docker

docker

1、先卸载老的：
yum remove docker
docker-client
docker-client-latest
docker-common
docker-latest
docker-latest-logrotate
docker-logrotate
docker-engine

2、安装必备组件
yum install -y yum-utils
device-mapper-persistent-data
lvm2

3、加Repo
cd /root
wget --no-check-certificate https://download.docker.com/linux/centos/docker-ce.repo

然后修改docker-ce.repo文件，在每一段里面加sslverify=0

yum-config-manager
–add-repo
/root/docker-ce.repo

4、安装
yum install docker-ce docker-ce-cli containerd.io

安装指定版本docker:
看有哪些可用：
yum list docker-ce --showduplicates | sort -r
yum install docker-ce-<VERSION_STRING> docker-ce-cli-<VERSION_STRING> containerd.io

touch /etc/docker/daemon.json
修改/etc/docker/daemon.json，增加一行：
{ “insecure-registries”:[“rnd-osc.huawei.com:5000”] }

5、
启动docker服务：
systemctl start docker
设置开机启动
systemctl enable docker

验证：
docker vesion ; docker info
docker run hello-world

重启docker：
systemctl daemon-reload
systemctl restart docker
查看已生效的环境变量
systemctl show --property Environment docker

daemon.json是所有linux上存放docker服务参数的通用位置，参数的格式说明看这里：
https://docs.docker.com/engine/reference/commandline/dockerd//#daemon-configuration-file

7、基本概念
image:虚拟机镜像
container：镜像跑起来的实例，就是一个进程，对应一个文件。实例被kill/stop后这个文件依然存在，要完全干掉需删除该文件

7、常用操作

docker version
docker info
docker images – 查看所有镜像
docker ps -a --查看所有容器
docker search centos --查找镜像
docker pull centos:latest --拉取镜像
docker image list --查看本地镜像
docker run -it centos:latest /bin/bash — 启动并打开命令行窗口，运行在前台
docker run -d -it centos:latest /bin/bash — 启动到后台.-it一定要加，否则
docker run -d -p 8080:80/tcp xxx – 把宿主机的8080端口映射到container的80端口
docker run -e $va{r}_{n}ame=$var_val – 运行前先设置好环境变量
docker logs -f $container_id 实时查看容器日志
docker attach $container_id
docker container list、docker ps – 列出运行中的container进程
docker container list -all、docker ps -a – 列出所有container进程，包括已停止的。已停止的container也会有一个文件
docker image rm – 删除镜像
docker contaier rm – 删除容器
docker cp mycontainer:/opt/file.txt /opt/local/ – 从容器中复制到容器外
docker cp /opt/local/file.txt mycontainer:/opt/ – 从容器外复制到容器中
exit退出容器会导致container终止;ctrl-p + ctrl-q退出容器可以让容器保持后台运行

docker exec -it $container_id bash --登陆到一个现有容器的内部
docker exec $container_id $bash_cmd – 直接在一个运行中的容器内执行命令
docker inspect $container_id – 可以全面了解一个container实例的全面信息

没有办法修改一个运行中的容器的环境变量，除非把容器停掉再启动。

特别操作：

docker ps -aq – 列出所有容器ID
docker stop $(docker ps -aq) – 停止所有容器
docker rm $(docker ps -aq) --删除所有容器
docker rmi $(docker images -q) --删除所有镜像

