会一同删除
[root@linux-001 yum.repos.d]# docker run -itd centos
30a0206c02f49184ceada96d353a9d8d25137de11d04f17613c432b923717fdc
[root@linux-001 yum.repos.d]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
30a0206c02f4 centos "/bin/bash" 6 seconds ago Up 2 seconds flamboyant_keldysh
[root@linux-001 yum.repos.d]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
30a0206c02f4 centos "/bin/bash" 13 seconds ago Up 9 seconds flamboyant_keldysh
4.通过容器创建镜像
[root@linux-001 ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
0bffc6ee3e46 centos "/bin/bash" 9 seconds ago Up 7 seconds heuristic_lewin
[root@linux-001 ~]# docker exec -it 0bffc6e bash //可以通过docker容器的ID的来进入镜像
[root@0bffc6ee3e46 /]# pwd
/
[root@0bffc6ee3e46 /]# ls
anaconda-post.log bin dev etc home lib lib64 media mnt opt proc root run sbin srv sys tmp usr var
[root@0bffc6ee3e46 /]# sf -h
bash: sf: command not found
[root@0bffc6ee3e46 /]# df -h
Filesystem Size Used Avail Use% Mounted on
overlay 16G 9.7G 6.1G 62% /
tmpfs 64M 0 64M 0% /dev
tmpfs 407M 0 407M 0% /sys/fs/cgroup
shm 64M 0 64M 0% /dev/shm
/dev/sda3 16G 9.7G 6.1G 62% /etc/hosts
tmpfs 407M 0 407M 0% /proc/asound
tmpfs 407M 0 407M 0% /proc/acpi
tmpfs 407M 0 407M 0% /proc/scsi
tmpfs 407M 0 407M 0% /sys/firmware
[root@0bffc6ee3e46 /]# free
total used free shared buff/cache available
Mem: 832056 429240 62436 2864 340380 203108
Swap: 4194300 369920 3824380
[root@0bffc6ee3e46 /]# yum install -y net-tools //按转一个查看ip的命令
Loaded plugins: fastestmirror, ovl
Loading mirror speeds from cached hostfile
* base: mirrors.neusoft.edu.cn
* extras: mirrors.163.com
* updates: mirror.lzu.edu.cn
Resolving Dependencies
--> Running transaction check
---> Package net-tools.x86_64 0:2.0-0.24.20131004git.el7 will be installed
--> Finished Dependency Resolution
Dependencies Resolved
===================================================================================================================================
Package Arch Version Repository Size
===================================================================================================================================
Installing:
net-tools x86_64 2.0-0.24.20131004git.el7 base 306 k
Transaction Summary
===================================================================================================================================
Install 1 Package
Total download size: 306 k
Installed size: 918 k
Downloading packages:
warning: /var/cache/yum/x86_64/7/base/packages/net-tools-2.0-0.24.20131004git.el7.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID f4a80eb5: NOKEY
Public key for net-tools-2.0-0.24.20131004git.el7.x86_64.rpm is not installed
net-tools-2.0-0.24.20131004git.el7.x86_64.rpm | 306 kB 00:00:05
Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
Importing GPG key 0xF4A80EB5:
Userid : "CentOS-7 Key (CentOS 7 Official Signing Key) <security@centos.org>"
Fingerprint: 6341 ab27 53d7 8a78 a7c2 7bb1 24c6 a8a7 f4a8 0eb5
Package : centos-release-7-6.1810.2.el7.centos.x86_64 (@CentOS)
From : /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Installing : net-tools-2.0-0.24.20131004git.el7.x86_64 1/1
Verifying : net-tools-2.0-0.24.20131004git.el7.x86_64 1/1
Installed:
net-tools.x86_64 0:2.0-0.24.20131004git.el7
Complete!
