您现在的位置是：首页 > 后端 > 系统环境 > Docker Docker

docker笔记

2021-12-17【Docker】1307人已围观

简介docker笔记

### docker介绍

#### docker基本组成

![](http://image.apidata.vip/blog/article/2021-12-17/163972575111272143.jpg)

**镜像（images)**

**容器（containner)**

**仓库（repository)**

#### docker安装

> 环境准备

1. CentOs 7

> 环境查看

``` shell
#系统内核
uname -r
```

```shell
#系统版本
cat /etc/os-release
```

> 安装

```shell
#1.卸载旧的版本
$ sudo yum remove docker \
                  docker-client \
                  docker-client-latest \
                  docker-common \
                  docker-latest \
                  docker-latest-logrotate \
                  docker-logrotate \
                  docker-engine
                  
#2.需要的安装包
$ sudo yum install -y yum-utils
#3.设置镜像仓库
$ sudo yum-config-manager \
    --add-repo \
    https://download.docker.com/linux/centos/docker-ce.repo #默认国外
#阿里云镜像
$ sudo yum-config-manager \
    --add-repo \
    http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo #阿里云
    
#跟新yum软件包索引
$ yum makecache fast
#4.安装docker
$ sudo yum install docker-ce docker-ce-cli containerd.io

#5.启动docker
$ sudo systemctl start docker

#查看docker版本
$ docker version

#6.卸载docker
$ sudo yum remove docker-ce docker-ce-cli containerd.io
$ sudo rm -rf /var/lib/docker

#7.docker升级

```

> 阿里云镜像加速器

登录阿里云》产品》容器镜像服务》镜像中心》镜像加速器

```shell
sudo mkdir -p /etc/docker
sudo tee /etc/docker/daemon.json <<-'EOF'
{
  "registry-mirrors": ["https://w11sm5bc.mirror.aliyuncs.com"]
}
EOF
sudo systemctl daemon-reload
sudo systemctl restart docker
```

### docker命令

####  帮助命令

```shell
docker version #docker 版本信息
docker info #docker系统信息
docker --help
```

#### 镜像命令

> docker images 查看镜像

```shell
#查看镜像
[root@izm5ej6oiamq7sn8f00fboz /]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
#解释
REPOSITORY #镜像的仓库源
TAG        #标签
IMAGE ID   #镜像id
CREATED    #创建时间
SIZE       #大小
#可选项
Options:
  -a, --all             Show all images (default hides intermediate images)#列出所有镜像
      --digests         Show digests
  -f, --filter filter   Filter output based on conditions provided
      --format string   Pretty-print images using a Go template
      --no-trunc        Don't truncate output
  -q, --quiet           Only show numeric IDs #只显示镜像的id
```

> docker shearch 搜索镜像

```shell
[root@izm5ej6oiamq7sn8f00fboz /]# docker search mysql
NAME                              DESCRIPTION                                     STARS               OFFICIAL            AUTOMATED
mysql                             MySQL is a widely used, open-source relation…   9814                [OK]                
mariadb                           MariaDB is a community-developed fork of MyS…   3583                [OK]

#可选项
Options:
  -f, --filter filter   Filter output based on conditions provided
      --format string   Pretty-print search using a Go template
      --limit int       Max number of search results (default 25)
      --no-trunc        Don't truncate output
```

> docker pull 下载镜像

```shell
# doker pull 镜像名[:tag]

[root@izm5ej6oiamq7sn8f00fboz /]# docker pull mysql
Using default tag: latest #如果不写tag,默认就是latest
latest: Pulling from library/mysql
bf5952930446: Pull complete #分层下载，docker,image的核心 联合文件系统
8254623a9871: Pull complete 
938e3e06dac4: Pull complete 
ea28ebf28884: Pull complete 
f3cef38785c2: Pull complete 
894f9792565a: Pull complete 
1d8a57523420: Pull complete 
6c676912929f: Pull complete 
ff39fdb566b4: Pull complete 
fff872988aba: Pull complete 
4d34e365ae68: Pull complete 
7886ee20621e: Pull complete 
Digest: sha256:c358e72e100ab493a0304bda35e6f239db2ec8c9bb836d8a427ac34307d074ed #签名
Status: Downloaded newer image for mysql:latest 
docker.io/library/mysql:latest #真实地址

#这2个命令等价
docker pull mysql
docker pull docker.io/library/mysql:latest

# 可选项
Options:
  -a, --all-tags                Download all tagged images in the repository #下载的版本
      --disable-content-trust   Skip image verification (default true)
      --platform string         Set platform if server is multi-platform capable
  -q, --quiet                   Suppress verbose output

#指定版本下载
[root@izm5ej6oiamq7sn8f00fboz /]# docker pull mysql:5.7
5.7: Pulling from library/mysql
bf5952930446: Already exists  #上面已经下载了mysql，此文件公用就没有下载
8254623a9871: Already exists 
938e3e06dac4: Already exists 
ea28ebf28884: Already exists 
f3cef38785c2: Already exists 
894f9792565a: Already exists 
1d8a57523420: Already exists 
5f09bf1d31c1: Pull complete 
1b6ff254abe7: Pull complete 
74310a0bf42d: Pull complete 
d398726627fd: Pull complete 
Digest: sha256:da58f943b94721d46e87d5de208dc07302a8b13e638cd1d24285d222376d6d84
Status: Downloaded newer image for mysql:5.7
docker.io/library/mysql:5.7

```

> 删除镜像

```shell
docker rmi -f 镜像名称|镜像id
docker rmi -f $(docker images -aq) #递归删除所有镜像
```

