Docker 容器云学习

1.安装
下载rpm安装包上传安装
docker-ce-17.03.0.ce-1.el7.centos.x86_64.rpm
docker-ce-selinux-17.03.0.ce-1.el7.centos.noarch.rpm（依赖包）
先安装依赖包

[root@localhost ~]# yum install docker-ce-selinux-17.03.0.ce-1.el7.centos.noarch.rpm -y

再安装docker

[root@localhost ~]# yum install  docker-ce-17.03.0.ce-1.el7.centos.x86_64.rpm

启动docker

[root@localhost ~]# systemctl start docker

查看docker的基本信息：docker info

[root@localhost ~]# docker info
Containers: 0
 Running: 0
 Paused: 0
 Stopped: 0
Images: 0
Server Version: 17.03.0-ce
Storage Driver: overlay
 Backing Filesystem: xfs
 Supports d_type: false
Logging Driver: json-file
Cgroup Driver: cgroupfs
Plugins: 
 Volume: local
 Network: bridge host macvlan null overlay
Swarm: inactive
Runtimes: runc
Default Runtime: runc
Init Binary: docker-init
containerd version: 977c511eda0925a723debdc94d09459af49d082a
runc version: a01dafd48bc1c7cc12bdb01206f9fea7dd6feb70
init version: 949e6fa
Security Options:
 seccomp
  Profile: default
Kernel Version: 3.10.0-327.el7.x86_64
Operating System: CentOS Linux 7 (Core)
OSType: linux
Architecture: x86_64
CPUs: 2
Total Memory: 1.782 GiB
Name: localhost.localdomain
ID: XYR4:V4RU:VXMH:XM27:UETC:J3YD:GRDQ:MALU:JOIV:OGXE:S6PF:2HFO
Docker Root Dir: /var/lib/docker
Debug Mode (client): false
Debug Mode (server): false
Registry: https://index.docker.io/v1/
WARNING: bridge-nf-call-iptables is disabled
WARNING: bridge-nf-call-ip6tables is disabled
Experimental: false
Insecure Registries:
 127.0.0.0/8
Live Restore Enabled: false

配置加速器文件：vi /etc/docker/daemon.json

[root@localhost ~]# vi /etc/docker/daemon.json


{
"registry-mirrors":["https://dhp9bx4f.mirror.aliyuncs.com"]
}

配置完成后重启

[root@localhost ~]# systemctl restart docker

拉取镜像

[root@localhost ~]# docker pull centos

镜像列表查看

[root@localhost ~]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
centos              latest              0d120b6ccaa8        3 months ago        215 MB

搜索镜像

[root@localhost ~]# docker search centos
NAME                               DESCRIPTION                                     STARS     OFFICIAL   AUTOMATED
centos                             The official build of CentOS.                   6300      [OK]       
ansible/centos7-ansible            Ansible on Centos7                              132                  [OK]
consol/centos-xfce-vnc             Centos container with "headless" VNC sessi...   123                  [OK]
jdeathe/centos-ssh                 OpenSSH / Supervisor / EPEL/IUS/SCL Repos ...   116                  [OK]
centos/systemd                     systemd enabled base container.                 87                   [OK]
centos/mysql-57-centos7            MySQL 5.7 SQL database server                   86                   
imagine10255/centos6-lnmp-php56    centos6-lnmp-php56                              58                   [OK]
tutum/centos                       Simple CentOS docker image with SSH access      46                   
centos/postgresql-96-centos7       PostgreSQL is an advanced Object-Relationa...   45                   
kinogmt/centos-ssh                 CentOS with SSH                                 29                   [OK]
pivotaldata/centos-gpdb-dev        CentOS image for GPDB development. Tag nam...   13                   
guyton/centos6                     From official centos6 container with full ...   10                   [OK]
centos/tools                       Docker image that has systems administrati...   7                    [OK]
drecom/centos-ruby                 centos ruby                                     6                    [OK]
pivotaldata/centos                 Base centos, freshened up a little with a ...   5                    
pivotaldata/centos-gcc-toolchain   CentOS with a toolchain, but unaffiliated ...   3                    
darksheer/centos                   Base Centos Image -- Updated hourly             3                    [OK]
pivotaldata/centos-mingw           Using the mingw toolchain to cross-compile...   3                    
mamohr/centos-java                 Oracle Java 8 Docker image based on Centos 7    3                    [OK]
indigo/centos-maven                Vanilla CentOS 7 with Oracle Java Developm...   1                    [OK]
mcnaughton/centos-base             centos base image                               1                    [OK]
blacklabelops/centos               CentOS Base Image! Built and Updates Daily!     1                    [OK]
pivotaldata/centos7-dev            CentosOS 7 image for GPDB development           0                    
pivotaldata/centos6.8-dev          CentosOS 6.8 image for GPDB development         0                    
smartentry/centos                  centos with smartentry                          0                    [OK]

