- 第一章：容器技术概述
- 1.容器化技术的由来
- 2.容器发展的历史
- 3.Docker的诞生和幕后的公司
- 4.什么是docker？
- 5.使用docker的优势
- 6.docker容器引擎介绍
- 第二章：Docker容器引擎的安装部署
- 1.基础环境检查
- 2.安装epel源
- 3.安装官方docker源
- 4.安装最新版docker并配置
- 5.启动docker
- 6.核查docker配置及启动情况
- 7.启动第一个Docker容器
- 第三章：Docker的镜像管理
- 1.hub.docker.com
- 2.注册一个dockerhub账号
- 3.搜索一个镜像
- 4.下载一个镜像
- 5.查看本地镜像
- 6.给镜像打标签
- 7.推送镜像
- 8.给镜像再打一个标签
- 9.再次推送镜像
- 10.删除镜像
- 11.Docker 镜像新特性
- 第四章：Docker的基本操作
- 1.查看本地的容器进程
- 2.启动容器（运行镜像）
- 3.查看容器
- 4.进入容器
- 5.停止/启动/重启容器
- 6.删除容器
- 7.修改/提交容器
- 8.导出/导入容器
- 9.查看容器日志
- 第五章：Docker的高级操作
- 1.下载nginx镜像
- 2.映射端口
- 3.挂载数据卷
- 4.传递环境变量
- 5.容器内安装软件（工具）
- 6.容器的生命周期
- 第六章：Docker file详解
- 1.dockerfile介绍
- 2.USER/WORKDIR指令
- 3.ADD/EXPOSE指令
- 4.RUN/ENV指令
- 5.CMD/ENTRYPOINT指令
- 5.1 CMD指令
- 5.2 ENTRYPOINT指令
- 第七章：综合实验
- 1.准备Docker镜像
- 2.构建镜像
- 3.运行容器
- 4.验证
- 第八章：Docker的网络模型
- 1.NAT(默认)
- 2.None
- 3.Host
- 4.联合网络*
- 第九篇：快速更改密码
第一章：容器技术概述
1.容器化技术的由来
容器是一种基础工具。泛指任何可以用于容纳其它物品的工具，可以部分或完全封闭，被用于容纳、储存、运输物品。物体可以被放置在容器中，而容器则可以保护内容物。
容器的类型：
瓶、罐、箱、篮、桶、袋、瓮、碗、柜、盆、鞘 …
把系统里的三个服务拆分开，借助容器运行互补干扰
2.容器发展的历史
容器概念始于 1979 年提出的 UNIX chroot，它是一个 UNIX 操作系统的系统调用，将一个进程及其子进程的根目录改变到文件系统中的一个新位置，让这些进程只能访问到这个新的位置，从而达到了进程隔离的目的。
2000 年的时候 FreeBSD 开发了一个类似于 chroot 的容器技术 Jails，这是最早期，也是功能最多的容器技术。Jails 英译过来是监狱的意思，这个“监狱”（用沙盒更为准确）包含了文件系统、用户、网络、进程等的隔离。
2001 Linux 也发布自己的容器技术 Linux VServer，2004 Solaris 也发布了 Solaris Containers，两者都将资源进行划分，形成一个个 zones，又叫做虚拟服务器。
2005 年推出 OpenVZ，它通过对 Linux 内核进行补丁来提供虚拟化的支持，每个 OpenVZ 容器完整支持了文件系统、用户及用户组、进程、网络、设备和 IPC 对象的隔离。
2007 年 Google 实现了 Control Groups( cgroups )，并加入到 Linux 内核中，这是划时代的，为后期容器的资源配额提供了技术保障。
2008 年基于 cgroups 和 linux namespace 推出了第一个最为完善的 Linux 容器 LXC。
2013 年推出到现在为止最为流行和使用最广泛的容器 Docker，相比其他早期的容器技术，Docker 引入了一整套容器管理的生态系统，包括分层的镜像模型，容器注册库，友好的 Rest API。
2014 年 CoreOS 也推出了一个类似于 Docker 的容器 Rocket，CoreOS 一个更加轻量级的 Linux 操作系统，在安全性上比 Docker 更严格。
2016 年微软也在 Windows 上提供了容器的支持，Docker 可以以原生方式运行在 Windows 上，而不是需要使用 Linux 虚拟机。
基本上到这个时间节点，容器技术就已经很成熟了，再往后就是容器云的发展，由此也衍生出多种容器云的平台管理技术，其中以 kubernetes 最为出众，有了这样一些细粒度的容器集群管理技术，也为微服务的发展奠定了基石。因此，对于未来来说，应用的微服务化是一个较大的趋势。
3.Docker的诞生和幕后的公司
2010年，几个大胡子年轻人在旧金山成立了一家做PaaS平台的公司，起名为[dotCloud]，dotCloud主要是基于PaaS平台为开发者或开发商提供技术服务。
Docker于2013.03.27正式作为public项目发布。
DotCloud公司2013年10月改名为Docker Inc，转型专注于Docker引擎和Docker生态系统。
落腮胡，皮夹克和摩托车，是Docker的灵魂人物CTO Solomon Hykeys的标准记号，外形看起来像是推动社会运动的老大。
Docker 容器的思想就是采用集装箱思想，为应用提供了一个基于容器的标准化运输系统。Docker 可以将任何应用及其依赖打包成一个轻量级、可移植、自包含的容器。容器可以运行在几乎所有的操作系统上。这样容器就可以跑在任何环境中，因此才有了那句话：
Build Once, Run Anywhere
4.什么是docker？
Docker是Docker.inc公司开源的一个基于LXC技术之上构建的Container容器引擎，源代码托管在GitHub上，基于Go语言并遵从Apache2.0协议开源（可以商业）。
Docker项目的目标是实现轻量级的操作系统虚拟化解决方案。
Docker是容器引擎，Docker是通过内核虚拟化技术（namespaces及cgroups等）来提供容器的资源隔离与安全保障等。由于Docker通过操作系统层的虚拟化实现隔离，所以Docker容器在运行时，不需要类似虚拟机VM额外的操作系统开销，提高资源利用率。
微软，红帽Linux，IBM，Oracle等主流IT厂商已经在自己的产品里增加了对Docker的支持。
相比其他早期的容器技术，Docker引入了一整套容器管理的生态系统，包括分层的镜像模型，容器注册库，友好Rest API。
下面图比较了Docker和传统虚拟化方式的不同之处，可见容器是在操作系统层面上实现虚拟化，直接复制本地主机的操作系统，而传统方式则是在硬件层面实现。
为了用docker容器模型，应用A和应用B在哪些层面上隔离呢？
5.使用docker的优势
6.docker容器引擎介绍
Docker引擎可以从Docker网站下载，也可以基于Github上的源码进行构建。无论是开源版本还是商业版本，都有Linux和windows版本。
Docker引擎主要有两个版本：企业版（EE）和社区版（CE）。
每个季度，企业版和社区版都会发布一个稳定版本。社区版本会提供4个月的支持，而企业版本会提供12个月的支持。
从2017年第一季度开始，Docker版本号遵循YY.MM-xx格式，类似于Ubuntu等项目。例如，2018年6月第一次发布的社区版为18.06.0-ce。
注：2017年第一季度以前，Docker版本号遵循大版本号.小版本号的格式。采用新格式前的最后一个版本是Docker1.13。
第二章：Docker容器引擎的安装部署
1.基础环境检查
[root@node4 ~]# uname -a
Linux node4.98yz.cn 3.10.0-693.21.1.el7.x86_64 #1 SMP Wed Mar 7 19:03:37 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
[root@node4 ~]# cat /etc/redhat-release
CentOS Linux release 7.4.1708 (Core)
[root@node4 ~]# getenforce
Disabled
[root@node4 ~]# systemctl stop firewalld
[root@node4 ~]# free -m
total used free shared buff/cache available
Mem: 5806 135 5526 8 144 5459
Swap: 1023 0 1023
[root@node4 ~]# ping baidu.com
PING baidu.com (220.181.38.148) 56(84) bytes of data.
