docker安装与命令使用
目录
1. docker安装
1.1 卸载旧版本
[root@vm1 ~]# yum -y remove docker \
docker-client \
docker-client-latest \
docker-common \
docker-latest \
docker-latest-logrotate \
docker-logrotate \
docker-selinux \
docker-engine-selinux \
docker-engine
1.2 安装
[root@vm1 ~]# curl -o /etc/yum.repos.d/docker-ce.repo https://mirrors.tuna.tsinghua.edu.cn/docker-ce/linux/centos/docker-ce.repo
[root@vm1 ~]# sed -i 's@https://download.docker.com@https://mirrors.tuna.tsinghua.edu.cn/docker-ce@g' /etc/yum.repos.d/docker-ce.repo
[root@vm1 ~]# yum -y install docker-ce
- CentOS8 防火墙放行docker
[root@vm1]# ip a
...................................
3.docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
link/ether 02:42:45:c5:bf:bf brd ff:ff:ff:ff:ff:ff
inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
valid_lft forever preferred_lft forever
firewall-cmd --permanent --zone=trusted --add-interface=docker0
firewall-cmd --reload
2.docker加速器
docker-ce的配置文件是/etc/docker/daemon.json，此文件默认不存在，需要我们手动创建并进行配置，而docker的加速就是通过配置此文件来实现的。
2.1 加速器地址
- 网易云加速器: https://hub-mirror.c.163.com/
- 阿里云加速器: 点击管理控制台 -> 登录账号 -> 右侧镜像中心 -> 镜像加速器 -> 复制地址
- 百度云加速器: https://mirror.baidubce.com
- docker cn: https://registry.docker-cn.com
2.2 配置加速文件
cat > /etc/docker/daemon.json <<EOF
{
"registry-mirrors": ["https://registry.docker-cn.com"]
}
EOF
- 重启docker
3.docker常用命令
3.1 客户端
可以通过 docker COMMAND --help 来查看这些命令的具体用法。
镜像仓库
- docker search：在 Docker index 中搜索一个镜像
[root@vm1 ~]# docker search --help
Options:
-f, --filter filter Filter output based on conditions provided
--format string Pretty-print search using a Go template
--limit int Max number of search results (default 25)
--no-trunc Don't truncate output
[root@vm1 ~]# docker search --limit 3 nginx
NAME DESCRIPTION STARS OFFICIAL AUTOMATED
nginx Official build of Nginx. 14242 [OK]
jwilder/nginx-proxy Automated Nginx reverse proxy for docker con… 1933 [OK]
bitnami/nginx Bitnami nginx Docker Image 93 [OK]
- docker pull :从仓库服务器拉取一个镜像或仓库
## docker pull [选项] [Docker Registry 地址[:端口号]/]仓库名[:标签]
[root@vm1 ~]# docker pull --help
Options:
-a, --all-tags Download all tagged images in the repository
--disable-content-trust Skip image verification (default true)
--platform string Set platform if server is multi-platform capable
-q, --quiet
[root@vm1 yum.repos.d]# docker pull ubuntu:latest
Using default tag: latest
latest: Pulling from library/ubuntu
da7391352a9b: Pull complete
14428a6d4bcd: Pull complete
2c2d948710f2: Pull complete
Digest: sha256:c95a8e48bf88e9849f3e0f723d9f49fa12c5a00cfc6e60d2bc99d87555295e4c
Status: Downloaded newer image for ubuntu:latest
docker.io/library/ubuntu:latest
- docker push :将本地的镜像上传到镜像仓库,要先登陆到镜像仓库
[root@vm1 ~]# docker push ubuntu:latest --help
Usage: docker push [OPTIONS] NAME[:TAG]
Options:
-a, --all-tags Push all tagged images in the repository
--disable-content-trust Skip image signing (default true)
-q, --quiet Suppress verbose output
- docker login/logout : 登陆/登出Docker镜像仓库，默认为官方仓库 Docker Hub
[root@vm1 ~]# docker login --help
Options:
-p, --password string Password
--password-stdin Take the password from stdin
-u, --username string Username
[root@vm1 ~]# docker login -u xpengzong
Password:
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store
Login Succeeded
[root@vm1 ~]# docker logout
Removing login credentials for https://index.docker.io/v1/
本地镜像管理
- docker images :镜像清单
[root@vm1 ~]# docker images --help
Usage: docker images [OPTIONS] [REPOSITORY[:TAG]]
Options:
-a, --all Show all images (default hides intermediate images)
--digests Show digests
-f, --filter filter Filter output based on conditions provided
--format string Pretty-print images using a Go template
--no-trunc Don't truncate output
-q, --quiet Only show image IDs
[root@vm1 ~]# docker images -q
ae2feff98a0c
dd85cdbb9987
f643c72bc252
