Docker的常用命令
帮助命令:
docker version #当前版本信息
docker info #显示docker的系统信息,包括镜像和容器的数量
docker 命令 --help #帮助命令
帮助文档的地址:https://docs.docker.com/engine/reference/commandline
镜像命令
docker images : 查看所有本机的主机上的镜像
[root@Panghl /]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
hello-world latest bf756fb1ae65 10 months ago 13.3kB
#解释
REPOSITORY 镜像的仓库源
TAG 镜像的标签
IMAGE ID 镜像的id
CREATED 创建时间
SIZE 镜像的大小
-a, --all 列出所有镜像
-q, --quiet 只显示镜像的id
docker search : 搜索镜像
[root@Panghl /]# docker search mysql
NAME DESCRIPTION STARS OFFICIAL AUTOMATED
mysql MySQL is a widely used, open-source relation… 10190 [OK]
mariadb MariaDB is a community-developed fork of MyS… 3753 [OK]
#可选项,通过搜索规则来过滤
--filter=STARS=3000 #搜索出来的镜像就是STARS大于3000的
docker search mysql --filter=STARS=3000
NAME DESCRIPTION STARS OFFICIAL AUTOMATED
mysql MySQL is a widely used, open-source relation… 10190 [OK]
mariadb MariaDB is a community-developed fork of MyS… 3753 [OK]
docker pull : 下载镜像
#下载镜像 docker pull 镜像名[:TAG]
[root@Panghl bin]# docker pull mysql
Using default tag: latest
latest: Pulling from library/mysql
852e50cd189d: Pull complete
29969ddb0ffb: Pull complete
a43f41a44c48: Pull complete
5cdd802543a3: Pull complete
b79b040de953: Pull complete
938c64119969: Pull complete
7689ec51a0d9: Pull complete
a880ba7c411f: Pull complete
984f656ec6ca: Pull complete
9f497bce458a: Pull complete
b9940f97694b: Pull complete
2f069358dc96: Pull complete
Digest: sha256:4bb2e81a40e9d0d59bd8e3dc2ba5e1f2197696f6de39a91e90798dd27299b093 #签名
Status: Downloaded newer image for mysql:latest
docker.io/library/mysql:latest #真实地址
#等价于它
docker pull mysql
docker pull docker.io/library/mysql:latest
#指定版本下载
[root@Panghl bin]# docker pull mysql:5.7
5.7: Pulling from library/mysql
852e50cd189d: Already exists
29969ddb0ffb: Already exists
a43f41a44c48: Already exists
5cdd802543a3: Already exists
b79b040de953: Already exists
938c64119969: Already exists
7689ec51a0d9: Already exists
36bd6224d58f: Pull complete
cab9d3fa4c8c: Pull complete
1b741e1c47de: Pull complete
aac9d11987ac: Pull complete
Digest: sha256:8e2004f9fe43df06c3030090f593021a5f283d028b5ed5765cc24236c2c4d88e
Status: Downloaded newer image for mysql:5.7
docker.io/library/mysql:5.7
docker rmi :删除镜像
[root@Panghl bin]# docker rmi -f 容器id #删除指定的容器
[root@Panghl bin]# docker rmi -f 容器id 容器id 容器id #删除多个容器
[root@Panghl bin]# docker rmi -f $(docker images -aq) #删除全部的容器
容器命令
说明:我们有了镜像才可以创建容器,linux ,下载一个centos镜像来测试学习
docker pull centos
新建容器并启动
docker run [可选参数] image
#参数说明
--name="Name" 容器名字 tomcat01 tomcat02 用来区分容器
-d 后台方式运行
-it 使用交互方式运行,进入容器查看内容
-p 指定容器的端口 -p 8080:8080
-p ip:主机端口:容器端口
-p 主机端口:容器端口(常用)
-p 容器端口
容器端口
-p 随机指定端口
#测试:启动并进入容器
[root@Panghl bin]# docker run -it centos /bin/bash
[root@147e244b0c06 /]#ls #查看容器内的centos:基本版本,很多命令都是不完善的!