[root@0bffc6ee3e46 /]# ifconfig
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 172.17.0.2 netmask 255.255.0.0 broadcast 172.17.255.255
ether 02:42:ac:11:00:02 txqueuelen 0 (Ethernet)
RX packets 4735 bytes 14123948 (13.4 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 3710 bytes 204142 (199.3 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
loop txqueuelen 1000 (Local Loopback)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
[root@0bffc6ee3e46 /]# exit
exit
可以查看到虚拟机的网卡多了一个虚拟网卡
[root@linux-001 ~]# ifconfig //可以查看到本机的网卡信息又多了一个
docker0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 172.17.0.1 netmask 255.255.0.0 broadcast 172.17.255.255
inet6 fe80::42:93ff:fefc:80a5 prefixlen 64 scopeid 0x20<link>
ether 02:42:93:fc:80:a5 txqueuelen 0 (Ethernet)
RX packets 3710 bytes 152202 (148.6 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 4727 bytes 14123292 (13.4 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
ens33: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.174.128 netmask 255.255.255.0 broadcast 192.168.174.255
inet6 fe80::8db4:d867:92de:d2d1 prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:f2:1e:51 txqueuelen 1000 (Ethernet)
RX packets 142954 bytes 204269440 (194.8 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 30885 bytes 2044485 (1.9 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
ens33:0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.141.122 netmask 255.255.255.0 broadcast 192.168.141.255
ether 00:0c:29:f2:1e:51 txqueuelen 1000 (Ethernet)
ens37: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.23.88 netmask 255.255.255.0 broadcast 192.168.23.255
inet6 fe80::1bd9:6a99:3db1:3ce6 prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:f2:1e:5b txqueuelen 1000 (Ethernet)
RX packets 52388 bytes 4838959 (4.6 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 17 bytes 1292 (1.2 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1000 (Local Loopback)
RX packets 2 bytes 140 (140.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 2 bytes 140 (140.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
veth5442e25: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet6 fe80::94eb:93ff:fedf:3a4d prefixlen 64 scopeid 0x20<link>
ether 96:eb:93:df:3a:4d txqueuelen 0 (Ethernet)
RX packets 3710 bytes 204142 (199.3 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 4735 bytes 14123948 (13.4 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions
把安装net-tools包的镜像制作出来
[root@linux-001 ~]# docker commit -m 'install net-tools' -a 'ceshi' 0bffc6ee3e46 centos_with_net
sha256:033b19859e80217014d169c74592b3a1e303f1584a42b5b8230abcc078a6b8fb
[root@linux-001 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
centos_with_net latest 033b19859e80 16 seconds ago 308MB
centos latest 9f38484d220f 4 months ago 202MB
[root@linux-001 ~]# docker run -itd centos_with_net
e53f45fc5cf09b9680b21020e1f6d4a6d92f930c8cbc3063c266dc3ea75794b2
[root@linux-001 ~]# docker exec -it e53f45fc5 bash
[root@e53f45fc5cf0 /]# ifconfig
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 172.17.0.3 netmask 255.255.0.0 broadcast 172.17.255.255
ether 02:42:ac:11:00:03 txqueuelen 0 (Ethernet)
RX packets 8 bytes 656 (656.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
loop txqueuelen 1000 (Local Loopback)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
[root@e53f45fc5cf0 /]# exit
exit
5.容器管理
[root@linux-001 ~]# docker create -it centos bash //创建一个容器
318ea156bbd68843caead157785790cf2595d4824439e53b5e024b95b02ae08b
[root@linux-001 ~]# docker start 318ea156 //启动这个容器
318ea156
[root@linux-001 ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
318ea156bbd6 centos "bash" 39 seconds ago Up 3 seconds bold_mahavira
e53f45fc5cf0 centos_with_net "/bin/bash" 24 hours ago Up 24 hours quizzical_austin
0bffc6ee3e46 centos "/bin/bash" 24 hours ago Up 24 hours heuristic_lewin
[root@linux-001 ~]# docker attach 318 //打开一个再后台运行的容器
[root@318ea156bbd6 /]# ifconfig
bash: ifconfig: command not found
[root@318ea156bbd6 /]# exit
exit
[root@linux-001 ~]# docker logs 318ea156bbd6 //查看容器使用的历史信息
[root@318ea156bbd6 /]# ifconfig
bash: ifconfig: command not found
[root@318ea156bbd6 /]# exit
exit
[root@linux-001 ~]# docker exec -it 1701bd8d5c3f bash //临时进入一个容器
[root@1701bd8d5c3f /]# w
20:24:32 up 3 days, 9 min, 0 users, load average: 0.03, 0.03, 0.05
USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
[root@1701bd8d5c3f /]# exit
exit
[root@linux-001 ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
1701bd8d5c3f centos "bash" 36 minutes ago Up 36 minutes heuristic_cartwright
e53f45fc5cf0 centos_with_net "/bin/bash" 25 hours ago Up 25 hours quizzical_austin
0bffc6ee3e46 centos "/bin/bash" 25 hours ago Up 25 hours heuristic_lewin
[root@linux-001 ~]# docker rm -f 0bffc6ee3e46 //删除一个容器，如果容器正在运行，可以使用-f选项
0bffc6ee3e46
[root@linux-001 ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
1701bd8d5c3f centos "bash" 37 minutes ago Up 37 minutes heuristic_cartwright
e53f45fc5cf0 centos_with_net "/bin/bash" 25 hours ago Up 25 hours quizzical_austin
[root@linux-001 ~]# docker export e53f45fc5cf0 > test.tar //导出容器，可以迁移到其他机器
6.仓库管理
[root@linux-001 ~]# docker pull registry
Using default tag: latest
latest: Pulling from library/registry
c87736221ed0: Pull complete
1cc8e0bb44df: Pull complete
54d33bcb37f5: Pull complete
e8afc091c171: Pull complete
b4541f6d3db6: Pull complete
Digest: sha256:8004747f1e8cd820a148fb7499d71a76d45ff66bac6a29129bfdbfdc0154d146
Status: Downloaded newer image for registry:latest
docker.io/library/registry:latest
[root@linux-001 ~]# docker run -d -p 5000:5000 registry
7d16df3d0cf2b6e8a1517d65acfae980727244d22f4dd5b592ceb1569219b874
[root@linux-001 ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
7d16df3d0cf2 registry "/entrypoint.sh /etc…" 16 seconds ago Up 14 seconds 0.0.0.0:5000->5000/tcp romantic_bohr
cbaf96776fdf registry "/entrypoint.sh bash" 2 minutes ago Exited (127) 2 minutes ago xenodochial_curie
1701bd8d5c3f centos "bash" About an hour ago Up About an hour heuristic_cartwright
318ea156bbd6 centos "bash" About an hour ago Exited (127) About an hour ago bold_mahavira
05c1ce68e721 centos "bash" About an hour ago Created mystifying_aryabhata
e53f45fc5cf0 centos_with_net "/bin/bash" 26 hours ago Up 26 hours quizzical_austin
[root@linux-001 ~]# curl 127.0.0.1:5000/v2/_catalog
{"repositories":[]}
[root@linux-001 ~]# docker tag centos_with_net 192.168.174.128:5000/centos
[root@linux-001 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
192.168.174.128:5000/centos latest 033b19859e80 26 hours ago 308MB
centos_with_net latest 033b19859e80 26 hours ago 308MB
centos latest 9f38484d220f 4 months ago 202MB
registry latest f32a97de94e1 4 months ago 25.8MB
[root@linux-001 ~]# docker push 192.168.174.128:5000/centos
The push refers to repository [192.168.174.128:5000/centos]
Get https://192.168.174.128:5000/v2/: http: server gave HTTP response to HTTPS client
如果遇到以上的错误，我们需要给daemon.json中添加一个仓库地址。
[root@linux-001 ~]# echo '{ "insecure-registries":["192.168.174.128:5000"] }' > /etc/docker/daemon.json
[root@linux-001 ~]# systemctl restart docker
[root@linux-001 ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
7d16df3d0cf2 registry "/entrypoint.sh /etc…" 24 minutes ago Exited (2) 9 seconds ago romantic_bohr
cbaf96776fdf registry "/entrypoint.sh bash" 26 minutes ago Exited (127) 3 minutes ago xenodochial_curie
1701bd8d5c3f centos "bash" 2 hours ago Exited (137) 14 minutes ago heuristic_cartwright
318ea156bbd6 centos "bash" 2 hours ago Exited (127) About an hour ago bold_mahavira
05c1ce68e721 centos "bash" 2 hours ago Created mystifying_aryabhata
e53f45fc5cf0 centos_with_net "/bin/bash" 26 hours ago Exited (137) 4 minutes ago quizzical_austin
[root@linux-001 ~]# docker start 7d16df3d0cf2
7d16df3d0cf2
[root@linux-001 ~]# docker push 192.168.174.128:5000/centos
The push refers to repository [192.168.174.128:5000/centos]
18c86999e0c7: Pushed
d69483a6face: Pushed
latest: digest: sha256:a22b6c5b3e1c224ee6f2e61fb4ac887bea8300fa4fe9231fd5ac62b105d57148 size: 741
[root@linux-001 ~]# !curl
curl 192.168.174.128:5000/v2/_catalog
{"repositories":["centos"]}
在另外一台机器上如何拉取这个容器呢？
[root@linux-03 ~]# echo '{ "insecure-registries":["192.168.174.128:5000"] }' > /etc/docker/daemon.json
[root@linux-03 ~]# docker pull 192.168.174.128:5000/centos
Using default tag: latest
Trying to pull repository 192.168.174.128:5000/centos ...
Get https://192.168.174.128:5000/v1/_ping: http: server gave HTTP response to HTTPS client
[root@linux-03 ~]# systemctl restart docker
[root@linux-03 ~]# docker pull 192.168.174.128:5000/centos
Using default tag: latest
Trying to pull repository 192.168.174.128:5000/centos ...
