docker笔记、常遇问题、常用命令

启动一个容器并且进到里面，退出后，容器结束

[root@bogon ~]# docker run --name mynginx -it nginx

启动一个容器,退出后自动删除
[root@bogon stress]# docker run -it --rm stress --cpu 1

后台启动一个容器，启动后，退出容器，容器仍然是up状态

[root@bogon ~]# docker run -d --name mynginx nginx
[root@lab3 ~]# docker run -d -p 8085:8081 --restart=always --name nexus3 sonatype/nexus3 #注意8081是服务真实的端口

过滤某个容器
[root@bogon ~]# docker ps -a | grep mynginx

启动已有的容器：
[root@bogon ~]# docker start 3ec6e022d3ec

只看最后一个容器
[root@bogon ~]# docker ps -l
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
66cb3c773f86 nginx "nginx -g 'daemon ..." 16 seconds ago Up 15 seconds 0.0.0.0:91->80/tcp mynginx2

进入容器： #进入后再退到linux环境中，容器仍然运行，生产中提倡

[root@bogon yum.bak]# yum install util-linux -y
[root@bogon ~]# docker start 3ec6e022d3ec
3ec6e022d3ec
[root@bogon ~]# docker inspect --format "{{.State.Pid}}" mynginx2 #上面启动后要速度，否则 docker 又exited
32850
[root@bogon ~]# nsenter --target 32850 --mount --uts --ipc --net --pid
[root@3ec6e022d3ec /]# exit
logout
[root@bogon ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
78a40f56544c nginx "/bin/bash" About an hour ago Exited (0) About an hour ago mydockre1
3ec6e022d3ec nginx "/bin/bash" About an hour ago Up 2 minutes nginx
863c93fc46fb nginx "echo 'hello word'" About an hour ago Exited (0) About an hour ago unruffled_varahamihira

脚本进入容器：
[root@bogon ~]# cat c.sh
#!/bin/bash
CNAME=$1
CPID=$(docker inspect --format "{{.State.Pid}}" $CNAME)
nsenter --target $CPID --mount --uts --ipc --net --pid
[root@bogon ~]# docker start nginx
nginx
[root@bogon ~]# ./c.sh mynginx
[root@3ec6e022d3ec /]#

停止容器：
[root@bogon ~]# docker stop 3ec6e022d3ec
3ec6e022d3ec

删除容器：

[root@bogon ~]# docker stop acdde4415e79
[root@bogon ~]# docker rm acdde4415e79

强制删除容器

docker rmi fc7a05ff1928 -f

网络访问;

[root@bogon ~]# yum install -y bridge-utils
[root@bogon ~]# brctl show
bridge name    bridge id    STP enabled    interfaces
docker0    8000.02427c67ad94    no    veth67067d2
vethc4fa94d
[root@bogon ~]# iptables -t nat -l -n
iptables v1.4.21: unknown option "-l"
Try `iptables -h' or 'iptables --help' for more information.
[root@bogon ~]# iptables -t nat -L -n
target prot opt source destination
MASQUERADE all -- 172.17.0.0/16 0.0.0.0/0

随机映射端口：
[root@bogon ~]# docker run -d -P --name mynginx1 nginx
[root@bogon ~]# docker ps -l
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
60ffbffe8f27 nginx "nginx -g 'daemon ..." About a minute ago Up About a minute 0.0.0.0:32768->80/tcp mynginx1

访问nginx
http://192.168.43.71:32768/

Welcome to nginx!
If you see this page, the nginx web server is successfully installed and working. Further configuration is required.

For online documentation and support please refer to nginx.org.
Commercial support is available at nginx.com.

Thank you for using nginx.

指定映射端口：
[root@bogon ~]# docker run -d -p 91:80 --name mynginx2 nginx
66cb3c773f8610563fb382cf5045792478225affbb126258802b7a193a964e12
[root@bogon ~]# docker ps -l
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
66cb3c773f86 nginx "nginx -g 'daemon ..." 16 seconds ago Up 15 seconds 0.0.0.0:91->80/tcp mynginx2

访问nginx
http://192.168.43.71:91/

Welcome to nginx!
If you see this page, the nginx web server is successfully installed and working. Further configuration is required.

