devbox
IT小白
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

docker笔记

作者：IT小白 | 2024-02-26 18:01:13

赞

踩

locd1 locc3

25.1 docker简介

• 官网 www.docker.com

• github  https://github.com/docker/docker.github.io

• 开源的容器引擎，可以让开发者打包应用以及依赖的库，然后发布到任何流行的linux发行版上，移植很方便

• 由go语言编写，基于apache2.0协议发布

• 基于linux kernel，要想在win下运行需要借助一个vm（虚拟机）来实现

• 自2013年开始，近些年发展迅猛

• docker从1.13x开始，版本分为社区版ce和企业版ee，并且基于年月的时间线形式，当前最新稳定版为17.09 参考http://blog.csdn.net/chenhaifeng2016/article/details/68062414

Docker和传统的虚拟化比较
c63c6a489904dcc3c9da70d11b403819b32.jpg
881df807291c36a084e965289c9a70b89e3.jpg
Docker的优势

• 启动非常快，秒级实现

• 资源利用率高，一台高配置服务器可以跑上千个docker容器

• 更快的交付和部署，一次创建和配置后，可以在任意地方运行

• 内核级别的虚拟化，不需要额外的hypevisor支持，会有更高的性能和效率

• 易迁移，平台依赖性不强

7e1097d95dde941fb0aa80e0c952b71a216.jpg

Docker核心概念

• 镜像，是一个只读的模板，类似于安装系统用到的那个iso文件，我们通过镜像来完成各种应用的部署。

• 容器，镜像类似于操作系统，而容器类似于虚拟机本身。它可以被启动、开始、停止、删除等操作，每个容器都是相互隔离的。

•仓库，存放镜像的一个场所，仓库分为公开仓库和私有仓库。 最大的公开仓库是Docker hub（hub.docker.com），国内公开仓库（dockerpool.com）

25.2 安装docker

首先下载repo的源

  1. [root@hongwei-02 ~]# curl https://download.docker.com/linux/centos/docker-ce.repo -o  /etc/yum.repos.d/docker.repo
  2.   % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
  3.                                  Dload  Upload   Total   Spent    Left  Speed
  4. 100  2424  100  2424    0     0    395      0  0:00:06  0:00:06 --:--:--   670
  5. [root@hongwei-02 ~]#

安装好之后就可以直接使用yum安装了

  1. [root@hongwei-02 ~]# yum install -y docker-ce
  2. 已加载插件：fastestmirror

启动docker服务

  1. [root@hongwei-02 ~]# systemctl start docker
  2. [root@hongwei-02 ~]#

看一下进程和自带的iptables规则

  1. [root@hongwei-02 ~]# systemctl start docker
  2. [root@hongwei-02 ~]# ps aux|grep docker
  3. root      2635  1.2  5.3 601992 54484 ?        Ssl  16:58   0:00 /usr/bin/dockerd
  4. root      2641  0.4  2.5 317236 25940 ?        Ssl  16:58   0:00 docker-containerd --config /var/run/docker/containerd/containerd.toml
  5. root      2803  0.0  0.0 112664   960 pts/0    R+   16:59   0:00 grep --color=auto docker
  6. [root@hongwei-02 ~]# iptables -nvL
  7. Chain INPUT (policy ACCEPT 215 packets, 43446 bytes)
  8.  pkts bytes target     prot opt in     out     source               destination         
  9.  
  10. Chain FORWARD (policy DROP 0 packets, 0 bytes)
  11.  pkts bytes target     prot opt in     out     source               destination         
  12.     0     0 DOCKER-USER  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
  13.     0     0 DOCKER-ISOLATION-STAGE-1  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
  14.     0     0 ACCEPT     all  --  *      docker0  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
  15.     0     0 DOCKER     all  --  *      docker0  0.0.0.0/0            0.0.0.0/0           
  16.     0     0 ACCEPT     all  --  docker0 !docker0  0.0.0.0/0            0.0.0.0/0           
  17.     0     0 ACCEPT     all  --  docker0 docker0  0.0.0.0/0            0.0.0.0/0           
  18.  
  19. Chain OUTPUT (policy ACCEPT 239 packets, 39719 bytes)
  20.  pkts bytes target     prot opt in     out     source               destination         
  21.  
  22. Chain DOCKER (1 references)
  23.  pkts bytes target     prot opt in     out     source               destination         
  24.  
  25. Chain DOCKER-ISOLATION-STAGE-1 (1 references)
  26.  pkts bytes target     prot opt in     out     source               destination         
  27.     0     0 DOCKER-ISOLATION-STAGE-2  all  --  docker0 !docker0  0.0.0.0/0            0.0.0.0/0           
  28.     0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
  29.  
  30. Chain DOCKER-ISOLATION-STAGE-2 (1 references)
  31.  pkts bytes target     prot opt in     out     source               destination         
  32.     0     0 DROP       all  --  *      docker0  0.0.0.0/0            0.0.0.0/0           
  33.     0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
  34.  
  35. Chain DOCKER-USER (1 references)
  36.  pkts bytes target     prot opt in     out     source               destination         
  37.     0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
  38. [root@hongwei-02 ~]#

25.3 镜像管理

下载centos镜像

  1. [root@hongwei-02 ~]#  docker pull centos
  2. Using default tag: latest
  3. latest: Pulling from library/centos
  4. 256b176beaff: Downloading   10.1MB/71.7MB

因为下载的centos镜像在国外网站，很慢，所以我们可以配置一个加速器，让速度提升起来

  1. [root@hongwei-02 ~]# cat /etc/docker/daemon.json
  2. {
  3.  
  4.  "registry-mirrors": ["https://registry.docker-cn.com"]
  5.  
  6. }
  7. [root@hongwei-02 ~]#

再次下载镜像速度很快

比如我们也可以拉取ubuntu

  1. [root@hongwei-02 ~]# docker pull ubuntu
  2. Using default tag: latest
  3. latest: Pulling from library/ubuntu
  4. 124c757242f8: Pull complete 
  5. 9d866f8bde2a: Pull complete 
  6. fa3f2f277e67: Pull complete 
  7. 398d32b153e8: Pull complete 
  8. afde35469481: Pull complete 
  9. Digest: sha256:de774a3145f7ca4f0bd144c7d4ffb2931e06634f11529653b23eba85aef8e378
  10. Status: Downloaded newer image for ubuntu:latest
  11. [root@hongwei-02 ~]#

查看本地的镜像

  1. [root@hongwei-02 ~]# docker images
  2. REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
  3. centos              latest              5182e96772bf        4 weeks ago         200MB
  4. [root@hongwei-02 ~]#

搜索镜像，其中xxx是关键词

  1. [root@hongwei-02 ~]# docker search jumpserver
  2. NAME                             DESCRIPTION                           STARS               OFFICIAL            AUTOMATED
  3. jumpserver/jumpserver                                                  10                                      
  4. jiaxiangkong/jumpserver_docker   开源跳板机(堡垒机):认证,授权,审计,自动化运维             10                                      
  5. hhding/jumpserver-docker         ssh proxy node                        3                                       [OK]
  6. njqaaa/jumpserver                jumpserver                            2                                       [OK]
  7. jumpserver/guacamole             guacamole for jumpserver              1                                       [OK]
  8. baselibrary/jumpserver           jumpserver                            1                                       [OK]
  9. zhegao/jumpserver                Jumpserver 1.4.0                      1                                       
  10. jumpserver/allinone              jumpserver all in one                 1                                       [OK]
  11. zqiannnn/jumpserver-ansible      JumpServer Ansible Addon              1                                       [OK]
  12. kubernetesio/sshd-jumpserver     sshd-jumpserver                       0                                       [OK]
  13. vikings/jumpserver                                                     0                                       
  14. zsjohny/jumpserver               bastion web ui                        0                                       [OK]
  15. satoms/jumpserver                                                      0                                       
  16. jumpserver/python                                                      0                                       
  17. qiwihui/jumpserver               jumpserver docker                     0                                       [OK]
  18. jumpserver/coco                                                        0                                       
  19. qq58945591/jumpserver            JumpServer集成coco和luna,使用nginx进行反向代…   0                                       [OK]
  20. jumpserver/luna                                                        0                                       
  21. lc13579443/jumpserver            Jumpserver all in one Dockerfile      0                                       [OK]
  22. ibuler/jumpserver                                                      0                                       
  23. qbtrade/jumpserver                                                     0                                       
  24. jumpserver/core                  Jumpserver Official Docker Image      0                                       [OK]
  25. qbtrade/jumpserver_coco                                                0                                       
  26. jumpserver/base-env-alpine                                             0                                       
  27. mapsic/jumpserver                jumpserver                            0                                       [OK]
  28. [root@hongwei-02 ~]#

给镜像打标签

  1. [root@hongwei-02 ~]# docker tag centos hongwei_centos
  2. [root@hongwei-02 ~]# docker images
  3. REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
  4. ubuntu              latest              cd6d8154f1e1        35 hours ago        84.1MB
  5. centos              latest              5182e96772bf        4 weeks ago         200MB
  6. hongwei_centos      latest              5182e96772bf        4 weeks ago         200MB
  7. [root@hongwei-02 ~]#