bin dev etc home lib lib64 lost+found media mnt opt proc root run sbin srv sys tmp usr var
#从容器中退回主机
[root@147e244b0c06 /]# exit
exit
列出所有正在运行的容器
#docker ps 命令
#列出当前正在运行的容器
-a #列出当前正在运行的容器+带出历史运行过的容器
-n=? #显示最近创建的容器
-q #只显示容器的编号
#列出当前正在运行的容器
[root@Panghl /]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
[root@Panghl /]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
147e244b0c06 centos "/bin/bash" 4 minutes ago Exited (0) 3 minutes ago dreamy_lalande
cfe9c0ae16f9 bf756fb1ae65 "/hello" About an hour ago Exited (0) About an hour ago cocky_keller
cocky_keller
退出容器
exit #直接容器停止并退出
Ctrl + P + Q #容器不停止退出
删除容器
docker rm 容器id #删除指定的容器
docker rm -f $(docker ps -aq) #删除所有的容器
docker ps -a -q|xargs docker rm #删除所有的容器
启动和停止容器的操作
docker start 容器id #启动容器
docker restart 容器id #重启容器
docker stop 容器id #重启容器
docker kill 容器id #杀死容器
docker部署mysql,tomcat,nginx,oracle可参考另一篇播客:https://blog.csdn.net/qq_45441466/article/details/109448345
常用其他命令
后台启动容器
#命令 docker run -d 镜像名!
[root@Panghl ~]# docker run -d centos
#问题docker ps ,发现centos 停止了
#常见的坑:docker 容器使用后台运行,就必须要有要一个前台进程,docker发现没有应用,就会自动停止
#nginx,容器启动后,发现自己没有提供服务,就会立刻停止,就是没有程序了
查看日志
docker logs -f -t --tail 容器,没有日志
#自己编写一段shell脚本:
[root@Panghl ~]# docker run -d centos /bin/sh -c "while true;do echo panghl;sleep 1;done";
[root@Panghl ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED
d1bb8be8ce28 centos "/bin/sh -c 'while t…" 27 seconds ago
#显示日志
-ft #显示日志
--tail number #要显示的行数
[root@Panghl ~]# docker logs -ft --tail 10 d1bb8be8ce28
[root@Panghl ~]# docker logs -ft d1bb8be8ce28
查看容器中进程信息 ps
#命令 docker top 容器id
[root@Panghl ~]# docker top d1bb8be8ce28
UID PID PPID C STIME TTY TIME CMD
root 197925 197909 0 23:03 ? 00:00:00 /bin/sh -c while true;do echo panghl;sleep 1;done
root 199812 197925 0 23:08 ? 00:00:00 /usr/bin/coreutils --coreutils-prog-shebang=sleep /usr/bin/sleep 1
查看镜像的元数据
#命令 docker inspect 容器id
#测试
[root@Panghl ~]# docker inspect d1bb8be8ce28
[
{
"Id": "d1bb8be8ce2840a73befed938fd05be6054ecaf4d28ee00bc22c752904394b96",
"Created": "2020-11-24T15:03:57.139455201Z",
"Path": "/bin/sh",
"Args": [
"-c",
"while true;do echo panghl;sleep 1;done"
],
"State": {
"Status": "running",
"Running": true,
"Paused": false,
"Restarting": false,
"OOMKilled": false,
"Dead": false,
"Pid": 197925,
"ExitCode": 0,
"Error": "",
"StartedAt": "2020-11-24T15:03:57.573240336Z",
"FinishedAt": "0001-01-01T00:00:00Z"
},
"Image": "sha256:0d120b6ccaa8c5e149176798b3501d4dd1885f961922497cd0abef155c869566",