64 bytes from 220.181.38.148 (220.181.38.148): icmp_seq=1 ttl=51 time=92.4 ms
64 bytes from 220.181.38.148 (220.181.38.148): icmp_seq=2 ttl=51 time=42.5 ms2.安装epel源
[root@node4 ~]# yum install epel-release -y这里可以看到epel源里也有docker1.13.1
[root@node4 ~]# yum list docker --show-duplicates
Loaded plugins: fastestmirror, langpacks
Loading mirror speeds from cached hostfile
* base: mirrors.aliyun.com
* epel: mirrors.aliyun.com
* extras: mirrors.aliyun.com
* updates: mirrors.aliyun.com
Available Packages
docker.x86_64 2:1.13.1-102.git7f2769b.el7.centos extras
docker.x86_64 2:1.13.1-103.git7f2769b.el7.centos extras3.安装官方docker源
[root@node4 ~]# yum install yum-utils -y
[root@node4 ~]# yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo这里可以看到docker-ce源里的docker镜像了。
[root@node4 ~]# yum list docker-ce --show-duplicates
Loaded plugins: fastestmirror, langpacks
docker-ce-stable | 3.5 kB 00:00:00
(1/2): docker-ce-stable/x86_64/updateinfo | 55 B 00:00:05
(2/2): docker-ce-stable/x86_64/primary_db | 37 kB 00:00:05
Loading mirror speeds from cached hostfile
* base: mirrors.aliyun.com
* epel: mirrors.aliyun.com
* extras: mirrors.aliyun.com
* updates: mirrors.aliyun.com
Available Packages
docker-ce.x86_64 17.03.0.ce-1.el7.centos docker-ce-stable
docker-ce.x86_64 17.03.1.ce-1.el7.centos docker-ce-stable
docker-ce.x86_64 17.03.2.ce-1.el7.centos docker-ce-stable
docker-ce.x86_64 17.03.3.ce-1.el7 docker-ce-stable
docker-ce.x86_64 17.06.0.ce-1.el7.centos docker-ce-stable
docker-ce.x86_64 17.06.1.ce-1.el7.centos docker-ce-stable
docker-ce.x86_64 17.06.2.ce-1.el7.centos docker-ce-stable
docker-ce.x86_64 17.09.0.ce-1.el7.centos docker-ce-stable
docker-ce.x86_64 17.09.1.ce-1.el7.centos docker-ce-stable
docker-ce.x86_64 17.12.0.ce-1.el7.centos docker-ce-stable
docker-ce.x86_64 17.12.1.ce-1.el7.centos docker-ce-stable
docker-ce.x86_64 18.03.0.ce-1.el7.centos docker-ce-stable
docker-ce.x86_64 18.03.1.ce-1.el7.centos docker-ce-stable
docker-ce.x86_64 18.06.0.ce-3.el7 docker-ce-stable
docker-ce.x86_64 18.06.1.ce-3.el7 docker-ce-stable
docker-ce.x86_64 18.06.2.ce-3.el7 docker-ce-stable
docker-ce.x86_64 18.06.3.ce-3.el7 docker-ce-stable
docker-ce.x86_64 3:18.09.0-3.el7 docker-ce-stable
docker-ce.x86_64 3:18.09.1-3.el7 docker-ce-stable
docker-ce.x86_64 3:18.09.2-3.el7 docker-ce-stable
docker-ce.x86_64 3:18.09.3-3.el7 docker-ce-stable
docker-ce.x86_64 3:18.09.4-3.el7 docker-ce-stable
docker-ce.x86_64 3:18.09.5-3.el7 docker-ce-stable
docker-ce.x86_64 3:18.09.6-3.el7 docker-ce-stable
docker-ce.x86_64 3:18.09.7-3.el7 docker-ce-stable
docker-ce.x86_64 3:18.09.8-3.el7 docker-ce-stable
docker-ce.x86_64 3:18.09.9-3.el7 docker-ce-stable
docker-ce.x86_64 3:19.03.0-3.el7 docker-ce-stable
docker-ce.x86_64 3:19.03.1-3.el7 docker-ce-stable
docker-ce.x86_64 3:19.03.2-3.el7 docker-ce-stable
docker-ce.x86_64 3:19.03.3-3.el7 docker-ce-stable
docker-ce.x86_64 3:19.03.4-3.el7 docker-ce-stable4.安装最新版docker并配置
[root@node4 ~]# yum install docker-ce -y
[root@node4 ~]# mkdir /etc/docker
[root@node4 ~]# cd /etc/docker/
[root@node4 docker]# vi /etc/docker/daemon.json
[root@node4 docker]# cat /etc/docker/daemon.json
{
"graph": "/data/docker", # docker工作目录
"storage-driver": "overlay2", # 存储驱动
"insecure-registries": ["registry.access.redhat.com","quay.io"], # 不安全的仓库
"registry-mirrors": ["https://q2gr04ke.mirror.aliyuncs.com"], # 加速镜像
"bip": "172.6.244.1/24", # docker的网络,尽量要与宿主机有个对照关系
"exec-opts": ["native.cgroupdriver=systemd"], # cgroup的类型
"live-restore": true # 让docker容器不依懒docker引擎的死与活
}
5.启动docker
[root@node4 docker]# systemctl enable docker.service
[root@node4 docker]# systemctl start docker.service
[root@node4 ~]# docker version
Client: Docker Engine - Community
Version: 19.03.4
API version: 1.40
Go version: go1.12.10
Git commit: 9013bf583a
Built: Fri Oct 18 15:52:22 2019
OS/Arch: linux/amd64
Experimental: false
Server: Docker Engine - Community
Engine:
Version: 19.03.4
API version: 1.40 (minimum version 1.12)
Go version: go1.12.10
Git commit: 9013bf583a
Built: Fri Oct 18 15:50:54 2019
OS/Arch: linux/amd64
Experimental: false
containerd:
Version: 1.2.10
GitCommit: b34a5c8af56e510852c35414db4c1f4fa6172339
runc:
Version: 1.0.0-rc8+dev
GitCommit: 3e425f80a8c931f88e6d94a8c831b9d5aa481657
docker-init:
Version: 0.18.0
GitCommit: fec36836.核查docker配置及启动情况
[root@node4 ~]# docker info
Client:
Debug Mode: false
Server:
Containers: 0
Running: 0
Paused: 0
Stopped: 0
Images: 0