给镜像打标签

[root@localhost ~]# docker tag 0d120b6ccaa8  aaa:v1

删除镜像

[root@localhost ~]# docker rmi centos
Untagged: centos:latest
Untagged: centos@sha256:76d24f3ba3317fa945743bb3746fbaf3a0b752f10b10376960de01da70685fbd

把镜像启动为容器（此处可以用名字是因为centos为最新镜像）

[root@localhost ~]# docker run -itd centos
8065a2ccd406dc1dd23a6e9c27ca6020ab8098149f8e616bf7eb3f5f547f0d0e

查看所有的容器

[root@localhost ~]# docker ps -a
CONTAINER ID        IMAGE               COMMAND             CREATED              STATUS              PORTS               NAMES
8065a2ccd406        centos              "/bin/bash"         About a minute ago   Up About a minute                       wonderful_pasteur

通过容器创建镜像
1.启动容器

[root@localhost ~]# docker run -itd centos
190e39a0c7372334bd4feae0ce3aa53147d4ad4fd967795de7a8247a9b199013

2进入容器

[root@localhost ~]# docker exec -it 8065a2ccd406 /bin/bash
[root@8065a2ccd406 /]# 

安装net-tools工具
[root@8065a2ccd406 /]# yum install -y net-tools
ctrl d 退出容器
创建了一个新的镜像

[root@localhost ~]# docker commit -m "install net-tools" -a "liu" 8065a2ccd406 centos
sha256:61bc8d40c25c4fbbcb31184a96d179dd524750c73873e5959070571ae9e8d947

使用模板创建镜像
1.下载模板
https://download.openvz.org/template/precreated/
2.导入该镜像

[root@localhost ~]# cat centos-7-x86_64-minimal\ \(1\).tar.gz |docker import - centos777
sha256:665e062d661c3d278f6cf30e01c4da01cb567558203a0487a621bee99bc2d460

3.查看导入的镜像

[root@localhost ~]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED              SIZE
centos777           latest              665e062d661c        About a minute ago   435 MB
aaa                 v1                  0d120b6ccaa8        3 months ago         215 MB
centos              latest              0d120b6ccaa8        3 months ago         215 MB

启动镜像

[root@localhost ~]# docker run -itd 665e062d661c /bin/bash
e398c8efae893820c8fb96f42271640aa35318d4f3940403e487b97a44c05a68

4.把现有的镜像，打包为一个tar包

[root@localhost ~]# docker save -o liu.tar 665e062d661c
[root@localhost ~]# 

查看

[root@localhost ~]# ll
total 596996
-rw-------. 1 root root      1419 Nov 26 01:51 anaconda-ks.cfg
-rw-r--r--. 1 root root 145639219 Dec  3  2020 centos-7-x86_64-minimal (1).tar.gz
-rw-r--r--. 1 root root  19521288 Dec  2  2020 docker-ce-17.03.0.ce-1.el7.centos.x86_64.rpm
-rw-r--r--. 1 root root     29108 Dec  2  2020 docker-ce-selinux-17.03.0.ce-1.el7.centos.noarch.rpm
-rw-------. 1 root root 446123008 Nov 26 03:03 liu.tar

把tar包恢复为镜像
1.删除容器

[root@localhost ~]# docker rm -f $(docker ps -qa)
d730c1c97304
0802ab26894b
e398c8efae89
8065a2ccd406

2.删除镜像（转换成tar包的镜像）

[root@localhost ~]# docker rmi centos777
Untagged: centos777:latest
Deleted: sha256:665e062d661c3d278f6cf30e01c4da01cb567558203a0487a621bee99bc2d460
Deleted: sha256:788edba9eaa8ade63d8ba9d5747281c5da2b34b12a6c80f4dffd8ad9e05f68c1

3.恢复镜像

[root@localhost ~]# docker load < liu.tar 
Loaded image ID: sha256:665e062d661c3d278f6cf30e01c4da01cb567558203a0487a621bee99bc2d460

