docker常见命令

1、安装docker

yum install docker

2、检查docker版本号

docker version

3、启动docker

service docker start

4、检查可用镜像

docker search tensorflow

5、下载镜像

docker pull docker.io/jupyter/tensorflow-notebook

6、创建一个新的容器

Run a command in a new container

Usage

docker run [OPTIONS] IMAGE [COMMAND] [ARG...]

Options

Name, shorthand	Default	Description
--add-host		Add a custom host-to-IP mapping (host:ip)
--attach , -a		Attach to STDIN, STDOUT or STDERR
--blkio-weight		Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)
--blkio-weight-device		Block IO weight (relative device weight)
--cap-add		Add Linux capabilities
--cap-drop		Drop Linux capabilities
--cgroup-parent		Optional parent cgroup for the container
--cidfile		Write the container ID to the file
--cpu-count		CPU count (Windows only)
--cpu-percent		CPU percent (Windows only)
--cpu-period		Limit CPU CFS (Completely Fair Scheduler) period
--cpu-quota		Limit CPU CFS (Completely Fair Scheduler) quota
--cpu-rt-period		API 1.25+ Limit CPU real-time period in microseconds
--cpu-rt-runtime		API 1.25+ Limit CPU real-time runtime in microseconds
--cpu-shares , -c		CPU shares (relative weight)
--cpus		API 1.25+ Number of CPUs
--cpuset-cpus		CPUs in which to allow execution (0-3, 0,1)
--cpuset-mems		MEMs in which to allow execution (0-3, 0,1)
--detach , -d		Run container in background and print container ID
--detach-keys		Override the key sequence for detaching a container
--device		Add a host device to the container
--device-cgroup-rule		Add a rule to the cgroup allowed devices list
--device-read-bps		Limit read rate (bytes per second) from a device
--device-read-iops		Limit read rate (IO per second) from a device
--device-write-bps		Limit write rate (bytes per second) to a device
--device-write-iops		Limit write rate (IO per second) to a device
--disable-content-trust	true	Skip image verification
--dns		Set custom DNS servers
--dns-opt		Set DNS options
--dns-option		Set DNS options
--dns-search		Set custom DNS search domains
--entrypoint		Overwrite the default ENTRYPOINT of the image
--env , -e		Set environment variables
--env-file		Read in a file of environment variables
--expose		Expose a port or a range of ports
--group-add		Add additional groups to join
--health-cmd		Command to run to check health
--health-interval		Time between running the check (ms|s|m|h) (default 0s)
--health-retries		Consecutive failures needed to report unhealthy
--health-start-period		API 1.29+ Start period for the container to initialize before starting health-retries countdown (ms|s|m|h) (default 0s)
--health-timeout		Maximum time to allow one check to run (ms|s|m|h) (default 0s)
--help		Print usage
--hostname , -h		Container host name
--init		API 1.25+ Run an init inside the container that forwards signals and reaps processes
--interactive , -i		Keep STDIN open even if not attached
--io-maxbandwidth		Maximum IO bandwidth limit for the system drive (Windows only)
--io-maxiops		Maximum IOps limit for the system drive (Windows only)
--ip		IPv4 address (e.g., 172.30.100.104)
--ip6		IPv6 address (e.g., 2001:db8::33)
--ipc		IPC mode to use
--isolation		Container isolation technology
--kernel-memory		Kernel memory limit
--label , -l		Set meta data on a container
--label-file		Read in a line delimited file of labels
--link		Add link to another container
--link-local-ip		Container IPv4/IPv6 link-local addresses
--log-driver		Logging driver for the container
--log-opt		Log driver options
--mac-address		Container MAC address (e.g., 92:d0:c6:0a:29:33)
--memory , -m		Memory limit
--memory-reservation		Memory soft limit
--memory-swap		Swap limit equal to memory plus swap: ‘-1’ to enable unlimited swap
--memory-swappiness	-1	Tune container memory swappiness (0 to 100)
--mount		Attach a filesystem mount to the container
--name		Assign a name to the container
--net		Connect a container to a network
--net-alias		Add network-scoped alias for the container
--network		Connect a container to a network
--network-alias		Add network-scoped alias for the container
--no-healthcheck		Disable any container-specified HEALTHCHECK
--oom-kill-disable		Disable OOM Killer
--oom-score-adj		Tune host’s OOM preferences (-1000 to 1000)
--pid		PID namespace to use
--pids-limit		Tune container pids limit (set -1 for unlimited)
--platform		experimental (daemon)API 1.32+ Set platform if server is multi-platform capable
--privileged		Give extended privileges to this container
--publish , -p		Publish a container’s port(s) to the host
--publish-all , -P		Publish all exposed ports to random ports
--read-only		Mount the container’s root filesystem as read only
--restart	no	Restart policy to apply when a container exits
--rm		Automatically remove the container when it exits
--runtime		Runtime to use for this container
--security-opt		Security Options
--shm-size		Size of /dev/shm
--sig-proxy	true	Proxy received signals to the process
--stop-signal	SIGTERM	Signal to stop a container
--stop-timeout		API 1.25+ Timeout (in seconds) to stop a container
--storage-opt		Storage driver options for the container
--sysctl		Sysctl options
--tmpfs		Mount a tmpfs directory
--tty , -t		Allocate a pseudo-TTY
--ulimit		Ulimit options
--user , -u		Username or UID (format: <name|uid>[:<group|gid>])
--userns		User namespace to use
--uts		UTS namespace to use
--volume , -v		Bind mount a volume
--volume-driver		Optional volume driver for the container
--volumes-from		Mount volumes from the specified container(s)
--workdir , -w		Working directory inside the container