可以看到有一个hongwei_centos镜像但是其实是跟centos一样的标签

我们可以把hongwei镜像做一个新的镜像，不跟centos一个id

  1. [root@hongwei-02 ~]# docker tag centos test:180907
  2. [root@hongwei-02 ~]# docker images
  3. REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
  4. ubuntu              latest              cd6d8154f1e1        35 hours ago        84.1MB
  5. centos              latest              5182e96772bf        4 weeks ago         200MB
  6. hongwei_centos      latest              5182e96772bf        4 weeks ago         200MB
  7. test                180907              5182e96772bf        4 weeks ago         200MB
  8. [root@hongwei-02 ~]#

把镜像启动为容器，-i表示让容器的标准输入打开，-t表示分配一个伪终端，-d表示后台启动，要把-i -t -d 放到镜像名字前面

  1. [root@hongwei-02 ~]# docker run -itd centos
  2. docker run -itd centos
  3. 1736cc3e215aa4b1fc2b82a0dde0e4ef8f2279d9046f5ee784ceab3a5ebd1e29
  4. [root@hongwei-02 ~]#

查看运行的容器

  1. [root@hongwei-02 ~]# docker ps
  2. CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
  3. 1736cc3e215a        centos              "/bin/bash"         16 minutes ago      Up 13 minutes                           xenodochial_snyder
  4. [root@hongwei-02 ~]#

加上-a选项后可以查看所有容器，包括未运行的

  1. [root@hongwei-02 ~]# docker ps
  2. CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
  3. 1736cc3e215a        centos              "/bin/bash"         16 minutes ago      Up 13 minutes                           xenodochial_snyder
  4. [root@hongwei-02 ~]# docker ps -a
  5. CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
  6. 1736cc3e215a        centos              "/bin/bash"         16 minutes ago      Up 14 minutes                           xenodochial_snyder
  7. [root@hongwei-02 ~]#

用来删除指定镜像， 其中后面的参数可以是tag，如果是tag时，实际上是删除该tag。当后面的参数为镜像ID时，则会彻底删除整个镜像，所有标签也会一同删除

  1. [root@hongwei-02 ~]# docker rmi hongwei_centos
  2. Untagged: hongwei_centos:latest
  3. [root@hongwei-02 ~]# docker images
  4. REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
  5. ubuntu              latest              cd6d8154f1e1        36 hours ago        84.1MB
  6. centos              latest              5182e96772bf        4 weeks ago         200MB
  7. test                180907              5182e96772bf        4 weeks ago         200MB
  8. [root@hongwei-02 ~]#

25.4 通过容器创建镜像

其中xxxxx为容器id，这个id可以用docker ps查看，最后面的bash为进入容器后我们要执行的命令，这样就可以打开一个终端

  1. [root@hongwei-02 ~]# docker exec -it 1736cc3e215a bash
  2. [root@1736cc3e215a /]# ^C
  1. [root@1736cc3e215a /]# df -h
  2. Filesystem                                                                                          Size  Used Avail Use% Mounted on
  3. /dev/mapper/docker-253:0-35873068-c7fe0c84fc7f7a039a553a0f5aedb2c47bb516a6e3689fa8d63ac0ef9c25de67   10G  243M  9.8G   3% /
  4. tmpfs                                                                                                64M     0   64M   0% /dev
  5. tmpfs                                                                                               493M     0  493M   0% /sys/fs/cgroup
  6. /dev/mapper/centos-root                                                                              28G   11G   18G  39% /etc/hosts
  7. shm                                                                                                  64M     0   64M   0% /dev/shm
  8. tmpfs                                                                                               493M     0  493M   0% /proc/acpi
  9. tmpfs                                                                                               493M     0  493M   0% /proc/scsi
  10. tmpfs                                                                                               493M     0  493M   0% /sys/firmware
  11. [root@1736cc3e215a /]# 
  1. [root@1736cc3e215a /]# free
  2.               total        used        free      shared  buff/cache   available
  3. Mem:        1009276      697824       63660        1872      247792      149176
  4. Swap:       2097148       30020     2067128
  5. [root@1736cc3e215a /]#

进入到该容器中，我们做一些变更，比如安装一些东西，然后针对这个容器进行创建新的镜像

  1. [root@1736cc3e215a /]# yum install -y net-tools
  2. Loaded plugins: fastestmirror, ovl
  3. Determining fastest mirrors

已经在容器里执行了安装net-tools，要想保存变更过的容器，可以使用以下命令：

docker commit -m "描述" -a "描述"  容器id  新的容器名

-m：描述，可以写一些变更的信息

-a：描述，可以指定作者相关信息

当然，-a可以省略

  1. [root@hongwei-02 ~]# docker commit -m "install net-tools" -a "hongwei" 1736cc3e215a centos_with_net-tools 
  2. sha256:3cf5264e5fc00dda337ea5118652a98b92e1ae42295b4c700cdc44c76d7479e8
  3. [root@hongwei-02 ~]#

查看 一下

  1. [root@hongwei-02 ~]# docker images
  2. REPOSITORY              TAG                 IMAGE ID            CREATED             SIZE
  3. centos_with_net-tools   latest              3cf5264e5fc0        19 seconds ago      293MB
  4. ubuntu                  latest              cd6d8154f1e1        36 hours ago        84.1MB
  5. centos                  latest              5182e96772bf        4 weeks ago         200MB
  6. test                    180907              5182e96772bf        4 weeks ago         200MB
  7. [root@hongwei-02 ~]#

运行centos_with_net-tools并进入容器：

  1. [root@hongwei-02 ~]# docker run -it centos_with_net-tools
  2. [root@a916b87dab6d /]# 
  1. [root@a916b87dab6d /]# ifconfig
  2. eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
  3.         inet 172.17.0.4  netmask 255.255.0.0  broadcast 172.17.255.255
  4.         ether 02:42:ac:11:00:04  txqueuelen 0  (Ethernet)
  5.         RX packets 8  bytes 648 (648.0 B)
  6.         RX errors 0  dropped 0  overruns 0  frame 0
  7.         TX packets 0  bytes 0 (0.0 B)
  8.         TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
  9.  
  10. lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
  11.         inet 127.0.0.1  netmask 255.0.0.0
  12.         loop  txqueuelen 0  (Local Loopback)
  13.         RX packets 0  bytes 0 (0.0 B)
  14.         RX errors 0  dropped 0  overruns 0  frame 0
  15.         TX packets 0  bytes 0 (0.0 B)
  16.         TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
  17.  
  18. [root@a916b87dab6d /]#

进入容器内也是可以联网的

  1. [root@a916b87dab6d /]# ping www.qq.com
  2. PING www.qq.com (111.30.132.101) 56(84) bytes of data.
  3. 64 bytes from 111.30.132.101 (111.30.132.101): icmp_seq=1 ttl=127 time=50.2 ms
  4. 64 bytes from 111.30.132.101 (111.30.132.101): icmp_seq=2 ttl=127 time=49.5 ms
  5. 64 bytes from 111.30.132.101 (111.30.132.101): icmp_seq=3 ttl=127 time=49.7 ms
  6. 64 bytes from 111.30.132.101 (111.30.132.101): icmp_seq=4 ttl=127 time=49.0 ms
  7. 64 bytes from 111.30.132.101 (111.30.132.101): icmp_seq=5 ttl=127 time=49.4 ms
  8. 64 bytes from 111.30.132.101 (111.30.132.101): icmp_seq=6 ttl=127 time=49.2 ms
  9. 64 bytes from 111.30.132.101 (111.30.132.101): icmp_seq=7 ttl=127 time=49.3 ms
  10. 64 bytes from 111.30.132.101 (111.30.132.101): icmp_seq=8 ttl=127 time=49.2 ms
  11. 64 bytes from 111.30.132.101 (111.30.132.101): icmp_seq=9 ttl=127 time=72.0 ms
  12. 64 bytes from 111.30.132.101 (111.30.132.101): icmp_seq=10 ttl=127 time=49.1 ms
  13. 64 bytes from 111.30.132.101 (111.30.132.101): icmp_seq=11 ttl=127 time=49.0 ms
  14. 64 bytes from 111.30.132.101 (111.30.132.101): icmp_seq=12 ttl=127 time=48.9 ms
  15. 64 bytes from 111.30.132.101 (111.30.132.101): icmp_seq=13 ttl=127 time=49.2 ms
  16. 64 bytes from 111.30.132.101 (111.30.132.101): icmp_seq=14 ttl=127 time=49.6 ms
  17. ^C
  18. --- www.qq.com ping statistics ---
  19. 14 packets transmitted, 14 received, 0% packet loss, time 22408ms
  20. rtt min/avg/max/mdev = 48.973/50.993/72.035/5.846 ms
  21. [root@a916b87dab6d /]#

 25.5 通过模板创建镜像 

下载一个模版

  1. [root@hongwei-02 ~]# curl -O http://openvz.org/Download/templates/precreated
  2.   % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
  3.                                  Dload  Upload   Total   Spent    Left  Speed
  4. 100   319  100   319    0     0     46      0  0:00:06  0:00:06 --:--:--    93
  5. [root@hongwei-02 ~]#

然后去浏览器下载一个tar.gz

cdd84fc83ccc9b3f26d1a00534ff56cf52c.jpg

然后在传到虚拟机上

3c4338fa346955d705d6d24673295cd0e5e.jpg

  1. [root@hongwei-02 ~]# ls
  2. 25Docker入门.pptx  centos-6-x86-minimal.tar.gz  php-7.1.6.tar.bz2  temp
  3. aming.txt          log                          precreated         zabbix-release-3.2-1.el7.noarch.rpm
  4. anaconda-ks.cfg    logs                         shell
  5. [root@hongwei-02 ~]#