Server Version: 19.03.4
Storage Driver: overlay2
Backing Filesystem: xfs
Supports d_type: true
Native Overlay Diff: true
Logging Driver: json-file
Cgroup Driver: systemd
Plugins:
Volume: local
Network: bridge host ipvlan macvlan null overlay
Log: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslog
Swarm: inactive
Runtimes: runc
Default Runtime: runc
Init Binary: docker-init
containerd version: b34a5c8af56e510852c35414db4c1f4fa6172339
runc version: 3e425f80a8c931f88e6d94a8c831b9d5aa481657
init version: fec3683
Security Options:
seccomp
Profile: default
Kernel Version: 3.10.0-693.21.1.el7.x86_64
Operating System: CentOS Linux 7 (Core)
OSType: linux
Architecture: x86_64
CPUs: 4
Total Memory: 5.671GiB
Name: node4.98yz.cn
ID: BSY4:7UBM:AA4T:OYVU:CRVZ:H5V3:L5X2:KJD4:2PHI:H74W:33N4:23KB
Docker Root Dir: /data/docker
Debug Mode: false
Registry: https://index.docker.io/v1/
Labels:
Experimental: false
Insecure Registries:
quay.io
registry.access.redhat.com
127.0.0.0/8
Registry Mirrors:
https://q2gr04ke.mirror.aliyuncs.com/
Live Restore Enabled: true7.启动第一个Docker容器
[root@node4 ~]# docker run hello-world
Unable to find image 'hello-world:latest' locally
latest: Pulling from library/hello-world
1b930d010525: Pull complete
Digest: sha256:c3b4ada4687bbaa170745b3e4dd8ac3f194ca95b2d0518b417fb47e5879d9b5f
Status: Downloaded newer image for hello-world:latest
Hello from Docker!
This message shows that your installation appears to be working correctly.
To generate this message, Docker took the following steps:
1. The Docker client contacted the Docker daemon.
2. The Docker daemon pulled the "hello-world" image from the Docker Hub.
(amd64)
3. The Docker daemon created a new container from that image which runs the
executable that produces the output you are currently reading.
4. The Docker daemon streamed that output to the Docker client, which sent it
to your terminal.
To try something more ambitious, you can run an Ubuntu container with:
$ docker run -it ubuntu bash
Share images, automate workflows, and more with a free Docker ID:
https://hub.docker.com/
For more examples and ideas, visit:
https://docs.docker.com/get-started/第三章：Docker的镜像管理
1.hub.docker.com
2.注册一个dockerhub账号
登录hub.docker.com
[root@node4 ~]# docker login docker.io
Login with your Docker ID to push and pull images from Docker Hub. If you don't have a Docker ID, head over to https://hub.docker.com to create one.
Username: sunrisenan
Password:
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store
Login Succeeded密码存在位置，用base64可以解码：
[root@node4 ~]# cat /root/.docker/config.json
{
"auths": {
"https://index.docker.io/v1/": {
"auth": "c3VucmlzZW5hbjpseXo1MjAx="
}
},
"HttpHeaders": {
"User-Agent": "Docker-Client/19.03.4 (linux)"
}
}[root@node4 ~]# echo "c3VucmlzZW5hbjpseXo1MjAx="|base64 -d
sunrisenan:1233.搜索一个镜像
- 命令行搜索
[root@node4 ~]# docker search alpine
NAME DESCRIPTION STARS OFFICIAL AUTOMATED
alpine A minimal Docker image based on Alpine Linux… 5795 [OK]
mhart/alpine-node Minimal Node.js built on Alpine Linux 444
anapsix/alpine-java Oracle Java 8 (and 7) with GLIBC 2.28 over A… 428 [OK]
frolvlad/alpine-glibc Alpine Docker image with glibc (~12MB) 218 [OK]
gliderlabs/alpine Image based on Alpine Linux will help you wi… 180
mvertes/alpine-mongo light MongoDB container 106 [OK]
alpine/git A simple git container running in alpine li… 100 [OK]
yobasystems/alpine-mariadb MariaDB running on Alpine Linux [docker] [am… 52 [OK]
kiasaki/alpine-postgres PostgreSQL docker image based on Alpine Linux 45 [OK]
alpine/socat Run socat command in alpine container 39 [OK]
davidcaste/alpine-tomcat Apache Tomcat 7/8 using Oracle Java 7/8 with… 37 [OK]
zzrot/alpine-caddy Caddy Server Docker Container running on Alp… 35 [OK]
easypi/alpine-arm AlpineLinux for RaspberryPi 32
jfloff/alpine-python A small, more complete, Python Docker image … 28 [OK]
byrnedo/alpine-curl Alpine linux with curl installed and set as … 27 [OK]
hermsi/alpine-sshd Dockerize your OpenSSH-server with rsync and… 26 [OK]
etopian/alpine-php-wordpress Alpine WordPress Nginx PHP-FPM WP-CLI 22 [OK]
hermsi/alpine-fpm-php Dockerize your FPM PHP 7.4 upon a lightweigh… 21 [OK]
bashell/alpine-bash Alpine Linux with /bin/bash as a default she… 14 [OK]
zenika/alpine-chrome Chrome running in headless mode in a tiny Al… 14 [OK]
davidcaste/alpine-java-unlimited-jce Oracle Java 8 (and 7) with GLIBC 2.21 over A… 13 [OK]