latest: Pulling from 192.168.174.128:5000/centos
8ba884070f61: Pull complete
b811eccffd18: Pull complete
Digest: sha256:a22b6c5b3e1c224ee6f2e61fb4ac887bea8300fa4fe9231fd5ac62b105d57148
Status: Downloaded newer image for 192.168.174.128:5000/centos:latest
[root@linux-03 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
192.168.174.128:5000/centos latest 033b19859e80 45 hours ago 308 MB
[root@linux-03 ~]#
7.数据管理
[root@linux-001 ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
2d9fd165850a centos "bash" About a minute ago Exited (127) 10 seconds ago vigorous_noether
7d16df3d0cf2 registry "/entrypoint.sh /etc…" 20 hours ago Up 20 hours 0.0.0.0:5000->5000/tcp romantic_bohr
cbaf96776fdf registry "/entrypoint.sh bash" 20 hours ago Exited (127) 20 hours ago xenodochial_curie
1701bd8d5c3f centos "bash" 21 hours ago Exited (137) 20 hours ago heuristic_cartwright
318ea156bbd6 centos "bash" 22 hours ago Exited (127) 21 hours ago bold_mahavira
05c1ce68e721 centos "bash" 22 hours ago Created mystifying_aryabhata
e53f45fc5cf0 centos_with_net "/bin/bash" 46 hours ago Exited (137) 20 hours ago quizzical_austin
[root@linux-001 ~]# docker start 2d9fd165850a
2d9fd165850a
[root@linux-001 ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
2d9fd165850a centos "bash" 2 minutes ago Up 40 seconds vigorous_noether
7d16df3d0cf2 registry "/entrypoint.sh /etc…" 20 hours ago Up 20 hours 0.0.0.0:5000->5000/tcp romantic_bohr
[root@linux-001 ~]# docker run -tid -v /data/:/data centos bash
1df90d63fea26ea87ef62a862209f98b6bc214f34c33c3d9c415156807352cff
[root@linux-001 ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
1df90d63fea2 centos "bash" 9 minutes ago Up 8 minutes stoic_hamilton
2d9fd165850a centos "bash" 12 minutes ago Up 10 minutes vigorous_noether
7d16df3d0cf2 registry "/entrypoint.sh /etc…" 21 hours ago Up 20 hours 0.0.0.0:5000->5000/tcp romantic_bohr
[root@linux-001 ~]# ls /data
gitdata mariadb mysql redis_data wwwroot
[root@linux-001 ~]# docker exec 1df90d63fe bash
[root@linux-001 ~]# docker exec -it 1df90d63fe bash
[root@1df90d63fea2 /]# ls /data/
gitdata mariadb mysql redis_data wwwroot
[root@1df90d63fea2 /]# mkdir 123
[root@1df90d63fea2 /]# mkdir /data/123
[root@1df90d63fea2 /]# exit
exit
[root@linux-001 ~]# ls /data/
123 gitdata mariadb mysql redis_data wwwroot
[root@linux-001 ~]
刚才我们挂载了本地的宿主机目录data到容器上，还可以挂载容器上的data目录到新的容器。
[root@linux-001 ~]# docker run -itd -v /data/:/data centos bash
75114cba041de9a7f8090727258fb2efe1f384c2fe6193d9e4e24ef390217d86
[root@linux-001 ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
75114cba041d centos "bash" 9 seconds ago Up 8 seconds compassionate_mendel
33345dcb8d9d registry "/entrypoint.sh /etc…" 33 minutes ago Up 33 minutes 0.0.0.0:5000->5000/tcp gallant_joliot
[root@linux-001 ~]# docker run -itd --volumes-from compassionate_mendel centos bash
69fbffb8c07a592b879ddab0a757fc8964b18f684e35b51bc4b75a3fcaea02c6
[root@linux-001 ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTSNAMES
69fbffb8c07a centos "bash" 5 seconds ago Up 4 secondsamazing_tu
75114cba041d centos "bash" About a minute ago Up About a minutecompassionate_mendel
33345dcb8d9d registry "/entrypoint.sh /etc…" 34 minutes ago Up 34 minutes 0.0.0.0:5000->5000/tcpgallant_joliot
[root@linux-001 ~]# docker exec -it 69fbffb8c07a bash
[root@69fbffb8c07a /]# ls /data/
123 gitdata mariadb mysql redis_data wwwroot
[root@69fbffb8c07a /]#
7.数据卷备份恢复
如果我们宿主机的目录没有在容器中映射，我们需要如何恢复容器中的数据呢？这时候我们新建一个容器共享有数据的容器中的数据目录，然后此新建容器映射宿主机中的目录，然后把挂载的数据容器的数据拷贝到映射的目录即可数据备份。
备份
mkdir /data/backup
docker run --volumes-from testvol -v /data/backup/:/backup centos tar cvf /backup/data.tar /data/
说明：首先我们需要使用testvol数据卷新开一个容器，同时我们还需要把本地的/vol_data_backup/目录挂载到该容器的/backup下，这样在容器中/backup目录里面新建的文件，我们就可以直接在/data/backup/目录中看到了。 然后再把/data/目录下面的文件打包到成data.tar文件放到/backup目录下面。
恢复
思路： 先新建一个数据卷容器，再建一个新的容器并挂载该数据卷容器，然后再把tar包解包。
新建数据卷容器：docker run -itd -v /data/ --name testvol2 centos bash
挂载数据卷新建容器，并解包：docker run --volumes-from testvol2 -v /data/backup/:/backup centos tar xf /backup/data.tar
8.docker网络模式
host模式，使用docker run时使用–net=host指定
docker使用的网络实际上和宿主机一样，在容器内看到的网卡ip是宿主机ip
container模式，使用–net=container:container_id/container_name
多个容器使用共同的网络，看到的ip是一样的
none模式，使用–net=none指定
这种模式下，不会配置任何网络