#### 容器命令

> 启动容器

```shell
docker run [可选参数] image

#参数说明
Options:
      --add-host list                  Add a custom host-to-IP mapping (host:ip)
  -a, --attach list                    Attach to STDIN, STDOUT or STDERR
      --blkio-weight uint16            Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)
      --blkio-weight-device list       Block IO weight (relative device weight) (default [])
      --cap-add list                   Add Linux capabilities
      --cap-drop list                  Drop Linux capabilities
      --cgroup-parent string           Optional parent cgroup for the container
      --cidfile string                 Write the container ID to the file
      --cpu-period int                 Limit CPU CFS (Completely Fair Scheduler) period
      --cpu-quota int                  Limit CPU CFS (Completely Fair Scheduler) quota
      --cpu-rt-period int              Limit CPU real-time period in microseconds
      --cpu-rt-runtime int             Limit CPU real-time runtime in microseconds
  -c, --cpu-shares int                 CPU shares (relative weight)
      --cpus decimal                   Number of CPUs
      --cpuset-cpus string             CPUs in which to allow execution (0-3, 0,1)
      --cpuset-mems string             MEMs in which to allow execution (0-3, 0,1)
  -d, --detach                         Run container in background and print container ID #后台运行
      --detach-keys string             Override the key sequence for detaching a container
      --device list                    Add a host device to the container
      --device-cgroup-rule list        Add a rule to the cgroup allowed devices list
      --device-read-bps list           Limit read rate (bytes per second) from a device (default [])
      --device-read-iops list          Limit read rate (IO per second) from a device (default [])
      --device-write-bps list          Limit write rate (bytes per second) to a device (default [])
      --device-write-iops list         Limit write rate (IO per second) to a device (default [])
      --disable-content-trust          Skip image verification (default true)
      --dns list                       Set custom DNS servers
      --dns-option list                Set DNS options
      --dns-search list                Set custom DNS search domains
      --domainname string              Container NIS domain name
      --entrypoint string              Overwrite the default ENTRYPOINT of the image
  -e, --env list                       Set environment variables
      --env-file list                  Read in a file of environment variables
      --expose list                    Expose a port or a range of ports
      --gpus gpu-request               GPU devices to add to the container ('all' to pass all GPUs)
      --group-add list                 Add additional groups to join
      --health-cmd string              Command to run to check health
      --health-interval duration       Time between running the check (ms|s|m|h) (default 0s)
      --health-retries int             Consecutive failures needed to report unhealthy
      --health-start-period duration   Start period for the container to initialize before starting health-retries countdown (ms|s|m|h) (default 0s)
      --health-timeout duration        Maximum time to allow one check to run (ms|s|m|h) (default 0s)
      --help                           Print usage
  -h, --hostname string                Container host name
      --init                           Run an init inside the container that forwards signals and reaps processes
  -i, --interactive                    Keep STDIN open even if not attached # 使用交互式运行，进入容器查看内容 -it
      --ip string                      IPv4 address (e.g., 172.30.100.104)
      --ip6 string                     IPv6 address (e.g., 2001:db8::33)
      --ipc string                     IPC mode to use
      --isolation string               Container isolation technology
      --kernel-memory bytes            Kernel memory limit
  -l, --label list                     Set meta data on a container
      --label-file list                Read in a line delimited file of labels
      --link list                      Add link to another container
      --link-local-ip list             Container IPv4/IPv6 link-local addresses
      --log-driver string              Logging driver for the container
      --log-opt list                   Log driver options
      --mac-address string             Container MAC address (e.g., 92:d0:c6:0a:29:33)
  -m, --memory bytes                   Memory limit
      --memory-reservation bytes       Memory soft limit
      --memory-swap bytes              Swap limit equal to memory plus swap: '-1' to enable unlimited swap
      --memory-swappiness int          Tune container memory swappiness (0 to 100) (default -1)
      --mount mount                    Attach a filesystem mount to the container
      --name string                    Assign a name to the container #容器名称，用来区分容器
      --network network                Connect a container to a network
      --network-alias list             Add network-scoped alias for the container
      --no-healthcheck                 Disable any container-specified HEALTHCHECK
      --oom-kill-disable               Disable OOM Killer
      --oom-score-adj int              Tune host's OOM preferences (-1000 to 1000)
      --pid string                     PID namespace to use
      --pids-limit int                 Tune container pids limit (set -1 for unlimited)
      --platform string                Set platform if server is multi-platform capable
      --privileged                     Give extended privileges to this container
  -p, --publish list                   Publish a container's port(s) to the host #指定容器的端口 -p 主机:容器
  -P, --publish-all                    Publish all exposed ports to random ports #随机指定端口
      --read-only                      Mount the container's root filesystem as read only
      --restart string                 Restart policy to apply when a container exits (default "no")
      --rm                             Automatically remove the container when it exits
      --runtime string                 Runtime to use for this container
      --security-opt list              Security Options
      --shm-size bytes                 Size of /dev/shm
      --sig-proxy                      Proxy received signals to the process (default true)
      --stop-signal string             Signal to stop a container (default "SIGTERM")
      --stop-timeout int               Timeout (in seconds) to stop a container
      --storage-opt list               Storage driver options for the container
      --sysctl map                     Sysctl options (default map[])
      --tmpfs list                     Mount a tmpfs directory
  -t, --tty                            Allocate a pseudo-TTY
      --ulimit ulimit                  Ulimit options (default [])
  -u, --user string                    Username or UID (format: <name|uid>[:<group|gid>])
      --userns string                  User namespace to use
      --uts string                     UTS namespace to use
  -v, --volume list                    Bind mount a volume
      --volume-driver string           Optional volume driver for the container
      --volumes-from list              Mount volumes from the specified container(s)
  -w, --workdir string                 Working directory inside the container
  
  #测试，启动并进入容器
  [root@izm5ej6oiamq7sn8f00fboz /]# docker run -it centos /bin/bash
  [root@418a81204fe3 /]# 
  #退出容器 exit