tenstartups/alpine Alpine linux base docker image with useful p… 9 [OK]
spotify/alpine Alpine image with `bash` and `curl`. 9 [OK]
roribio16/alpine-sqs Dockerized ElasticMQ server + web UI over Al… 7 [OK]
rawmind/alpine-traefik This image is the traefik base. It comes fro… 5 [OK]- 在网站上搜索
4.下载一个镜像
- 直接下载
[root@node4 ~]# docker pull alpine
Using default tag: latest
latest: Pulling from library/alpine
89d9c30c1d48: Pull complete
Digest: sha256:c19173c5ada610a5989151111163d28a67368362762534d8a8121ce95cf2bd5a
Status: Downloaded newer image for alpine:latest
docker.io/library/alpine:latest- 下载指定tag
[root@node4 ~]# docker pull alpine:3.10.1
3.10.1: Pulling from library/alpine
050382585609: Pull complete
Digest: sha256:6a92cd1fcdc8d8cdec60f33dda4db2cb1fcdcacf3410a8e05b3741f44a9b5998
Status: Downloaded newer image for alpine:3.10.1
docker.io/library/alpine:3.10.1镜像的结构：registry_name/repository_name/image_name:tag_name
例如：docker.io/library/alpine:3.10.1
5.查看本地镜像
[root@node4 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
alpine latest 965ea09ff2eb 2 weeks ago 5.55MB
alpine 3.10.1 b7b28af77ffe 3 months ago 5.58MB
hello-world latest fce289e99eb9 10 months ago 1.84kB
[root@node4 ~]# docker image ls
REPOSITORY TAG IMAGE ID CREATED SIZE
alpine latest 965ea09ff2eb 2 weeks ago 5.55MB
alpine 3.10.1 b7b28af77ffe 3 months ago 5.58MB
hello-world latest fce289e99eb9 10 months ago 1.84kB6.给镜像打标签
[root@node4 ~]# docker tag b7b28af77ffe sunrisenan/alpine:3.10.1
[root@node4 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
alpine latest 965ea09ff2eb 2 weeks ago 5.55MB
alpine 3.10.1 b7b28af77ffe 3 months ago 5.58MB
sunrisenan/alpine 3.10.1 b7b28af77ffe 3 months ago 5.58MB
hello-world latest fce289e99eb9 10 months ago 1.84kB7.推送镜像
[root@node4 ~]# docker push sunrisenan/alpine:3.10.1
The push refers to repository [docker.io/sunrisenan/alpine]
1bfeebd65323: Mounted from library/alpine
3.10.1: digest: sha256:57334c50959f26ce1ee025d08f136c2292c128f84e7b229d1b0da5dac89e9866 size: 5288.给镜像再打一个标签
[root@node4 ~]# docker tag 965ea09ff2eb docker.io/sunrisenan/alpine:3.10.3
[root@node4 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
alpine latest 965ea09ff2eb 2 weeks ago 5.55MB
sunrisenan/alpine 3.10.3 965ea09ff2eb 2 weeks ago 5.55MB
alpine 3.10.1 b7b28af77ffe 3 months ago 5.58MB
sunrisenan/alpine 3.10.1 b7b28af77ffe 3 months ago 5.58MB
hello-world latest fce289e99eb9 10 months ago 1.84kB9.再次推送镜像
[root@node4 ~]# docker push docker.io/sunrisenan/alpine:3.10.3
The push refers to repository [docker.io/sunrisenan/alpine]
77cae8ab23bf: Mounted from library/alpine
3.10.3: digest: sha256:e4355b66995c96b4b468159fc5c7e3540fcef961189ca13fee877798649f531a size: 52810.删除镜像
- 删除镜像标签
[root@node4 ~]# docker rmi sunrisenan/alpine:3.10.1
Untagged: sunrisenan/alpine:3.10.1
Untagged: sunrisenan/alpine@sha256:57334c50959f26ce1ee025d08f136c2292c128f84e7b229d1b0da5dac89e9866
[root@node4 ~]# docker images | grep alpine
alpine latest 965ea09ff2eb 2 weeks ago 5.55MB
sunrisenan/alpine 3.10.3 965ea09ff2eb 2 weeks ago 5.55MB
alpine 3.10.1 b7b28af77ffe 3 months ago 5.58MB- 删除镜像
[root@node4 ~]# docker rmi b7b28af77ffe
Untagged: alpine:3.10.1
Untagged: alpine@sha256:6a92cd1fcdc8d8cdec60f33dda4db2cb1fcdcacf3410a8e05b3741f44a9b5998
Deleted: sha256:b7b28af77ffec6054d13378df4fdf02725830086c7444d9c278af25312aa39b9
Deleted: sha256:1bfeebd65323b8ddf5bd6a51cc7097b72788bc982e9ab3280d53d3c613adffa7- 删除镜像标签及镜像
[root@node4 ~]# docker images | grep alpine
alpine latest 965ea09ff2eb 2 weeks ago 5.55MB
sunrisenan/alpine 3.10.3 965ea09ff2eb 2 weeks ago 5.55MB
[root@node4 ~]# docker rmi -f 965ea09ff2eb # -f 强制删除（包括标签及镜像）
Untagged: alpine:latest
Untagged: alpine@sha256:c19173c5ada610a5989151111163d28a67368362762534d8a8121ce95cf2bd5a
Untagged: sunrisenan/alpine:3.10.3
Untagged: sunrisenan/alpine@sha256:e4355b66995c96b4b468159fc5c7e3540fcef961189ca13fee877798649f531a
Deleted: sha256:965ea09ff2ebd2b9eeec88cd822ce156f6674c7e99be082c7efac3c62f3ff652
Deleted: sha256:77cae8ab23bf486355d1b3191259705374f4a11d483b24964d2f729dd8c076a0
[root@node4 ~]# docker images | grep alpine
[root@node4 ~]# 11.Docker 镜像新特性
第四章：Docker的基本操作
1.查看本地的容器进程
[root@node4 ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
e63ab3e10bd6 hello-world "/hello" 2 hours ago Exited (0) 2 hours ago epic_bohr2.启动容器（运行镜像）
docker run是日常用的最频繁的命令之一，同样也是较为复杂的命令之一
命令格式：docker run [OPTIONS] IMAGE [COMMAND] [ARG..]
