Docker入门与实践：容器化开发与管理-CSDN博客

本文链接：https://blog.csdn.net/lemmon_tree/article/details/122731023

一、docker概述

1.1 docker要解决的问题

将开发的项目和环境（环境包括redis,mysql,jdk等）一块打包，免除重复配置环境的问题。
docker通过隔离机制，将服务器的资源运用到极致。隔离是docker的核心思想。

1.2 docker历史

docker十分轻巧，占用资源少
docker是基于go语言开发的
docker的网址：https://www.docker.com/

1.3 docker能干什么

docker是一种容器化技术。
docker并不是模拟一个完成的操作系统。

1.4 docker与虚拟机技术的不同

虚拟机虚拟出一套硬件，运行完成的操作系统，在系统上安装运行软件。
容器运行在宿主机的内核中，容器没有自己的内核，没有虚拟硬件，比较轻便。
容器间是隔离的，每个容器都有自己的文件存储系统，互不影响。
docker是内核级别的虚拟化。

二、docker安装

2.1 docker基本概念

镜像
docker镜像就好比一个模板，通过镜像可以创建多个容器。
容器
容器通过docker镜像创建，具有启动、停止、删除基本命令。可以把docker镜像理解为一个简易的Linux系统。
仓库
仓库是用来存储镜像的地方。

2.2 docker安装

环境查看

Linux系统内核是3.10版本以上

[root@iZwz939qj61dxuoca8vryhZ home]# uname -r
3.10.0-1160.49.1.el7.x86_64

本例Linux操作系统是centos7

[root@iZwz939qj61dxuoca8vryhZ home]# cat /etc/os-release
NAME="CentOS Linux"
VERSION="7 (Core)"
ID="centos"
ID_LIKE="rhel fedora"
VERSION_ID="7"
PRETTY_NAME="CentOS Linux 7 (Core)"
ANSI_COLOR="0;31"
CPE_NAME="cpe:/o:centos:centos:7"
HOME_URL="https://www.centos.org/"
BUG_REPORT_URL="https://bugs.centos.org/"

CENTOS_MANTISBT_PROJECT="CentOS-7"
CENTOS_MANTISBT_PROJECT_VERSION="7"
REDHAT_SUPPORT_PRODUCT="centos"
REDHAT_SUPPORT_PRODUCT_VERSION="7"

安装

卸载系统中原有的docker

yum remove docker \
                  docker-client \
                  docker-client-latest \
                  docker-common \
                  docker-latest \
                  docker-latest-logrotate \
                  docker-logrotate \
                  docker-engine

安装yum包

yum install -y yum-utils

配置docker的阿里云安装镜像地址

 yum-config-manager \
    --add-repo \
    http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

更新yum软件包索引

yum makecache fast

安装docker社区版本engine，社区版

yum install docker-ce docker-ce-cli containerd.io

启动docker

systemctl start docker

查看docker版本

docker version

允许hello-world程序

docker run hello-world

查看docker中下载的hello-world镜像

docker images

卸载docker

卸载docker依赖

yum remove docker-ce docker-ce-cli containerd.io

删除docker文件夹

rm -rf /var/lib/docker
rm -rf /var/lib/containerd

2.3 docker中run命令的流程分析图

docker中run命令的流程分析图

三、docker底层原理

3.1 docker是怎么工作的

docker是client-server架构的系统，docker的守护进程运行在主机上。通过socket从客户端访问。
Docker-Server接收到Docker-Client的指令，就会执行这个指令。

3.2 docker为什么比VM快？

docker比虚拟机有更少的抽象层
docker利用的是宿主机的内核，虚拟机需要Guest OS。新建一个容器的时候，docker不需要像虚拟机一样重新加载一个操作系统，避免引导。虚拟机是加载Guest OS，分钟级别的。docker利用宿主机的操作系统，省略了引导过程，是秒级别。