```

> 列出正在运行的容器

```shell
docker ps [-a|-n]

#参数说明
Options:
  -a, --all             Show all containers (default shows just running)#显示正在运行的容器与历史运行过的容器
  -f, --filter filter   Filter output based on conditions provided
      --format string   Pretty-print containers using a Go template
  -n, --last int        Show n last created containers (includes all states) (default -1)#显示最近创建的容器 -n=5
  -l, --latest          Show the latest created container (includes all states)
      --no-trunc        Don't truncate output
  -q, --quiet           Only display numeric IDs #只显示编号
  -s, --size            Display total file sizes
```

> 退出容器

```shell
exit #直接退出容器并停止
Ctrl+p+q #容器不停止退出
```

> 删除容器

```shell
docker rm 容器id #不能删除真在运行的容器，强制删除 -f
docker rm -f $(docker ps -aq)
#参数说明
Options:
  -f, --force     Force the removal of a running container (uses SIGKILL)
  -l, --link      Remove the specified link
  -v, --volumes   Remove anonymous volumes associated with the container
```

> 启动与停止容器

```shell
docker start 容器id   #启动容器
docker restart 容器id #重启容器
docker stop 容器id    #停止容器
docker kill 容器id    #强制停止容器
```

#### 常用的其他命令

```
容器中安装ping
apt-get update && apt-get install iputils-ping

apt-get install telnet
```

> 后台启动容器

> 查看日志

```shell
docker logs -f -t --tail 10 容器id

#参数说明

Options:
      --details        Show extra details provided to logs
  -f, --follow         Follow log output 
      --since string   Show logs since timestamp (e.g. 2013-01-02T13:23:37) or relative (e.g. 42m for 42 minutes)
      --tail string    Number of lines to show from the end of the logs (default "all") //显示行数
  -t, --timestamps     Show timestamps //显示时间
      --until string   Show logs before a timestamp (e.g. 2013-01-02T13:23:37) or relative (e.g. 42m for 42 minutes)