其他重要docker run参数（英文的部分不可能有精力一个个尝试，用到再说）：
Options:
–add-host list Add a custom host-to-IP mapping (host:ip)
-a, --attach list Attach to STDIN, STDOUT or STDERR
–blkio-weight uint16 Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)
–blkio-weight-device list Block IO weight (relative device weight) (default [])
–cap-add list Add Linux capabilities
–cap-drop list Drop Linux capabilities
–cgroup-parent string Optional parent cgroup for the container
–cidfile string 运行容器后，在指定文件中写入容器PID值，一种典型的监控系统用法
–cpu-period int Limit CPU CFS (Completely Fair Scheduler) period
–cpu-quota int Limit CPU CFS (Completely Fair Scheduler) quota
–cpu-rt-period int Limit CPU real-time period in microseconds
–cpu-rt-runtime int Limit CPU real-time runtime in microseconds
-c, --cpu-shares int 设置容器CPU权重，在CPU共享场景使用
–cpus decimal Number of CPUs
–cpuset-cpus string 设置容器可以使用哪些CPU，此参数可以用来容器独占CPU
–cpuset-mems string MEMs in which to allow execution (0-3, 0,1)
-d, --detach 运行于后台
–detach-keys string Override the key sequence for detaching a container
–device list 添加主机设备给容器，相当于设备直通
–device-cgroup-rule list Add a rule to the cgroup allowed devices list
–device-read-bps list Limit read rate (bytes per second) from a device (default [])
–device-read-iops list Limit read rate (IO per second) from a device (default [])
–device-write-bps list Limit write rate (bytes per second) to a device (default [])
–device-write-iops list Limit write rate (IO per second) to a device (default [])
–disable-content-trust Skip image verification (default true)
–dns list 指定容器的dns服务器
–dns-option list Set DNS options
–dns-search list 指定容器的dns搜索域名，写入到容器的/etc/resolv.conf文件
–entrypoint string Overwrite the default ENTRYPOINT of the image
-e, --env list 指定环境变量，容器中可以使用该环境变量，比如：-e FOO=‘foo’ -e BAR=‘bar’
–env-file list 指定环境变量文件，文件格式为每行一个环境变量
–expose list 指定容器暴露的端口，即修改镜像的暴露端口
–group-add list Add additional groups to join
–health-cmd string Command to run to check health
–health-interval duration Time between running the check (ms|s|m|h) (default 0s)
–health-retries int Consecutive failures needed to report unhealthy
–health-start-period duration Start period for the container to initialize before starting health-retries countdown (ms|s|m|h) (default 0s)
–health-timeout duration Maximum time to allow one check to run (ms|s|m|h) (default 0s)
–help Print usage
-h, --hostname string 指定容器的主机名
–init Run an init inside the container that forwards signals and reaps processes
-i, --interactive 打开STDIN，用于控制台交互
–ip string IPv4 address (e.g., 172.30.100.104)
–ip6 string IPv6 address (e.g., 2001:db8::33)
–ipc string IPC mode to use
–isolation string Container isolation technology
–kernel-memory bytes Kernel memory limit
-l, --label list Set meta data on a container
–label-file list Read in a line delimited file of labels
–link list 指定容器间的关联，使用其他容器的IP、env等信息
–link-local-ip list Container IPv4/IPv6 link-local addresses
–log-driver string Logging driver for the container
–log-opt list Log driver options
–mac-address string Container MAC address (e.g., 92:d0:c6:0a:29:33)
-m, --memory bytes 指定容器的内存上限
–memory-reservation bytes Memory soft limit
–memory-swap bytes Swap limit equal to memory plus swap: ‘-1’ to enable unlimited swap
–memory-swappiness int Tune container memory swappiness (0 to 100) (default -1)
–mount mount Attach a filesystem mount to the container
–name string 指定容器名字，后续可以通过名字进行容器管理，links特性需要使用名字
–network string 容器网络设置:
bridge 使用docker daemon指定的网桥
host //容器使用主机的网络
container:NAME_or_ID >//使用其他容器的网路，共享IP和PORT等网络资源
none 容器使用自己的网络（类似–net=bridge），但是不进行配置
–network-alias list Add network-scoped alias for the container
–no-healthcheck Disable any container-specified HEALTHCHECK
–oom-kill-disable Disable OOM Killer
–oom-score-adj int Tune host’s OOM preferences (-1000 to 1000)
–pid string PID namespace to use
–pids-limit int Tune container pids limit (set -1 for unlimited)
–privileged 指定容器是否为特权容器，特权容器拥有所有的capabilities
-p, --publish list 指定容器暴露的端口 8080:80/tcp
-P, --publish-all Publish all exposed ports to random ports
–read-only Mount the container’s root filesystem as read only
–restart string 指定容器停止后的重启策略:
no：容器退出时不重启
on-failure：容器故障退出（返回值非零）时重启
always：容器退出时总是重启
–rm 指定容器停止后自动删除容器(不支持以docker run -d启动的容器)
–runtime string Runtime to use for this container
–security-opt list Security Options
–shm-size bytes Size of /dev/shm
–sig-proxy Proxy received signals to the process (default true)
–stop-signal string Signal to stop a container (default “SIGTERM”)
–stop-timeout int Timeout (in seconds) to stop a container
–storage-opt list Storage driver options for the container
–sysctl map Sysctl options (default map[])
–tmpfs list Mount a tmpfs directory
-t, --tty 分配tty设备，该可以支持终端登录，默认为false
–ulimit ulimit Ulimit options (default [])
-u, --user string Username or UID (format: <name|uid>[:<group|gid>])
–userns string User namespace to use
–uts string UTS namespace to use
-v, --volume list 给容器挂载存储卷，挂载到容器的某个目录
–volume-driver string Optional volume driver for the container
–volumes-from list 给容器挂载其他容器上的卷，挂载到容器的某个目录
-w, --workdir string Working directory inside the container