[root@vm1 ~]# docker images -a
REPOSITORY TAG IMAGE ID CREATED SIZE
nginx latest ae2feff98a0c 2 weeks ago 133MB
httpd latest dd85cdbb9987 3 weeks ago 138MB
ubuntu latest f643c72bc252 5 weeks ago 72.9MB
[root@vm1 ~]# docker images --no-trunc
REPOSITORY TAG IMAGE ID CREATED SIZE
nginx latest sha256:ae2feff98a0cc5095d97c6c283dcd33090770c76d63877caa99aefbbe4343bdd 2 weeks ago 133MB
httpd latest sha256:dd85cdbb99877b73f0de2053f225af590ab188d79469eebdb23ec2d26d0d10e8 3 weeks ago 138MB
ubuntu latest sha256:f643c72bc25212974c16f3348b3a898b1ec1eb13ec1539e10a103e6e217eb2f1 5 weeks ago 72.9MB
[root@vm1 ~]# docker images --format "{{.ID}}: {{.Repository}}"
ae2feff98a0c: nginx
dd85cdbb9987: httpd
f643c72bc252: ubuntu
- docker image :管理镜像
[root@vm1 ~]# docker image --help
Usage: docker image COMMAND
Commands:
build Build an image from a Dockerfile
history Show the history of an image
import Import the contents from a tarball to create a filesystem image
inspect Display detailed information on one or more images
load Load an image from a tar archive or STDIN
ls List images ## 类似docker images
prune Remove unused images ## 删除仓库，标签为<none>的镜像
pull Pull an image or a repository from a registry
push Push an image or a repository to a registry
rm Remove one or more images
save Save one or more images to a tar archive (streamed to STDOUT by default)
tag Create a tag TARGET_IMAGE that refers to SOURCE_IMAGE
- docker build :使用 Dockerfile 创建镜像
[root@vm1 ~]# docker build --help
Usage: docker build [OPTIONS] PATH | URL | -
Options:
--add-host list Add a custom host-to-IP mapping (host:ip)
--build-arg list Set build-time variables
--cache-from strings Images to consider as cache sources
--cgroup-parent string Optional parent cgroup for the container
--compress Compress the build context using gzip
--cpu-period int Limit the CPU CFS (Completely Fair Scheduler) period
--cpu-quota int Limit the CPU CFS (Completely Fair Scheduler) quota
-c, --cpu-shares int CPU shares (relative weight)
--cpuset-cpus string CPUs in which to allow execution (0-3, 0,1)
--cpuset-mems string MEMs in which to allow execution (0-3, 0,1)
--disable-content-trust Skip image verification (default true)
-f, --file string Name of the Dockerfile (Default is 'PATH/Dockerfile')
--force-rm Always remove intermediate containers
--iidfile string Write the image ID to the file
--isolation string Container isolation technology
--label list Set metadata for an image
-m, --memory bytes Memory limit
--memory-swap bytes Swap limit equal to memory plus swap: '-1' to enable unlimited swap
--network string Set the networking mode for the RUN instructions during build (default "default")
--no-cache Do not use cache when building the image
--pull Always attempt to pull a newer version of the image
-q, --quiet Suppress the build output and print image ID on success
--rm Remove intermediate containers after a successful build (default true)
--security-opt strings Security options
--shm-size bytes Size of /dev/shm
-t, --tag list Name and optionally a tag in the 'name:tag' format
--target string Set the target build stage to build.
--ulimit ulimit Ulimit options (default [])
- docker import :导入一个文件（典型为 tar 包）路径或目录来创建一个本地镜像
[root@vm1 ~]# docker import --help
Usage: docker import [OPTIONS] file|URL|- [REPOSITORY[:TAG]]
Options:
-c, --change list Apply Dockerfile instruction to the created image
-m, --message string Set commit message for imported image
--platform string Set platform if server is multi-platform capable
- docker load :从一个 tar 包中加载一个镜像
[root@vm1 ~]# docker load --help
Usage: docker load [OPTIONS]
Options:
-i, --input string Read from tar archive file, instead of STDIN
-q, --quiet Suppress the load output
- docker save : 将指定镜像保存成 tar 归档文件
[root@vm1 ~]# docker save --help
Usage: docker save [OPTIONS] IMAGE [IMAGE...]