导入模板命令：cat  模版  |  docker  import  -  镜像名称

  1. [root@hongwei-02 ~]# cat centos-6-x86-minimal.tar.gz|docker import - centos6
  2. sha256:4e9eef98b65cb07ced6c7899aec4ae049e4a1efc394239c00b8ecf3c29143c23
  3. [root@hongwei-02 ~]# 
  1. [root@hongwei-02 ~]# docker images
  2. REPOSITORY              TAG                 IMAGE ID            CREATED             SIZE
  3. centos6                 latest              4e9eef98b65c        37 seconds ago      512MB
  4. centos_with_net-tools   latest              3cf5264e5fc0        About an hour ago   293MB
  5. ubuntu                  latest              cd6d8154f1e1        37 hours ago        84.1MB
  6. centos                  latest              5182e96772bf        4 weeks ago         200MB
  7. test                    180907              5182e96772bf        4 weeks ago         200MB
  8. [root@hongwei-02 ~]#

把现有镜像，导出为一个文件：

  1. [root@hongwei-02 ~]# docker save -o centos_with_nettool.tar centos6
  2. [root@hongwei-02 ~]#

我们还可以用该文件恢复本地镜像：

  1. [root@hongwei-02 ~]# docker load --input centos_with_nettool.tar
  2. Loaded image: centos6:latest
  3. [root@hongwei-02 ~]#

或者

  1. [root@hongwei-02 ~]# docker load < centos_with_nettool.tar
  2. Loaded image: centos6:latest
  3. [root@hongwei-02 ~]#

可以把自己的镜像传到dockerhub官方网站上去，但前提是需要先注册一个用户，后续如果有需求再研究吧

25.6 容器管理

创建一个容器，但该容器并没有启动

  1. [root@hongwei-02 ~]# docker create -it centos6 bash
  2. 93f041e868539d3ed0556dcf0330733f59b2c2f4322a6e93a0312599394eccc0
  3. [root@hongwei-02 ~]#

可以使用-a选项来查看

  1. [root@hongwei-02 ~]# docker ps -a
  2. CONTAINER ID        IMAGE                   COMMAND             CREATED              STATUS                       PORTS               NAMES
  3. 93f041e86853        centos6                 "bash"              About a minute ago   Created                                          xenodochial_meitner
  4. a916b87dab6d        centos_with_net-tools   "/bin/bash"         15 hours ago         Exited (130) 15 hours ago                        cranky_noether
  5. 75f6208e2a3f        centos_with_net-tools   "/bin/bash"         15 hours ago         Exited (255) 4 minutes ago                       hungry_chebyshev
  6. 1736cc3e215a        centos                  "/bin/bash"         16 hours ago         Exited (255) 4 minutes ago                       xenodochial_snyder
  7. [root@hongwei-02 ~]#

启动容器后，可以使用 docker ps  查看到，有start 就有stop，和restart

  1. [root@hongwei-02 ~]# docker start 93f041e86853
  2. 93f041e86853
  3. [root@hongwei-02 ~]# docker ps
  4. CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
  5. 93f041e86853        centos6             "bash"              2 minutes ago       Up 5 seconds                            xenodochial_meitner
  6. [root@hongwei-02 ~]#

之前我们使用的docker run 相当于先create再start

  1. [root@hongwei-02 ~]#  docker run -it centos bash 
  2. [root@0930199d3bb9 /]#

直接可以进入容器了。要想退出可以使用exit命令或者ctrl+d组合键，退出后容器也就停止了。

停止容器

docker  stop 容器id，比如：

  1. [root@hongwei-02 ~]# docker stop 93f041e86853
  2. 93f041e86853
  3. [root@hongwei-02 ~]# docker ps
  4. CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
  5. [root@hongwei-02 ~]# docker ps -a
  6. CONTAINER ID        IMAGE                   COMMAND             CREATED              STATUS                        PORTS               NAMES
  7. 0930199d3bb9        centos                  "bash"              About a minute ago   Exited (0) 35 seconds ago                         goofy_mendeleev
  8. 93f041e86853        centos6                 "bash"              5 minutes ago        Exited (137) 17 seconds ago                       xenodochial_meitner
  9. a916b87dab6d        centos_with_net-tools   "/bin/bash"         15 hours ago         Exited (130) 15 hours ago                         cranky_noether
  10. 75f6208e2a3f        centos_with_net-tools   "/bin/bash"         15 hours ago         Exited (255) 9 minutes ago                        hungry_chebyshev
  11. 1736cc3e215a        centos                  "/bin/bash"         16 hours ago         Exited (255) 9 minutes ago                        xenodochial_snyder
  12. [root@hongwei-02 ~]#

给容器自定义名字

  1. [root@hongwei-02 ~]# docker run --name liuye -itd centos bash
  2. 20e1766af1c72f63cf05e8326c5711a7296f89f71d72038c3417fa2452039bb0
  3. [root@hongwei-02 ~]#

容器退出后直接删除

  1. [root@hongwei-02 ~]# docker run --rm -itd centos bash  -c "sleep 5"
  2. 19d3423a301c3ddd31db5885fe53bb7c47d9b6197c57e7a52e74012f1990d3f7
  3. [root@hongwei-02 ~]# 
  1. [root@hongwei-02 ~]# docker ps
  2. CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
  3. 20e1766af1c7        centos              "bash"              56 seconds ago      Up 53 seconds                           liuye
  4. [root@hongwei-02 ~]#

获取容器的历史信息

  1. [root@hongwei-02 ~]# docker run -itd centos bash -c "echo 123"
  2. 79f15976fabb63336be7411252a647cd162f939d884c47497a00110a0b3ff9c2
  3. [root@hongwei-02 ~]# docker logs 79f15976fab
  4. 123
  5. [root@hongwei-02 ~]#

进入后台运行的容器

  1. [root@hongwei-02 ~]# docker run --name yeye -itd centos
  2. 3ba69ed4b222927febcac58959ebe0023a4e78642f2fce3256b7839f5ee277b7
  3. [root@hongwei-02 ~]# docker attach yeye
  4. [root@3ba69ed4b222 /]#

此方法不太好，因为退出之后，容器也退出了。所以建议使用exec选项：

  1. [root@hongwei-02 ~]# docker run -itd centos bash
  2. b2379bb3dc585a3b03e6ef1dd183f586d38933bce9bb65457a6ce1ee3a47728b
  3. [root@hongwei-02 ~]# docker exec -it b2379bb3dc585a3b03e6e bash
  4. [root@b2379bb3dc58 /]#

删除容器

docker  rm  -f  容器id，-f强制删除

  1. [root@hongwei-02 ~]# docker ps
  2. CONTAINER ID        IMAGE               COMMAND             CREATED              STATUS              PORTS               NAMES
  3. b2379bb3dc58        centos              "bash"              About a minute ago   Up 58 seconds                           compassionate_lumiere
  4. 20e1766af1c7        centos              "bash"              7 minutes ago        Up 7 minutes                            liuye
  5. [root@hongwei-02 ~]# docker rm -f 20e1766af1c7
  6. 20e1766af1c7
  7. [root@hongwei-02 ~]# docker ps
  8. CONTAINER ID        IMAGE               COMMAND             CREATED              STATUS              PORTS               NAMES
  9. b2379bb3dc58        centos              "bash"              About a minute ago   Up About a minute                       compassionate_lumiere
  10. [root@hongwei-02 ~]#

容器的导出

  1. [root@hongwei-02 ~]# docker run -itd centos bash
  2. 8b6fb3fc7dc44a4d9b2fa668144e855524249a4ffce4ed2f5c64ee0d45f487f3
  3. [root@hongwei-02 ~]# docker export 8b6fb3fc7dc4 > mycentos.tar
  4. [root@hongwei-02 ~]#

容器的导入：cat 文件名 | docker import  -  自定义的容器名

  1. [root@hongwei-02 ~]# cat mycentos.tar | docker import - test
  2. sha256:dd4c8af22d64ff98f24cb468128264b21bb3c377ec368b80b627943c02a93978
  3. [root@hongwei-02 ~]#

25.7 仓库管理

1、下载镜像

docker  pull  镜像名

使用registry搭建本地私有仓库。

  1. [root@hongwei-02 ~]# docker pull registry
  2. Using default tag: latest
  3. latest: Pulling from library/registry
  4. 4064ffdc82fe: Pull complete 
  5. c12c92d1c5a2: Pull complete 
  6. 4fbc9b6835cc: Pull complete 
  7. 765973b0f65f: Pull complete 
  8. 3968771a7c3a: Pull complete 
  9. Digest: sha256:51bb55f23ef7e25ac9b8313b139a8dd45baa832943c8ad8f7da2ddad6355b3c8
  10. Status: Downloaded newer image for registry:latest
  11. [root@hongwei-02 ~]#

启动registry

  1. [root@hongwei-02 ~]# docker run -d -p 5000:5000 registry
  2. cc55a87409b7dc14bca571a2673c8a024049a893bacc6646287bea44c230f0f8
  3. [root@hongwei-02 ~]#