OPTIONS:选项
-i：表示启动一个可交互的容器，并持续打开标准输入
-t:表示使用终端关联到容器的标准输入输出上
-d：表示将容器放置后台运行
--rm：退出后即删除容器
--name：表示定义容器的唯一名称
IMAGE：表示要运行的镜像
COMMAND：表示启动容器时要运行的命令交互式启动一个容器
[root@node4 ~]# docker run -ti sunrisenan/alpine:3.10.3 /bin/sh
Unable to find image 'sunrisenan/alpine:3.10.3' locally
3.10.3: Pulling from sunrisenan/alpine
89d9c30c1d48: Pull complete
Digest: sha256:e4355b66995c96b4b468159fc5c7e3540fcef961189ca13fee877798649f531a
Status: Downloaded newer image for sunrisenan/alpine:3.10.3
/ # cat /etc/issue
Welcome to Alpine Linux 3.10
Kernel \r on an \m (\l)非交互是启动一个容器
[root@node4 ~]# docker run --rm sunrisenan/alpine:3.10.3 /bin/echo hello
hello非交互式启动一个后台容器
[root@node4 ~]# docker run -d --name myalpine sunrisenan/alpine:3.10.3 /bin/sleep 300
3d015bfe776af7c14d8acbfecb6a09d2573a8e332d73a67030e4d3f651c03d2a3.查看容器
查看运行中的容器
[root@node4 ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
3d015bfe776a sunrisenan/alpine:3.10.3 "/bin/sleep 300" 4 minutes ago Up 4 minutes myalpine查看所有容器
[root@node4 ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
7ecf398c77e4 hello-world "/hello" 6 seconds ago Exited (0) 5 seconds ago funny_wright
c44608564744 sunrisenan/alpine:3.10.3 "/bin/sleep 300" About a minute ago Up About a minute myalpine查看宿主机进程
[root@node4 ~]# ps -aux|grep sleep|grep -v grep
root 6226 0.0 0.0 1540 248 ? Ss 16:39 0:00 /bin/sleep 3004.进入容器
[root@node4 ~]# docker exec -it myalpine /bin/sh
/ # ps aux
PID USER TIME COMMAND
1 root 0:00 /bin/sleep 300
7 root 0:00 /bin/sh
12 root 0:00 ps aux
/ # exit # 退出容器docker attach 不推荐使用
5.停止/启动/重启容器
停止容器
[root@node4 ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
2d60b6eac204 sunrisenan/alpine:3.10.3 "/bin/sleep 300" 3 minutes ago Up 3 minutes
myalpine
[root@node4 ~]# docker stop myalpine
myalpine
[root@node4 ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
2d60b6eac204 sunrisenan/alpine:3.10.3 "/bin/sleep 300" 4 minutes ago Exited (137) 11 seconds ago myalpine启动容器
[root@node4 ~]# docker start myalpine
myalpine
[root@node4 ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
2d60b6eac204 sunrisenan/alpine:3.10.3 "/bin/sleep 300" 7 minutes ago Up 8 seconds myalpine重启容器
[root@node4 ~]# docker restart myalpine
myalpine
[root@node4 ~]# docker ps -a|grep myalpine
2d60b6eac204 sunrisenan/alpine:3.10.3 "/bin/sleep 300" 9 minutes ago Up 28 seconds myalpine6.删除容器
[root@node4 ~]# docker rm myalpine
Error response from daemon: You cannot remove a running container db3335af09774651f55715b1da66ba930060b488ebdc7c4dc4ce67ce933dfc8e. Stop the container before attempting removal or force remove
[root@node4 ~]# docker rm -f myalpine
myalpine如果没有停止的容器，需要用docker rm -f 进行强制删除
删除已停止的容器
[root@node4 ~]# for i in `docker ps -a|grep -i exit|awk '{print $1}'`;do docker rm -f $i;done删除所有的容器
[root@node4 ~]# for i in `docker ps -qa`;do docker rm -f $i;done7.修改/提交容器
修改容器
[root@node4 ~]# docker run -d --name myalpine sunrisenan/alpine:3.10.3 /bin/sleep 300
279bf6153576afcc8ca902d8c93282ec138b08704beb1f11f81fa106e0e2ad68
[root@node4 ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
279bf6153576 sunrisenan/alpine:3.10.3 "/bin/sleep 300" 13 seconds ago Up 11 seconds myalpine
[root@node4 ~]# docker exec -it 279bf6153576 /bin/sh
/ # pwd
/
/ # echo Hello > 1.txt
/ # ls
1.txt bin dev etc home lib media mnt opt proc root run sbin srv sys tmp usr var
/ # exit
提交容器
[root@node4 ~]# docker commit -p 279bf6153576 sunrisenan/alpine:3.10.3_with_1.txt
sha256:5a766219fd567129bbc12f3e1293b782c35d7213ed5b54d8522e69a9f11c28b9-p 不让其他的内容再写进来了
检验
[root@node4 ~]# docker run --rm sunrisenan/alpine:3.10.3_with_1.txt /bin/cat /1.txt
Hello也可以使用docker export 279bf6153576 >myalpine_with_1.txt.tar
8.导出/导入容器
导出镜像
[root@node4 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
sunrisenan/alpine 3.10.3_with_1.txt 5a766219fd56 7 minutes ago 5.55MB
sunrisenan/alpine 3.10.3 965ea09ff2eb 2 weeks ago 5.55MB
sunrisenan/alpine 3.10.1 b7b28af77ffe 3 months ago 5.58MB
hello-world latest fce289e99eb9 10 months ago 1.84kB
[root@node4 ~]# docker save 5a766219fd56 > alpine_with_1.txt.tar
[root@node4 ~]# ls
alpine_with_1.txt.tar anaconda-ks.cfg导出的时候尽量加上版本号
导入镜像
[root@node4 ~]# docker rmi -f 5a766219fd56
Untagged: sunrisenan/alpine:3.10.3_with_1.txt
Deleted: sha256:5a766219fd567129bbc12f3e1293b782c35d7213ed5b54d8522e69a9f11c28b9
Deleted: sha256:34e6c5bebdd97e107ec3de8fb873b6f8bdd68fd593b511a737d41e62f80f58a8
[root@node4 ~]# docker load < ./alpine_with_1.txt.tar
a87bd13a8b89: Loading layer [==================================================>] 3.584kB/3.584kB
Loaded image ID: sha256:5a766219fd567129bbc12f3e1293b782c35d7213ed5b54d8522e69a9f11c28b9
[root@node4 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
<none> <none> 5a766219fd56 10 minutes ago 5.55MB
sunrisenan/alpine 3.10.3 965ea09ff2eb 2 weeks ago 5.55MB
sunrisenan/alpine 3.10.1 b7b28af77ffe 3 months ago 5.58MB
hello-world latest fce289e99eb9 10 months ago 1.84kB
[root@node4 ~]# docker tag 5a766219fd56 sunrisenan/alpine:v3.10.3_with_1.txt
[root@node4 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
sunrisenan/alpine v3.10.3_with_1.txt 5a766219fd56 12 minutes ago 5.55MB
sunrisenan/alpine 3.10.3 965ea09ff2eb 2 weeks ago 5.55MB
sunrisenan/alpine 3.10.1 b7b28af77ffe 3 months ago 5.58MB
hello-world latest fce289e99eb9 10 months ago 1.84kB检验镜像
[root@node4 ~]# docker run --rm -it --name myalpine_with_1.txt sunrisenan/alpine:v3.10.3_with_1.txt /bin/cat /1.txt
Hello9.查看容器日志
[root@node4 ~]# docker run hello-world 2>&1 >>/dev/null
[root@node4 ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
2c71417a3b27 hello-world "/hello" 16 seconds ago Exited (0) 15 seconds ago goofy_goldstine
[root@node4 ~]# docker logs 2c71417a3b27
Hello from Docker!