Options:
-o, --output string Write to a file, instead of STDOUT
- docker history : 查看指定镜像的创建历史。
[root@vm1 ~]# docker history --help
Usage: docker history [OPTIONS] IMAGE
Options:
--format string Pretty-print images using a Go template
-H, --human Print sizes and dates in human readable format (default true)
--no-trunc Don't truncate output
-q, --quiet Only show image IDs
[root@vm1 ~]# docker history ubuntu:latest
IMAGE CREATED CREATED BY SIZE COMMENT
f643c72bc252 5 weeks ago /bin/sh -c #(nop) CMD ["/bin/bash"] 0B
<missing> 5 weeks ago /bin/sh -c mkdir -p /run/systemd && echo 'do… 7B
<missing> 5 weeks ago /bin/sh -c [ -z "$(apt-get indextargets)" ] 0B
<missing> 5 weeks ago /bin/sh -c set -xe && echo '#!/bin/sh' > /… 811B
<missing> 5 weeks ago /bin/sh -c #(nop) ADD file:4f15c4475fbafb3fe… 72.9MB
- docker tag :为一个镜像打标签
[root@vm1 ~]# docker tag --help
Usage: docker tag SOURCE_IMAGE[:TAG] TARGET_IMAGE[:TAG]
[root@vm1 ~]# docker tag ubuntu:latest ubuntu:new
[root@vm1 ~]# docker images ubuntu
REPOSITORY TAG IMAGE ID CREATED SIZE
ubuntu latest f643c72bc252 5 weeks ago 72.9MB
ubuntu new f643c72bc252 5 weeks ago 72.9MB
- docker rmi :删除本地镜像
删除行为分为两类，一类是 Untagged，另一类是 Deleted。并非所有的 docker [image] rmi 都会产生删除镜像的行为，有可能仅仅是取消了某个标签而已。当该镜像所有的标签都被取消了，该镜像很可能会失去了存在的意义，因此会触发删除行为。
[root@vm1 ~]# docker rmi --help
Usage: docker rmi [OPTIONS] IMAGE [IMAGE...]
Options:
-f, --force Force removal of the image
--no-prune Do not delete untagged parents
[root@vm1 ~]# docker rmi ubuntu:new
Untagged: ubuntu:new
[root@vm1 ~]# docker images
RPOSITORY TAG IMAGE ID CREATED SIZE
nginx latest ae2feff98a0c 2 weeks ago 133MB
httpd latest dd85cdbb9987 3 weeks ago 138MB
ubuntu latest f643c72bc252 5 weeks ago 72.9MB
容器生命周期管理
- docker create : 创建一个新容器，但并不运行它
[root@vm1 ~]# docker create --help
Usage: docker create [OPTIONS] IMAGE [COMMAND] [ARG...]
[root@vm1 ~]# docker create --name myhttpd httpd:latest
6e87940db6252f75b3b42296025b5eb4c6e7d875c3be24df8dccb4550a4a75ae
- docker start/stop/restart :启动/停止/重启容器
[root@vm1 ~]# docker start myhttpd
myhttpd
[root@vm1 ~]# curl 172.17.0.2
<html><body><h1>It works!</h1></body></html>
root@vm1 ~]# docker stop myhttpd
myhttpd
[root@vm1 ~]# curl 172.17.0.2
curl: (7) Failed to connect to 172.17.0.2 port 80: No route to host
[root@vm1 ~]# docker restart myhttpd
myhttpd
[root@vm1 ~]# curl 172.17.0.2
<html><body><h1>It works!</h1></body></html>
- docker pause/unpause : 暂停/恢复容器的所有进程
[root@vm1 ~]# docker pause --help
Usage: docker pause CONTAINER [CONTAINER...]
- docker kill : 杀掉一个运行中的容器
[root@vm1 ~]# docker kill --help
Usage: docker kill [OPTIONS] CONTAINER [CONTAINER...]
Kill one or more running containers
Options:
-s, --signal string Signal to send to the container (default "KILL")
[root@vm1 ~]# docker kill -s KILL myhttpd
myhttpd
[root@vm1 ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
- docker rm : 删除一个容器
[root@vm1 ~]# docker rm --help
Usage: docker rm [OPTIONS] CONTAINER [CONTAINER...]