-p：端口映射，宿主机的端口:容器监听的端口。

  1. [root@hongwei-02 ~]# docker ps -a
  2. CONTAINER ID        IMAGE                   COMMAND                  CREATED             STATUS                        PORTS                    NAMES
  3. cc55a87409b7        registry                "/entrypoint.sh /etc…"   30 seconds ago      Up 25 seconds                 0.0.0.0:5000->5000/tcp   distracted_visvesvaraya
  4. 8b6fb3fc7dc4        centos                  "bash"                   4 minutes ago       Up 4 minutes                                           festive_pare
  5. b2379bb3dc58        centos                  "bash"                   6 minutes ago       Up 6 minutes                                           compassionate_lumiere
  6. 3ba69ed4b222        centos                  "/bin/bash"              7 minutes ago       Exited (0) 6 minutes ago                               yeye
  7. 79f15976fabb        centos                  "bash -c 'echo 123'"     9 minutes ago       Exited (0) 9 minutes ago                               vibrant_colden
  8. 0930199d3bb9        centos                  "bash"                   16 minutes ago      Exited (0) 15 minutes ago                              goofy_mendeleev
  9. 93f041e86853        centos6                 "bash"                   20 minutes ago      Exited (137) 14 minutes ago                            xenodochial_meitner
  10. a916b87dab6d        centos_with_net-tools   "/bin/bash"              15 hours ago        Exited (130) 15 hours ago                              cranky_noether
  11. 75f6208e2a3f        centos_with_net-tools   "/bin/bash"              15 hours ago        Exited (255) 24 minutes ago                            hungry_chebyshev
  12. 1736cc3e215a        centos                  "/bin/bash"              16 hours ago        Exited (255) 24 minutes ago                            xenodochial_snyder
  13. [root@hongwei-02 ~]#

访问

  1. [root@hongwei-02 ~]# curl 127.0.0.1:5000/v2/_catalog
  2. {"repositories":[]}
  3. [root@hongwei-02 ~]#

仓库是新建的，为空。

把镜像传到仓库。

先把要上传的镜像打标签：

  1. [root@hongwei-02 ~]# docker images
  2. REPOSITORY              TAG                 IMAGE ID            CREATED             SIZE
  3. test                    latest              dd4c8af22d64        4 minutes ago       200MB
  4. centos6                 latest              4e9eef98b65c        15 hours ago        512MB
  5. centos_with_net-tools   latest              3cf5264e5fc0        15 hours ago        293MB
  6. ubuntu                  latest              cd6d8154f1e1        2 days ago          84.1MB
  7. centos                  latest              5182e96772bf        4 weeks ago         200MB
  8. test                    180907              5182e96772bf        4 weeks ago         200MB
  9. registry                latest              b2b03e9146e1        2 months ago        33.3MB
  10. [root@hongwei-02 ~]# docker tag centos 192.168.93.128:5000/centos7
  11. [root@hongwei-02 ~]# docker images
  12. REPOSITORY                    TAG                 IMAGE ID            CREATED             SIZE
  13. test                          latest              dd4c8af22d64        5 minutes ago       200MB
  14. centos6                       latest              4e9eef98b65c        15 hours ago        512MB
  15. centos_with_net-tools         latest              3cf5264e5fc0        15 hours ago        293MB
  16. ubuntu                        latest              cd6d8154f1e1        2 days ago          84.1MB
  17. 192.168.93.128:5000/centos7   latest              5182e96772bf        4 weeks ago         200MB
  18. centos                        latest              5182e96772bf        4 weeks ago         200MB
  19. test                          180907              5182e96772bf        4 weeks ago         200MB
  20. registry                      latest              b2b03e9146e1        2 months ago        33.3MB
  21. [root@hongwei-02 ~]#

上传：

  1. [root@hongwei-02 ~]# docker push 192.168.93.128:5000/centos7
  2. The push refers to repository [192.168.93.128:5000/centos7]
  3. Get https://192.168.93.128:5000/v2/: http: server gave HTTP response to HTTPS client
  4. [root@hongwei-02 ~]#

报错，修改配置文件/etc/docker/daemon.json ，添加私有仓库地址："insecure-registries": ["192.168.93.128:5000"]

  1. [root@hongwei-02 ~]# vim /etc/docker/daemon.json
  2.  
  3. {"insecure-registries": ["192.168.10.101:5000"]}

重启docker：

[root@hongwei-02 ~]# systemctl restart docker

启动容器，重新推送：

因为前面重启了docker，所以容器会停止，必须启动容器才能推送。

  1. [root@hongwei-02 ~]# docker ps -a
  2. CONTAINER ID        IMAGE                   COMMAND                  CREATED             STATUS                           PORTS               NAMES
  3. cc55a87409b7        registry                "/entrypoint.sh /etc…"   31 minutes ago      Exited (2) 25 minutes ago                            distracted_visvesvaraya
  4. 8b6fb3fc7dc4        centos                  "bash"                   35 minutes ago      Exited (137) 25 minutes ago                          festive_pare
  5. b2379bb3dc58        centos                  "bash"                   37 minutes ago      Exited (137) 25 minutes ago                          compassionate_lumiere
  6. 3ba69ed4b222        centos                  "/bin/bash"              37 minutes ago      Exited (0) 37 minutes ago                            yeye
  7. 79f15976fabb        centos                  "bash -c 'echo 123'"     40 minutes ago      Exited (0) 40 minutes ago                            vibrant_colden
  8. 0930199d3bb9        centos                  "bash"                   About an hour ago   Exited (0) 45 minutes ago                            goofy_mendeleev
  9. 93f041e86853        centos6                 "bash"                   About an hour ago   Exited (137) 45 minutes ago                          xenodochial_meitner
  10. a916b87dab6d        centos_with_net-tools   "/bin/bash"              16 hours ago        Exited (130) 16 hours ago                            cranky_noether
  11. 75f6208e2a3f        centos_with_net-tools   "/bin/bash"              16 hours ago        Exited (255) About an hour ago                       hungry_chebyshev
  12. 1736cc3e215a        centos                  "/bin/bash"              17 hours ago        Exited (255) About an hour ago                       xenodochial_snyder
  13. [root@hongwei-02 ~]# docker start cc55a87409b7
  14. cc55a87409b7
  15. [root@hongwei-02 ~]# docker push 192.168.93.128:5000/centos7
  16. The push refers to repository [192.168.93.128:5000/centos7]
  17. 1d31b5806ba4: Pushed 
  18. latest: digest: sha256:fc2476ccae2a5186313f2d1dadb4a969d6d2d4c6b23fa98b6c7b0a1faad67685 size: 529
  19. [root@hongwei-02 ~]# 
  20.

查看一下：

  1. [root@hongwei-02 ~]# curl 127.0.0.1:5000/v2/_catalog
  2. {"repositories":["centos7"]}
  3. [root@hongwei-02 ~]#

推送一个ubuntu：

  1. [root@hongwei-02 ~]# docker images
  2. REPOSITORY                    TAG                 IMAGE ID            CREATED             SIZE
  3. test                          latest              dd4c8af22d64        About an hour ago   200MB
  4. centos6                       latest              4e9eef98b65c        15 hours ago        512MB
  5. centos_with_net-tools         latest              3cf5264e5fc0        16 hours ago        293MB
  6. ubuntu                        latest              cd6d8154f1e1        2 days ago          84.1MB
  7. test                          180907              5182e96772bf        4 weeks ago         200MB
  8. 192.168.93.128:5000/centos7   latest              5182e96772bf        4 weeks ago         200MB
  9. centos                        latest              5182e96772bf        4 weeks ago         200MB
  10. registry                      latest              b2b03e9146e1        2 months ago        33.3MB
  11. [root@hongwei-02 ~]# docker tag ubuntu 192.168.93.128:5000/ubuntu
  12. [root@hongwei-02 ~]# 
  1. [root@hongwei-02 ~]# docker push 192.168.93.128:5000/ubuntu
  2. The push refers to repository [192.168.93.128:5000/ubuntu]
  3. 8d7ea83e3c62: Pushed 
  4. 6a061ee02432: Pushed 
  5. f73b2816c52a: Pushed 
  6. 6267b420796f: Pushed 
  7. a30b835850bf: Pushed 
  8. latest: digest: sha256:a819482773d99bbbb570626b6101fa37cd93a678581ee564e89feae903c95f20 size: 1357
  9. [root@hongwei-02 ~]# curl 127.0.0.1:5000/v2/_catalog
  10. {"repositories":["centos7","ubuntu"]}
  11. [root@hongwei-02 ~]#

下载私有仓库的镜像

  1. [root@hongwei-02 ~]# docker pull 192.168.93.128:5000/ubuntu
  2. Using default tag: latest
  3. latest: Pulling from ubuntu
  4. Digest: sha256:a819482773d99bbbb570626b6101fa37cd93a678581ee564e89feae903c95f20
  5. Status: Image is up to date for 192.168.93.128:5000/ubuntu:latest
  6. [root@hongwei-02 ~]#

25.8 数据管理

在容器里的数据，一旦容器停止或者删除，则数据就丢失了，因此可以挂载宿主机的目录到容器里面，这样就可以把容器的数据保存在宿主机了。

挂载本地目录到容器里

  1. [root@hongwei-02 ~]# touch haha > /data/1.txt
  2. [root@hongwei-02 ~]# docker run -tid -v /data/:/mydata centos bash
  3. b63bca0d72286d01cea7a53254f0fb8725b8d3426ff92a860bc9b28622790481
  4. [root@hongwei-02 ~]#

