这里写目录标题
Docker笔记
一、Docker概述
名词解释
镜像(image):
docker镜像就好比是一个目标,可以通过这个目标来创建容器服务,tomcat镜像= =>run= =>容器(提供服务器),通过这个镜像可以创建多个容器(最终服务运行或者项目运行就是在容器中的)。
容器(container):
Docker利用容器技术,独立运行一个或者一组应用,通过镜像来创建的.
启动,停止,删除,基本命令
目前就可以把这个容器理解为就是一个简易的 Linux系统。
仓库(repository):
仓库就是存放镜像的地方!
仓库分为公有仓库和私有仓库。(很类似git)
Docker Hub是国外的。
阿里云…都有容器服务器(配置镜像加速!)
二、安装Docker
环境准备
1、 需要会一点点的Linux的基础
2、 CentOS 7
3、 我们使用Xshell连接远程服务器进行操作
环境查看
# 系统内核是 3.10 以上的
[root@yansw ~]# uname -r
3.10.0-1062.9.1.el7.x86_64
# 系统版本
[root@yansw ~]# cat /etc/centos-release
CentOS Linux release 7.6.1810 (Core)
[root@yansw ~]# cat /etc/os-release
NAME="CentOS Linux"
VERSION="7 (Core)"
ID="centos"
ID_LIKE="rhel fedora"
VERSION_ID="7"
PRETTY_NAME="CentOS Linux 7 (Core)"
ANSI_COLOR="0;31"
CPE_NAME="cpe:/o:centos:centos:7"
HOME_URL="https://www.centos.org/"
BUG_REPORT_URL="https://bugs.centos.org/"
CENTOS_MANTISBT_PROJECT="CentOS-7"
CENTOS_MANTISBT_PROJECT_VERSION="7"
REDHAT_SUPPORT_PRODUCT="centos"
REDHAT_SUPPORT_PRODUCT_VERSION="7"
安装docker
帮助文档:https://docs.docker.com/engine/install/
# 1.卸载旧版本
[root@yansw ~]# yum remove docker \
docker-client \
docker-client-latest \
docker-common \
docker-latest \
docker-latest-logrotate \
docker-logrotate \
docker-engine
# 2.需要的安装包
[root@yansw ~]# yum install -y yum-utils
# 3.设置镜像的仓库
# 默认是从国外的,不推荐
[root@yansw ~]# yum-config-manager \
--add-repo \
https://download.docker.com/linux/centos/docker-ce.repo
# 推荐使用国内的(阿里云)
[root@yansw ~]# yum-config-manager \
--add-repo \
https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
# 更新yum软件包索引
[root@yansw ~]# yum makecache fast
# 4.安装docker相关的 docker-ce 社区版 而ee是企业版
[root@yansw ~]# yum install docker-ce docker-ce-cli containerd.io
# 5.启动docker
[root@yansw ~]# systemctl start docker
# 6.查看docker版本
[root@yansw ~]# docker version
# 7.hello-world
[root@yansw ~]# docker run hello-world
hello world输出结果
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-2ZyACBkr-1600941435150)(C:\Users\zyt\AppData\Roaming\Typora\typora-user-images\1594177771814.png)]
# 8.查看下载的镜像
[root@yansw ~]# docker images
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-pazSSSTg-1600941435156)(C:\Users\zyt\AppData\Roaming\Typora\typora-user-images\1594177920479.png)]
了解:卸载docker
# 1.卸载依赖
[root@yansw ~]# yum remove docker-ce docker-ce-cli containerd.io
# 2.删除资源 (/var/lib/docker 是docker的默认工作路径)
[root@yansw ~]# rm -rf /var/lib/docker
阿里云镜像加速
1、登录阿里云找到容器服务
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-6pnmPKgG-1600941435157)(assets/1594447795145.png)]
2、找到镜像加速
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-F96p0oiF-1600941435159)(assets/1594447936913.png)]
3、配置使用
sudo mkdir -p /etc/docker
sudo tee /etc/docker/daemon.json <<-'EOF'
{
"registry-mirrors": ["https://bnbgfzv6.mirror.aliyuncs.com"]
}
EOF
sudo systemctl daemon-reload
sudo systemctl restart docker
三、回顾hello-world
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-A0MoOwL1-1600941435161)(assets/aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2NoZW5nY29kZXgvY2xvdWRpbWcvbWFzdGVyL2ltZy9pbWFnZS0yMDIwMDUxNTEwMjUwMzcyMi5wbmc.jpg)]
docker run 流程图