4.查看

[root@localhost ~]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
<none>              <none>              665e062d661c        55 minutes ago      435 MB
aaa                 v1                  0d120b6ccaa8        3 months ago        215 MB
centos              latest              0d120b6ccaa8        3 months ago        215 MB

打标签

[root@localhost ~]# docker tag 0d120b6ccaa8   bbb:v8
[root@localhost ~]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
<none>              <none>              665e062d661c        About an hour ago   435 MB
bbb                 v8                  0d120b6ccaa8        3 months ago        215 MB
centos              latest              0d120b6ccaa8        3 months ago        215 MB
aaa                 v1                  0d120b6ccaa8        3 months ago        215 MB

Docker容器管理
创建容器

[root@localhost ~]# docker create -it centos /bin/bash
065cf4eff4035078abb8b6f03e4de93f56c617966c885a74c9ad09c973015f7e

[root@localhost ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
065cf4eff403 centos “/bin/bash” 39 seconds ago zen_saha

创建容器

[root@localhost ~]# docker create -it centos /bin/bash
187d8415f059042e218dcffa2d6e31426bba6803f1aeb955f38ef73d43c8947f

[root@localhost ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
187d8415f059 centos “/bin/bash” 20 seconds ago Created epic_carson
启动容器

[root@localhost ~]# docker start 187d8415f059
187d8415f059

查看，此时只有一个

[root@localhost ~]# docker ps
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
187d8415f059        centos              "/bin/bash"         55 seconds ago      Up 17 seconds                           epic_carson

运行后查看，新增一个

[root@localhost ~]# docker run -it centos /bin/bash
[root@e71d45b5bff7 /]# exit
[root@localhost ~]# docker ps -a
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS                     PORTS               NAMES
e71d45b5bff7        centos              "/bin/bash"         16 seconds ago      Exited (0) 9 seconds ago                       quirky_meninsky
187d8415f059        centos              "/bin/bash"         4 minutes ago       Up 3 minutes                                   epic_carson

在后台运行：docker run -d

[root@localhost ~]# docker run -d centos bash -c "while:;do echo"123";sleep 2;done"
f73d9db440ef9d61583c7864abb4e578b0bb23d53393976cf39e64ec14645051

可以用docker attach 加id 查看运行是否正常
[root@localhost ~]# docker attach 770d2576d154
123
123
123
123
给容器定义名字

[root@localhost ~]# docker run --name liu -itd centos /bin/bash
a9a04b4e944c010d0dab3867f9923d7961e700158a6cc5362fda374c93b66826
[root@localhost ~]# docker ps -a
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS                      PORTS               NAMES
a9a04b4e944c        centos              "/bin/bash"              8 seconds ago       Up 8 seconds                                    liu
f73d9db440ef        centos              "bash -c 'while:;d..."   14 minutes ago      Exited (1) 14 minutes ago                       kind_wilson
e71d45b5bff7        centos              "/bin/bash"              19 minutes ago      Exited (0) 19 minutes ago                       quirky_meninsky
187d8415f059        centos              "/bin/bash"              24 minutes ago      Up 23 minutes                                   epic_carson

让容器退出后直接删除，命令执行完容器就会退出

[root@localhost ~]# docker run --rm -it centos bash -c "sleep 30"

Docker 容器管理
docker logs 可以获取到容器的运行历史消息

[root@localhost ~]# docker logs e71d45b5bff7
[root@e71d45b5bff7 /]# exit

进入后台运行的容器
[root@localhost ~]# docker attach 187d8415f059
[root@187d8415f059 /]# exit
exit
Docker仓库管理
下载registry镜像

[root@localhost ~]# docker pull registry
Using default tag: latest
latest: Pulling from library/registry
cbdbe7a5bc2a: Pull complete 
47112e65547d: Pull complete 
46bcb632e506: Pull complete 
c1cc712bcecd: Pull complete 
3db6272dcbfa: Pull complete 
Digest: sha256:8be26f81ffea54106bae012c6f349df70f4d5e7e2ec01b143c46e2c03b9e551d
Status: Downloaded newer image for registry:latest

[root@localhost ~]# docker run -d -p5000:5000 registry
beea320e7836e844db5c7f1f697d284e07aa0a681fa87b261fde02b77b886b2d