bridge模式，使用–net=bridge指定默认模式，不用指定默认就是这种网络模式。这种模式会为每个容器分配一个独立的Network Namespace。类似于vmware的nat网络模式。同一个宿主机上的所有容器会在同一个网段下，相互之间是可以通信的。
8.1外部访问容器
[root@linux-001 ~]# docker run -it centos
[root@90c75ea93e54 yum.repos.d]# yum install -y httpd
Loaded plugins: fastestmirror, ovl
Loading mirror speeds from cached hostfile
* base: mirrors.163.com
* extras: mirrors.163.com
* updates: mirrors.163.com
Resolving Dependencies
--> Running transaction check
---> Package httpd.x86_64 0:2.4.6-89.el7.centos.1 will be installed
--> Processing Dependency: httpd-tools = 2.4.6-89.el7.centos.1 for package: httpd-2.4.6-89.el7.centos.1.x86_64
--> Processing Dependency: system-logos >= 7.92.1-1 for package: httpd-2.4.6-89.el7.centos.1.x86_64
--> Processing Dependency: /etc/mime.types for package: httpd-2.4.6-89.el7.centos.1.x86_64
--> Processing Dependency: libaprutil-1.so.0()(64bit) for package: httpd-2.4.6-89.el7.centos.1.x86_64
--> Processing Dependency: libapr-1.so.0()(64bit) for package: httpd-2.4.6-89.el7.centos.1.x86_64
--> Running transaction check
---> Package apr.x86_64 0:1.4.8-3.el7_4.1 will be installed
---> Package apr-util.x86_64 0:1.5.2-6.el7 will be installed
---> Package centos-logos.noarch 0:70.0.6-3.el7.centos will be installed
---> Package httpd-tools.x86_64 0:2.4.6-89.el7.centos.1 will be installed
---> Package mailcap.noarch 0:2.1.41-2.el7 will be installed
--> Finished Dependency Resolution
Dependencies Resolved
===================================================================================================================================
Package Arch Version Repository Size
===================================================================================================================================
Installing:
httpd x86_64 2.4.6-89.el7.centos.1 updates 2.7 M
Installing for dependencies:
apr x86_64 1.4.8-3.el7_4.1 base 103 k
apr-util x86_64 1.5.2-6.el7 base 92 k
centos-logos noarch 70.0.6-3.el7.centos base 21 M
httpd-tools x86_64 2.4.6-89.el7.centos.1 updates 91 k
mailcap noarch 2.1.41-2.el7 base 31 k
Transaction Summary
===================================================================================================================================
Install 1 Package (+5 Dependent packages)
Total download size: 24 M
Installed size: 31 M
Downloading packages:
warning: /var/cache/yum/x86_64/7/base/packages/apr-1.4.8-3.el7_4.1.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID f4a80eb5: NOKEY
Public key for apr-1.4.8-3.el7_4.1.x86_64.rpm is not installed
(1/6): apr-1.4.8-3.el7_4.1.x86_64.rpm | 103 kB 00:00:05
Public key for httpd-tools-2.4.6-89.el7.centos.1.x86_64.rpm is not installed ] 0.0 B/s | 103 kB --:--:-- ETA
(2/6): httpd-tools-2.4.6-89.el7.centos.1.x86_64.rpm | 91 kB 00:00:05
(3/6): apr-util-1.5.2-6.el7.x86_64.rpm | 92 kB 00:00:18
(4/6): mailcap-2.1.41-2.el7.noarch.rpm | 31 kB 00:00:00
(5/6): centos-logos-70.0.6-3.el7.centos.noarch.rpm | 21 MB 00:00:30
(6/6): httpd-2.4.6-89.el7.centos.1.x86_64.rpm | 2.7 MB 00:00:36
-----------------------------------------------------------------------------------------------------------------------------------
Total 592 kB/s | 24 MB 00:00:42
Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
Importing GPG key 0xF4A80EB5:
Userid : "CentOS-7 Key (CentOS 7 Official Signing Key) <security@centos.org>"
Fingerprint: 6341 ab27 53d7 8a78 a7c2 7bb1 24c6 a8a7 f4a8 0eb5
Package : centos-release-7-6.1810.2.el7.centos.x86_64 (@CentOS)
From : /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Installing : apr-1.4.8-3.el7_4.1.x86_64 1/6
Installing : apr-util-1.5.2-6.el7.x86_64 2/6
Installing : httpd-tools-2.4.6-89.el7.centos.1.x86_64 3/6
Installing : centos-logos-70.0.6-3.el7.centos.noarch 4/6
Installing : mailcap-2.1.41-2.el7.noarch 5/6
Installing : httpd-2.4.6-89.el7.centos.1.x86_64 6/6
Verifying : httpd-2.4.6-89.el7.centos.1.x86_64 1/6
Verifying : httpd-tools-2.4.6-89.el7.centos.1.x86_64 2/6
Verifying : mailcap-2.1.41-2.el7.noarch 3/6
Verifying : apr-util-1.5.2-6.el7.x86_64 4/6
Verifying : apr-1.4.8-3.el7_4.1.x86_64 5/6
Verifying : centos-logos-70.0.6-3.el7.centos.noarch 6/6
Installed:
httpd.x86_64 0:2.4.6-89.el7.centos.1
Dependency Installed:
apr.x86_64 0:1.4.8-3.el7_4.1 apr-util.x86_64 0:1.5.2-6.el7 centos-logos.noarch 0:70.0.6-3.el7.centos
httpd-tools.x86_64 0:2.4.6-89.el7.centos.1 mailcap.noarch 0:2.1.41-2.el7
Complete!