四、docker常用命令

4.1 帮助命令

打印docker的版本信息

docker version

显示docker更加详细的信息，包括镜像和容器

docker info

docker命令的帮助文档

docker COMMAND --help

docker命令帮助文档地址：https://docs.docker.com/reference/

4.2 镜像命令

查看本地主机上的所有镜像

docker images
REPOSITORY    TAG       IMAGE ID       CREATED        SIZE
hello-world   latest    feb5d9fea6a5   4 months ago   13.3kB
#解释
REPOSITORY ：docker的仓库源
TAG：镜像的标签
IMAGE ID：镜像的ID
CREATED：镜像的创建时间
SIZE：镜像的大小

查看docker images的详细使用方法

docker images --help

查看本机上的所有镜像

docker images -a

只查看镜像的ID

docker images -q

搜索Mysql镜像

docker search mysql

按过滤条件搜索STARS大于3000的MySQL镜像

docker search mysql -f=STARS=3000

4.3 docker pull命令下载镜像

查看docker pull的帮助命令

docker pull --help

下载最新版MySQL镜像

[root@iZwz939qj61dxuoca8vryhZ ~]# docker pull mysql
Using default tag: latest #如果不指定tag，默认是最新版本的mysql
latest: Pulling from library/mysql
6552179c3509: Pull complete #分层下载，docker镜像的核心，联合文件系统
d69aa66e4482: Pull complete 
3b19465b002b: Pull complete 
7b0d0cfe99a1: Pull complete 
9ccd5a5c8987: Pull complete 
2dab00d7d232: Pull complete 
64d3afdccd4a: Pull complete 
82148d50b16c: Pull complete 
8bb7d73a7d0c: Pull complete 
74778cd68a75: Pull complete 
d7e5f9309140: Pull complete 
f2e376ecd59f: Pull complete 
Status: Downloaded newer image for mysql:latest
docker.io/library/mysql:latest #MySQL镜像的真实地址

下载MySQL5.7版本镜像

docker pull mysql:5.7

删除指定ID的镜像

4.4 docker rmi删除镜像

删除指定ID的镜像

docker rmi -f 0712d5dc1b14

删除全部镜像

docker rmi -f $(docker images -aq)

五、容器命令

有了镜像，才可以创建容器，下载centos镜像，测试学习

5.1 新建centos容器，并启动

下载centos容器

docker pull centos

进入到docker镜像中的centos系统

[root@iZwz939qj61dxuoca8vryhZ ~]# docker run -it centos
[root@330e2aa2fee4 /]# ls #查看容器内的centos系统
bin  dev  etc  home  lib  lib64  lost+found  media  mnt  opt  proc  root  run  sbin  srv  sys  tmp  usr  var
-it：交互形式

退出docker镜像中的centos系统

 exit

5.2 docker ps命令

查看正在运行的容器docker ps

docker ps
CONTAINER ID   IMAGE     COMMAND   CREATED   STATUS    PORTS     NAMES

列出曾经运行的docker容器，docker ps -a
-a, --all Show all containers (default shows just running)

[root@iZwz939qj61dxuoca8vryhZ ~]# docker ps -a
CONTAINER ID   IMAGE          COMMAND       CREATED          STATUS                     PORTS     NAMES
330e2aa2fee4   centos         "/bin/bash"   17 minutes ago   Exited (0) 9 minutes ago             relaxed_chatterjee
98973b67bacd   feb5d9fea6a5   "/hello"      28 hours ago     Exited (0) 28 hours ago              vibrant_euclid

列出所有运行过的docker容器，指定列出容器的数量，docker ps -a -n=1
-n, --last int Show n last created containers (includes all states) (default -1)
ps List containers

[root@iZwz939qj61dxuoca8vryhZ ~]# docker ps -a -n=1
CONTAINER ID   IMAGE     COMMAND       CREATED          STATUS                      PORTS     NAMES
330e2aa2fee4   centos    "/bin/bash"   25 minutes ago   Exited (0) 16 minutes ago             relaxed_chatterjee