Options:
-f, --force Force the removal of a running container (uses SIGKILL)
-l, --link Remove the specified link
-v, --volumes Remove anonymous volumes associated with the container
[root@vm1 ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
b074a635d737 httpd:latest "httpd-foreground" 56 seconds ago Created myhttpd
[root@vm1 ~]# docker rm myhttpd
myhttpd
[root@vm1 ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
- docker run: 创建一个新容器，并在其中运行给定命令
[root@vm1 ~]# docker run --help
Usage: docker run [OPTIONS] IMAGE [COMMAND] [ARG...]
options:
-a stdin: 指定标准输入输出内容类型，可选 STDIN/STDOUT/STDERR 三项；
-d: 后台运行容器，并返回容器ID；
-i: 以交互模式运行容器，通常与 -t 同时使用；
-P: 随机端口映射，容器内部端口随机映射到主机的端口
-p: 指定端口映射，格式为：主机(宿主)端口:容器端口
-t: 为容器重新分配一个伪输入终端，通常与 -i 同时使用；
--name="nginx-lb": 为容器指定一个名称；
.........................................
##运行后会卡住
[root@vm1 ~]# docker run --name mynginx -p 80:80 nginx:latest
/docker-entrypoint.sh: /docker-entrypoint.d/ is not empty, will attempt to perform configuration
/docker-entrypoint.sh: Looking for shell scripts in /docker-entrypoint.d/
/docker-entrypoint.sh: Launching /docker-entrypoint.d/10-listen-on-ipv6-by-default.sh
10-listen-on-ipv6-by-default.sh: info: Getting the checksum of /etc/nginx/conf.d/default.conf
10-listen-on-ipv6-by-default.sh: info: Enabled listen on IPv6 in /etc/nginx/conf.d/default.conf
/docker-entrypoint.sh: Launching /docker-entrypoint.d/20-envsubst-on-templates.sh
/docker-entrypoint.sh: Configuration complete; ready for start up
172.17.0.1 - - [04/Jan/2021:14:55:49 +0000] "GET / HTTP/1.1" 200 612 "-" "curl/7.61.1" "-"
##另一个终端
[root@vm1 ~]# ss -antl
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 128 0.0.0.0:22 0.0.0.0:*
LISTEN 0 128 *:80 *:*
LISTEN 0 128 [::]:22 [::]:*
[root@vm1 ~]# curl 172.17.0.2
<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
##此时还可以访问宿主机的80端口
[wisan@fyj ~]$ curl 192.168.225.127
<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
............................................
##同时也创建的这个容器
[root@vm1 ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
c0c9456c81a6 nginx:latest "/docker-entrypoint.…" 7 minutes ago Exited (0) 23 seconds ago mynginx
- docker exec : 进入运行的容器中执行命令（exit退出时容器不会停止运行）
[root@vm1 ~]# docker exec --help
Usage: docker exec [OPTIONS] CONTAINER COMMAND [ARG...]
Options:
-d, --detach Detached mode: run command in the background
--detach-keys string Override the key sequence for detaching a container
-e, --env list Set environment variables
--env-file list Read in a file of environment variables
-i, --interactive Keep STDIN open even if not attached
--privileged Give extended privileges to the command
-t, --tty Allocate a pseudo-TTY
-u, --user string Username or UID (format: <name|uid>[:<group|gid>])
-w, --workdir string Working directory inside the container
[root@vm1 ~]# docker run -it --name myubuntu ubuntu:latest
root@93ac0238f0b5:/# ls
bin boot dev etc home lib lib32 lib64 libx32 media mnt opt proc root run sbin srv sys tmp usr var
root@93ac0238f0b5:/#
##另外开启一个终端
[root@vm1 ~]# docker exec -it myubuntu /bin/echo hello
hello
[root@vm1 ~]# docker exec -it myubuntu /bin/bash
root@93ac0238f0b5:/# exit
exit
## exit退出时容器继续运行
[root@vm1 ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
93ac0238f0b5 ubuntu:latest "/bin/bash" 3 minutes ago Up 3 minutes myubuntu
容器操作
- docker ps : 列出容器
[root@vm1 ~]# docker ps --help
Usage: docker ps [OPTIONS]
Options:
-a, --all Show all containers (default shows just running)
-f, --filter filter Filter output based on conditions provided
--format string Pretty-print containers using a Go template
-n, --last int Show n last created containers (includes all states) (default -1)
-l, --latest Show the latest created container (includes all states)
--no-trunc Don't truncate output
-q, --quiet Only display container IDs
-s, --size Display total file sizes
[root@vm1 ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
6e87940db625 httpd:latest "httpd-foreground" About a minute ago Created myhttpd
- docker inspect : 获取容器/镜像的元数据
[root@vm1 ~]# docker inspect --help
Usage: docker inspect [OPTIONS] NAME|ID [NAME|ID...]