"ResolvConfPath": "/var/lib/docker/containers/d1bb8be8ce2840a73befed938fd05be6054ecaf4d28ee00bc22c752904394b96/resolv.conf",
"HostnamePath": "/var/lib/docker/containers/d1bb8be8ce2840a73befed938fd05be6054ecaf4d28ee00bc22c752904394b96/hostname",
"HostsPath": "/var/lib/docker/containers/d1bb8be8ce2840a73befed938fd05be6054ecaf4d28ee00bc22c752904394b96/hosts",
"LogPath": "/var/lib/docker/containers/d1bb8be8ce2840a73befed938fd05be6054ecaf4d28ee00bc22c752904394b96/d1bb8be8ce2840a73befed938fd05be6054ecaf4d28ee00bc22c752904394b96-json.log",
"Name": "/wonderful_galileo",
"RestartCount": 0,
"Driver": "overlay2",
"Platform": "linux",
"MountLabel": "",
"ProcessLabel": "",
"AppArmorProfile": "",
"ExecIDs": null,
"HostConfig": {
"Binds": null,
"ContainerIDFile": "",
"LogConfig": {
"Type": "json-file",
"Config": {}
},
"NetworkMode": "default",
"PortBindings": {},
"RestartPolicy": {
"Name": "no",
"MaximumRetryCount": 0
},
"AutoRemove": false,
"VolumeDriver": "",
"VolumesFrom": null,
"CapAdd": null,
"CapDrop": null,
"Dns": [],
"DnsOptions": [],
"DnsSearch": [],
"ExtraHosts": null,
"GroupAdd": null,
"IpcMode": "shareable",
"Cgroup": "",
"Links": null,
"OomScoreAdj": 0,
"PidMode": "",
"Privileged": false,
"PublishAllPorts": false,
"ReadonlyRootfs": false,
"SecurityOpt": null,
"UTSMode": "",
"UsernsMode": "",
"ShmSize": 67108864,
"Runtime": "runc",
"ConsoleSize": [
0,
0
],
"Isolation": "",
"CpuShares": 0,
"Memory": 0,
"NanoCpus": 0,
"CgroupParent": "",
"BlkioWeight": 0,
"BlkioWeightDevice": [],
"BlkioDeviceReadBps": null,
"BlkioDeviceWriteBps": null,
"BlkioDeviceReadIOps": null,
"BlkioDeviceWriteIOps": null,
"CpuPeriod": 0,
"CpuQuota": 0,
"CpuRealtimePeriod": 0,
"CpuRealtimeRuntime": 0,
"CpusetCpus": "",
"CpusetMems": "",
"Devices": [],
"DeviceCgroupRules": null,
"DiskQuota": 0,
"KernelMemory": 0,
"MemoryReservation": 0,
"MemorySwap": 0,
"MemorySwappiness": null,
"OomKillDisable": false,
"PidsLimit": 0,
"Ulimits": null,
"CpuCount": 0,
"CpuPercent": 0,
"IOMaximumIOps": 0,
"IOMaximumBandwidth": 0,
"MaskedPaths": [
"/proc/asound",
"/proc/acpi",
"/proc/kcore",
"/proc/keys",
"/proc/latency_stats",
"/proc/timer_list",
"/proc/timer_stats",
"/proc/sched_debug",
"/proc/scsi",
"/sys/firmware"
],
"ReadonlyPaths": [
"/proc/bus",
"/proc/fs",
"/proc/irq",
"/proc/sys",
"/proc/sysrq-trigger"
]
},
"GraphDriver": {
"Data": {
"LowerDir": "/var/lib/docker/overlay2/9aa134204dae098c98eb8a3af9ba07f49ab5ce4fa6a7cfbc8b3a8fcdd59e0ac3-init/diff:/var/lib/docker/overlay2/56c5dff37b4109c79aef8631104cc677513285153bb0ff615ad277a6f8cff542/diff",
