常用命令
##常用运维命令
启动容器
重启容器
停止容器
删除容器
进入容器
查看容器日志
查看容器详情 inspect
更新容器形成新的镜像 commit
容器的列表
Usage: docker [OPTIONS] COMMAND
A self-sufficient runtime for containers
Options:
--config string Location of client config files (default "/root/.docker")
-c, --context string Name of the context to use to connect to the daemon (overrides DOCKER_HOST env var and default context set with "docker context use")
-D, --debug Enable debug mode
-H, --host list Daemon socket(s) to connect to
-l, --log-level string Set the logging level ("debug"|"info"|"warn"|"error"|"fatal") (default "info")
--tls Use TLS; implied by --tlsverify
--tlscacert string Trust certs signed only by this CA (default "/root/.docker/ca.pem")
--tlscert string Path to TLS certificate file (default "/root/.docker/cert.pem")
--tlskey string Path to TLS key file (default "/root/.docker/key.pem")
--tlsverify Use TLS and verify the remote
-v, --version Print version information and quit
Management Commands:
builder Manage builds
config Manage Docker configs
container Manage containers
context Manage contexts
engine Manage the docker engine
image Manage images
network Manage networks
node Manage Swarm nodes
plugin Manage plugins
secret Manage Docker secrets
service Manage services
stack Manage Docker stacks
swarm Manage Swarm
system Manage Docker
trust Manage trust on Docker images
volume Manage volumes
Commands:
attach Attach local standard input, output, and error streams to a running container
build Build an image from a Dockerfile
commit Create a new image from a container's changes
cp Copy files/folders between a container and the local filesystem
create Create a new container
diff Inspect changes to files or directories on a container's filesystem
events Get real time events from the server
exec Run a command in a running container
export Export a container's filesystem as a tar archive
history Show the history of an image
images List images
import Import the contents from a tarball to create a filesystem image
info Display system-wide information
inspect Return low-level information on Docker objects
kill Kill one or more running containers
load Load an image from a tar archive or STDIN
login Log in to a Docker registry
logout Log out from a Docker registry
logs Fetch the logs of a container
pause Pause all processes within one or more containers
port List port mappings or a specific mapping for the container
ps List containers
pull Pull an image or a repository from a registry
push Push an image or a repository to a registry
rename Rename a container
restart Restart one or more containers
rm Remove one or more containers
rmi Remove one or more images
run Run a command in a new container
save Save one or more images to a tar archive (streamed to STDOUT by default)
search Search the Docker Hub for images
start Start one or more stopped containers
stats Display a live stream of container(s) resource usage statistics
stop Stop one or more running containers
tag Create a tag TARGET_IMAGE that refers to SOURCE_IMAGE
top Display the running processes of a container
unpause Unpause all processes within one or more containers
update Update configuration of one or more containers
version Show the Docker version information
wait Block until one or more containers stop, then print their exit codes
Run 'docker COMMAND --help' for more information on a command.
运行容器
docker run -p 3014:3014 --name realtime --restart=always -tdi -v /data/luck/realtime:/data/realtime -w /data/realtime luck/realtime bash
以特权模式运行容器,如mysql:
docker run -p 8306:3306 --name web -tdi --privileged -v /data/mysql:/var/lib/mysql omai/web:0.0.1 init
注:-d表示后台运行容器
查看镜像
docker image ls
- 查看latest镜像的具体版本
docker image inspect mysql:latest | grep -i version
查看容器
查看正在运行的容器
docker container ls
查看全部容器
docker container ls --all
文件拷贝
docker cp /本地路径/文件名 容器ID或容器名称:/容器内路径/目标文件名
提交
docker commit <container id/name> <image>
- 如:
docker commit web omai/web:0.0.1
控制正在运行的容器
docker exec -it <container id/name> bash
查询容器详情
docker inspect <container id/name>
查看容器日志
命令格式:
docker logs [OPTIONS] CONTAINER
Options:
--details 显示更多的信息
-f, --follow 跟踪实时日志
--since string 显示自某个timestamp之后的日志,或相对时间,如42m(即42分钟)
--tail string 从日志末尾显示多少行日志, 默认是all
-t, --timestamps 显示时间戳
--until string 显示自某个timestamp之前的日志,或相对时间,如42m(即42分钟)
例如:
// 查看全部日志
docker logs <container id/name>
//跟踪实时日志
docker logs -f <container id/name>
//查看指定时间后的日志,并且只显示最后100行
$ docker logs -f -t --since="2018-09-02" --tail=100 <container id/name>
//查看最近30分钟的日志
docker logs --since 30m <container id/name>
//查看某时间段的日志
$ docker logs -t --since="2018-02-08T13:23:37" --until "2018-02-09T13:23:37" <container id/name>
容器自启动
docker run --restart=always -ti <image> bash
比如:
docker run --restart=always -ti luck/realtime bash
停止容器
docker stop <container id/name>
删除容器
docker rm <container id/name>
停止并删除
docker rm -f <container id/name>
删除镜像
docker rmi [image]
或者:
docker image rm [image]
Docker 一段时间后,系统一般都会残存一些临时的、没有被使用的镜像文件,可以通过以下命令进行清理:
docker image prune
它支持的子命令有:
-a, --all: 删除所有没有用的镜像,而不仅仅是临时文件;
-f, --force:强制删除镜像文件,无需弹出提示确认;
批量删除
容器
docker container rm $(docker container ls -a -q)
镜像
docker image rm $(docker image ls -a -q)
导入、导出
导出
docker save <image> > <file>
- 比如:
docker save luck/realtime > realtime.tar
导入
docker load < <file>
- 比如:
docker load < realtime.tar
深度清理
docker system prune -a
- 该命令可以用于清理磁盘,删除关闭的容器、无用的数据卷和网络,以及dangling镜像(无tag的镜像)
打标签
docker tag <image> <tag>
- 比如:
docker tag lucksoft/realtime lucksoft/realtime:latest
发布
发布到DockerHub
docker push <image>
- 比如:
docker push lucksoft/realtime:latest
Dockerfile创建镜像
docker build -t lucksoft/microserver:2.0.0
制定特定文件
docker build -f Dockerfile-2.0.0 -t lucksoft/microserver:2.0.0
注:lucksoft为公司的DockerHub存储库 https://hub.docker.com/u/lucksoft
性能监控
查看容器CPU、内存消耗情况:
docker stats --format "table {{.Name}}\t{{.Container}}\t{{.CPUPerc}}\t{{.MemUsage}}"