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-1G9KJRYz-1600941435163)(assets/1594448679256.png)]
四、底层原理
五、Docker常用命令
帮助命令
docker version #显示docker的版本信息。
docker info #显示docker的系统信息,包括镜像和容器的数量
docker 命令 --help #帮助命令
帮助文档的地址:https://docs.docker.com/engine/reference/commandline/build/
镜像命令
docker images 查看所有本地的主机上的镜像
[root@yansw ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
hello-world latest bf756fb1ae65 6 months ago 13.3kB
# 解释
REPOSITORY 镜像的仓库源
TAG 镜像的标签
IMAGE ID 镜像的id
CREATED 镜像的创建时间
SIZE 镜像的大小
# 可选项
Options:
-a, --all # 列出所有镜像
-q, --quiet # 只显示镜像的id
docker images -aq #显示所有镜像的id
docker search 搜索镜像
[root@yansw ~]# docker search mysql
NAME DESCRIPTION STARS OFFICIAL AUTOMATED
mysql MySQL is a widely used, open-source relation… 9721 [OK]
mariadb MariaDB is a community-developed fork of MyS… 3544 [OK]
# --filter=STARS=3000 #搜索出来的镜像就是STARS大于3000的
Options:
-f, --filter filter Filter output based on conditions provided
--format string Pretty-print search using a Go template
--limit int Max number of search results (default 25)
--no-trunc Don't truncate output
[root@yansw ~]# docker search mysql --filter=STARS=3000
NAME DESCRIPTION STARS OFFICIAL AUTOMATED
mysql MySQL is a widely used, open-source relation… 9500 [OK]
mariadb MariaDB is a community-developed fork of MyS… 3444 [OK]
docker pull 下载镜像
# 下载镜像 docker pull 镜像名[:tag]
[root@yansw ~]# docker pull mysql
Using default tag: latest # 如果不写tag, 默认就是 latest
latest: Pulling from library/mysql
8559a31e96f4: Pull complete # 分层下载,docker image的核心 联合文件系统
d51ce1c2e575: Pull complete
c2344adc4858: Pull complete
fcf3ceff18fc: Pull complete
16da0c38dc5b: Pull complete
b905d1797e97: Pull complete
4b50d1c6b05c: Pull complete
c75914a65ca2: Pull complete
1ae8042bdd09: Pull complete
453ac13c00a3: Pull complete
9e680cd72f08: Pull complete
a6b5dc864b6c: Pull complete
Digest: sha256:8b7b328a7ff6de46ef96bcf83af048cb00a1c86282bfca0cb119c84568b4caf6 #签名
Status: Downloaded newer image for mysql:latest
docker.io/library/mysql:latest # 真实地址
# 等价于它
docker pull mysql
docker pull docker.io/library/mysql:latest
# 指定版本下载
[root@yansw ~]# docker pull mysql:5.7
5.7: Pulling from library/mysql
8559a31e96f4: Already exists
d51ce1c2e575: Already exists
c2344adc4858: Already exists
fcf3ceff18fc: Already exists
16da0c38dc5b: Already exists
b905d1797e97: Already exists
4b50d1c6b05c: Already exists
d85174a87144: Pull complete
a4ad33703fa8: Pull complete
f7a5433ce20d: Pull complete
3dcd2a278b4a: Pull complete
Digest: sha256:32f9d9a069f7a735e28fd44ea944d53c61f990ba71460c5c183e610854ca4854
Status: Downloaded newer image for mysql:5.7
docker.io/library/mysql:5.7
docker rmi 删除镜像
[root@yansw ~]# docker rmi -f 镜像id #删除指定的镜像
[root@yansw ~]# docker rmi -f 镜像id 镜像id 镜像id 镜像id #删除指定的镜像
[root@yansw ~]# docker rmi -f $(docker images -aq) #删除全部的镜像
容器命令
说明:我们有了镜像才可以创建容器,Linux,下载centos镜像来学习
docker pull centos
新建容器并启动
docker run[可选参数] image
# 参数说明
--name="Name" 容器名字 tomcat01 tomcat02 用来区分容器
-d 后台方式运行
-it 使用交互方式运行,进入容器查看内容
-p 指定容器的端口 -p 8080(宿主机):8080(容器)
-p ip:主机端口:容器端口
-p 主机端口:容器端口(常用)
-p 容器端口