```

> 查看容器进程信息

```shell
docker top 容器id
```

> 查看容器信息

```shell
docker inspect 容器id

#参数说明
Options:
  -f, --format string   Format the output using the given Go template
  -s, --size            Display total file sizes if the type is container
      --type string     Return JSON for specified type

[root@izm5ej6oiamq7sn8f00fboz ~]# docker inspect e82418bb61e9
[
    {
        "Id": "e82418bb61e9ffc147180e7ca69e65a71aecb2a07fb8db99a7ed7b877bfe7297",
        "Created": "2020-08-09T06:17:52.046741343Z",
        "Path": "/bin/bash",
        "Args": [],
        "State": {
            "Status": "running",
            "Running": true,
            "Paused": false,
            "Restarting": false,
            "OOMKilled": false,
            "Dead": false,
            "Pid": 4524,
            "ExitCode": 0,
            "Error": "",
            "StartedAt": "2020-08-09T06:17:52.409991314Z",
            "FinishedAt": "0001-01-01T00:00:00Z"
        },
        "Image": "sha256:831691599b88ad6cc2a4abbd0e89661a121aff14cfa289ad840fd3946f274f1f",
        "ResolvConfPath": "/var/lib/docker/containers/e82418bb61e9ffc147180e7ca69e65a71aecb2a07fb8db99a7ed7b877bfe7297/resolv.conf",
        "HostnamePath": "/var/lib/docker/containers/e82418bb61e9ffc147180e7ca69e65a71aecb2a07fb8db99a7ed7b877bfe7297/hostname",
        "HostsPath": "/var/lib/docker/containers/e82418bb61e9ffc147180e7ca69e65a71aecb2a07fb8db99a7ed7b877bfe7297/hosts",
        "LogPath": "/var/lib/docker/containers/e82418bb61e9ffc147180e7ca69e65a71aecb2a07fb8db99a7ed7b877bfe7297/e82418bb61e9ffc147180e7ca69e65a71aecb2a07fb8db99a7ed7b877bfe7297-json.log",
        "Name": "/pensive_northcutt",
        "RestartCount": 0,
        "Driver": "overlay2",
        "Platform": "linux",
        "MountLabel": "",
        "ProcessLabel": "",
        "AppArmorProfile": "",
        "ExecIDs": null,
        "HostConfig": {
            "Binds": null,
            "ContainerIDFile": "",
            "LogConfig": {
                "Type": "json-file",
                "Config": {}
            },
            "NetworkMode": "default",
            "PortBindings": {},
            "RestartPolicy": {
                "Name": "no",
                "MaximumRetryCount": 0
            },
            "AutoRemove": false,
            "VolumeDriver": "",
            "VolumesFrom": null,
            "CapAdd": null,
            "CapDrop": null,
            "Capabilities": null,
            "Dns": [],
            "DnsOptions": [],
            "DnsSearch": [],
            "ExtraHosts": null,
            "GroupAdd": null,
            "IpcMode": "private",
            "Cgroup": "",
            "Links": null,
            "OomScoreAdj": 0,
            "PidMode": "",
            "Privileged": false,
            "PublishAllPorts": false,
            "ReadonlyRootfs": false,
            "SecurityOpt": null,
            "UTSMode": "",
            "UsernsMode": "",
            "ShmSize": 67108864,
            "Runtime": "runc",
            "ConsoleSize": [
                0,
                0
            ],
            "Isolation": "",
            "CpuShares": 0,
            "Memory": 0,
            "NanoCpus": 0,
            "CgroupParent": "",
            "BlkioWeight": 0,
            "BlkioWeightDevice": [],
            "BlkioDeviceReadBps": null,
            "BlkioDeviceWriteBps": null,
            "BlkioDeviceReadIOps": null,
            "BlkioDeviceWriteIOps": null,
            "CpuPeriod": 0,
            "CpuQuota": 0,
            "CpuRealtimePeriod": 0,
            "CpuRealtimeRuntime": 0,
            "CpusetCpus": "",
            "CpusetMems": "",
            "Devices": [],
            "DeviceCgroupRules": null,
            "DeviceRequests": null,
            "KernelMemory": 0,
            "KernelMemoryTCP": 0,
            "MemoryReservation": 0,
            "MemorySwap": 0,
            "MemorySwappiness": null,
            "OomKillDisable": false,
            "PidsLimit": null,
            "Ulimits": null,
            "CpuCount": 0,
            "CpuPercent": 0,
            "IOMaximumIOps": 0,
            "IOMaximumBandwidth": 0,
            "MaskedPaths": [
                "/proc/asound",
                "/proc/acpi",
                "/proc/kcore",
                "/proc/keys",
                "/proc/latency_stats",
                "/proc/timer_list",
                "/proc/timer_stats",
                "/proc/sched_debug",
                "/proc/scsi",
                "/sys/firmware"
            ],
            "ReadonlyPaths": [
                "/proc/bus",
                "/proc/fs",
                "/proc/irq",
                "/proc/sys",
                "/proc/sysrq-trigger"
            ]
        },
        "GraphDriver": {
            "Data": {
                "LowerDir": "/var/lib/docker/overlay2/917182a6f54d7cb11d5524b58fd7c11b897ae4b2f28192bca9b0ac1d1b02366d-init/diff:/var/lib/docker/overlay2/3e0b6aaadf8eb7a1d9ea6b39a06fadbe3ba1b9d84be3b1fa21237a6c5cd7cde7/diff",
                "MergedDir": "/var/lib/docker/overlay2/917182a6f54d7cb11d5524b58fd7c11b897ae4b2f28192bca9b0ac1d1b02366d/merged",
                "UpperDir": "/var/lib/docker/overlay2/917182a6f54d7cb11d5524b58fd7c11b897ae4b2f28192bca9b0ac1d1b02366d/diff",
                "WorkDir": "/var/lib/docker/overlay2/917182a6f54d7cb11d5524b58fd7c11b897ae4b2f28192bca9b0ac1d1b02366d/work"
            },
            "Name": "overlay2"
        },
        "Mounts": [],
        "Config": {
            "Hostname": "e82418bb61e9",
            "Domainname": "",
            "User": "",
            "AttachStdin": false,
            "AttachStdout": false,
            "AttachStderr": false,
            "Tty": true,
            "OpenStdin": true,
            "StdinOnce": false,
            "Env": [
                "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
            ],
            "Cmd": [
                "/bin/bash"
            ],
            "Image": "centos",
            "Volumes": null,
            "WorkingDir": "",
            "Entrypoint": null,
            "OnBuild": null,
            "Labels": {
                "org.label-schema.build-date": "20200611",
                "org.label-schema.license": "GPLv2",
                "org.label-schema.name": "CentOS Base Image",
                "org.label-schema.schema-version": "1.0",
                "org.label-schema.vendor": "CentOS"
            }
        },
        "NetworkSettings": {
            "Bridge": "",
            "SandboxID": "24088c1e0849b8f3fed062a07805f09ae3e20a14c5a470f2b1b808aaedcd9c69",
            "HairpinMode": false,
            "LinkLocalIPv6Address": "",
            "LinkLocalIPv6PrefixLen": 0,
            "Ports": {},
            "SandboxKey": "/var/run/docker/netns/24088c1e0849",
            "SecondaryIPAddresses": null,
            "SecondaryIPv6Addresses": null,
            "EndpointID": "f5267643a96c81aa555083f46548f24f43ce18797a1803fde7d38ad07779d9df",
            "Gateway": "172.17.0.1",
            "GlobalIPv6Address": "",
            "GlobalIPv6PrefixLen": 0,
            "IPAddress": "172.17.0.2",
            "IPPrefixLen": 16,
            "IPv6Gateway": "",
            "MacAddress": "02:42:ac:11:00:02",
            "Networks": {
                "bridge": {
                    "IPAMConfig": null,
                    "Links": null,
                    "Aliases": null,
                    "NetworkID": "f5290d7f5afaa91e7e923d1d290e6934d0dfefe42f4a90488b9fbefe90c10c0d",
                    "EndpointID": "f5267643a96c81aa555083f46548f24f43ce18797a1803fde7d38ad07779d9df",
                    "Gateway": "172.17.0.1",
                    "IPAddress": "172.17.0.2",
                    "IPPrefixLen": 16,
                    "IPv6Gateway": "",
                    "GlobalIPv6Address": "",
                    "GlobalIPv6PrefixLen": 0,
                    "MacAddress": "02:42:ac:11:00:02",
                    "DriverOpts": null
                }
            }
        }
    }
]

```

> 进入当前正在运行的容器

```shell
docker exec -it 容器id /bin/bash

docker attach 容器id
```

> 从容器内拷贝文件到主机上

```shell
docker cp 容器id:容器内路径 目的地的主机路径
```

> 查看docker cpu状态

```shell
docker stats
```

> 容器卷操作

```shell
docker volume ls

Commands:
  create      Create a volume
  inspect     Display detailed information on one or more volumes
  ls          List volumes
  prune       Remove all unused local volumes
  rm          Remove one or more volumes