把镜像上传到私有仓库

[root@localhost ~]# curl 127.0.0.1:5000/v2/_catalog
{"repositories":[]}

[root@localhost ~]# docker tag wang:v1 192.168.200.40:5000/centos

把标记的镜像推送到私有仓库
[root@localhost ~]# docker push 192.168.200.40:5000/centos
The push refers to a repository [192.168.200.40:5000/centos]
Get https://192.168.200.40:5000/v1/_ping: http: server gave HTTP response to HTTPS client

更改配置文件

[root@localhost ~]# vi /etc/docker/daemon.json
{
"registry-mirrors":["https://dhp9bx4f.mirror.aliyuncs.com"],"insecure-registries":["192.168.200.40:5000"
]

重新启动docker

[root@localhost ~]# systemctl restart docker

查看发现所有容器已经关闭

[root@localhost ~]# docker ps -a
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS                      PORTS               NAMES
beea320e7836        registry            "/entrypoint.sh /e..."   11 minutes ago      Exited (2) 18 seconds ago                       confident_lovelace
a9a04b4e944c        centos              "/bin/bash"              21 minutes ago      Exited (0) 18 seconds ago                       liu
f73d9db440ef        centos              "bash -c 'while:;d..."   36 minutes ago      Exited (1) 36 minutes ago                       kind_wilson
e71d45b5bff7        centos              "/bin/bash"              41 minutes ago      Exited (0) 41 minutes ago                       quirky_meninsky
187d8415f059        centos              "/bin/bash"              45 minutes ago      Exited (0) 16 minutes ago                       epic_carson

启动registry容器

[root@localhost ~]# docker start beea320e7836
beea320e7836

再次push

[root@localhost ~]# docker push 192.168.200.40:5000/centos
The push refers to a repository [192.168.200.40:5000/centos]
291f6e44771a: Pushed 
latest: digest: sha256:bde81ad8665d5e8f10aa4c91f28eb2e663c1a31f0cc851f6637003863253d168 size: 529

可以查看到推送上来的镜像

[root@localhost ~]# curl 192.168.200.40:5000/v2/_catalog
{"repositories":["centos"]}

容器导为tar包让其他虚拟机使用
主节点
容器导为tar包

[root@localhost ~]# docker export 523534bc7a54   >heihei.tar

复制到需要使用的虚拟机

[root@localhost ~]# scp heihei.tar root@192.168.200.60:/root
The authenticity of host '192.168.200.60 (192.168.200.60)' can't be established.
ECDSA key fingerprint is 2e:b0:87:50:15:73:34:e3:f1:3a:be:a4:c7:f8:56:8e.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.200.60' (ECDSA) to the list of known hosts.
root@192.168.200.60's password: 
heihei.tar                                                            100%  212MB 106.0MB/s   00:02 

从节点安装docker
启动docker

[root@localhost ~]# systemctl start docker

查看tar
包是否复制成功

[root@localhost ~]# ll
total 236248
-rw-------. 1 root root      1120 Nov 27 01:25 anaconda-ks.cfg
-rw-r--r--. 1 root root  19521288 Dec  2 10:23 docker-ce-17.03.0.ce-1.el7.centos.x86_64.rpm
-rw-r--r--. 1 root root     29108 Dec  2 10:20 docker-ce-selinux-17.03.0.ce-1.el7.centos.noarch.rpm
-rw-r--r--. 1 root root 222356480 Dec  4 00:21 heihei.ta

生成heihei镜像

[root@localhost ~]# cat heihei.tar | docker import - centos
sha256:8a8ab518153fa6c5b4940a64c6560a826eb4c54c1c169c66b0bfbf45154025b8

[root@localhost ~]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
centos              latest              8a8ab518153f        9 seconds ago       215 MB
aaa                 v1                  0d120b6ccaa8        3 months ago        215 MB
centos              <none>              0d120b6ccaa8        3 months ago        215 MB

[root@localhost ~]# docker run -itd --name ccc centos /bin/bash
69efbec0873b3e7481a038f5360c45133c3c428fd75a4a5851f4c53d14923af3
[root@localhost ~]# docker ps -a
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS                       PORTS               NAMES
69efbec0873b        centos              "/bin/bash"         7 seconds ago       Up 6 seconds                                     ccc
6f3e7decee80        aaa:v1              "/bin/bash"         6 days ago          Exited (255) 2 minutes ago                       stupefied_jennings