容器端口
-P(大写) 随机指定端口
# 测试,启动并进入容器
[root@yansw ~]# docker run -it centos /bin/bash
[root@bb98be7bc0bd /]# ls #查看容器内的centos,基础版本,很多命令都是不完善的
bin dev etc home lib lib64 lost+found media mnt opt proc root run sbin srv sys tmp usr var
# 从容器中退回主机
[root@bb98be7bc0bd /]# exit
exit
[root@yansw /]# ls
bin boot data dev etc home lib lib64 lost+found media mnt opt proc root run sbin srv swapfile sys tmp usr var
列出所有运行的容器
# docker ps 命令
# 列出当前正在运行的容器
-a # 列出当前正在运行的容器 + 带出历史运行过的容器
-n=? # 显示最近创建的容器
-q # 只显示容器的编号
[root@yansw /]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
[root@yansw /]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
bb98be7bc0bd centos "/bin/bash" 10 minutes ago Exited (0) 8 minutes ago pedantic_mendel
5dbaa8e6c436 bf756fb1ae65 "/hello" 3 days ago Exited (0) 3 days ago sleepy_dubinsky
退出容器
exit #容器直接退出
ctrl +P +Q #容器不停止退出
删除容器
docker rm 容器id #删除指定的容器,不能删除正在运行的容器,如果要强制删除 rm -f
docker rm -f $(docker ps -aq) #删除指定的容器
docker ps -a -q|xargs docker rm #删除所有的容器
启动和停止容器的操作
docker start 容器id #启动容器
docker restart 容器id #重启容器
docker stop 容器id #停止当前正在运行的容器
docker kill 容器id #强制停止当前容器
其他常用命令
后台启动容器
# 命令 docker run -d 镜像名
➜ ~ docker run -d centos
a8f922c255859622ac45ce3a535b7a0e8253329be4756ed6e32265d2dd2fac6c
➜ ~ docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
# 问题docker ps. 发现centos 停止了
# 常见的坑,docker容器使用后台运行,就必须要有要一个前台进程,docker发现没有应用,就会自动停止
# nginx,容器启动后,发现自己没有提供服务,就会立刻停止,就是没有程序了
查看日志
docker logs --help
Options:
--details Show extra details provided to logs
* -f, --follow Follow log output
--since string Show logs since timestamp (e.g. 2013-01-02T13:23:37) or relative (e.g. 42m for 42 minutes)
* --tail string Number of lines to show from the end of the logs (default "all")
* -t, --timestamps Show timestamps
--until string Show logs before a timestamp (e.g. 2013-01-02T13:23:37) or relative (e.g. 42m for 42 minutes)
➜ ~ docker run -d centos /bin/sh -c "while true;do echo 6666;sleep 1;done" #模拟日志
#显示日志
-tf #显示日志信息(一直更新)
--tail number #需要显示日志条数
docker logs -t --tail n 容器id #查看n行日志
docker logs -tf 容器id #跟着日志
查看容器中进程信息 ps
# 命令 docker top 容器id
UID PID PPID C STIME TTY TIME CMD
root 30281 30264 0 19:18 pts/0 00:00:00 /bin/bash
查看镜像的元数据
# 命令
docker inspect 容器id
[
{
"Id": "4f6aa48e34aeaf742ebe28197766bdaa9a7b54afc0510556ca587e068f9b6f7d",
"Created": "2020-08-11T11:18:30.554873203Z",
"Path": "/bin/bash",
"Args": [],
"State": {
"Status": "running",
"Running": true,
"Paused": false,
"Restarting": false,
"OOMKilled": false,
"Dead": false,
"Pid": 30281,
"ExitCode": 0,
"Error": "",
"StartedAt": "2020-08-11T11:18:31.063525315Z",
"FinishedAt": "0001-01-01T00:00:00Z"
},
"Image": "sha256:831691599b88ad6cc2a4abbd0e89661a121aff14cfa289ad840fd3946f274f1f",
"ResolvConfPath": "/var/lib/docker/containers/4f6aa48e34aeaf742ebe28197766bdaa9a7b54afc0510556ca587e068f9b6f7d/resolv.conf",
"HostnamePath": "/var/lib/docker/containers/4f6aa48e34aeaf742ebe28197766bdaa9a7b54afc0510556ca587e068f9b6f7d/hostname",
"HostsPath": "/var/lib/docker/containers/4f6aa48e34aeaf742ebe28197766bdaa9a7b54afc0510556ca587e068f9b6f7d/hosts",