```

> 查看镜像构建历史

```shell
docker history 镜像id
```

> 查看docker网络

```shell
docker network ls

docker netword inspect networdId
```

> 删除

```shell
$ docker rmi $(docker images | grep "none" | awk '{print $3}')

$ docker stop $(docker ps -a | grep "Exited" | awk '{print $1 }') //停止容器

$ docker rm $(docker ps -a | grep "Exited" | awk '{print $1 }') //删除容器

$ docker rmi $(docker images | grep "none" | awk '{print $3}') //删除镜像
```

#### 练习

> 安装nginx

```shell
#1.搜索镜像
#2.下载镜像
docker pull nginx
#3.启动nginx
[root@izm5ej6oiamq7sn8f00fboz ~]# docker run -d --name nginx01 -p 8080:80 nginx
1925ec7efe1d3c88e6616e0958f8844768a763a374504d729fea39a011c903a7

```

### Docker 镜像

#### 镜像是什么

#### Docker镜像加载原理

#### 分层理解

#### commit镜像

```shell
#命令和git类似
docker commit -m='提交描述信息' -a='作者' 容器id 目标镜像名称:[TAG]

```

### 容器数据卷

> 数据持久化

![](http://image.apidata.vip/blog/article/2021-12-17/163972611142598147.png)

```shell
docker run -it -v 主机目录:容器内目录

[root@izm5ej6oiamq7sn8f00fboz ~]# docker run -d -p 8080:80 -v /home/wwwroot:/usr/share/nginx/html --name nginx01 nginx
4b0257f423ec18f1453fbae8b8c42deee52ad8696765cd1ca37aa6bc16b394c2

[root@izm5ej6oiamq7sn8f00fboz wwwroot]# docker inspect nginx01

```

#### 练习安装mysql

```shell
#下载镜像

#启动
docker run -d -p 3306:3306 -v /home/mysql/conf:/etc/mysql/conf.d -v /home/mysql/data:/var/lib/mysql -e MYSQL_ROOT_PASSWORD=123456 --name mysql01 mysql:5.7

#参数说明
-e #mysql配置
-v #挂载卷
```

#### 具名与匿名挂载

```shell
#匿名挂载
docker run -d -P --name nginx01 -v /etc/nginx nginx

docker volume ls

#具名挂载
docker run -d -P --name nginx02 -v juming-nginx:/etc/nginx nginx
docker volume ls
#查看卷
docker volume inspect juming-nginx

#拓展
docker run -d -P --name nginx02 -v juming-nginx:/etc/nginx:ro nginx #ro只读，只能从外部机改变文件
docker run -d -P --name nginx02 -v juming-nginx:/etc/nginx:rw nginx #rw 可读可写
```

**所有的docker容器内的卷，没有指定目录的情况下都是在**`/var/lib/docker/volumes/xxx/_data`

#### 数据卷容器

```shell
--volumes-form 父容器

# 子容器1->父容器->本地路径
########### ^
########### |
# 子容器2-----
########### ^
########### |
# 子容器3-----
```

### DockerFile

```shell
FROM #基础镜像，一切重这里开始
MAINTAINER #镜像是谁写的，姓名+邮箱
RUN #镜像构建的时候需要运行的命令
ADD #添加内容,如果是压缩包会自动解压
WORDDIR #镜像的工作目录
VOLUME #挂载的目录
EXPOSE #指定暴露端口
CMD #指定这个容器启动的时候运行的命令，只有最后一个会生效，可被替代
ENTRYPOINT #指定容器启动的时候要运行的命令，可以追加命令
ONBUILD #当构建一个被继承DockerFile这个时候会运行，触发指令
COPY #文件拷贝到镜像中，不会解压，类似ADD
LABEL #指定元数据
ENV #设置环境变量
ARG #只有构建的时候生效，设置参数

RUN构建镜像的时候运行,CMD容器启动的时候才会运行。执行的时机不一样
# 启动容器时不传参默认使用的是CMD默认参数，不传参如果有ENTRYPOINT，CMD参数会被ENTRYPOINT使用
#如果传参CMD就不会生效或者被覆盖。如果有ENTRYPOINT,传递的参数会被ENTRYPOINT使用
```

> 练习

```dockerfile
#创建Dockerfile文件，名称可自定义,如果使用Dockerfile命名就不用加-f，build的时候会自动寻找Dockerfile文件
FROM centos #基于centos或者某个镜像构建新镜像
MAINTAINER code<809686569@qq.com> #作者

ENV MYPATH /usr/local #设置环境变量
WORKDIR $MYPATH #工作目录，进入容器时默认目录，如果不存在这个目录会自动创建

RUN yum -y install vim #安装vim
RUN yum -y install net-tools #安装net-tools

EXPOSE 80 #暴露80端口

CMD /bin/bash #启动容器的时候要运行的命令，

#打包镜像
[root@izm5ej6oiamq7sn8f00fboz docker-centos]# docker build -f dockerfile -t mycentos:0.1 .
# -f 指定要使用的Dockerfile路径，使用默认文件时不用指定
# -t 指定打包后镜像的名称和版本，第二个参数为Dockerfile文件所在目录
# .指定上下文。比如Dockerfile里面用到了相对路径，构建时docker并不知道路径的具体位置
# .号是指镜像构建时打包上传到Docker引擎中的文件的目录,不是本机目录。构建镜像是在Docker引擎完成并不是Docker客户端
```

```dockerfile
FROM golang:alpine

# 为我们的镜像设置必要的环境变量
ENV GO111MODULE=on \
    CGO_ENABLED=0 \
    GOOS=linux \
    GOARCH=amd64

# 移动到工作目录：/build
WORKDIR /build

# 将代码复制到容器中，第一个参数为当前目录，第二个为容器默认目录
COPY . . #把当前代码复制到工作目录。因为默认进去为工作目录，所以使用"."。目录名称都可以自定义

# 将我们的代码编译成二进制可执行文件app
RUN go build -o app .

# 移动到用于存放生成的二进制文件的 /dist 目录
WORKDIR /dist

# 将二进制文件从 /build 目录复制到这里
RUN cp /build/app .

# 声明服务端口
EXPOSE 8888

# 启动容器时运行的命令
CMD ["/dist/app"]
```

```dockerfile
FROM golang:latest
MAINTAINER code<809686569@qq.com>

WORKDIR /home/free_cms

COPY . $WORKDIR

RUN go env -w GOPROXY=https://goproxy.cn,direct
RUN go mod tidy
RUN go build main.go

EXPOSE 9000