"MergedDir": "/var/lib/docker/overlay2/9aa134204dae098c98eb8a3af9ba07f49ab5ce4fa6a7cfbc8b3a8fcdd59e0ac3/merged",
"UpperDir": "/var/lib/docker/overlay2/9aa134204dae098c98eb8a3af9ba07f49ab5ce4fa6a7cfbc8b3a8fcdd59e0ac3/diff",
"WorkDir": "/var/lib/docker/overlay2/9aa134204dae098c98eb8a3af9ba07f49ab5ce4fa6a7cfbc8b3a8fcdd59e0ac3/work"
},
"Name": "overlay2"
},
"Mounts": [],
"Config": {
"Hostname": "d1bb8be8ce28",
"Domainname": "",
"User": "",
"AttachStdin": false,
"AttachStdout": false,
"AttachStderr": false,
"Tty": false,
"OpenStdin": false,
"StdinOnce": false,
"Env": [
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
],
"Cmd": [
"/bin/sh",
"-c",
"while true;do echo panghl;sleep 1;done"
],
"Image": "centos",
"Volumes": null,
"WorkingDir": "",
"Entrypoint": null,
"OnBuild": null,
"Labels": {
"org.label-schema.build-date": "20200809",
"org.label-schema.license": "GPLv2",
"org.label-schema.name": "CentOS Base Image",
"org.label-schema.schema-version": "1.0",
"org.label-schema.vendor": "CentOS"
}
},
"NetworkSettings": {
"Bridge": "",
"SandboxID": "712858d7712e55f7d2804df40e24ee1e1a991617828c5bbc5a85905a7f712010",
"HairpinMode": false,
"LinkLocalIPv6Address": "",
"LinkLocalIPv6PrefixLen": 0,
"Ports": {},
"SandboxKey": "/var/run/docker/netns/712858d7712e",
"SecondaryIPAddresses": null,
"SecondaryIPv6Addresses": null,
"EndpointID": "c73b71674dbf11dba9217f372b0011e3047317081b709169a02e4bedc64d55b6",
"Gateway": "172.17.0.1",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"IPAddress": "172.17.0.2",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"MacAddress": "02:42:ac:11:00:02",
"Networks": {
"bridge": {
"IPAMConfig": null,
"Links": null,
"Aliases": null,
"NetworkID": "05c359e813c0b39d7bf0a84a4e725175686547ebd7beb05f85791bfc475aeb44",
"EndpointID": "c73b71674dbf11dba9217f372b0011e3047317081b709169a02e4bedc64d55b6",
"Gateway": "172.17.0.1",
"IPAddress": "172.17.0.2",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"MacAddress": "02:42:ac:11:00:02",
"DriverOpts": null
}
}
}
}
]
进入当前正在运行的容器
#我们通常容器都是使用后台方式运行的,需要进入容器,修改一些配置
#命令
docker exec -it 容器id bashShell
#测试
[root@Panghl ~]# docker exec -it d1bb8be8ce28 /bin/bash
[root@d1bb8be8ce28 /]# ls
bin dev etc home lib lib64 lost+found media mnt opt proc root run sbin srv sys tmp usr var
#方式二
docker attach 容器id
#测试
[root@Panghl ~]# docker attach d1bb8be8ce28
正在执行当前的代码...
#docker exec #进入容器后开启一个新的终端,可以在里面操作(常用)
#docker attach #进入容器正在执行的终端,不会启动新的进程!