显示所有容器的编号，docker ps -aq
-q, --quiet Only display container IDs

[root@iZwz939qj61dxuoca8vryhZ ~]# docker ps -aq
330e2aa2fee4
98973b67bacd

5.3 退出容器

exit #直接退出容器并停止容器
Ctrl+P+Q #退出容器，不停止容器

5.4 删除容器

删除指定ID的docker容器，docker rm，不能删除正在运行的docker容器

docker rm 1b66de204265

强制删除所有容器，包括正在运行的容器，docker rm -f $(docker ps -aq)
-f, --force Force the removal of a running container (uses SIGKILL)

[root@iZwz939qj61dxuoca8vryhZ ~]# docker rm -f $(docker ps -aq)
09c69bf5bb7e
c355b3da2fed
330e2aa2fee4
98973b67bacd

docker ps -a -q | xargs docker rm，也是一个删除所有容器的命令

5.5 启动和停止容器

docker start 容器ID #启动容器
docker stop 容器ID #停止容器
docker restart 容器ID #重启容器
docker kill 容器ID #杀掉容器

5.6 常用的其它命令

docker run -d centos
后台启动容器，启动完成之后，返回容器ID。
-d, --detach Run container in background and print container ID
问题，docker ps 之后，发现centos停止了。
常见的坑，docker容器使用后台运行，必须要有一个前台进程，docker发现没有前台应用，就会停止。
容器启动后，发现自己没有提供服务，就会停止。
查看docker日志

docker run -d centos /bin/sh -c "while true;do echo kuangshen;sleep 2;done"

后台运行centos镜像。并且每隔2秒打印一次数据。

docker logs -ft --tail 10 d24b14facca6242cd8399790e34fb4233349c7cd133b4ee6bc212dc9d7a83e48

查看centos容器中的日志。
-f, --follow Follow log output
-t, --timestamps Show timestamps
–tail string Number of lines to show from the end of the logs (default “all”)

查看docker容器内部进程的基本信息
top Display the running processes of a container

[root@iZwz939qj61dxuoca8vryhZ ~]# docker top d24b14facca6
UID                 PID                 PPID                C                   STIME               TTY                 TIME                CMD
root                22845               22828               0                   20:28               ?                   00:00:00            /bin/sh -c while true;do echo kuangshen;sleep 2;done
root                23427               22845               0                   20:44               ?                   00:00:00            /usr/bin/coreutils --coreutils-prog-shebang=sleep /usr/bin/sleep 2