[root@90c75ea93e54 yum.repos.d]# systemctl start httpd
Failed to get D-Bus connection: Operation not permitted
8.2 Failed to get D-Bus connection: Operation not permitted
[root@linux-001 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
centos_with_net latest 033b19859e80 4 days ago 308MB
192.168.174.128:5000/centos <none> 033b19859e80 4 days ago 308MB
192.168.174.128:5000/centos latest 9f38484d220f 4 months ago 202MB
centos latest 9f38484d220f 4 months ago 202MB
registry latest f32a97de94e1 5 months ago 25.8MB
[root@linux-001 ~]# docker start 90c75ea93e54
90c75ea93e54
[root@linux-001 ~]# docker commit -m "install httpd" -a "test" 90c75ea93e54 "centos_httpd"
sha256:2a41eb7f21afe81b613540e0c1bea340e0ed969c8e26b284de7cf088f1eaabbe
[root@linux-001 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
centos_httpd latest 2a41eb7f21af 55 minutes ago 346MB
centos_with_net latest 033b19859e80 4 days ago 308MB
192.168.174.128:5000/centos <none> 033b19859e80 4 days ago 308MB
192.168.174.128:5000/centos latest 9f38484d220f 4 months ago 202MB
centos latest 9f38484d220f 4 months ago 202MB
registry latest f32a97de94e1 5 months ago 25.8MB
[root@linux-001 ~]# docker run -itd -p 8080:80 --privileged -e "container=docker" centos_httpd /usr/sbin/init
6cb1d3729fe9b76f1c89a68bf8f8732bff3b7e5bec1982d9f3a336f50e0639e4
[root@linux-001 ~]# docker exec -it 6cb1d3729 bash
[root@6cb1d3729fe9 /]# systemctl start httpd
[root@6cb1d3729fe9 /]# ps aux |grep http
root 3406 0.4 0.5 224052 4980 ? Ss 18:14 0:00 /usr/sbin/httpd -DFOREGROUND
apache 3407 0.0 0.3 224052 2948 ? S 18:14 0:00 /usr/sbin/httpd -DFOREGROUND
apache 3408 0.0 0.3 224052 2948 ? S 18:14 0:00 /usr/sbin/httpd -DFOREGROUND
apache 3409 0.0 0.3 224052 2948 ? S 18:14 0:00 /usr/sbin/httpd -DFOREGROUND
apache 3410 0.0 0.3 224052 2948 ? S 18:14 0:00 /usr/sbin/httpd -DFOREGROUND
apache 3411 0.0 0.3 224052 2948 ? S 18:14 0:00 /usr/sbin/httpd -DFOREGROUND
root 3413 0.0 0.0 9088 668 pts/1 S+ 18:14 0:00 grep --color=auto http
[root@6cb1d3729fe9 /]# exit
exit
[root@linux-001 ~]# curl localhost:8080
内容省略
8.3 配置桥接网络
首先配置网卡信息，复制一份ens33网卡信息位br0，ens33网卡设置信息如下
br0的信息设置如下，设置完成需要重启网卡。
下载一个给容器设置ip地址的命令pipework
[root@linux-001 ~]# git clone https://github.com/jpetazzo/pipework
正克隆到 'pipework'...
remote: Enumerating objects: 501, done.
remote: Total 501 (delta 0), reused 0 (delta 0), pack-reused 501
接收对象中: 100% (501/501), 172.97 KiB | 70.00 KiB/s, done.
处理 delta 中: 100% (264/264), done.
[root@linux-001 ~]# cd pipework/
[root@linux-001 pipework]# ls
docker-compose.yml doctoc LICENSE pipework pipework.spec README.md
[root@linux-001 pipework]# cp pipework /usr/local/bin/
[root@linux-001 pipework]#
新建一个容器，
[root@linux-001 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
centos_httpd latest 2a41eb7f21af 2 hours ago 346MB
centos_with_net latest 033b19859e80 5 days ago 308MB
192.168.174.128:5000/centos <none> 033b19859e80 5 days ago 308MB
192.168.174.128:5000/centos latest 9f38484d220f 4 months ago 202MB
centos latest 9f38484d220f 4 months ago 202MB
registry latest f32a97de94e1 5 months ago 25.8MB
[root@linux-001 ~]# docker run -itd --net=none centos_httpd bash
b4474638742b54eaf66951572719c85c732351972011bc904f475590284d0603
[root@linux-001 ~]# docker exec -it b4474638 bash
[root@bf777790acde /]# ifconfig
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
loop txqueuelen 1000 (Local Loopback)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
[root@bf777790acde /]# exit
exit
[root@linux-001 ~]# pipework br0 bf777790a 192.168.174.127/24@192.168.174.2
[root@linux-001 ~]# docker exec -it bf777790a bash
[root@bf777790acde /]# ifconfig
eth1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.174.127 netmask 255.255.255.0 broadcast 192.168.174.255
ether fe:85:ff:f5:19:86 txqueuelen 1000 (Ethernet)
RX packets 7 bytes 586 (586.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 1 bytes 42 (42.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
loop txqueuelen 1000 (Local Loopback)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
[root@bf777790acde /]# ping www.baidu.com
PING www.a.shifen.com (180.101.49.12) 56(84) bytes of data.