For online documentation and support please refer to nginx.org.
Commercial support is available at nginx.com.

Thank you for using nginx.

数据管理：

1、数据卷：

[root@bogon ~]# docker run -it --name volume-test1 -h nginx -v /data nginx
[root@bogon ~]# docker ps -l
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
b7f26eddfe04 nginx "nginx -g 'daemon ..." About a minute ago Exited (0) 12 seconds ago volume-test1
[root@bogon ~]# docker rm b7f26eddfe04
b7f26eddfe04
[root@bogon ~]# docker run -it --name volume-test1 -h centos -v /data centos #-h 指定版本
[root@centos /]#
[root@centos /]#exit
[root@bogon ~]# docker inspect -f {{.Volumes}} volume-test1
Template parsing error: template: :1:2: executing "" at <.Volumes>: map has no entry for key "Volumes"
[root@bogon ~]# docker inspect volume-test1 | grep Mounts
"Mounts": [
[root@bogon ~]# docker inspect volume-test1 | grep Mounts -A 10
"Mounts": [
{
"Type": "volume",
"Name": "92abd271864afe570792711fda8a5755fff219dfeabb6a59f58f02c7802c903c",
"Source": "/var/lib/docker/volumes/92abd271864afe570792711fda8a5755fff219dfeabb6a59f58f02c7802c903c/_data",
"Destination": "/data",
"Driver": "local",
"Mode": "",
"RW": true,
"Propagation": ""
}

[root@bogon ~]# cd /var/lib/docker/volumes/92abd271864afe570792711fda8a5755fff219dfeabb6a59f58f02c7802c903c/_data
[root@bogon _data]# mkdir hello
[root@bogon _data]# ls
hello

[root@bogon _data]# docker attach fd4d63501e40
[root@centos /]# ls /data/
hello
[root@centos /]# cd /data/
[root@centos data]# mkdir shanghai
[root@centos data]# ls
hello shanghai

指定目录：

[root@bogon ~]# docker run -it --name volume-test2 -h centos -v /opt:/opt centos #本地opt：容器opt
[root@centos /]# ls /opt/
centos.yum.bak

2、数据库容器：容器之间共享

[root@bogon ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
becd2c381f3e centos "/bin/bash" 10 minutes ago Up 10 minutes volume-test2
fd4d63501e40 centos "/bin/bash" 42 minutes ago Exited (127) 8 minutes ago volume-test1
66cb3c773f86 nginx "nginx -g 'daemon ..." 2 hours ago Up 2 hours 0.0.0.0:91->80/tcp mynginx2
60ffbffe8f27 nginx "nginx -g 'daemon ..." 2 hours ago Up 2 hours 0.0.0.0:32768->80/tcp mynginx1
4351a4435e22 nginx "nginx -g 'daemon ..." 3 hours ago Up 3 hours 80/tcp nginx
78a40f56544c centos "/bin/bash" 4 hours ago Exited (0) 4 hours ago mydockre1
3ec6e022d3ec centos "/bin/bash" 4 hours ago Up 3 hours mydocker
863c93fc46fb centos "echo 'hello word'" 4 hours ago Exited (0) 4 hours ago unruffled_varahamihira

[root@bogon ~]# docker run -it --name volume-test4 -h centos --volumes-from volume-test1 centos
[root@centos /]# ls /data/
hello shanghai