```

### 发布docker镜像

> 注册账号

hub.docker.com

```shell
#登录
docker login -u xxx -p xxx
#提交
docker push 作者名/镜像名称:版本号

#修改镜像名称
docker tag 镜像id 名称:版本号
```

> 发布镜像到阿里云

1.登录阿里云

2.找到镜像服务

3.创建命名空间

4.创建容器镜像

### Docker网络

1.只要安装了docker，linux上就会有一个docker0网卡，桥接模式，使用的技术是evth.pair技术

2.每启动一个docker容器，docker就会给docker容器分配一个IP，每次生成ip可能会不一样，和主机网卡成对出现。如果需要固定ip可以通过自定义网络解决

3.容器删除，对应网桥一对也会删除

4.容器之间可以通过ip，ping通，如果要通过容器名平通需要另外配置

> docker 默认网络模型

![](http://image.apidata.vip/blog/article/2021-12-17/163972627629364736.png)

![](http://image.apidata.vip/blog/article/2021-12-17/163972630380361185.png)

#### 容器互联

> 如果需要通过容器名访问需要配置link

![](http://image.apidata.vip/blog/article/2021-12-17/16397263287419490.png)

![](http://image.apidata.vip/blog/article/2021-12-17/163972636453588745.png)
```shell
--link #已不推荐使用
```

#### 自定义网络

```shell
docker network create --driver bridge --subnet 192.168.0.0/16 --gateway 192.168.0.1 mynet

[root@izm5ej6oiamq7sn8f00fboz home]# docker network ls
NETWORK ID          NAME                DRIVER              SCOPE
f5290d7f5afa        bridge              bridge              local
1cc5560b1667        host                host                local
ac383a2020f2        mynet               bridge              local
34ceb08e890c        none                null                local

[root@izm5ej6oiamq7sn8f00fboz home]# docker network inspect mynet
[
    {
        "Name": "mynet",
        "Id": "ac383a2020f2dead2ed936d1281519abc5bcb7a324248e14dc811c9d24d88665",
        "Created": "2020-08-11T18:28:10.277017846+08:00",
        "Scope": "local",
        "Driver": "bridge",
        "EnableIPv6": false,
        "IPAM": {
            "Driver": "default",
            "Options": {},
            "Config": [
                {
                    "Subnet": "192.168.0.0/16",
                    "Gateway": "192.168.0.1"
                }
            ]
        },
        "Internal": false,
        "Attachable": false,
        "Ingress": false,
        "ConfigFrom": {
            "Network": ""
        },
        "ConfigOnly": false,
        "Containers": {},
        "Options": {},
        "Labels": {}
    }
]

docker run -d -P --name nginx-net-01 --net mynet nginx #测试，启动nginx并连接到自定义网络mynet

```

##### 网络连通

> 2个不同网络段容器互相连接实现，docker0上的nginx01与mynet的连接。nginx01就可以与mynet网络上的容器互相访问
>
> docker0 上的nginx01连接到自定义网络 mynet

`docker network connect mynet nginx01`

**测试**

```shell
1.
docker network create --driver bridge --subnet 192.169.0.0/16 --gateway 192.169.0.1 test 
2.
docker run -d -P --name tomcat-net-01 --net test tomcat
3.
docker run -d -P --name tomcat-net-02 tomcat
4.
docker network connect test tomcat-net-02
5.
docker exec -it tomcat-net-02 ping tomcat-net-01
docker exec -it tomcat-net-01 ping tomcat-net-02
```

![](http://image.apidata.vip/blog/article/2021-12-17/163972639134738050.png)

> 结论：相互之间可以ping通

#### redis集群

```shell
docker network create redis --subnet 172.38.0.0/16
```

### docker-compose

> 安装docker-compose

```shell
curl -L https://get.daocloud.io/docker/compose/releases/download/1.25.5/docker-compose-`uname -s`-`uname -m` > /usr/local/bin/docker-compose

sudo chmod +x /usr/local/bin/docker-compose

sudo ln -s /usr/local/bin/docker-compose /usr/bin/docker-compose
```