"LogPath": "/var/lib/docker/containers/4f6aa48e34aeaf742ebe28197766bdaa9a7b54afc0510556ca587e068f9b6f7d/4f6aa48e34aeaf742ebe28197766bdaa9a7b54afc0510556ca587e068f9b6f7d-json.log",
"Name": "/goofy_diffie",
"RestartCount": 0,
"Driver": "overlay2",
"Platform": "linux",
"MountLabel": "",
"ProcessLabel": "",
"AppArmorProfile": "",
"ExecIDs": null,
"HostConfig": {
"Binds": null,
"ContainerIDFile": "",
"LogConfig": {
"Type": "json-file",
"Config": {}
},
"NetworkMode": "default",
"PortBindings": {},
"RestartPolicy": {
"Name": "no",
"MaximumRetryCount": 0
},
"AutoRemove": false,
"VolumeDriver": "",
"VolumesFrom": null,
"CapAdd": null,
"CapDrop": null,
"Capabilities": null,
"Dns": [],
"DnsOptions": [],
"DnsSearch": [],
"ExtraHosts": null,
"GroupAdd": null,
"IpcMode": "private",
"Cgroup": "",
"Links": null,
"OomScoreAdj": 0,
"PidMode": "",
"Privileged": false,
"PublishAllPorts": false,
"ReadonlyRootfs": false,
"SecurityOpt": null,
"UTSMode": "",
"UsernsMode": "",
"ShmSize": 67108864,
"Runtime": "runc",
"ConsoleSize": [
0,
0
],
"Isolation": "",
"CpuShares": 0,
"Memory": 0,
"NanoCpus": 0,
"CgroupParent": "",
"BlkioWeight": 0,
"BlkioWeightDevice": [],
"BlkioDeviceReadBps": null,
"BlkioDeviceWriteBps": null,
"BlkioDeviceReadIOps": null,
"BlkioDeviceWriteIOps": null,
"CpuPeriod": 0,
"CpuQuota": 0,
"CpuRealtimePeriod": 0,
"CpuRealtimeRuntime": 0,
"CpusetCpus": "",
"CpusetMems": "",
"Devices": [],
"DeviceCgroupRules": null,
"DeviceRequests": null,
"KernelMemory": 0,
"KernelMemoryTCP": 0,
"MemoryReservation": 0,
"MemorySwap": 0,
"MemorySwappiness": null,
"OomKillDisable": false,
"PidsLimit": null,
"Ulimits": null,
"CpuCount": 0,
"CpuPercent": 0,
"IOMaximumIOps": 0,
"IOMaximumBandwidth": 0,
"MaskedPaths": [
"/proc/asound",
"/proc/acpi",
"/proc/kcore",
"/proc/keys",
"/proc/latency_stats",
"/proc/timer_list",
"/proc/timer_stats",
"/proc/sched_debug",
"/proc/scsi",
"/sys/firmware"
],
"ReadonlyPaths": [
"/proc/bus",
"/proc/fs",
"/proc/irq",
"/proc/sys",
"/proc/sysrq-trigger"
]
},
"GraphDriver": {
"Data": {
"LowerDir": "/var/lib/docker/overlay2/b38fd32a4a98e4d2a85132ab6fea10612cec4d123587dfe7ceab9c3ed234f3b9-init/diff:/var/lib/docker/overlay2/dd9c217b265a8595ae54de349bd60fc5320adc93b6ab7ab72a9ad6b97b17e3b8/diff",
"MergedDir": "/var/lib/docker/overlay2/b38fd32a4a98e4d2a85132ab6fea10612cec4d123587dfe7ceab9c3ed234f3b9/merged",
"UpperDir": "/var/lib/docker/overlay2/b38fd32a4a98e4d2a85132ab6fea10612cec4d123587dfe7ceab9c3ed234f3b9/diff",
"WorkDir": "/var/lib/docker/overlay2/b38fd32a4a98e4d2a85132ab6fea10612cec4d123587dfe7ceab9c3ed234f3b9/work"
},
"Name": "overlay2"
},
"Mounts": [],
"Config": {
"Hostname": "4f6aa48e34ae",
"Domainname": "",
"User": "",
"AttachStdin": true,
"AttachStdout": true,
"AttachStderr": true,
"Tty": true,
"OpenStdin": true,
"StdinOnce": true,
"Env": [
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
],
"Cmd": [
"/bin/bash"
],
"Image": "centos",
"Volumes": null,
"WorkingDir": "",
"Entrypoint": null,
"OnBuild": null,
"Labels": {
"org.label-schema.build-date": "20200611",
"org.label-schema.license": "GPLv2",
