Docker ❉ docker镜像

最新推荐文章于 2024-04-19 02:22:16 发布

wangjie722703

最新推荐文章于 2024-04-19 02:22:16 发布

阅读量274

点赞数

分类专栏：云计算文章标签： docker linux 容器

本文链接：https://blog.csdn.net/wangjie72270/article/details/102991781

版权

云计算专栏收录该内容

53 篇文章 5 订阅

订阅专栏

一是什么

1 定义

是一种轻量级的可执行的独立软件包，用来打包软件运行环境和基于运行环境开发的软件，它包含运行某个软件所需的所有内容，包括代码，运行时，库，环境变量和配置文件

2 UnionFS（联合文件系统）

分层，轻量级并且高性能的文件系统，支持对文件系统的修改作为一次提交进行一层层的叠加，同时可以将不同目录挂载到同一个虚拟文件系统下（最多127层）。

镜像可以通过分层进行继承，基于基础镜像（没有父镜像），可以制作各种具体的应用镜像

特性：一次同时加载多个文件系统，但从外面看来，只能看到一个文件系统，联合加载会把各层文件系统叠加起来，这样最终的文件系统会包含所有底层的文件和目录

3 Docker镜像加载原理

docker的镜像实际上由一层层的文件系统组成，加载器为bootfs和rootfs

bootfs：

boot file system主要包含BootLoader和kernel，BootLoader 主要是引导加载kernel，linux刚启动时回家再hootfs文件系统，在docker镜像的最底层是bootfs，这一层与我们典型的栃木县是一样的，包含boot加载器和内核，当boot加载完之后整个内核就都在内存中了，此时内存的使用权已由bootfs转交给内核，此时系统也会卸载bootfs。

rootfs：

root file system，在bootfs之上，包含的就是典型linux的/dev，/proc等标准目录和文件，rootfs就是各种不同的操作系统发行版，比如Ubuntu和centos等。

[root@slave1 ~]# docker images
REPOSITORY                                                              TAG          IMAGE ID       CREATED         SIZE
mycentos                                                                1.1          4d8110bc4e2e   22 hours ago    285MB
nginx                                                                   latest       f6987c8d6ed5   29 hours ago    141MB
beifanggebitan/mysql                                                    1.1          0befd40a091b   2 weeks ago     303MB

平时我们安装的虚拟机CentOS都是几个G，为什么Docker显示才200M？

精简的 OS，rootfs可以很小，只需要最基本的命令，工具，和程序库即可，因为底层直接用宿主机打的kernel，自己只需要提供 rootfs就行了，由此可见对于不同的linux发行版，bootfs基本是一致的，rootfs会有差别，因此不同的发行版可以共用bootfs。

4 分层的镜像

[root@slave1 ~]# docker pull redis
Using default tag: latest
latest: Pulling from library/redis
a2abf6c4d29d: Already exists 
c7a4e4382001: Pull complete 
4044b9ba67c9: Pull complete 
c8388a79482f: Downloading [=======================>                           ]  3.951MB/8.33MB
413c8bb60be2: Download complete 
1abfd3011519: Pulling fs layer

以pull命令为例，可以观察到Docker的镜像在下载的时候是一层一层加载的；
为何docker要采用这种分层结构呢：最大的好处就是共享资源;

假设有多个镜像都从相同的base镜像构建而来，那么宿主机只需要在磁盘上保存一份base镜像即可，同时内存中也只需要加载一份base镜像，就可以为所有的容器提供服务，而且镜像的每一层都是可以被共享使用的；

二特点

Docker镜像都是只读的，当容器启动时，一个新的可写层被加载到镜像的顶部，这一层通常被称作容器层，容器层之下被称为镜像层

三 docker镜像commit功能

docker commit 提交容器副本使之成为一个新的镜像

# 命令格式
docker commit -m=“提交的描述信息” -a=”作者“ 容器ID 要创建的目标镜像名[:标签名]
ps：目标镜像名格式：命名空间/软件名：版本号，如beifanggebitan/tomacat:2.2

[root@slave1 ~]# docker commit -a="zxc" -m="tomcat with zxc" a6f43a8fda6f atguigu/mytomcat:1.2
sha256:def3b3467c2bff15d27e763d8c526c19951cdea6400d4a3eb682f3b78562736d