Mount volume (-v, --read-only)

$ docker  run  -v `pwd`:`pwd` -w `pwd` -i -t  ubuntu pwd

The -v flag mounts the current working directory into the container. The -w lets the command being executed inside the current working directory, by changing into the directory to the value returned by pwd. So this combination executes the command using the container, but inside the current working directory.

$ docker run -v /doesnt/exist:/foo -w /foo -i -t ubuntu bash

When the host directory of a bind-mounted volume doesn’t exist, Docker will automatically create this directory on the host for you. In the example above, Docker will create the /doesnt/exist folder before starting your container.

$ docker run --read-only -v /icanwrite busybox touch /icanwrite/here

Volumes can be used in combination with --read-only to control where a container writes files. The --read-only flag mounts the container’s root filesystem as read only prohibiting writes to locations other than the specified volumes for the container.

$ docker run -t -i -v /var/run/docker.sock:/var/run/docker.sock -v /path/to/static-docker-binary:/usr/bin/docker busybox sh

By bind-mounting the docker unix socket and statically linked docker binary (refer to get the linux binary), you give the container the full access to create and manipulate the host’s Docker daemon.

实例

docker run --name my_machine_learning_env -d -p 8889:8888 -v /home/xuerui/machine_learning:/test/data tensorflow/tensorflow:latest-py3

参数详见docker-cmd-param

挂在windows下的目录

docker run --name kibana -p 5601:5601 -v D:\\DMCC\\data\\kibana\\kibana.yml:/usr/share/kibana/config/kibana.yml -d kibana:7.4.2

7、Docker start/stop/restart 命令

语法

docker start [OPTIONS] CONTAINER [CONTAINER...][OPTIONS] CONTAINER [CONTAINER...]

docker stop [OPTIONS] CONTAINER [CONTAINER...][OPTIONS] CONTAINER [CONTAINER...]

docker restart [OPTIONS] CONTAINER [CONTAINER...][OPTIONS] CONTAINER [CONTAINER...]

实例

启动已被停止的容器my_machine_learning_env

docker start my_machine_learning_env

docker stop my_machine_learning_env

docker restart my_machine_learning_env

8、获取容器日志

docker logs my_machine_learning_env

语法

docker logs [OPTIONS] CONTAINER[OPTIONS] CONTAINER

OPTIONS说明：

• -f : 跟踪日志输出

• --since :显示某个开始时间的所有日志

• -t : 显示时间戳

• --tail :仅列出最新N条容器日志

9、删除一个或多少容器

docker rm [OPTIONS] CONTAINER [CONTAINER...]

10、Docker exec 命令

docker exec ：在运行的容器中执行命令

语法

docker exec [OPTIONS] CONTAINER COMMAND [ARG...]

OPTIONS说明：

• -d :分离模式: 在后台运行

• -i :即使没有附加也保持STDIN 打开

• -t :分配一个伪终端

实例

在容器mynginx中以交互模式执行容器内/root/runoob.sh脚本

runoob@runoob:~$ docker exec -it mynginx /bin/sh /root/runoob.sh

在容器mynginx中开启一个交互模式的终端

runoob@runoob:~$ docker exec -i -t  mynginx /bin/bash

11、docker镜像恢复

docker import

从归档文件中创建镜像

docker import [OPTIONS] file|URL|-  [REPOSITORY[:TAG]]

OPTIONS说明：

• -c :应用docker 指令创建镜像；

• -m :提交时的说明文字;

实例

从镜像归档文件my_ubuntu_v3.tar创建镜像，命名为runoob/ubuntu:v4

docker import  my_ubuntu_v3.tar runoob/ubuntu:v4  

12、docker镜像导入load

docker load [OPTIONS] 

Load an image from a tar archive on STDIN

  -i,--input=""Readfrom a tar archive file, instead of STDIN

实例

将id为a404c6c174a2的容器按日期保存为tar文件。

docker load --input tf-20180724.tar

13、docker 镜像导出save

将指定镜像保存成 tar 归档文件。

docker save [OPTIONS] IMAGE [IMAGE...]

OPTIONS说明：

• -o :输出到的文件。

实例

将镜像runoob/ubuntu:v3 生成my_ubuntu_v3.tar文档

docker save -o my_ubuntu_v3.tar runoob/ubuntu:v3

14、docker容器导出export

docker export [OPTIONS] CONTAINER

OPTIONS说明：

 -o:将输入内容写到文件

实例

将id为a404c6c174a2的容器按日期保存为tar文件。

docker export -o mysql-`date +%Y%m%d`.tar a404c6c174a2

参考：Docker命令大全