手动构建docker镜像

[root@bogon ~]# docker run --name centos-man -it centos
[root@c10e6c649a66 /]#
[root@c10e6c649a66 /]# yum install -y wget gcc gcc-c++ make openssl-devel
[root@c10e6c649a66 /]# wget http://nginx.org/download/nginx-1.9.9.tar.gz
[root@c10e6c649a66 /]# wget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.42.tar.gz
[root@c10e6c649a66 /]# useradd -s /sbin/nologin -M www
[root@c10e6c649a66 nginx-1.9.9]# mkdir /usr/local/nginx
[root@c10e6c649a66 nginx-1.9.9]# ./configure --prefix=/usr/local/nginx --user=www --group=www --with-http_ssl_module --with-http_stub_status_module --with-pcre=../pcre-8.42
[root@c10e6c649a66 nginx-1.9.9]# make
[root@c10e6c649a66 nginx-1.9.9]# make install
[root@c10e6c649a66 nginx-1.9.9]# vi /etc/rc.local
#!/bin/bash
# THIS FILE IS ADDED FOR COMPATIBILITY PURPOSES
#
# It is highly advisable to create own systemd services or udev rules
# to run scripts during boot instead of using this file.
#
# In contrast to previous versions due to parallel execution during boot
# this script will NOT be run after all other services.
#
# Please note that you must run 'chmod +x /etc/rc.d/rc.local' to ensure
# that this script will be executed during boot.

touch /var/lock/subsys/local
#/usr/local/nginx/sbin/nginx #这句话不要添加，否则容器启动后就会退出
[root@c10e6c649a66 nginx-1.9.9]# vi /usr/local/nginx/conf/nginx.conf
daemon off; #需要添加这句话，在前台运行
#user nobody;
worker_processes 1;

#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;

#pid logs/nginx.pid;
[root@c10e6c649a66 nginx-1.9.9]# exit
logout
[root@bogon ~]# docker ps -l
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
c10e6c649a66 centos "/bin/bash" 13 hours ago Up About an hour centos-man
[root@bogon ~]# docker commit -m "my nginx" c10e6c649a66 zhuzihao/my-nginx:v1
sha256:dcefc0f1811797422d5d69745e2b92d72c5052026208f3dc658ec951e157eab1
[root@bogon ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
zhuzihao/my-nginx v1 dcefc0f18117 20 seconds ago 393MB
nginx latest 5699ececb21c 4 days ago 109MB
centos latest 49f7960eb7e4 3 weeks ago 200MB
[root@bogon ~]# docker run -d -p 95:80 zhuzihao/my-nginx:v1 /usr/local/nginx/sbin/nginx
ced0276ad948614b4ff5866e7abf5e25185d0b8bbd8c45465df93c0045966d4c
[root@bogon ~]# docker ps -l
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
ced0276ad948 zhuzihao/my-nginx:v1 "/usr/local/nginx/..." 9 seconds ago Up 9 seconds 0.0.0.0:95->80/tcp clever_beaver

Dockerfile构建dicker镜像

[root@bogon ~]# mkdir /opt/docker-file
[root@bogon ~]# cd /opt/docker-file/
[root@bogon docker-file]# mkdir nginx
[root@bogon docker-file]# cd nginx/
[root@bogon nginx]# wget http://nginx.org/download/nginx-1.9.9.tar.gz
[root@bogon nginx]# wget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.42.tar.gz
[root@bogon nginx]# vi Dockerfile #必须大写
#this is my dockerfile
#verion 1.0
#auther zi hao

#Base imags
FROM centos :默认从本地

#MAINTAINER
MAINTAINER zi hao

#ADD
ADD pcre-8.42.tar.gz /usr/local/src
ADD nginx-1.9.9.tar.gz /usr/local/src

#RUN
RUN yum install -y wget gcc gcc-c++ make openssl-devel
RUN useradd -s /sbin/nologin -M www

#WORKDIR
WORKDIR /usr/local/src/nginx-1.9.9
RUN ./configure --prefix=/usr/local/nginx --user=www --group=www --with-http_ssl_module --with-http_stub_status_module --with-pcre=/usr/local/src/pcre-8.42 && make && make install
RUN echo "daemon off;" >> /usr/local/nginx/nginx.conf