[root@slave1 ~]# docker images
REPOSITORY         TAG       IMAGE ID       CREATED          SIZE
atguigu/mytomcat   1.2       def3b3467c2b   12 seconds ago   649MB
tomcat             latest    040bdb29ab37   7 weeks ago      649MB
[root@slave1 ~]# docker run -it -p 7777:8080 atguigu/mytomcat:1.2 		/指定端口映射；
[root@slave1 ~]# docker run -it -P atguigu/mytomcat:1.2 				/随机端口映射；
[root@slave1 ~]# docker run -d -P atguigu/mytomcat:1.2 		/后台启动；
9f32c842429fa6f61c7d8702e5e5761ef6b14f25b1d8140ca8033d7d623a8f67

[root@slave1 ~]# docker ps -a
CONTAINER ID   IMAGE                  COMMAND             CREATED          STATUS                       PORTS                     NAMES
3775ae2d69a9   atguigu/mytomcat:1.2   "catalina.sh run"   7 seconds ago        Up 2 seconds                 0.0.0.0:7777->8080/tcp    wizardly_thompson
5d8ffce85d78   atguigu/mytomcat:1.2   "catalina.sh run"   17 seconds ago   Up 15 seconds                0.0.0.0:49154->8080/tcp   busy_murdock
9f32c842429f   atguigu/mytomcat:1.2   "catalina.sh run"   55 seconds ago   Up 54 seconds                0.0.0.0:49153->8080/tcp   tender_jepsen