-v：指定挂载目录，：前面的是宿主机本地目录，：后面的是容器的目录，会自动创建，无需事先创建。

进入容器，查看一下：

  1. [root@hongwei-02 ~]# docker exec -it b63bca0d72286d bash
  2. [root@b63bca0d7228 /]# ls
  3. anaconda-post.log  dev  home  lib64  mnt     opt   root  sbin  sys  usr
  4. bin                etc  lib   media  mydata  proc  run   srv   tmp  var
  5. [root@b63bca0d7228 /]# ls /mydata/
  6. 1.txt  ftp  gitroot  mariadb  mongodb  mysql  redis_data  sample.git  wwwroot
  7. [root@b63bca0d7228 /]# 
  8. [root@b63bca0d7228 /]#  mkdir /mydata/haha
  9. [root@b63bca0d7228 /]#

本地查看：

  1. [root@hongwei-02 ~]# ll /data/
  2. 总用量 8
  3. -rw-r--r--  1 root     root        0 9月   8 10:27 1.txt
  4. drwxr-xr-x. 2 pure-ftp pure-ftp   20 7月  15 22:33 ftp
  5. drwxr-xr-x  3 root     root       23 8月  29 15:35 gitroot
  6. drwxr-xr-x  2 root     root        6 9月   8 10:29 haha
  7. drwx------. 5 mysql    root     4096 7月   2 15:17 mariadb
  8. drwxr-xr-x  7 root     root       71 8月  28 01:33 mongodb
  9. drwx------. 9 mysql    mysql    4096 9月   8 10:02 mysql
  10. drwxr-xr-x  6 root     root       50 8月  25 09:50 redis_data
  11. drwxr-xr-x  7 git      git       111 8月  29 15:21 sample.git
  12. drwxr-xr-x. 8 root     root       92 7月  17 18:06 wwwroot
  13. [root@hongwei-02 ~]#

挂载数据卷

挂载目录的时候，可以指定容器的name，如果不指定则会随机定义。可以使用docker ps查看，即最右侧一列。

  1. [root@hongwei-02 ~]# docker ps
  2. CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                    NAMES
  3. b63bca0d7228        centos              "bash"                   3 minutes ago       Up 3 minutes                                 nifty_brahmagupta
  4. cc55a87409b7        registry            "/entrypoint.sh /etc…"   About an hour ago   Up 9 minutes        0.0.0.0:5000->5000/tcp   distracted_visvesvaraya
  5. [root@hongwei-02 ~]#

挂载数据卷：

  1. [root@hongwei-02 ~]# docker run -itd --volumes-from distracted_visvesvaraya centos bash
  2. 4f0c3bbe1ae89fa1f38b148f4e45433b895c662724ad757e5ac683ea41672ed9
  3. [root@hongwei-02 ~]#

这样使用centos镜像创建了新的容器，并且使用distracted_visvesvaraya容器的数据卷

3、定义数据卷容器

有时候需要多个容器之间相互共享数据，类似于Linux的nfs，所以可以搭建一个专门的数据卷容器，然后其他容器之间挂载该数据卷，

建立数据卷容器

  1. [root@hongwei-02 ~]# docker run -itd -v /mydata/ --name testvol centos bash
  2. b0752aad78823b8b1c94ea94f8491c081b1c75cc9c9a93cce7e8cf2230517047
  3. [root@hongwei-02 ~]#

注意：这里的/mydata是容器里的目录，并非宿主机本地的目录。

其他容器挂载此数据卷

  1. [root@hongwei-02 ~]# docker run -itd --volumes-from testvol centos bash
  2. 5ca422ab48add775d08f1a518b1b601cd3b1093184a7f13539ed6ce56d28f938
  3. [root@hongwei-02 ~]#

25.9 数据卷备份恢复

备份：

（1）宿主机创建一个备份目录

  1. [root@hongwei-02 ~]# mkdir /vol_data_backup
  2. [root@hongwei-02 ~]#

（2）创建一个容器

首先是要testvol数据卷新开一个容器，同时还需把宿主机本地的/vol_data_backup目录挂载到该容器的/backup目录中，然后再把/home目录的文件打包成data.tar文件放到/backup目录中。

  1. [root@hongwei-02 ~]# docker run --volumes-from testvol -v /vol_data_backup:/backup centos tar cvf /backup/data.tar /home/
  2. tar: Removing leading `/' from member names
  3. /home/
  4. [root@hongwei-02 ~]# ls /vol_data_backup/
  5. data.tar
  6. [root@hongwei-02 ~]#

2、恢复

先新建一个数据卷容器，再建一个新的容器并挂载该数据卷容器，然后把tar包解包。

创建新的数据卷容器（创建的数据卷目录名称必须和备份的数据卷名称一致）：

  1. [root@hongwei-02 ~]# docker run -itd -v /backup --name testvol2 centos bash
  2. f623c9eb08eaa8d2d3b587598e01e4fce2bb910461ef8aef4c3bf2b1c1a344b5
  3. [root@hongwei-02 ~]#

挂载数据卷新建容器，并解包：

  1. [root@hongwei-02 ~]# docker run -it --volumes-from testvol2 -v /vol_data_backup/:/backup  centos bash
  2. [root@e37a35a663c0 /]# ls
  3. anaconda-post.log  bin  etc   lib    media  opt   root  sbin  sys  usr
  4. backup             dev  home  lib64  mnt    proc  run   srv   tmp  var
  5. [root@e37a35a663c0 /]# mkdir haha
  6. [root@e37a35a663c0 /]# tar xf backup/data.tar -C haha/
  7. [root@e37a35a663c0 /]# ls /haha
  8. home
  9. [root@e37a35a663c0 /]#

25.10 docker网络模式

docker网络模式有host、none、container、bridge模式。

·host模式，使用docker run时使用--net=host可以指定。docker使用的网络实际上和宿主机的一样，在容器内看到的网卡ip是宿主机的ip。

·container模式，设置：--net=container:容器id/容器名，多个容器使用共同的网络，看到的ip是一样的

·none模式，设置：--net=none，此模式下，不会配置任何网络

bridge模式，设置：--net=bridge。不指定模式，默认情况下就使用bridge模式。此模式会为每个容器分配一个独立的Network Namespace。类似于vmware的nat网络模式。同一个宿主机上的所有容器会在同一个网段下，相互之间可以通信。

1、外面网络访问容器

（1）新建一个容器。使用默认网络模式。

  1. [root@hongwei-02 ~]# docker images
  2. REPOSITORY                    TAG                 IMAGE ID            CREATED             SIZE
  3. test                          latest              dd4c8af22d64        About an hour ago   200MB
  4. centos6                       latest              4e9eef98b65c        16 hours ago        512MB
  5. centos_with_net-tools         latest              3cf5264e5fc0        17 hours ago        293MB
  6. 192.168.93.128:5000/ubuntu    latest              cd6d8154f1e1        2 days ago          84.1MB
  7. ubuntu                        latest              cd6d8154f1e1        2 days ago          84.1MB
  8. test                          180907              5182e96772bf        4 weeks ago         200MB
  9. 192.168.93.128:5000/centos7   latest              5182e96772bf        4 weeks ago         200MB
  10. centos                        latest              5182e96772bf        4 weeks ago         200MB
  11. registry                      latest              b2b03e9146e1        2 months ago        33.3MB
  12. [root@hongwei-02 ~]# docker run -itd 5182e96772bf bash
  13. 8315431f88575b78ddc78a182d0268ef31bb7ab07c6210300f4f1c6878c61ad4

进入容器，安装nginx服务

  1. [root@hongwei-02 ~]# docker exec -it ddb28881218 bash
  2. [root@ddb288812186 /]# yum install -y epel-release
  3. Loaded plugins: fastestmirror, ovl
  4. Determining fastest mirrors
  5.  * base: mirrors.aliyun.com
  6.  * extras: mirrors.aliyun.com
  7.  * updates: mirrors.aliyun.com
  8. base                                                                              | 3.6 kB  00:00:00     
  9. extras                                                                            | 3.4 kB  00:00:00     
  10. updates                                                                           | 3.4 kB  00:00:00     
  11. (1/4): extras/7/x86_64/primary_db                                                 | 187 kB  00:00:06     
  12. (2/4): base/7/x86_64/group_gz                                                     | 166 kB  00:00:06     
  13. (3/4): updates/7/x86_64/primary_db                                                | 5.2 MB  00:00:07     
  14. (4/4): base/7/x86_64/primary_db                                                   | 5.9 MB  00:01:07     
  15. Resolving Dependencies
  16. --> Running transaction check
  17. ---> Package epel-release.noarch 0:7-11 will be installed
  18. --> Finished Dependency Resolution
  19.  
  20. Dependencies Resolved
  21.  
  22. =========================================================================================================
  23.  Package                      Arch                   Version                Repository              Size
  24. =========================================================================================================
  25. Installing:
  26.  epel-release                 noarch                 7-11                   extras                  15 k
  27.  
  28. Transaction Summary
  29. =========================================================================================================
  30. Install  1 Package
  31.  
  32. Total download size: 15 k
  33. Installed size: 24 k
  34. Downloading packages:
  35. warning: /var/cache/yum/x86_64/7/extras/packages/epel-release-7-11.noarch.rpm: Header V3 RSA/SHA256 Signature, key ID f4a80eb5: NOKEY
  36. Public key for epel-release-7-11.noarch.rpm is not installed
  37. epel-release-7-11.noarch.rpm                                                      |  15 kB  00:00:06     
  38. Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
  39. Importing GPG key 0xF4A80EB5:
  40.  Userid     : "CentOS-7 Key (CentOS 7 Official Signing Key) <security@centos.org>"
  41.  Fingerprint: 6341 ab27 53d7 8a78 a7c2 7bb1 24c6 a8a7 f4a8 0eb5
  42.  Package    : centos-release-7-5.1804.1.el7.centos.x86_64 (@Updates)
  43.  From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
  44. Running transaction check
  45. Running transaction test
  46. Transaction test succeeded
  47. Running transaction
  48.   Installing : epel-release-7-11.noarch                                                              1/1 
  49.   Verifying  : epel-release-7-11.noarch                                                              1/1 
  50.  
  51. Installed:
  52.   epel-release.noarch 0:7-11                                                                             
  53.  
  54. Complete!
  55. [root@ddb288812186 /]# yum install -y nginx
  56.