查看镜像的元数据
inspect Return low-level information on Docker objects

[root@iZwz939qj61dxuoca8vryhZ ~]# docker inspect d24b14facca6
[
    {
        "Id": "d24b14facca6242cd8399790e34fb4233349c7cd133b4ee6bc212dc9d7a83e48",
        "Created": "2022-02-03T12:28:24.100412417Z",
        "Path": "/bin/sh",
        "Args": [
            "-c",
            "while true;do echo kuangshen;sleep 2;done"
        ],
        "State": {
            "Status": "running",
            "Running": true,
            "Paused": false,
            "Restarting": false,
            "OOMKilled": false,
            "Dead": false,
            "Pid": 22845,
            "ExitCode": 0,
            "Error": "",
            "StartedAt": "2022-02-03T12:28:24.487684662Z",
            "FinishedAt": "0001-01-01T00:00:00Z"
        },
        "Image": "sha256:5d0da3dc976460b72c77d94c8a1ad043720b0416bfc16c52c45d4847e53fadb6",
        "ResolvConfPath": "/var/lib/docker/containers/d24b14facca6242cd8399790e34fb4233349c7cd133b4ee6bc212dc9d7a83e48/resolv.conf",
        "HostnamePath": "/var/lib/docker/containers/d24b14facca6242cd8399790e34fb4233349c7cd133b4ee6bc212dc9d7a83e48/hostname",
        "HostsPath": "/var/lib/docker/containers/d24b14facca6242cd8399790e34fb4233349c7cd133b4ee6bc212dc9d7a83e48/hosts",
        "LogPath": "/var/lib/docker/containers/d24b14facca6242cd8399790e34fb4233349c7cd133b4ee6bc212dc9d7a83e48/d24b14facca6242cd8399790e34fb4233349c7cd133b4ee6bc212dc9d7a83e48-json.log",
        "Name": "/epic_curran",
        "RestartCount": 0,
        "Driver": "overlay2",
        "Platform": "linux",
        "MountLabel": "",
        "ProcessLabel": "",
        "AppArmorProfile": "",
        "ExecIDs": null,
        "HostConfig": {
            "Binds": null,
            "ContainerIDFile": "",
            "LogConfig": {
                "Type": "json-file",
                "Config": {}
            },
            "NetworkMode": "default",
            "PortBindings": {},
            "RestartPolicy": {
                "Name": "no",
                "MaximumRetryCount": 0
            },
            "AutoRemove": false,
            "VolumeDriver": "",
            "VolumesFrom": null,
            "CapAdd": null,
            "CapDrop": null,
            "CgroupnsMode": "host",
            "Dns": [],
            "DnsOptions": [],
            "DnsSearch": [],
            "ExtraHosts": null,
            "GroupAdd": null,
            "IpcMode": "private",
            "Cgroup": "",
            "Links": null,
            "OomScoreAdj": 0,
            "PidMode": "",
            "Privileged": false,
            "PublishAllPorts": false,
            "ReadonlyRootfs": false,
            "SecurityOpt": null,
            "UTSMode": "",
            "UsernsMode": "",
            "ShmSize": 67108864,
            "Runtime": "runc",
            "ConsoleSize": [
                0,
                0
            ],
            "Isolation": "",
            "CpuShares": 0,
            "Memory": 0,
            "NanoCpus": 0,
            "CgroupParent": "",
            "BlkioWeight": 0,
            "BlkioWeightDevice": [],
            "BlkioDeviceReadBps": null,
            "BlkioDeviceWriteBps": null,
            "BlkioDeviceReadIOps": null,
            "BlkioDeviceWriteIOps": null,
            "CpuPeriod": 0,
            "CpuQuota": 0,
            "CpuRealtimePeriod": 0,
            "CpuRealtimeRuntime": 0,
            "CpusetCpus": "",
            "CpusetMems": "",
            "Devices": [],
            "DeviceCgroupRules": null,
            "DeviceRequests": null,
            "KernelMemory": 0,
            "KernelMemoryTCP": 0,
            "MemoryReservation": 0,
            "MemorySwap": 0,
            "MemorySwappiness": null,
            "OomKillDisable": false,
            "PidsLimit": null,
            "Ulimits": null,
            "CpuCount": 0,
            "CpuPercent": 0,
            "IOMaximumIOps": 0,
            "IOMaximumBandwidth": 0,
            "MaskedPaths": [
                "/proc/asound",
                "/proc/acpi",
                "/proc/kcore",
                "/proc/keys",
                "/proc/latency_stats",
                "/proc/timer_list",
                "/proc/timer_stats",
                "/proc/sched_debug",
                "/proc/scsi",
                "/sys/firmware"
            ],