Options:
-f, --format string Format the output using the given Go template
-s, --size Display total file sizes if the type is container
--type string Return JSON for specified type
[root@vm1 ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
6e87940db625 httpd:latest "httpd-foreground" 5 minutes ago Created myhttpd
[root@vm1 ~]# docker inspect 6e87940db625|myhttpd
[
{
"Id": "6e87940db6252f75b3b42296025b5eb4c6e7d875c3be24df8dccb4550a4a75ae",
"Created": "2021-01-04T14:17:57.804700751Z",
"Path": "httpd-foreground",
"Args": [],
"State": {
.....................................................
"Networks": {
"bridge": {
..................................................
"Gateway": "172.17.0.1",
"IPAddress": "172.17.0.2",
................................................
}
- docker top : 查看容器中运行的进程信息，支持 ps 命令参数
[root@vm1 ~]# docker top --help
Usage: docker top CONTAINER [ps OPTIONS]
[root@vm1 ~]# docker top myhttpd
UID PID PPID C STIME TTY TIME CMD
root 14099 14078 0 22:28 ? 00:00:00 httpd -DFOREGROUND
bin 14140 14099 0 22:28 ? 00:00:00 httpd -DFOREGROUND
bin 14141 14099 0 22:28 ? 00:00:00 httpd -DFOREGROUND
bin 14142 14099 0 22:28 ? 00:00:00
- docker attach : 连接到正在运行中的容器。
[root@vm1 ~]# docker attach --help
Usage: docker attach [OPTIONS] CONTAINER
Attach local standard input, output, and error streams to a running container
Options:
--detach-keys string Override the key sequence for detaching a container
--no-stdin Do not attach STDIN
--sig-proxy Proxy all received signals to the process (default true)
[root@vm1 ~]# docker attach myhttpd
##终止后，容器也会随之停止允许。不过若使用--sig-proxy=fasle，可以避免。
^C[Mon Jan 04 15:30:05.585055 2021] [mpm_event:notice] [pid 1:tid 139984462443648] AH00491: caught SIGTERM, shutting down
##另一个终端
[root@vm1 ~]# docker top myhttpd
UID PID PPID C STIME TTY TIME CMD
root 16434 16413 1 23:26 ? 00:00:00 httpd -DFOREGROUND
bin 16471 16434 0 23:26 ? 00:00:00 httpd -DFOREGROUND
bin 16472 16434 0 23:26 ? 00:00:00 httpd -DFOREGROUND
bin 16473 16434 0 23:26 ? 00:00:00 httpd -DFOREGROUND
[root@vm1 ~]# docker top myhttpd
Error response from daemon: Container 9968c21ea9623126f6090f26d424d955c8dfa1b641f27c6f6df75db48f1a3e0b is not running
- docker logs： 获取容器日志
[root@vm1 ~]# docker logs --help
Usage: docker logs [OPTIONS] CONTAINER
Options:
--details Show extra details provided to logs
-f, --follow Follow log output
--since string Show logs since timestamp (e.g. 2013-01-02T13:23:37Z) or relative (e.g. 42m for 42 minutes)
-n, --tail string Number of lines to show from the end of the logs (default "all")
-t, --timestamps Show timestamps
--until string Show logs before a timestamp (e.g. 2013-01-02T13:23:37Z) or relative (e.g. 42m for 42 minutes)
[root@vm1 ~]# docker logs myhttpd
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.17.0.2. Set the 'ServerName' directive globally to suppress this message
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.17.0.2. Set the 'ServerName' directive globally to suppress this message
[Mon Jan 04 15:22:25.668539 2021] [mpm_event:notice] [pid 1:tid 139848091227264] AH00489: Apache/2.4.46 (Unix) configured -- resuming normal operations
[Mon Jan 04 15:22:25.669617 2021] [core:notice] [pid 1:tid 139848091227264] AH00094: Command line: 'httpd -D FOREGROUND'
172.17.0.1 - - [04/Jan/2021:15:23:00 +0000] "GET / HTTP/1.1" 200 45
- docker export :导出容器的文件系统为tar包
[root@vm1 ~]# docker export --help
Usage: docker export [OPTIONS] CONTAINER
Options:
-o, --output string Write to a file, instead of STDOUT
[root@vm1 ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
9968c21ea962 httpd "httpd-foreground" 3 hours ago Up 2 hours 80/tcp myhttpd
[root@vm1 ~]# docker stop myhttpd
myhttpd
[root@vm1 ~]# docker export myhttpd > httpd.tar
[root@vm1 ~]# ls
anaconda-ks.cfg httpd.tar
- docker port :列出指定的容器的端口映射
[root@vm1 ~]# docker port --help
Usage: docker port CONTAINER [PRIVATE_PORT[/PROTO]]
[root@vm1 ~]# docker run --name myhttpd -p 80:80 httpd
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.17.0.2. Set the 'ServerName' directive globally to suppress this message
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.17.0.2. Set the 'ServerName' directive globally to suppress this message
[Mon Jan 04 22:04:02.742643 2021] [mpm_event:notice] [pid 1:tid 140269158151296] AH00489: Apache/2.4.46 (Unix) configured -- resuming normal operations
[Mon Jan 04 22:04:02.744132 2021] [core:notice] [pid 1:tid 140269158151296] AH00094: Command line: 'httpd -D FOREGROUND'
192.168.225.1 - - [04/Jan/2021:22:04:30 +0000] "GET / HTTP/1.1" 200 45
##另开终端
[root@vm1 ~]# ss -antl
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 128 0.0.0.0:22 0.0.0.0:*
LISTEN 0 128 *:80 *:*
LISTEN 0 128 [::]:22 [::]:*
[root@vm1 ~]# docker port myhttpd
80/tcp -> 0.0.0.0:80
容器rootfs命令
- docker commit : 从容器创建一个新的镜像
[root@vm1 ~]# docker commit --help
Usage: docker commit [OPTIONS] CONTAINER [REPOSITORY[:TAG]]
Options:
-a, --author string Author (e.g., "John Hannibal Smith <hannibal@a-team.com>")
-c, --change list Apply Dockerfile instruction to the created image
-m, --message string Commit message
-p, --pause Pause container during commit (default true)
- docker cp ： 用于容器与主机之间的数据拷贝
[root@vm1 ~]# docker cp --help
Usage: docker cp [OPTIONS] CONTAINER:SRC_PATH DEST_PATH|-
docker cp [OPTIONS] SRC_PATH|- CONTAINER:DEST_PATH
[root@vm1 ~]# cat > index.html <<EOF
> hello world!
> EOF
[root@vm1 ~]# ls
anaconda-ks.cfg httpd.tar index.html
[root@vm1 ~]# docker cp index.html myhttpd:/usr/local/apache2/htdocs
[root@vm1 ~]# curl 172.17.0.2
hello world!
- docker diff
[root@vm1 ~]# docker diff --help
Usage: docker diff CONTAINER
[root@vm1 ~]# docker diff myhttpd
C /usr
C /usr/local
C /usr/local/apache2
C /usr/local/apache2/conf
A /usr/local/apache2/conf/vhost.conf
C /usr/local/apache2/logs
A /usr/local/apache2/logs/httpd.pid
版本与信息
- docker info: 显示 Docker 系统信息，包括镜像和容器数。
[root@vm1 ~]# docker info
Client:
Context: default
Debug Mode: false
Plugins:
app: Docker App (Docker Inc., v0.9.1-beta3)
buildx: Build with BuildKit (Docker Inc., v0.5.0-docker)
Server:
Containers: 1
Running: 0
Paused: 0
Stopped: 1
Images: 3
Server Version: 20.10.1
Storage Driver: overlay2
Backing Filesystem: xfs
..........................
- docker version :显示 Docker 版本信息
[root@vm1 ~]# docker version
Client: Docker Engine - Community
Version: 20.10.1
API version: 1.41
Go version: go1.13.15
Git commit: 831ebea
Built: Tue Dec 15 04:34:30 2020
OS/Arch: linux/amd64
Context: default
Experimental: true
Server: Docker Engine - Community
Engine:
Version: 20.10.1
API version: 1.41 (minimum version 1.12)
Go version: go1.13.15
Git commit: f001486
Built: Tue Dec 15 04:32:21 2020
OS/Arch: linux/amd64
Experimental: false
containerd:
Version: 1.4.3
GitCommit: 269548fa27e0089a8b8278fc4fc781d7f65a939b
runc:
Version: 1.0.0-rc92
GitCommit: ff819c7e9184c13b7c2607fe6c30ae19403a7aff
docker-init:
Version: 0.19.0
GitCommit: de40ad0
4. docker event state