This message shows that your installation appears to be working correctly.
To generate this message, Docker took the following steps:
1. The Docker client contacted the Docker daemon.
2. The Docker daemon pulled the "hello-world" image from the Docker Hub.
(amd64)
3. The Docker daemon created a new container from that image which runs the
executable that produces the output you are currently reading.
4. The Docker daemon streamed that output to the Docker client, which sent it
to your terminal.
To try something more ambitious, you can run an Ubuntu container with:
$ docker run -it ubuntu bash
Share images, automate workflows, and more with a free Docker ID:
https://hub.docker.com/
For more examples and ideas, visit:
https://docs.docker.com/get-started/docker logs -f 2c71417a3b27 (-f 可以看实时日志)
第五章：Docker的高级操作
1.下载nginx镜像
[root@node4 ~]# docker pull nginx:1.12.2
1.12.2: Pulling from library/nginx
f2aa67a397c4: Pull complete
e3eaf3d87fe0: Pull complete
38cb13c1e4c9: Pull complete
Digest: sha256:72daaf46f11cc753c4eab981cbf869919bd1fee3d2170a2adeac12400f494728
Status: Downloaded newer image for nginx:1.12.2
docker.io/library/nginx:1.12.2
[root@node4 ~]# docker images | grep nginx
nginx 1.12.2 4037a5562b03 18 months ago 108MB
[root@node4 ~]# docker tag 4037a5562b03 sunrisenan/nginx:v1.12.2
[root@node4 ~]# docker images | grep nginx
nginx 1.12.2 4037a5562b03 18 months ago 108MB
sunrisenan/nginx v1.12.2 4037a5562b03 18 months ago 108MB2.映射端口
- docker run -p 容器外的端口：容器内的端口
[root@node4 ~]# docker run -d -p81:80 sunrisenan/nginx:v1.12.2
19a8f420ac6fdc8c1a8d6a293dc49313134efaa63592a5d5d2b6272caf5ce1e8
[root@node4 ~]# netstat -lntup|grep 81
tcp6 0 0 :::81 :::* LISTEN 9313/docker-proxy
[root@node4 ~]# curl 127.0.0.1:81
<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
body {
width: 35em;
margin: 0 auto;
font-family: Tahoma, Verdana, Arial, sans-serif;
}
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>
<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>
<p><em>Thank you for using nginx.</em></p>
</body>
</html>3.挂载数据卷
- docker run -v 容器外的目录：容器内的目录
[root@node4 ~]# mkdir html
[root@node4 ~]# cd html/
[root@node4 html]# wget www.baidu.com -O index.html
--2019-11-06 18:12:06-- http://www.baidu.com/
Resolving www.baidu.com (www.baidu.com)... 180.101.49.12, 180.101.49.11
Connecting to www.baidu.com (www.baidu.com)|180.101.49.12|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2381 (2.3K) [text/html]
Saving to: ‘index.html’
100%[===========================================================================================>] 2,381 --.-K/s in 0s
2019-11-06 18:12:11 (186 MB/s) - ‘index.html’ saved [2381/2381]
[root@node4 html]# docker run -d -p82:80 -v /root/html:/usr/share/nginx/html sunrisenan/nginx:v1.12.2
d44ce0d1bb4e42773dda95825cbc1a1989a38b704d0a133487f0adc054fbc88f
[root@node4 html]# docker ps -a | grep nginx
d44ce0d1bb4e sunrisenan/nginx:v1.12.2 "nginx -g 'daemon of…" 24 seconds ago Up 23 seconds 0.0.0.0:82->80/tcp elated_williams
a5393a15159b sunrisenan/nginx:v1.12.2 "nginx -g 'daemon of…" 4 minutes ago Up 4 minutes 0.0.0.0:81->80/tcp optimistic_rubin
查看挂载：
[root@node4 ~]# docker inspect d44ce0d1bb4e
...