            "ReadonlyPaths": [
                "/proc/bus",
                "/proc/fs",
                "/proc/irq",
                "/proc/sys",
                "/proc/sysrq-trigger"
            ]
        },
        "GraphDriver": {
            "Data": {
                "LowerDir": "/var/lib/docker/overlay2/417b1dc655f9f638125e2168ff347df77fbef5a6e47281abd1f2878213907c75-init/diff:/var/lib/docker/overlay2/8acd58b1e12b5d070384970155213230ea77879ac090116fd427c05782e92050/diff",
                "MergedDir": "/var/lib/docker/overlay2/417b1dc655f9f638125e2168ff347df77fbef5a6e47281abd1f2878213907c75/merged",
                "UpperDir": "/var/lib/docker/overlay2/417b1dc655f9f638125e2168ff347df77fbef5a6e47281abd1f2878213907c75/diff",
                "WorkDir": "/var/lib/docker/overlay2/417b1dc655f9f638125e2168ff347df77fbef5a6e47281abd1f2878213907c75/work"
            },
            "Name": "overlay2"
        },
        "Mounts": [],
        "Config": {
            "Hostname": "d24b14facca6",
            "Domainname": "",
            "User": "",
            "AttachStdin": false,
            "AttachStdout": false,
            "AttachStderr": false,
            "Tty": false,
            "OpenStdin": false,
            "StdinOnce": false,
            "Env": [
                "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
            ],
            "Cmd": [
                "/bin/sh",
                "-c",
                "while true;do echo kuangshen;sleep 2;done"
            ],
            "Image": "centos",
            "Volumes": null,
            "WorkingDir": "",
            "Entrypoint": null,
            "OnBuild": null,
            "Labels": {
                "org.label-schema.build-date": "20210915",
                "org.label-schema.license": "GPLv2",
                "org.label-schema.name": "CentOS Base Image",
                "org.label-schema.schema-version": "1.0",
                "org.label-schema.vendor": "CentOS"
            }
        },
        "NetworkSettings": {
            "Bridge": "",
            "SandboxID": "67772ae387ac7496c81892681f8a78f3ce81e83b08817b39746397fb4605621a",
            "HairpinMode": false,
            "LinkLocalIPv6Address": "",
            "LinkLocalIPv6PrefixLen": 0,
            "Ports": {},
            "SandboxKey": "/var/run/docker/netns/67772ae387ac",
            "SecondaryIPAddresses": null,
            "SecondaryIPv6Addresses": null,
            "EndpointID": "300747945ec52407b25056ede4e7e3838e481a866d1df8d789b1c45c75a66f8c",
            "Gateway": "172.18.0.1",
            "GlobalIPv6Address": "",
            "GlobalIPv6PrefixLen": 0,
            "IPAddress": "172.18.0.2",
            "IPPrefixLen": 16,
            "IPv6Gateway": "",
            "MacAddress": "02:42:ac:12:00:02",
            "Networks": {
                "bridge": {
                    "IPAMConfig": null,
                    "Links": null,
                    "Aliases": null,
                    "NetworkID": "8188070c03cf3ca6405b6f621911701cfc721c9f54cd7ce6a9761cfba820d2c7",
                    "EndpointID": "300747945ec52407b25056ede4e7e3838e481a866d1df8d789b1c45c75a66f8c",
                    "Gateway": "172.18.0.1",
                    "IPAddress": "172.18.0.2",
                    "IPPrefixLen": 16,
                    "IPv6Gateway": "",
                    "GlobalIPv6Address": "",
                    "GlobalIPv6PrefixLen": 0,
                    "MacAddress": "02:42:ac:12:00:02",
                    "DriverOpts": null
                }
            }
        }
    }
]

六、进入当前正在运行中的容器

6.1 docker exec -it 容器ID

容器都是后台方式运行，需要进入容器修改配置。
exec Run a command in a running container
-i, --interactive Keep STDIN open even if not attached
-t, --tty Allocate a pseudo-TTY
-it：以交互方式运行

docker exec -it d24b14facca6 /bin/sh
sh-4.4# ls
bin  dev  etc  home  lib  lib64  lost+found  media  mnt  opt  proc  root  run  sbin  srv  sys  tmp  usr  var
sh-4.4#

6.2 docker attach 容器ID

进入到容器中正在执行的命令行

6.3 docker attach 与docker exec区别

docker exec：进入容器后，开启一个新的终端，可以在终端中输入命令。
docker attach：进入容器正在执行的终端，不会打开新的终端。

七、从容器内拷贝文件到主机上

cp Copy files/folders between a container and the local filesystem

[root@iZwz939qj61dxuoca8vryhZ home]# docker cp 7d04b3d019f3:/home/text.java /home
[root@iZwz939qj61dxuoca8vryhZ home]# ls
text.java

docker cp 容器DI:容器中路径本机路径

七、小结

在这里插入图片描述