64 bytes from 180.101.49.12 (180.101.49.12): icmp_seq=1 ttl=128 time=11.5 ms
64 bytes from 180.101.49.12 (180.101.49.12): icmp_seq=2 ttl=128 time=12.1 ms
64 bytes from 180.101.49.12 (180.101.49.12): icmp_seq=3 ttl=128 time=12.1 ms
64 bytes from 180.101.49.12 (180.101.49.12): icmp_seq=4 ttl=128 time=11.9 ms
64 bytes from 180.101.49.12 (180.101.49.12): icmp_seq=5 ttl=128 time=12.2 ms
^C
--- www.a.shifen.com ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 13024ms
rtt min/avg/max/mdev = 11.596/12.021/12.250/0.239 ms
9.DockerFile的格式
- FROM //指定基于哪个基础镜像
格式 FROM <image> 或者 FROM <image>:<tag>， 比如
FROM centos
FROM centos:latest- MAINTAINER //指定作者信息
格式 MAINTAIN <name> ，比如
MAINTAINER xihaji admin@xihaji.com- RUN //镜像操作指令
格式为 RUN <command> 或者 RUN [“executable”, “param1”, “param2”]，比如
RUN yum install httpd
RUN ["/bin/bash", “-c”, “echo hello”]- CMD // 三种格式：
CMD [“executable”, “param1”, “param2”]
CMD command param1 param2
CMD [“param1”, “param2”]
RUN和CMD看起来挺像，但是CMD用来指定容器启动时用到的命令，只能有一条。比如
CMD ["/bin/bash", “/usr/local/nginx/sbin/nginx”, “-c”, “/usr/local/nginx/conf/nginx.conf”]- EXPOSE
格式为 EXPOSE <port> [<port>…] , 比如
EXPOSE 22 80 8443
这个用来指定要映射出去的端口，比如容器内部我们启动了sshd和nginx，所以我们需要把22和80端口暴漏出去。这个需要配合-P（大写）来工作，也就是说在启动容器时，需要加上-P，让它自动分配。如果想指定具体的端口，也可以使用-p（小写）来指定。- ENV
格式 ENV <key> <value>, 比如
ENV PATH /usr/local/mysql/bin:$PATH
它主要是为后续的RUN指令提供一个环境变量，我们也可以定义一些自定义的变量
ENV MYSQL_version 5.6- ADD
格式 add <src> <dest>
将本地的一个文件或目录拷贝到容器的某个目录里。 其中src为Dockerfile所在目录的相对路径，它也可以是一个url。比如
ADD <conf/vhosts> </usr/local/nginx/conf>- COPY
格式同add
使用方法和add一样，不同的是，它不支持url- ENTRYPOINT 格式类似CMD
容器启动时要执行的命令，它和CMD很像，也是只有一条生效，如果写多个只有最后一条有效。和CMD不同是：
CMD 是可以被 docker run 指令覆盖的，而ENTRYPOINT不能覆盖。比如，容器名字为aming
我们在Dockerfile中指定如下CMD：
CMD ["/bin/echo", “test”]
启动容器的命令是 docker run aming 这样会输出 test
假如启动容器的命令是 docker run -it aming /bin/bash 什么都不会输出
ENTRYPOINT不会被覆盖，而且会比CMD或者docker run指定的命令要靠前执行
ENTRYPOINT [“echo”, “test”]
docker run -it aming 123 //123为命令
则会输出 test 123 ，这相当于要执行命令 echo test 123- VOLUME
格式 VOLUME ["/data"]
创建一个可以从本地主机或其他容器挂载的挂载点。- USER
格式 USER daemon
指定运行容器的用户- WORKDIR
格式 WORKDIR /path/to/workdir
为后续的RUN、CMD或者ENTRYPOINT指定工作目录
10. Dockerfile示例
使用dockerfile安装nginx
[root@linux-001 ~]# vim Dockerfile
## Set the base image to CentOS
FROM centos
# File Author / Maintainer
MAINTAINER xihaji admin@xihaji.com
# Install necessary tools
RUN yum install -y pcre-devel wget net-tools gcc zlib zlib-devel make openssl-devel
# Install Nginx
ADD http://nginx.org/download/nginx-1.12.1.tar.gz .