> docker-compose 启动的时候会自动创建自定义网络非docker0

#### 参数说明

```
Usage:  docker compose [OPTIONS] COMMAND

Docker Compose

Options:
      --ansi string                Control when to print ANSI control
                                   characters ("never"|"always"|"auto")
                                   (default "auto")
      --compatibility              Run compose in backward compatibility mode
      --env-file string            Specify an alternate environment file.
  -f, --file stringArray           Compose configuration files
      --profile stringArray        Specify a profile to enable
      --project-directory string   Specify an alternate working directory
                                   (default: the path of the Compose file)
  -p, --project-name string        Project name

Commands:
  build       Build or rebuild services
  convert     Converts the compose file to platform's canonical format
  cp          Copy files/folders between a service container and the local filesystem
  create      Creates containers for a service.
  down        Stop and remove containers, networks
  events      Receive real time events from containers.
  exec        Execute a command in a running container.
  images      List images used by the created containers
  kill        Force stop service containers.
  logs        View output from containers
  ls          List running compose projects
  pause       Pause services
  port        Print the public port for a port binding.
  ps          List containers
  pull        Pull service images
  push        Push service images
  restart     Restart containers
  rm          Removes stopped service containers
  run         Run a one-off command on a service.
  start       Start services
  stop        Stop services
  top         Display the running processes
  unpause     Unpause services
  up          Create and start containers
  version     Show the Docker Compose version information
```

```yaml
version: "3.8"

#自定义网络
networks:
  network:
    ipam:
      driver: default
      config:
        - subnet: '177.7.0.0/16'
#服务
services:
  web: #前端
    build:  #镜像打包配置
      context: ./web
      dockerfile: ./Dockerfile
    container_name: gogin_web #容器名
    restart: always #docker重启时容器自动重启
    ports: #暴露端口
      - '8080:8080'
    depends_on: #依赖
      - server
    command: [ 'nginx-debug', '-g', 'daemon off;' ] #容器启动后的配置参数
    networks: #当前容器网络设置
      network:
        ipv4_address: 177.7.0.11
#后端
  server:
      build:
        context: ./server
        dockerfile: ./Dockerfile
      container_name: gogin_server
      restart: always
      ports:
        - "9090:9090"
      depends_on:
        - mysql
      volumes:
        - ./server/static/upload:/go/src/gogin/static
        - ./server/logs:/go/src/gogin/logs
      networks:
        network:
          ipv4_address: 177.7.0.12
 #mysql
  mysql:
    image: mysql:5.7
    container_name: gogin_mysql
    restart: always
    ports:
      - "3306:3306"
    volumes:
      - ./server/mysql/conf:/etc/mysql/conf.d
      - ./server/mysql/data:/var/lib/mysql
    environment:
      MYSQL_ROOT_PASSWORD: zexkWNk2ciGmE3rf
    networks:
      network:
        ipv4_address: 177.7.0.13

version: "3.8"
services:
    free_cms:
        build: .
        image: free_cms
        depends_on:
          - mysql
        command: /bin/bash -c "./wait-for-it.sh mysql:3306 && ./main"
        volumes:
        - ./static/upload:/home/free_cms/static/upload
        networks:
        - freecms_bridge
        ports:
        - 9000:9000
    mysql:
      image: mysql:5.7
      container_name: freecms_mysql
      volumes:
        - /home/free_cms/mysql/conf:/etc/mysql/conf.d
        - /home/free_cms/mysql/data:/var/lib/mysql
      networks:
      - freecms_bridge
      environment:
        MYSQL_ROOT_PASSWORD: jia@@3ja12ji3b3
networks:
  freecms_bridge:
    driver: bridge
    external: true

```

### docker-compose.yaml

```shell
version #版本

```

```shell
version: "3.8"
services:
    free_cms:
        build: .
        image: free_cms
        ports:
          - "80:8000"
        depends_on:
          - mysql
        command: /bin/bash -c "./wait-for-it.sh mysql:3306 && ./main"
    mysql:
      image: mysql:5.7
      container_name: mysql
      ports:
        - "3306:3306"
      volumes:
        - /home/mysql/conf:/etc/mysql/conf.d
        - /home/mysql/data:/var/lib/mysql
      environment:
        MYSQL_ROOT_PASSWORD: 123456
```

### docker-mysql集群

#### pxc

> 1.获取pxc镜像

```
#获取pxc镜像
docker pull percona/percona-xtradb-cluster
#重命名
docker tag percona/percona-xtradb-cluster pxc
#查看镜像列表
docker images
----------------------------------------------------------------------------------------------
REPOSITORY                                 TAG                 IMAGE ID            CREATED             SIZE
docker.io/percona/percona-xtradb-cluster   latest              7ad1b9c338b6        5 weeks ago         413 MB
pxc    
```

> 2.创建网段net1（注意不要与宿主机ip段一样，如果一样冲突会导致外部链接不上docker上安装的mysql）

```
#创建网段net1
docker network create --subnet=172.18.0.0/16 net1
 
#查看net1网段
docker inspect net1
 
#删除net1网段
docker network rm net1
```

> 3、创建5个数据卷（pxc无法直接存取宿主机的数据，通过docker卷来存储）

```
#创建数据卷
docker volume create v1
docker volume create v2
docker volume create v3
docker volume create v4
docker volume create v5
 
#查看数据卷
docker inspect v1
```

> 4.创建5个pxc节点

```
#创建第1个MySQL节点
docker run -d -p 3306:3306 -e MYSQL_ROOT_PASSWORD=abc123456 -e CLUSTER_NAME=PXC -e XTRABACKUP_PASSWORD=abc123456 -v v1:/var/lib/mysql -v backup:/data --privileged --name=node1 --net=net1 --ip 172.18.0.2 pxc
 
--------------------------------------------------------------------------------
-d：表示后台运行
-v：映射Docker卷到容器的mysql数据目录
MYSQL_ROOT_PASSWORD：表示创建的数据库密码
CLUSTER_NAME： 表示创建出的集群名字
XTRABACKUP_PASSWORD：表示集群通信密码
--privileged：表示分配最高权限
--net：指定网段
--ip：指定IP
```