"org.label-schema.name": "CentOS Base Image",
"org.label-schema.schema-version": "1.0",
"org.label-schema.vendor": "CentOS"
}
},
"NetworkSettings": {
"Bridge": "",
"SandboxID": "14f8ce4c01d534e280648796ac0c59dd20bc4a89116d22c1e0973ef2de1dd5df",
"HairpinMode": false,
"LinkLocalIPv6Address": "",
"LinkLocalIPv6PrefixLen": 0,
"Ports": {},
"SandboxKey": "/var/run/docker/netns/14f8ce4c01d5",
"SecondaryIPAddresses": null,
"SecondaryIPv6Addresses": null,
"EndpointID": "a794fba358385f478ecdc29195f8e3417db0fb549aeb99cfdc677c16a8433b83",
"Gateway": "172.18.0.1",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"IPAddress": "172.18.0.2",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"MacAddress": "02:42:ac:12:00:02",
"Networks": {
"bridge": {
"IPAMConfig": null,
"Links": null,
"Aliases": null,
"NetworkID": "e37366f7fad9074146baa691379c2e69c6102613c83046f176f9fe591a3aab2a",
"EndpointID": "a794fba358385f478ecdc29195f8e3417db0fb549aeb99cfdc677c16a8433b83",
"Gateway": "172.18.0.1",
"IPAddress": "172.18.0.2",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"MacAddress": "02:42:ac:12:00:02",
"DriverOpts": null
}
}
}
}
]
进入当前正在运行的容器
# 我们通常容器都是使用后台方式运行的,需要进入容器,修改一些配置
# 方式一
# 命令
docker exec -it 容器id bashshell
# 测试
[root@yansw ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
4f6aa48e34ae centos "/bin/bash" 20 minutes ago Up 20 minutes goofy_diffie
[root@yansw ~]# docker exec -it 4f6aa48e34ae /bin/bash
[root@4f6aa48e34ae /]# ls
bin dev etc home lib lib64 lost+found media mnt opt proc root run sbin srv sys tmp usr var
[root@4f6aa48e34ae /]# ps -ef
UID PID PPID C STIME TTY TIME CMD
root 1 0 0 11:18 pts/0 00:00:00 /bin/bash
root 16 0 0 11:39 pts/1 00:00:00 /bin/bash
root 30 16 0 11:39 pts/1 00:00:00 ps -ef
[root@4f6aa48e34ae /]#
# 方式二
# 命令
docker attach 容器id
# 测试
[root@yansw ~]# docker attach 5babd8554e51
正在执行当前的代码...
# 两者区别
#docker exec #进入当前容器后开启一个新的终端,可以在里面操作。(常用)
#docker attach # 进入容器正在执行的终端
从容器内拷贝文件到主机
# docker cp 容器id:容器内路径 目的地主机路径
# 查看当前主机目录
[root@yansw ~]# cd /home
[root@yansw home]# ls
ues uoracle
# 进入docker容器内部
[root@yansw home]# docker attach 1ab690dddc76
[root@1ab690dddc76 /]# cd /home
[root@1ab690dddc76 home]# ls
# 在容器内新建一个文件
[root@1ab690dddc76 home]# touch test.java
[root@1ab690dddc76 home]# ls
test.java
[root@1ab690dddc76 home]# exit
exit
[root@yansw home]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
[root@yansw home]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
1ab690dddc76 centos "/bin/bash" About a minute ago Exited (0) 21 seconds ago condescending_pare
Exited (0) 3 hours ago brave_faraday
# 将文件拷贝出来到主机
[root@yansw home]# docker cp 1ab690dddc76:/home/test.java /home
[root@yansw home]# ls
test.java ues uoracle
docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
[root@yansw home]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
1ab690dddc76 centos “/bin/bash” About a minute ago Exited (0) 21 seconds ago condescending_pare
Exited (0) 3 hours ago brave_faraday
将文件拷贝出来到主机
[root@yansw home]# docker cp 1ab690dddc76:/home/test.java /home
[root@yansw home]# ls
test.java ues uoracle