退出容器，把容器导出为镜像

  1. [root@ddb288812186 /]# exit
  2. [root@hongwei-02 ~]# docker commit -m "install nginx"  -a "haha" ddb288812186 centos_with_nginx
  3. sha256:36bd1498a1774c02fdc4b4da1b6505026846d354fda81f9fbb29197b3676aa69
  4. [root@hongwei-02 ~]#

查看一下：

  1. [root@hongwei-02 ~]# docker images
  2. REPOSITORY                    TAG                 IMAGE ID            CREATED             SIZE
  3. centos_with_nginx             latest              36bd1498a177        45 seconds ago      408MB
  4. test                          latest              dd4c8af22d64        About an hour ago   200MB
  5. centos6                       latest              4e9eef98b65c        16 hours ago        512MB
  6. centos_with_net-tools         latest              3cf5264e5fc0        17 hours ago        293MB
  7. 192.168.93.128:5000/ubuntu    latest              cd6d8154f1e1        2 days ago          84.1MB
  8. ubuntu                        latest              cd6d8154f1e1        2 days ago          84.1MB
  9. 192.168.93.128:5000/centos7   latest              5182e96772bf        4 weeks ago         200MB
  10. centos                        latest              5182e96772bf        4 weeks ago         200MB
  11. test                          180907              5182e96772bf        4 weeks ago         200MB
  12. registry                      latest              b2b03e9146e1        2 months ago        33.3MB
  13. [root@hongwei-02 ~]#

使用刚才导出的镜像创建容器，并做端口映射

将宿主机的8088端口映射到容器的80端口。

  1. [root@hongwei-02 ~]# docker run -itd -p 8088:80 centos_with_nginx bash
  2. 5cc349fc6cd1bfdbb8d078c232002f3743353a02a926d7aff386276f456fa484
  3. [root@hongwei-02 ~]#

25.11 opration not permitted

新建的容器，启动nginx或httpd服务时会报错，如下所示：

  1. [root@hongwei-02 ~]# docker exec -it 5cc349fc6cd1b bash
  2. [root@5cc349fc6cd1 /]# systemctl start nginx
  3. Failed to get D-Bus connection: Operation not permitted
  4. [root@5cc349fc6cd1 /]#

这是因为dbus-daemon没有启动。解法方法：启动容器时加上：--privileged -e "container=docker"，并且最后的命令bash改为/usr/sbin/init

把上面创建的容器（cc4823f4e7756f7c9 ）删除之后再创建新的容器。

  1. [root@hongwei-02 ~]# docker rm -f 5cc349fc6cd1
  2. 5cc349fc6cd1
  3. [root@hongwei-02 ~]# docker run -itd --privileged -e "container=docker"  -p 8088:80 centos_with_nginx /usr/sbin/init
  4. 5ffb76939a4f1bbb5e1986a3702f08fe540fa605cbe7bc1522aa9f4b41ccecd1
  5. [root@hongwei-02 ~]#

进入容器，启动nginx：

  1. [root@hongwei-02 ~]# docker exec -it 5ffb76939a bash
  2. [root@5ffb76939a4f /]# systemctl start nginx
  3. [root@5ffb76939a4f /]# 
  4. [root@5ffb76939a4f /]# ps aux|grep nginx
  5. root        87  0.0  0.2 120812  2088 ?        Ss   03:02   0:00 nginx: master process /usr/sbin/nginx
  6. nginx       88  0.0  0.3 121276  3116 ?        S    03:02   0:00 nginx: worker process
  7. root        90  0.0  0.0   9092   664 pts/1    S+   03:02   0:00 grep --color=auto nginx
  8. [root@5ffb76939a4f /]#

25.12 配置桥接网络

为了使用本地网络中的机器和docker容器更方便的通信，通常会有将docker容器配置到和主机同一网段的需求。

只要将docker容器和宿主机的网卡桥连起来，再给docker容器配置ip即可。

1、宿主机网络配置

修改ens33的配置文件，配置br0文件。

  1. [root@hongwei-02 ~]# cd /etc/sysconfig/network-scripts/
  2. [root@hongwei-02 network-scripts]# ls
  3. ifcfg-ens33  ifdown-ipv6    ifdown-TeamPort  ifup-ippp   ifup-routes       network-functions
  4. ifcfg-lo     ifdown-isdn    ifdown-tunnel    ifup-ipv6   ifup-sit          network-functions-ipv6
  5. ifdown       ifdown-post    ifup             ifup-isdn   ifup-Team
  6. ifdown-bnep  ifdown-ppp     ifup-aliases     ifup-plip   ifup-TeamPort
  7. ifdown-eth   ifdown-routes  ifup-bnep        ifup-plusb  ifup-tunnel
  8. ifdown-ib    ifdown-sit     ifup-eth         ifup-post   ifup-wireless
  9. ifdown-ippp  ifdown-Team    ifup-ib          ifup-ppp    init.ipv6-global
  10. [root@hongwei-02 network-scripts]# cp ifcfg-ens33 ifcfg-br0
  11. [root@hongwei-02 network-scripts]#

ens33配置文件

  1. [root@hongwei-02 network-scripts]# vim ifcfg-ens33
  2.  
  3. TYPE=Ethernet
  4. BOOTPROTO=static
  5. DEFROUTE=yes
  6. PEERDNS=yes
  7. PEERROUTES=yes
  8. IPV4_FAILURE_FATAL=no
  9. IPV6INIT=yes
  10. IPV6_AUTOCONF=yes
  11. IPV6_DEFROUTE=yes
  12. IPV6_PEERDNS=yes
  13. IPV6_PEERROUTES=yes
  14. IPV6_FAILURE_FATAL=no
  15. NAME=ens33
  16. #UUID=1a6dc668-1e56-4388-af94-c2f013a74b14
  17. DEVICE=ens33
  18. ONBOOT=yes
  19. #IPADDR=192.168.93.128
  20. #NETMASK=255.255.255.0
  21. #GATEWAY=192.168.93.2
  22. #DNS1=119.29.29.29
  23. BRIDGE=br0

br0配置文件：

  1. [root@hongwei-02 network-scripts]# vim ifcfg-br0
  2.  
  3. TYPE=Bridge
  4. BOOTPROTO=static
  5. DEFROUTE=yes
  6. PEERDNS=yes
  7. PEERROUTES=yes
  8. IPV4_FAILURE_FATAL=no
  9. IPV6INIT=yes
  10. IPV6_AUTOCONF=yes
  11. IPV6_DEFROUTE=yes
  12. IPV6_PEERDNS=yes
  13. IPV6_PEERROUTES=yes
  14. IPV6_FAILURE_FATAL=no
  15. NAME=br0
  16. UUID=1a6dc668-1e56-4388-af94-c2f013a74b14
  17. DEVICE=br0
  18. ONBOOT=yes
  19. IPADDR=192.168.93.128
  20. NETMASK=255.255.255.0
  21. GATEWAY=192.168.93.2
  22. DNS1=119.29.29.29

重启网络：

  1. [root@hongwei-02 ~]# systemctl restart network
  2. [root@hongwei-02 ~]#

查看网络：

  1. [root@hongwei-02 ~]# ip addr
  2. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
  3.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  4.     inet 127.0.0.1/8 scope host lo
  5.        valid_lft forever preferred_lft forever
  6.     inet6 ::1/128 scope host 
  7.        valid_lft forever preferred_lft forever
  8. 2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
  9.     link/ether 00:0c:29:a8:7a:67 brd ff:ff:ff:ff:ff:ff
  10.     inet 192.168.93.180/24 brd 192.168.93.255 scope global dynamic ens33
  11.        valid_lft 1785sec preferred_lft 1785sec
  12. 4: br0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN 
  13.     link/ether ba:72:8e:17:0f:52 brd ff:ff:ff:ff:ff:ff
  14.     inet 192.168.93.128/24 brd 192.168.93.255 scope global br0
  15.        valid_lft forever preferred_lft forever
  16. [root@hongwei-02 ~]#

安装pipework

[root@hongwei-02 ~]# yum install git -y

使用git下载pipework

  1. [root@hongwei-02 ~]# git clone https://github.com/jpetazzo/pipework
  2. 正克隆到 'pipework'...
  3. remote: Counting objects: 501, done.
  4. remote: Total 501 (delta 0), reused 0 (delta 0), pack-reused 501
  5. 接收对象中: 100% (501/501), 172.97 KiB | 271.00 KiB/s, done.
  6. 处理 delta 中: 100% (264/264), done.
  7. [root@hongwei-02 ~]#