从容器拷贝文件到主机上
docker cp 容器id:容器内路径 目的的主机路径
#进入docker容器内部
[root@Panghl home]# docker attach 1ee69396f3f6
[root@1ee69396f3f6 /]# ls
bin dev etc home lib lib64 lost+found media mnt opt proc root run sbin srv sys tmp usr var
[root@1ee69396f3f6 /]# cd /home/
[root@1ee69396f3f6 home]# ls
#在容器内新建一个文件
[root@1ee69396f3f6 home]# touch test.java
[root@1ee69396f3f6 home]# exit
exit
[root@Panghl home]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
[root@Panghl home]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
1ee69396f3f6 centos "/bin/bash" 2 minutes ago Exited (0) 5 seconds ago xenodochial_darwin
#将这个文件拷贝出来到主机上
[root@Panghl home]# docker cp 1ee69396f3f6:/home/test.java /home
[root@Panghl home]# ll
total 0
-rw-r--r-- 1 root root 0 Nov 24 23:21 panghl.java
-rw-r--r-- 1 root root 0 Nov 24 23:22 test.java
[root@Panghl home]#
#拷贝是一个手动过程,未来我们使用 -v 卷的技术,可以实现
小结:
attach | Attach to arunning container | 当前shell下attach连接指定运行容器 |
build | Build an image from a Dockerfile | 通过Dockerfile定制镜像 |
commit | Create a new image from a container changes |
提交当前容器为新的镜像 |
cp | Copy files/folders from the containers filesystem to the host path | 从容器中拷贝指定文件或目录到宿主机中 |
create | Create a new container | 创建一个新的容器,同run,但不启动容器 |
diff | Inspect changes on a container's filesystem | 查看docker容器变化 |
events | Get real time events from the server | 从docker服务获取容器实时时间 |
exec | Run a command in an existing container | 在已存在的容器上运行命令 |
export | Stream the contents of a container as a tar archive | 导出容器的内容流作为一个tar归档文件[对应import] |
history | Show the history of an image | 展示一个镜像形成历史 |
images | List images | 列出系统当前镜像 |
import | Create a new filesystem image from the contents of a tarball | 从tar包中的内容创建一个新的文件系统映像[对应export] |
info | Display system-wid information | 显示系统相关信息 |
inspect | Return low-level information on a container | 查看容器详细信息 |
kill | kill a runing container | kill指定docker容器 |
load | Load an image from a tar archive | 从一个tar包中加载一个镜像[对应save] |
login | Register or Login to the docker registry server |
注册或者登陆一个docker源服务器 |
logout | Log out from a Docker registry server | 从当前Docker registry退出 |
logs | Fetch the logs of a container | 输出当前容器日志信息 |
port | Lookup the public -facing port which is NAT-ed to PRIVATE_PORT | 查看映射端口对应的容器内部源端口 |
pause | Pause all processes within a container | 暂停容器 |
ps | List containers | 列出容器列表 |
pull |
Pull an image or a repository from the docker registry server | 从docker镜像源服务器拉取指定镜像或者库镜像 |
push | push an image or a repository to the docker registry server | 推送指定镜像或者库镜像至docker源服务器 |
restart | Restart a running container | 重启运行的容器 |
rm | Remove one or more containers | 移除一个或者多个容器 |
rmi | Remove one or more images | 移除一个或多个镜像[无容器使用该镜像才可删除,否则需删除相关容器才可继续或-f强制删除] |
run | Run a command in a new container | 创建一个新的容器并运行一个命令 |
save | Save an image to a tar archive | 保存一个镜像为一个tar包[对应load] |
search | Search for an image on the Docker Hub | 在docker hub中搜索镜像 |
srart | Start a stopped containers | 启动容器 |
stop | Stop a running containers | 停止容器 |
tag | Tag an image into a repository | 给源中镜像打标签 |
top | Lookup the running containers | 查看容器中运行的进程信息 |
unpause | Unpause a paused container | 取消暂停容器 |
version | Show the docker version infomation | 查看docker版本号 |
wait | Block untill a container stops,then print its exit code | 截取容器停止时的退出状态值 |
实战练习:
Docker安装Nginx
- 搜索镜像 search 建议大家去docker搜索,可以看到帮助文档 !