ENV PATH /usr/local/ngix/sbin:$PATH
EXPOSE 80
CMD ["nginx"]

[root@bogon nginx]# docker build -t nginx-file:v1 /opt/docker-file/nginx/ #只写docker文件的路径，不用带上dockerfile
[root@bogon nginx]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
nginx-file v1 5def32732043 5 minutes ago 390MB
zhuzihao/my-nginx v1 a743f6bd0741 About an hour ago 393MB
nginx latest 5699ececb21c 4 days ago 109MB
centos latest 49f7960eb7e4 3 weeks ago 200MB

Docker核心原理-资源隔离和限制

[root@bogon ~]# cd /opt/docker-file/
[root@bogon docker-file]# ls
nginx
[root@bogon docker-file]# mkdir stress
[root@bogon docker-file]# cd stress/
[root@bogon stress]# wget http://mirrors.aliyun.com/repo/epel-7.repo
[root@bogon stress]# vi Dockerfile
FROM centos
ADD epel-7.repo /etc/yum.repos.d/
RUN yum install stress && yum clean all
ENTRYPOINT ["stress"]

[root@bogon stress]# docker build -t stress .
[root@bogon stress]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
stress latest 244ae61acc08 7 minutes ago 340MB
nginx-file v1 5def32732043 9 hours ago 390MB
zhuzihao/my-nginx v1 a743f6bd0741 10 hours ago 393MB
nginx latest 5699ececb21c 4 days ago 109MB
centos latest 49f7960eb7e4 3 weeks ago 200MB
registry latest d1fd7d86a825 5 months ago 33.3MB

[root@bogon stress]# docker run -it --rm stress --cpu 1
[root@bogon ~]# top
[root@bogon ~]# docker run -it --rm -m 256m stress --vm 1 --vm-bytes 200m --vm-hang 0
[root@bogon stress]# docker ps -l
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
8932a850dd60 stress "stress --vm 1 --v..." 2 minutes ago Up 2 minutes festive_jennings
[root@bogon stress]# docker exec 8932a850dd60

docker网络和registry

[root@bogon ~]# docker pull registry
[root@bogon ~]# brctl show
bridge name    bridge id    STP enabled    interfaces
docker0    8000.0242f82b6209    no    veth62318cf
vethdbb7907
[root@bogon ~]# iptables -t nat -L -n
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
DOCKER all -- 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
DOCKER all -- 0.0.0.0/0 !127.0.0.0/8 ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- 172.17.0.0/16 0.0.0.0/0

Chain DOCKER (2 references)
target prot opt source destination
RETURN all -- 0.0.0.0/0 0.0.0.0/0
[root@bogon ~]# vi /usr/lib/systemd/system/docker.service
在12行后面增加 --insecure-registry ip：5000
[root@bogon ~]# systemctl daemon-reload
[root@bogon ~]# systemctl restart docker
[root@bogon ~]# docker run -d -p 5000:5000 registry
426f87a37407473caf505c8817903515b86d1032bedc48367a8769a4f11e5355
[root@bogon ~]# docker ps -l
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
426f87a37407 registry "/entrypoint.sh /e..." 7 seconds ago Up 5 seconds 5000/tcp heuristic_swirles
[root@bogon ~]# docker tag nginx 192.168.43.71:5000/test/ng:v1
[root@bogon ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
stress latest 244ae61acc08 About an hour ago 340MB
nginx-file v1 5def32732043 10 hours ago 390MB
zhuzihao/my-nginx v1 a743f6bd0741 11 hours ago 393MB
192.168.43.71:5000/test/ng v1 5699ececb21c 4 days ago 109MB
nginx latest 5699ececb21c 4 days ago 109MB
centos latest 49f7960eb7e4 3 weeks ago 200MB
registry latest d1fd7d86a825 5 months ago 33.3MB
[root@bogon ~]# docker push 192.168.43.71:5000/test/ng:v1

从另一台机子上pull镜像
[root@bogon ~]# docker pull 192.168.43.71:5000/test/ng