在创建某个容器时，系统会自动创建其相关文件目录，内容如下：

#创建一个新容器
[root@slave1 ~]# docker run --name test-001 -it -d centos
d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e
#寻找系统对应创建的容器相关文件路径
[root@slave1 ~]# find / -name hostconfig.json
/var/lib/docker/containers/d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e/hostconfig.json
#切换到该目录下
[root@slave1 ~]# cd /var/lib/docker/containers/
#查看目录下文件
[root@slave1 containers]# ll
total 0
drwx-----x. 4 root root 237 Nov 18 00:00 d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e
#切换目录
[root@slave1 containers]# cd d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e/
#查看目录下文件
[root@slave1 d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e]# ll
total 24
drwx------. 2 root root    6 Nov 18 00:00 checkpoints
-rw-------. 1 root root 2751 Nov 18 00:00 config.v2.json					/v2版本的json配置文件；
-rw-r-----. 1 root root    0 Nov 18 00:00 d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e-json.log		/日志文件；
-rw-r--r--. 1 root root 1472 Nov 18 00:00 hostconfig.json				        /V1版本的json配置文件；
-rw-r--r--. 1 root root   13 Nov 18 00:00 hostname						/容器主机名称；
-rw-r--r--. 1 root root  174 Nov 18 00:00 hosts						/容器hosts文件；
drwx-----x. 2 root root    6 Nov 18 00:00 mounts						
-rw-r--r--. 1 root root   57 Nov 18 00:00 resolv.conf					/容器DNS文件；
-rw-r--r--. 1 root root   71 Nov 18 00:00 resolv.conf.hash
[root@slave1 d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e]# cat d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e-json.log 
[root@slave1 d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e]# cat hostname 
d926447f78fd
[root@slave1 d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e]# cat hosts 
127.0.0.1	localhost
::1	localhost ip6-localhost ip6-loopback
fe00::0	ip6-localnet
ff00::0	ip6-mcastprefix
ff02::1	ip6-allnodes
ff02::2	ip6-allrouters
172.17.0.2	d926447f78fd
[root@slave1 d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e]# cat resolv.conf
# Generated by NetworkManager
nameserver 114.114.114.114
[root@slave1 d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e]# cat hostconfig.json 
{"Binds":null,"ContainerIDFile":"","LogConfig":{"Type":"json-file","Config":{}},"NetworkMode":"default","PortBindings":{},"RestartPolicy":{"Name":"no","MaximumRetryCount":0},"AutoRemove":false,"VolumeDriver":"","VolumesFrom":null,"CapAdd":null,"CapDrop":null,"CgroupnsMode":"host","Dns":[],"DnsOptions":[],"DnsSearch":[],"ExtraHosts":null,"GroupAdd":null,"IpcMode":"private","Cgroup":"","Links":null,"OomScoreAdj":0,"PidMode":"","Privileged":false,"PublishAllPorts":false,"ReadonlyRootfs":false,"SecurityOpt":null,"UTSMode":"","UsernsMode":"","ShmSize":67108864,"Runtime":"runc","ConsoleSize":[0,0],"Isolation":"","CpuShares":0,"Memory":0,"NanoCpus":0,"CgroupParent":"","BlkioWeight":0,"BlkioWeightDevice":[],"BlkioDeviceReadBps":null,"BlkioDeviceWriteBps":null,"BlkioDeviceReadIOps":null,"BlkioDeviceWriteIOps":null,"CpuPeriod":0,"CpuQuota":0,"CpuRealtimePeriod":0,"CpuRealtimeRuntime":0,"CpusetCpus":"","CpusetMems":"","Devices":[],"DeviceCgroupRules":null,"DeviceRequests":null,"KernelMemory":0,"KernelMemoryTCP":0,"MemoryReservation":0,"MemorySwap":0,"MemorySwappiness":null,"OomKillDisable":false,"PidsLimit":null,"Ulimits":null,"CpuCount":0,"CpuPercent":0,"IOMaximumIOps":0,"IOMaximumBandwidth":0,"MaskedPaths":["/proc/asound","/proc/acpi","/proc/kcore","/proc/keys","/proc/latency_stats","/proc/timer_list","/proc/timer_stats","/proc/sched_debug","/proc/scsi","/sys/firmware"],"ReadonlyPaths":["/proc/bus","/proc/fs","/proc/irq","/proc/sys","/proc/sysrq-trigger"]}
[root@localhost d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e]# cat config.v2.json 
{"StreamConfig":{},"State":{"Running":true,"Paused":false,"Restarting":false,"OOMKilled":false,"RemovalInProgress":false,"Dead":false,"Pid":97443,"ExitCode":0,"Error":"","StartedAt":"2021-11-17T16:00:08.569706704Z","FinishedAt":"0001-01-01T00:00:00Z","Health":null},"ID":"d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e","Created":"2021-11-17T16:00:08.195246791Z","Managed":false,"Path":"/bin/bash","Args":[],"Config":{"Hostname":"d926447f78fd","Domainname":"","User":"","AttachStdin":false,"AttachStdout":false,"AttachStderr":false,"Tty":true,"OpenStdin":true,"StdinOnce":false,"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"],"Cmd":["/bin/bash"],"Image":"centos","Volumes":null,"WorkingDir":"","Entrypoint":null,"OnBuild":null,"Labels":{"org.label-schema.build-date":"20210915","org.label-schema.license":"GPLv2","org.label-schema.name":"CentOS Base Image","org.label-schema.schema-version":"1.0","org.label-schema.vendor":"CentOS"}},"Image":"sha256:5d0da3dc976460b72c77d94c8a1ad043720b0416bfc16c52c45d4847e53fadb6","NetworkSettings":{"Bridge":"","SandboxID":"e4d76532b01142b603ab8e7c37fb8dd37894554ac1344f354233a6d3566e0ae4","HairpinMode":false,"LinkLocalIPv6Address":"","LinkLocalIPv6PrefixLen":0,"Networks":{"bridge":{"IPAMConfig":null,"Links":null,"Aliases":null,"NetworkID":"edad5cd6d9c6f41d487427d665e4456f5185044d4b9bb14ede4c829e0868a695","EndpointID":"fd81f7a7874a53c248e8551dacc59b84cfab1a4c77c4453fec39a358e85243cd","Gateway":"172.17.0.1","IPAddress":"172.17.0.2","IPPrefixLen":16,"IPv6Gateway":"","GlobalIPv6Address":"","GlobalIPv6PrefixLen":0,"MacAddress":"02:42:ac:11:00:02","DriverOpts":null,"IPAMOperational":false}},"Service":null,"Ports":{},"SandboxKey":"/var/run/docker/netns/e4d76532b011","SecondaryIPAddresses":null,"SecondaryIPv6Addresses":null,"IsAnonymousEndpoint":false,"HasSwarmEndpoint":false},"LogPath":"/var/lib/docker/containers/d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e/d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e-json.log","Name":"/test-001","Driver":"overlay2","OS":"linux","MountLabel":"","ProcessLabel":"","RestartCount":0,"HasBeenStartedBefore":true,"HasBeenManuallyStopped":false,"MountPoints":{},"SecretReferences":null,"ConfigReferences":null,"AppArmorProfile":"","HostnamePath":"/var/lib/docker/containers/d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e/hostname","HostsPath":"/var/lib/docker/containers/d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e/hosts","ShmPath":"","ResolvConfPath":"/var/lib/docker/containers/d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e/resolv.conf","SeccompProfile":"","NoNewPrivileges":false,"LocalLogCacheMeta":{"HaveNotifyEnabled":false}}
[root@localhost d926447f78fdad90d00e8d3fa442fee445cb7b999f8b771ccfe1b1c54e091d6e]#