- 下载镜像 pull
- 运行测试
[root@Panghl ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
nginx latest bc9a0695f571 4 days ago 133MB
centos latest 0d120b6ccaa8 3 months ago 215MB
#-d 后台运行
#--name 给容器命名
#-p 宿主机端口:容器内部端口
[root@Panghl ~]# docker run -d --name nginx01 -p 3344:80 nginx
25f94a3af6e574b22fd85d8c7277c4f50eaf329c36c37fa1d3e2395ab278b256
[root@Panghl ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
25f94a3af6e5 nginx "/docker-entrypoint.…" 8 seconds ago Up 7 seconds 0.0.0.0:3344->80/tcp nginx01
[root@Panghl ~]# curl localhost:3344
#进入容器
[root@Panghl ~]# docker exec -it nginx01 /bin/bash
root@25f94a3af6e5:/# whereis nginx
nginx: /usr/sbin/nginx /usr/lib/nginx /etc/nginx /usr/share/nginx
root@25f94a3af6e5:/# cd /etc/nginx/
root@25f94a3af6e5:/etc/nginx# ls
conf.d fastcgi_params koi-utf koi-win mime.types modules nginx.conf scgi_params uwsgi_params win-utf
root@25f94a3af6e5:/etc/nginx#
端口暴露的概念:
思考问题:我们每次改动nginx配置文件,都需要进入容器内部?十分麻烦,我要是可以在容器外部提供一个映射路径,达到在容器修改文件,容器内部就可以自动修改? -v 数据卷!
docker安装tomcat
#官方的使用
docker run -it --rm tomcat:9.0
#我们之前的启动都是后台,停止了容器之后,容器还是可以查到 docker run -it --rm :一般用来测试,用完就删除。
#下载再启动
docker pull tomcat
#启动运行
docker run -d -p 3355:8080 --name tomcat01 tomcat
#测试访问没有问题
#进入容器
docker exec -it tomcat01 /bin/bash
#发现问题:1、linux命令少了 2、没有webapps,阿里云镜像的原因:默认是最小的镜像,所有不必要的都剔除掉。
#保证最小可运行的环境
解决办法:
将webapps.dict目录下的所有文件拷贝到webapps目录下
cp -r webapps.dist/* webapps
思考问题:我们以后要部署项目,如果每次都进入容器是不是十分麻烦?我要是可以在容器外部提供一个映射路径,webapps,我们在外部放置项目,就自动同步到内部就好了!
docker部署es+kibana
#es暴露的端口很多!
#es十分的耗内存
#es的数据一般需要放置到安全目录! 挂载
# --net somenetwork ?网络配置
#启动 elasticsearch
docker run -d --name elasticsearch -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" elasticsearch:7.9.3
#启动了 linux就卡住了! docker stats 查看cpu的状态
#es 是十分耗内存的 1.xG 1核2G!
#如果卡住 可以停止整个docker
#查看docker stats
#测试一下es 是能成功了
#赶紧关闭,增加内存的限制
#赶紧关闭,增加内存的限制,修改配置文件 -e 环境配置修改
docker run -d --name elasticsearch -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" -e ES_JAVA_OPTS="-Xms64m -Xmx512m" elasticsearch:7.9.3
#查看docker stats
[root@Panghl ~]# curl localhost:9200
{
"name" : "f87b5be11af0",
"cluster_name" : "docker-cluster",
"cluster_uuid" : "jisMo536QtyjA7ceJydLsw",
"version" : {
"number" : "7.9.3",
"build_flavor" : "default",
"build_type" : "docker",
"build_hash" : "c4138e51121ef06a6404866cddc601906fe5c868",
"build_date" : "2020-10-16T10:36:16.141335Z",
"build_snapshot" : false,
"lucene_version" : "8.6.2",
"minimum_wire_compatibility_version" : "6.8.0",
"minimum_index_compatibility_version" : "6.0.0-beta1"
},
"tagline" : "You Know, for Search"
}
使用Kibana连接es?思考网络如何才能连接过去!
可视化
- portainer(先用这个)
docker run -d -p 8088:9000 \ --restart=always -v /var/run/docker.sock:/var/run/docker.sock --privileged=true portainer/portainer
- Rancher(CI/CD再用)
什么portainer?
Docker图形化界面管理工具!提供一个后台面板供我们操作!
docker run -d -p 8088:9000 \
--restart=always -v /var/run/docker.sock:/var/run/docker.sock --privileged=true portainer/portainer
访问测试:http://ip:8088/
通过它来访问了:
选择本地的
进入之后的面板
可视化面板我们平时不会使用,大家自己测试玩玩即可!