RUN tar zxvf nginx-1.12.1.tar.gz
RUN mkdir -p /usr/local/nginx
RUN cd nginx-1.12.1 && ./configure --prefix=/usr/local/nginx && make && make install
RUN rm -fv /usr/local/nginx/conf/nginx.conf
ADD http://www.apelearn.com/study_v2/.nginx_conf /usr/local/nginx/conf/nginx.conf
# Expose ports
EXPOSE 80
# Set the default command to execute when creating a new container
ENTRYPOINT /usr/local/nginx/sbin/nginx && tail -f /etc/passwd
出现如下图的信息，说明我们已经安装成功
同时，我们也可以打开容器，查看nginx服务是否有启动
[root@linux-001 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
centos_nginx latest d647a90be189 About a minute ago 416MB
centos_httpd latest 2a41eb7f21af 3 hours ago 346MB
centos_with_net latest 033b19859e80 5 days ago 308MB
192.168.174.128:5000/centos <none> 033b19859e80 5 days ago 308MB
192.168.174.128:5000/centos latest 9f38484d220f 4 months ago 202MB
centos latest 9f38484d220f 4 months ago 202MB
registry latest f32a97de94e1 5 months ago 25.8MB
[root@linux-001 ~]# docker run -itd centos_nginx bash
a0ec80fb0775329c7ad789d0071e60cccde8713c0b96a0e7ce1c6b8d3b63eb1c
[root@linux-001 ~]# docker exec -it a0ec80fb0 bash
[root@a0ec80fb0775 /]# ps aux |grep nginx
root 1 0.1 0.1 11680 1356 pts/0 Ss+ 20:35 0:00 /bin/sh -c /usr/local/nginx/sbin/nginx && tail -f /etc/passwd bash
root 7 0.0 0.0 20540 624 ? Ss 20:35 0:00 nginx: master process /usr/local/nginx/sbin/nginx
nobody 9 0.0 0.3 22984 3196 ? S 20:35 0:00 nginx: worker process
nobody 10 0.0 0.3 22984 3196 ? S 20:35 0:00 nginx: worker process
root 25 0.0 0.0 9088 664 pts/1 S+ 20:36 0:00 grep --color=auto nginx
[root@a0ec80fb0775 /]# exit
exit
[root@linux-001 ~]#
11.Docker compose 批量管理容器
11.1用Docker compose部署服务
docker compose可以方便我们快捷高效地管理容器的启动、停止、重启等操作，它类似于linux下的shell脚本，基于yaml语法，在该文件里我们可以描述应用的架构，比如用什么镜像、数据卷、网络模式、监听端口等信息。我们可以在一个compose文件中定义一个多容器的应用（比如jumpserver），然后通过该compose来启动这个应用。
安装compose方法如下
curl -L https://github.com/docker/compose/releases/download/1.17.0-rc1/docker-compose-`uname -s`-`uname -m` > /usr/local/bin/docker-compose
chmod 755 !$
docker-compose version 查看版本信息
Compose区分Version 1和Version 2（Compose 1.6.0+，Docker Engine 1.10.0+）。Version 2支持更多的指令。Version 1没有声明版本默认是"version 1"。Version 1将来会被弃用。
[root@linux-001 ~]# curl -L https://github.com/docker/compose/releases/download/1.17.0-rc1/docker-compose-`uname -s`-`uname -m` >/usr/local/bin/docker-compose
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 617 0 617 0 0 51 0 --:--:-- 0:00:11 --:--:-- 140
100 8649k 100 8649k 0 0 21316 0 0:06:55 0:06:55 --:--:-- 26897
[root@linux-001 ~]# chmod 755 /usr/local/bin/docker-compose
[root@linux-001 ~]# docker-compose -v
docker-compose version 1.17.0-rc1, build a0f95af
11.2 实例
[root@linux-001 ~]# vim docker-compose.yml
version: "2"
services:
app1:
image: centos_nginx
ports:
- "8080:80"
networks:
- "net1"
volumes:
- /data/:/data
app2:
image: centos_httpd
networks:
- "net2"
volumes:
- /data/:/data1
entrypoint: tail -f /etc/passwd
networks:
net1:
driver: bridge
net2:
driver: bridge
[root@linux-001 ~]# docker-compose up -d
Creating network "root_net2" with driver "bridge"
Creating network "root_net1" with driver "bridge"
Creating root_app2_1 ...
Creating root_app1_1 ...
Creating root_app1_1
Creating root_app2_1 ... done
[root@linux-001 ~]# docker-compose ps
Name Command State Ports
---------------------------------------------------------------------------
root_app1_1 /bin/sh -c /usr/local/ngin ... Up 0.0.0.0:8080->80/tcp
root_app2_1 tail -f /etc/passwd Up
[root@linux-001 ~]# docker-compose stop
Stopping root_app2_1 ... done
Stopping root_app1_1 ... done
[root@linux-001 ~]# docker-compose ps
Name Command State Ports
---------------------------------------------------------------
root_app1_1 /bin/sh -c /usr/local/ngin ... Exit 137
root_app2_1 tail -f /etc/passwd Exit 137
[root@linux-001 ~]#
11.3 docker-compose语法扩展
关于docker-compose语法的参考文档
扫一扫
1134
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