将pipework命令放到/usr/local/bin目录中

  1. [root@hongwei-02 ~]# cd pipework/
  2. [root@hongwei-02 pipework]# cp pipework /usr/local/bin/
  3. [root@hongwei-02 pipework]#

使用centos_with_net-tools镜像创建一个none模式的容器

  1. [root@hongwei-02 ~]# docker run -itd --net=none --name aming123 centos_with_net-tools  bash
  2. d120fa1e9a68d9026af8d0450c8061a6379f1efb365d298e8778f5b9a7544b55

使用pipework命令设置网络

第3步中创建的容器使用none模式，没有网络，所以使用pipework创建桥连，用法：

pipework    桥连网卡名     容器id     自定义ip/掩码@网关

[root@hongwei-02 ~]# pipework br0  aming123 192.168.93.132/24@192.168.93.2

 进入容器查看网络信息：

  1. [root@d120fa1e9a68 /]# ifconfig 
  2. eth1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
  3.         inet 192.168.93.132  netmask 255.255.255.0  broadcast 192.168.93.255
  4.         ether a2:9b:0f:60:5f:12  txqueuelen 1000  (Ethernet)
  5.         RX packets 8  bytes 648 (648.0 B)
  6.         RX errors 0  dropped 0  overruns 0  frame 0
  7.         TX packets 1  bytes 42 (42.0 B)
  8.         TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
  9.  
  10. lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
  11.         inet 127.0.0.1  netmask 255.0.0.0
  12.         loop  txqueuelen 0  (Local Loopback)
  13.         RX packets 0  bytes 0 (0.0 B)
  14.         RX errors 0  dropped 0  overruns 0  frame 0
  15.         TX packets 0  bytes 0 (0.0 B)
  16.         TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
  17.  
  18. [root@d120fa1e9a68 /]#

然后去打开新的虚拟机看看能不能ping通02机器的ip

十四、dockerfile

dockerfile的格式

1、FROM  //指定基于哪个基础镜像

格式：FROM  镜像，或者，FROM  镜像:标签

如：FROM centos、FROM centos:latest

2、MAITAINER  //指定作者的信息

比如：MAITAINER haha  haha@haha,com

3、RUN  //镜像操作指令

格式：RUN 命令，或者，RUN  ["executable","param1","param2"]，比如：

RUN yum install httpd -y

RUN ["/bin/bash","-c","echo hello"]

4、CMD //跟RUN很像

3种格式：

CMD  ["executable","param1","param2"]

CMD command  param1  param2

CMD ["param1","param2"]

CMD用了指定容器启动时用到的命令，只能有一条。比如：

CMD ["/bin/bash","/usr/local/nginx/sbin/nginx","-c","/usr/local/nginx/conf/nginx.conf"]

5、EXPOSE

格式：EXPOSE <port> [<port>...]，比如

EXPORT 22 80 3306

用了指定要映射出去的端口。启动容器时使用-P则自动分配端口，-p则手动设置端口映射。

6、ENV  //定义变量

格式：ENV <key><value>

比如：ENV PATH /usr/local/mysql/bin:$PATH

主要是为后续的RUN指令提供一个环境变量。当然也可以自定义变量。比如

ENV MYSQL_version 5.6

7、ADD 拷贝文件或目录到某个目录

格式：ADD <src><dest>

其中src支持url。

8、COPY

格式与ADD一样，但不同的是，不支持url

9、ENTRYPOINT

格式类似CMD，容器启动时要执行的命令，与CMD很像，也是只有一条生效。如果写多条，只有最后一条生效。和CMD不同的是：

CMD可以被docker run指定覆盖，而ENTRYPOINT不能覆盖。比如，容器名为mycentos，在Dockerfile中定义CMD如下：

CMD ["/bin/echo","test"]

启动容器的命令：docker run mycentos 这会输出test。

如果使用：docker  run -it mycentos /bin/bash 什么都不会输出。

ENTRYPOINT不会被覆盖，而且比CMD或者docker run指定的命令要靠前执行。

ENTRYPOINT ["echo","test"]

docker run -it mycentos 123，则会输出test  123，这相当于执行命令echo test 123

10、VOLUME 指定挂载点

格式：VOLUME ["/目录"]

创建一个可以从本地主机或其他容器挂载的挂载点

11、USER

格式：USER daemon

指定运行容器的用户，很少用，一般都是root用户运行容器。

12、WORKDIR

格式：WORKDIR 目录

为后续的RUN、CMD或者ENTRYPOINT指定工作的目录

十五、Dockerfile示例（安装nginx）

1、在写Dockerfile之前先准备好nginx的配置文件

主配置文件：nginx.conf，虚拟主机配置文件：server.conf

nginx.conf文件内容：

  1. user  nginx  nginx;
  2. worker_processes  1;
  3. worker_rlimit_nofile 65535;
  4. error_log  /var/log/nginx/error.log notice;
  5. events {
  6.     use epoll;
  7.     worker_connections  65535;
  8. }
  9. http {
  10.     include mime.types;
  11.     default_type application/octet-stream;
  12.     server_names_hash_bucket_size 3526;
  13.     server_names_hash_max_size 4096;
  14.     log_format combined_realip '$remote_addr $http_x_forwarded_for [$time_local]'
  15.     ' $host "$request_uri" $status'
  16.     ' "$http_referer" "$http_user_agent"';
  17.     sendfile on;
  18.     tcp_nopush on;
  19.     keepalive_timeout 30;
  20.     client_header_timeout 3m;
  21.     client_body_timeout 3m;
  22.     send_timeout 3m;
  23.     connection_pool_size 256;
  24.     client_header_buffer_size 1k;
  25.     large_client_header_buffers 8 4k;
  26.     request_pool_size 4k;
  27.     output_buffers 4 32k;
  28.     postpone_output 1460;
  29.     client_max_body_size 10m;
  30.     client_body_buffer_size 256k;
  31.     client_body_temp_path /usr/local/nginx/client_body_temp;
  32.     proxy_temp_path /usr/local/nginx/proxy_temp;
  33.     fastcgi_temp_path /usr/local/nginx/fastcgi_temp;
  34.     fastcgi_intercept_errors on;
  35.     tcp_nodelay on;
  36.     gzip on;
  37.     gzip_min_length 1k;
  38.     gzip_buffers 4 8k;
  39.     gzip_comp_level 5;
  40.     gzip_http_version 1.1;
  41.     gzip_types text/plain application/x-javascript text/css text/htm 
  42.     application/xml;
  43.     
  44.  
  45.     include /usr/local/nginx/conf.d/*.conf;
  46.  
  47. }

server.conf文件内容：

  1. server {
  2. listen       80;
  3. server_name  localhost;
  4. location / {
  5.     root   /usr/local/nginx/html;
  6.     index  index.php index.html index.htm;
  7. }
  8. error_page   500 502 503 504  /50x.html;
  9. location = /50x.html {
  10.     root   /usr/local/nginx/html;
  11. }
  12.  
  13. #location ~ \.php$ {
  14. #    root           /usr/local/nginx/html;
  15. #    fastcgi_pass   127.0.0.1:9000;
  16. #    fastcgi_index  index.php;
  17. #    fastcgi_param  SCRIPT_FILENAME   /usr/local/nginx/html$fastcgi_script_name;
  18. #    include        fastcgi_params;
  19. #}
  20.  
  21. }

2、创建Dockerfile文件

Dockerfile、nginx.conf、server.conf三个文件都放在/root目录中。

  1. [root@hongwei-02 ~]# vim Dockerfile
  2. ###  Set the base image to CentOS
  3. FROM centos
  4.  
  5. #File Author / Maintainer
  6. MAINTAINER caomuzhong www.logmm.com
  7.  
  8. #Install necessary tools
  9. RUN yum install -y gcc gcc-c++ pcre-devel openssl-devel libxml2-devel openssl libcurl-devel make zlib zlib-devel gd-devel
  10.  
  11. #Install Nginx
  12. RUN useradd -r -s /sbin/nologin nginx
  13. RUN mkdir -p /usr/local/nginx/
  14. RUN mkdir -p /var/log/nginx
  15. RUN chown nginx.nginx /var/log/nginx
  16. RUN touch /var/log/nginx/error.log
  17. RUN chown nginx.nginx /var/log/nginx/error.log
  18. ADD http://nginx.org/download/nginx-1.14.0.tar.gz .
  19. RUN tar xzvf nginx-1.14.0.tar.gz
  20. RUN cd nginx-1.14.0 && ./configure --prefix=/usr/local/nginx     --user=nginx     --group=nginx     --http-log-path=/mydata/logs/nginx/access.log     --error-log-path=/mydata/logs/nginx/error.log     --with-http_ssl_module     --with-http_realip_module     --with-http_flv_module     --with-http_mp4_module     --with-http_gunzip_module     --with-http_gzip_static_module     --with-http_image_filter_module     --with-http_stub_status_module &&  make && make install
  21. RUN rm -f /usr/local/nginx/conf/nginx.conf
  22. RUN mkdir /usr/local/nginx/conf.d/
  23. COPY nginx.conf  /usr/local/nginx/conf/nginx.conf
  24. COPY server.conf /usr/local/nginx/conf.d/
  25.  
  26. #Expose ports
  27. EXPOSE 80
  28.  
  29. #Set the default command to execute when creating a new container
  30. ENTRYPOINT /usr/local/nginx/sbin/nginx && tail -f /etc/passwd