>  等待2分钟后，再创建第二个节点，等待第一个节点实例化完毕后，才能开启第二个节点实例，不然可能会出现瞬间停止

```
#创建第2个MySQL节点
docker run -d -p 3307:3306 -e MYSQL_ROOT_PASSWORD=abc123456 -e CLUSTER_NAME=PXC -e XTRABACKUP_PASSWORD=abc123456 -e CLUSTER_JOIN=node1 -v v2:/var/lib/mysql -v backup:/data --privileged --name=node2 --net=net1 --ip 172.18.0.3 pxc
#创建第3个MySQL节点
docker run -d -p 3308:3306 -e MYSQL_ROOT_PASSWORD=abc123456 -e CLUSTER_NAME=PXC -e XTRABACKUP_PASSWORD=abc123456 -e CLUSTER_JOIN=node1 -v v3:/var/lib/mysql --privileged --name=node3 --net=net1 --ip 172.18.0.4 pxc
#创建第4个MySQL节点
docker run -d -p 3309:3306 -e MYSQL_ROOT_PASSWORD=abc123456 -e CLUSTER_NAME=PXC -e XTRABACKUP_PASSWORD=abc123456 -e CLUSTER_JOIN=node1 -v v4:/var/lib/mysql --privileged --name=node4 --net=net1 --ip 172.18.0.5 pxc
#创建第5个MySQL节点
docker run -d -p 3310:3306 -e MYSQL_ROOT_PASSWORD=abc123456 -e CLUSTER_NAME=PXC -e XTRABACKUP_PASSWORD=abc123456 -e CLUSTER_JOIN=node1 -v v5:/var/lib/mysql -v backup:/data --privileged --name=node5 --net=net1 --ip 172.18.0.6 pxc

/bin/sh -c "while true;do echo hello;sleep 5;done"
```

> 5、查看容器mysql节点列表

```
docker ps #

docker exec -it nodel /bin/bash

mysql -u root -p

注意：宿主机重启后使用docker start node1  启动任意节点失败，是因为集群之前的同步机制造成的，启动任何一个节点，该节点都会去其它节点同步数据，其它节点仍处于宕机状态，所以该节点启动失败，这也是pxc集群的强一致性的表现，解决方式是，删除所有节点docker rm node1 node2 node3 node4 node 5  和数据卷中的grastate.dat文件  ，然后，重新执行集群创建的命令即可，因为数据都在数据卷中，所有放心，集群重新启动都数据仍然都在.（如果有某一个节点启动失败，可以删除该节点，然后重新执行创建命令，数据会同步过来）

#删除所有节点
docker rm node1 node2 node3 node4 node5 
#输出数据卷中的grastate.dat文件
rm -rf /var/lib/docker/volumes/v1/_data/grastate.dat
rm -rf /var/lib/docker/volumes/v2/_data/grastate.dat
rm -rf /var/lib/docker/volumes/v3/_data/grastate.dat
rm -rf /var/lib/docker/volumes/v4/_data/grastate.dat
rm -rf /var/lib/docker/volumes/v5/_data/grastate.dat
```

```
CREATE USER 'haproxy'@'%' IDENTIFIED BY '';

mysql_ssl_rsa_setup uid=mysql
    chown -R mysql.mysql *.pem
```

#### haproxy

```
docker pull haproxy

```

```
vim /home/soft/haproxy/haproxy.cfg
 
 
 
global
    #工作目录
    chroot /usr/local/etc/haproxy
    #日志文件，使用rsyslog服务中local5日志设备（/var/log/local5），等级info
    log 127.0.0.1 local5 info
    #守护进程运行
    daemon

defaults
    log global
    mode    http
    #日志格式
    option  httplog
    #日志中不记录负载均衡的心跳检测记录
    option  dontlognull
    #连接超时（毫秒）
    timeout connect 5000
    #客户端超时（毫秒）
    timeout client  50000
    #服务器超时（毫秒）
    timeout server  50000

#监控界面   
listen  admin_stats
    #监控界面的访问的IP和端口
    bind  0.0.0.0:8888
    #访问协议
    mode        http
    #URI相对地址
    stats uri   /dbs
    #统计报告格式
    stats realm     Global\ statistics
    #登陆帐户信息
    stats auth  admin:abc123456
#数据库负载均衡
listen  proxy-mysql
    #访问的IP和端口
    bind  0.0.0.0:3306  
    #网络协议
    mode  tcp
    #负载均衡算法（轮询算法）
    #轮询算法：roundrobin
    #权重算法：static-rr
    #最少连接算法：leastconn
    #请求源IP算法：source 
    balance  roundrobin
    #日志格式
    option  tcplog
    #在MySQL中创建一个没有权限的haproxy用户，密码为空。Haproxy使用这个账户对MySQL数据库心跳检测
    option  mysql-check user haproxy
    server  MySQL_1 172.18.0.2:3306 check weight 1 maxconn 2000  
    server  MySQL_2 172.18.0.3:3306 check weight 1 maxconn 2000  
    server  MySQL_3 172.18.0.4:3306 check weight 1 maxconn 2000 
    server  MySQL_4 172.18.0.5:3306 check weight 1 maxconn 2000
    server  MySQL_5 172.18.0.6:3306 check weight 1 maxconn 2000
    #使用keepalive检测死链
    option  tcpka
```

```
docker run -it -d -p 4001:8888 -p 4002:3306 -v /home/soft/haproxy:/usr/local/etc/haproxy --name h1 --privileged --net=net1 --ip 172.18.0.7 haproxy
```

```
docker exec -it h1 bash
haproxy -f /usr/local/etc/haproxy/haproxy.cfg

访问http://ip:4001/dbs
```

关注博客，更多精彩分享，敬请期待！

Tags：

很赞哦！ (0)

上一篇：dedecms织梦富文本编辑器更换为kindeditor

下一篇：fastadmin弹出层中之间带参数进行跳转，并且主页面 Toastr`消息展示