"Mounts": [
{
"Type": "bind",
"Source": "/root/html",
"Destination": "/usr/share/nginx/html",
"Mode": "",
"RW": true,
"Propagation": "rprivate"
}
...4.传递环境变量
- docker run -e 环境变量key：环境变量value
传递一个环境标量
[root@node4 ~]# docker run --rm -e E_OPTS=abcdefg sunrisenan/nginx:v1.12.2 printenv
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
HOSTNAME=3011a2978c7c
E_OPTS=abcdefg
NGINX_VERSION=1.12.2-1~stretch
NJS_VERSION=1.12.2.0.1.14-1~stretch
HOME=/root传递两个环境标量
[root@node4 ~]# docker run --rm -e E_OPTS=abcdefg -e G_OPES=123@PASS sunrisenan/nginx:v1.12.2 printenv
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
HOSTNAME=1bbb50ae0017
G_OPES=123@PASS
E_OPTS=abcdefg
NGINX_VERSION=1.12.2-1~stretch
NJS_VERSION=1.12.2.0.1.14-1~stretch
HOME=/root5.容器内安装软件（工具）
- yum/apt-get/apt等
[root@node4 ~]# docker run --rm -it sunrisenan/nginx:v1.12.2 bash
root@626e6ba6a358:/# curl
bash: curl: command not found
root@626e6ba6a358:/# tee /etc/apt/sources.list << EOF
> deb http://mirrors.163.com/debian/ jessie main non-free contrib
> deb http://mirrors.163.com/debian/ jessie-updates main non-free contrib
> EOF
deb http://mirrors.163.com/debian/ jessie main non-free contrib
deb http://mirrors.163.com/debian/ jessie-updates main non-free contrib
root@626e6ba6a358:/# apt-get update && apt-get install curl -y提交容器并推送至dockerhub，这个景象还有用！
镜像固化并推送到镜像仓库
[root@node4 ~]# docker commit -p 626e6ba6a358 sunrisenan/nginx:curl
sha256:6ea518f9d8f6da45c14b9aa83043a62b7d0f639ceb821d718db545eea30f8693
[root@node4 ~]# docker images | grep curl
sunrisenan/nginx curl 6ea518f9d8f6 About a minute ago 136MB
[root@node4 ~]# docker push sunrisenan/nginx:curl
The push refers to repository [docker.io/sunrisenan/nginx]
b7f991e1e7fd: Pushed
4258832b2570: Mounted from library/nginx
683a28d1d7fd: Mounted from library/nginx
d626a8ad97a1: Mounted from library/nginx
curl: digest: sha256:03d6586ea5dcb82233f028340d85b96e7534aa3878180847729f1bd44c8384e6 size: 11606.容器的生命周期
- 检查本地是否存在镜像，如果不存在即从远端仓库检索
- 利用镜像启动容器
- 分配一个文件系统，并在只读的镜像层外挂载一层可读写层
- 从宿主机配置的网桥接口中桥接一个虚拟接口到容器
- 从地址池配置一个ip地址给容器
- 执行用户指定的指令
- 执行完毕后容器终止
第六章：Docker file详解
1.dockerfile介绍
构建镜像的两种方式：
Dockerfile
- Dockerfile是一个文本文件，文件名：Dockerfile
- 所有Dockerfile都是由FROM指令开始的
- 构建命令：docker build . -t [registry]/[repositort]:[tag]
2.USER/WORKDIR指令
- Dockerfile
vi /data/dockerfile/Dockerfile
FROM sunrisenan/nginx:v1.12.2
USER nginx
WORKDIR /usr/share/nginx/html- 构建镜像
[root@node4 dockerfile]# docker build . -t sunrisenan/nginx:v1.12.2_with_user_workdir
Sending build context to Docker daemon 2.048kB
Step 1/3 : FROM sunrisenan/nginx:v1.12.2
---> 4037a5562b03
Step 2/3 : USER nginx
---> Running in ed1dad767416
Removing intermediate container ed1dad767416
---> 2e96a40b4b85
Step 3/3 : WORKDIR /usr/share/nginx/html
---> Running in 35613b2afbe0
Removing intermediate container 35613b2afbe0
---> 20a3068e906c
Successfully built 20a3068e906c
Successfully tagged sunrisenan/nginx:v1.12.2_with_user_workdir- 验证
[root@node4 dockerfile]# docker run --rm -it --name nginx123 20a3068e906c /bin/bash
nginx@114eb12feb40:/usr/share/nginx/html$ whoami
nginx
nginx@114eb12feb40:/usr/share/nginx/html$ pwd
/usr/share/nginx/html3.ADD/EXPOSE指令
- Dockerfile
wget -O /data/dockerfile/index.html www.baidu.com
vi /data/dockerfile/Dockerfile
FROM sunrisenan/nginx:v1.12.2
ADD index.html /usr/share/nginx/html/index.html
EXPOSE 80- 构建镜像
[root@node4 dockerfile]# docker build . -t sunrisenan/nginx:v1.12.2_with_index_expose
Sending build context to Docker daemon 5.12kB
Step 1/3 : FROM sunrisenan/nginx:v1.12.2
---> 4037a5562b03
Step 2/3 : ADD index.html /usr/share/nginx/html/index.html
---> 6e35f2fd8a8c
Step 3/3 : EXPOSE 80
---> Running in d5f714442b32
Removing intermediate container d5f714442b32
---> 643ede2cc9e0
Successfully built 643ede2cc9e0
Successfully tagged sunrisenan/nginx:v1.12.2_with_index_expose- 验证1
[root@node4 dockerfile]# docker run -P --rm -it --name nginx123 sunrisenan/nginx:v1.12.2_with_index_expose /bin/bash
root@f5b5689c3442:/# nginx -g "daemon off;"
[root@node4 dockerfile]# netstat -lntup|grep docker-proxy
tcp6 0 0 :::81 :::* LISTEN 10609/docker-proxy
tcp6 0 0 :::82 :::* LISTEN 10806/docker-proxy
tcp6 0 0 :::4000 :::* LISTEN 22183/docker-proxy -P随机暴露一个端口
- 验证2
[root@node4 dockerfile]# docker run -P -d --rm --name nginx123 sunrisenan/nginx:v1.12.2_with_index_expose
54007722a39f28c7c7ede6125fbb3f51c76bcdb7004d7635d1f37385573cb70a
[root@node4 dockerfile]# netstat -lntup|grep docker
tcp6 0 0 :::81 :::* LISTEN 10609/docker-proxy
tcp6 0 0 :::82 :::* LISTEN 10806/docker-proxy
tcp6 0 0 :::4001 :::* LISTEN 22324/docker-proxy EXPOSE 80 写不写都行,都能用-p 都能映射出来
4.RUN/ENV指令
- Dockerfile
vi /data/dockerfile/Dockerfile
FROM centos:7
ENV VER 9.11.4
RUN yum install bind-$VER -yENV VER 空格 什么，或VER= 什么,ENV可以在构建镜像里面用，同时也可以在系统里面用
RUN 在构建镜像的时候执行一些可执行命令
- 构建镜像
[root@node4 dockerfile]# docker build . -t sunrisenan/bind:v9.11.4_with_env_run
Sending build context to Docker daemon 5.12kB
Step 1/3 : FROM centos:7
7: Pulling from library/centos
d8d02d457314: Already exists
Digest: sha256:307835c385f656ec2e2fec602cf093224173c51119bbebd602c53c3653a3d6eb
Status: Downloaded newer image for centos:7
---> 67fa590cfc1c
Step 2/3 : ENV VER 9.11.4
---> Running in 5a554643a9d0
Removing intermediate container 5a554643a9d0
---> 41bb82f39287
Step 3/3 : RUN yum install bind-$VER -y
---> Running in c80fa75b61af
Loaded plugins: fastestmirror, ovl
Determining fastest mirrors
* base: ftp.sjtu.edu.cn
* extras: mirrors.aliyun.com
* updates: mirrors.aliyun.com
Resolving Dependencies
--> Running transaction check
---> Package bind.x86_64 32:9.11.4-9.P2.el7 will be installed
.....