3、创建镜像

  1. [root@hongwei-02 ~]# docker build -t centos_nginx .
  2. Sending build context to Docker daemon  910.7MB
  3. ...
  4. Successfully built f3f68e71836d
  5. Successfully tagged centos_nginx:latest
  6. [root@hongwei-02 ~]#

查看镜像：

  1. [root@hongwei-02 ~]# docker images
  2. REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
  3. centos_nginx        latest              f3f68e71836d        22 seconds ago      499MB
  4. centos_with_nginx   latest              30371a3263a7        24 hours ago        408MB
  5. centos              latest              5182e96772bf        4 weeks ago         200MB
  6. registry            latest              b2b03e9146e1        2 months ago        33.3MB
  7. [root@hongwei-02 ~]#

4、启动容器

启动容器，进入查看nginx：

  1. [root@hongwei-02 ~]# docker run -itd -p 81:80 centos_nginx bash
  2. e03a016801683c686e669587523f77d14aa32e9ba6bac851146fe01dc4faa0e6
  3. [root@hongwei-02 ~]# docker exec -it e03a016801 bash
  4. [root@e03a01680168 /]# ps aux | grep nginx
  5. root          1  0.0  0.0  11680  1352 pts/0    Ss+  14:45   0:00 /bin/sh -c /usr/local/nginx/sbinnginx && tail -f /etc/passwd bash
  6. root          7  0.0  0.0  72928  1316 ?        Ss   14:45   0:00 nginx: master process /usr/localnginx/sbin/nginx
  7. nginx         9  0.0  1.4 100064 28616 ?        S    14:45   0:00 nginx: worker process
  8. root         24  0.0  0.0   9088   660 pts/1    S+   14:45   0:00 grep --color=auto nginx
  9. [root@e03a01680168 /]#

宿主机的81端口映射到容器的80端口。

宿主机ip：192.168.93.128，浏览器打开：192.168.93.128:81

十六、使用docker compose部署服务

docker compose可以方便我们快捷高效地管理容器的启动、停止、重启等操作，它类似于Linux的shell脚本，基于yaml语法，在该文件里可以描述应用的框架，比如用什么镜像、数据卷、网络模式、监听端口等信息。

我们可以在一个compose文件中定义一个多容器的应用，然后通过该compose来启动这个应用。

1、下载docker-compose

安装方法：https://docs.docker.com/compose/install/#install-compose

下载地址：https://github.com/docker/compose/releases

[root@hongwei-02 ~]# curl -L https://github.com/docker/compose/releases/download/1.22.0/docker-compose-$(uname -s)-$(uname -m) -o /usr/local/bin/docker-compose

2、添加可执行权限

[root@hongwei-02 ~]# chmod +x /usr/local/bin/docker-compose

3、查看docker-compose版本信息

  1. [root@hongwei-02 ~]# docker-compose version
  2. docker-compose version 1.22.0, build f46880fe
  3. docker-py version: 3.4.1
  4. CPython version: 3.6.6
  5. OpenSSL version: OpenSSL 1.1.0f  25 May 2017
  6. [root@hongwei-02 ~]#

十七、docker compose示例

查看一下有哪些镜像：

  1. [root@hongwei-02 ~]# docker images
  2. REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
  3. centos_nginx        latest              f3f68e71836d        31 minutes ago      499MB
  4. centos_with_nginx   latest              30371a3263a7        25 hours ago        408MB
  5. centos              latest              5182e96772bf        4 weeks ago         200MB
  6. registry            latest              b2b03e9146e1        2 months ago        33.3MB
  7. [root@hongwei-02 ~]#

1、创建compose文件

这里使用centos_nginx、centos两个镜像创建一个compose文件：

  1. [root@hongwei-02 ~]# vim docker-compose.yml
  2. version: "2"
  3. services:
  4.   app1:
  5.      image: centos_nginx
  6.      ports:
  7.        - "82:80"
  8.      networks:
  9.        - "net1"
  10.      volumes:
  11.        - /app1/:/app1
  12.   app2:
  13.      image: centos
  14.      networks:
  15.        - "net2"
  16.      volumes:
  17.        - /app2/:/app2
  18.      entrypoint: tail -f /etc/passwd
  19. networks:
  20.   net1:
  21.      driver: bridge
  22.   net2:
  23.      driver: bridge

注意缩进。

2、运行：

  1. [root@hongwei-02 ~]# docker-compose up -d 
  2. Creating network "root_net1" with driver "bridge"
  3. Creating network "root_net2" with driver "bridge"
  4. Creating root_app1_1 ... done
  5. Creating root_app2_1 ... done
  6. [root@hongwei-02 ~]#

查看一下容器运行情况：

  1. [root@hongwei-02 ~]# docker ps
  2. CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                NAMES
  3. 1119eba47792        centos              "tail -f /etc/passwd"    50 seconds ago      Up 49 seconds                            root_app2_1
  4. 5651b4fc7d0d        centos_nginx        "/bin/sh -c '/usr/lo…"   50 seconds ago      Up 49 seconds       0.0.0.0:82->80/tcp   root_app1_1
  5. e03a01680168        centos_nginx        "/bin/sh -c '/usr/lo…"   39 minutes ago      Up 39 minutes       0.0.0.0:81->80/tcp   sleepy_goldberg
  6. [root@hongwei-02 ~]#

app1、app2均已运行。

3、停止

  1. [root@hongwei-02 ~]# docker-compose stop
  2. Stopping root_app2_1 ... done
  3. Stopping root_app1_1 ... done
  4. [root@hongwei-02 ~]#

4、帮助信息

直接执行docker-compose命令，可以查看相关帮助信息

[root@hongwei-02~]# docker-compose
Define and run multi-container applications with Docker.

Usage:
  docker-compose [-f <arg>...] [options] [COMMAND] [ARGS...]
  docker-compose -h|--help

Options:
  -f, --file FILE             Specify an alternate compose file
                              (default: docker-compose.yml)
  -p, --project-name NAME     Specify an alternate project name
                              (default: directory name)
  --verbose                   Show more output
  --log-level LEVEL           Set log level (DEBUG, INFO, WARNING, ERROR, CRITICAL)
  --no-ansi                   Do not print ANSI control characters
  -v, --version               Print version and exit
  -H, --host HOST             Daemon socket to connect to

  --tls                       Use TLS; implied by --tlsverify
  --tlscacert CA_PATH         Trust certs signed only by this CA
  --tlscert CLIENT_CERT_PATH  Path to TLS certificate file
  --tlskey TLS_KEY_PATH       Path to TLS key file
  --tlsverify                 Use TLS and verify the remote
  --skip-hostname-check       Don't check the daemon's hostname against the
                              name specified in the client certificate
  --project-directory PATH    Specify an alternate working directory
                              (default: the path of the Compose file)
  --compatibility             If set, Compose will attempt to convert deploy
                              keys in v3 files to their non-Swarm equivalent

Commands:
  build              Build or rebuild services
  bundle             Generate a Docker bundle from the Compose file
  config             Validate and view the Compose file
  create             Create services
  down               Stop and remove containers, networks, images, and volumes
  events             Receive real time events from containers
  exec               Execute a command in a running container
  help               Get help on a command
  images             List images
  kill               Kill containers
  logs               View output from containers
  pause              Pause services
  port               Print the public port for a port binding
  ps                 List containers
  pull               Pull service images
  push               Push service images
  restart            Restart services
  rm                 Remove stopped containers
  run                Run a one-off command
  scale              Set number of containers for a service
  start              Start services
  stop               Stop services
  top                Display the running processes
  unpause            Unpause services
  up                 Create and start containers
  version            Show the Docker-Compose version information

docker-compose语法文档：http://www.web3.xin/index/article/182.html

十八、Harbor安装使用

1、下载并解压harbor

下载地址：https://storage.googleapis.com/harbor-releases/release-1.6.0/harbor-offline-installer-v1.6.0-rc3.tgz

安装装harbor之前，必须先安装好docker-compose。

docker-compose在前面已经安装好了。

[root@hongwei-02 ~]# tar xf harbor-offline-installer-v1.6.0-rc3.tgz

2、修改配置文件

进入解压后的目录，修改harbor.cfg文件，修改过hostname = 192.168.93.128

  1. [root@hongwei-02 ~]# cd harbor/
  2. [root@hongwei-02 harbor]# vim  harbor.cfg
  3. hostname = 192.168.93.128

3、修改docker.service文件

修改ExecStart=/usr/bin/dockerd --insecure-registry=192.168.10.101。

  1. [root@lb01 harbor]# vim /usr/lib/systemd/system/docker.service
  2. ExecStart=/usr/bin/dockerd --insecure-registry=192.168.10.101

4、安装harbor

在harbor解压目录中执行./install..sh命令

[root@lb01 harbor]# ./install.sh

转载于:https://my.oschina.net/u/3851487/blog/1988216

声明：本文内容由网友自发贡献，不代表【wpsshop博客】立场，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：https://www.wpsshop.cn/w/IT小白/article/detail/145638
推荐阅读
相关标签

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。

  

闽ICP备14008679号