---> c6f46e66d43d
Successfully built c6f46e66d43d
Successfully tagged sunrisenan/bind:v9.11.4_with_env_run- 运行容器
[root@node4 dockerfile]# docker run --rm sunrisenan/bind:v9.11.4_with_env_run rpm -qa bind
bind-9.11.4-9.P2.el7.x86_64
[root@node4 dockerfile]# docker run --rm sunrisenan/bind:v9.11.4_with_env_run printenv
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
HOSTNAME=d71390b7a05c
VER=9.11.4
HOME=/root5.CMD/ENTRYPOINT指令
CMD指令和ENTRYPOINT指令作用相同，使用方法略有不同
5.1 CMD指令
- Dockerfile
vi /data/dockerfile/Dockerfile
FROM centos:7
RUN yum install httpd -y
CMD ["httpd","-D","FOREGROUND"] # 让其前台运行- 构建镜像
[root@node4 dockerfile]# docker build . -t sunrisenan/httpd:test- 运行容器
[root@node4 dockerfile]# docker run -d --rm --name myhttpd -p83:80 sunrisenan/httpd:test
9d8153320901e7ebf609eecacea5c4ce371ecabd31a0ec287ab27791cb25288d
[root@node4 dockerfile]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
9d8153320901 sunrisenan/httpd:test "httpd -D FOREGROUND" 33 seconds ago Up 32 seconds 0.0.0.0:83->80/tcp myhttpd
5.2 ENTRYPOINT指令
- Dockerfile
vi /data/dockerfile/Dockerfile
FROM centos:7
ADD entrypoint.sh /entrypoint.sh
RUN yum install epel-release -q -y && yum install nginx -y
ENTRYPOINT /entrypoint.sh- entrypoint.sh
vi /data/dockerfile/entrypoint.sh
#!/bin/bash
/sbin/nginx -g "daemon off;"注意：entrypoint.sh不要忘了给执行权限！
- 构建镜像
[root@node4 dockerfile]# docker build . -t sunrisenan/nginx:mynginx- 运行镜像
[root@node4 dockerfile]# docker run -d --rm -p84:80 sunrisenan/nginx:mynginx
c9b6f81b177022fe45d1eb14b6e20c02cf1a0307b648b35cc964f4c094512564
[root@node4 dockerfile]# docker ps | grep mynginx
c9b6f81b1770 sunrisenan/nginx:mynginx "/bin/sh -c /entrypo…" 36 seconds ago Up 34 seconds 0.0.0.0:84->80/tcp sweet_williams
第七章：综合实验
运行一个docker容器，在浏览器打开demo.od.com能访问到百度首页
1.准备Docker镜像
- Dockerfile
vi /data/dockerfile/Dockerfile
FROM sunrisenan/nginx:v1.12.2
USER root
ENV WWW /usr/share/nginx/html
ENV CONF /etc/nginx/conf.d
RUN /bin/cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime &&\
echo 'Asia/Shanghai' >/etc/timezone
WORKDIR $WWW
ADD index.html $WWW/index.html
ADD demo.od.com.conf $CONF/demo.od.com.conf
EXPOSE 80
CMD ["nginx","-g","daemon off;"]
- index.html
/data/dockerfile/nginx/index.html
wget -O /data/dockerfile/index.html www.baidu.com- demo.od.com.conf
/data/dockerfile/nginx/demo.od.com.conf
server {
listen 80;
server_name demo.od.com;
root /usr/share/nginx/html;
}2.构建镜像
[root@node4 nginx]# docker build . -t sunrisenan/nginx:baidu3.运行容器
[root@node4 nginx]# docker run -d --rm -p80:80 --name baidu sunrisenan/nginx:baidu
e3c5ea1d36c35e4f35d36456781e9a021fba4a8c0cc91e2df33a4d13dc9fe311
[root@node4 nginx]# docker ps | grep baidu
e3c5ea1d36c3 sunrisenan/nginx:baidu "nginx -g 'daemon of…" 2 minutes ago Up 2 minutes 0.0.0.0:80->80/tcp baidu4.验证
- 本地绑定host
C:\Windows\System32\drivers\etc\hosts
192.168.6.244 demo.od.com- 浏览器访问
打开浏览器访问http://demo.od.com/
第八章：Docker的网络模型
1.NAT(默认)
[root@node4 ~]# docker run -ti --rm sunrisenan/alpine:3.10.3 /bin/sh
/ # ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
100: eth0@if101: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue state UP
link/ether 02:42:ac:06:f4:02 brd ff:ff:ff:ff:ff:ff
inet 172.6.244.2/24 brd 172.6.244.255 scope global eth0
valid_lft forever preferred_lft forever2.None
[root@node4 ~]# docker run -ti --rm --net=none sunrisenan/alpine:3.10.3 /bin/sh
/ # ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
/ # 3.Host
[root@node4 ~]# docker run -ti --rm --net=host sunrisenan/alpine:3.10.3 /bin/sh
/ # ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000
link/ether 00:50:56:b3:4c:8f brd ff:ff:ff:ff:ff:ff
inet 192.168.6.244/24 brd 192.168.6.255 scope global ens192
valid_lft forever preferred_lft forever
inet6 fe80::250:56ff:feb3:4c8f/64 scope link
valid_lft forever preferred_lft forever
3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN
link/ether 02:42:65:95:28:d8 brd ff:ff:ff:ff:ff:ff
inet 172.6.244.1/24 brd 172.6.244.255 scope global docker0
valid_lft forever preferred_lft forever
inet6 fe80::42:65ff:fe95:28d8/64 scope link
valid_lft forever preferred_lft forever
/ # 4.联合网络*
[root@node4 ~]# docker run -d sunrisenan/nginx:v1.12.2
76f844e6057b6493a4a8933819ade7c29325ef17bc1fddc88bdf4c7ec60c620b
[root@node4 ~]#
[root@node4 ~]# docker ps -qa
76f844e6057b
[root@node4 ~]# docker run -ti --rm --net=container:76f844e6057b sunrisenan/nginx:curl bash
root@76f844e6057b:/# curl localhost
<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
body {
width: 35em;
margin: 0 auto;
font-family: Tahoma, Verdana, Arial, sans-serif;
}
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>
<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>
<p><em>Thank you for using nginx.</em></p>
</body>
</html>
root@76f844e6057b:/# 第九篇：快速更改密码
[root@shkf6-240 ~]# echo "1" |passwd root --stdin文档更新时间: 2019-11-25 21:32 作者：李延召
