Docker 进阶
查看docker
docker version# Client:#Version: 20.10.17#API version: 1.41#Go version:go1.17.11#Git commit:100c701#Built: Mon Jun6 22:56:42 2022#OS/Arch: linux/amd64#Context: default#Experimental:true# # Server: Docker Engine - Community#Engine:# Version:20.10.17# API version:1.41 (minimum version 1.12)# Go version: go1.17.11# Git commit: a89b842# Built:Mon Jun6 23:01:45 2022# OS/Arch:linux/amd64# Experimental: true#containerd:# Version:v1.6.6# GitCommit:10c12954828e7c7c9b6e0ea9b0c02b01407d3ae1#runc:# Version:1.1.2# GitCommit:v1.1.2-0-ga916309f#docker-init:# Version:0.19.0# GitCommit:de40ad0docker version 会显示两部分信息：docker client，docker server(docker engine)
- OS/Arch：如果在MacOS或者Windows上使用docker，会出现两个不同的OS/Arch版本
因为MacOS和Windows的docker server其实是跑在linux虚拟机内的
docker依赖于容器，容器依赖于namespace和cgroups，这些都是linux的功能
docker info# Client:#Context:default#Debug Mode: false#Plugins:# buildx: Docker Buildx (Docker Inc., v0.8.2)# compose: Docker Compose (Docker Inc., v2.6.1)# # Server:#Containers: 0# Running: 0# Paused: 0# Stopped: 0#Images: 0#Server Version: 20.10.17#Storage Driver: overlay2# Backing Filesystem: xfs# Supports d_type: true# Native Overlay Diff: true# userxattr: false#Logging Driver: json-file#Cgroup Driver: cgroupfs#Cgroup Version: 1#Plugins:# Volume: local# Network: bridge host ipvlan macvlan null overlay# Log: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslog#Swarm: inactive # Runtimes: io.containerd.runtime.v1.linux runc io.containerd.runc.v2#Default Runtime: runc#Init Binary: docker-init#containerd version: 10c12954828e7c7c9b6e0ea9b0c02b01407d3ae1#runc version: v1.1.2-0-ga916309f#init version: de40ad0#Security Options:# apparmor# seccomp#Profile: default#Kernel Version: 4.4.0-210-generic#Operating System: Alpine Linux v3.16 (containerized)#OSType: linux#Architecture: x86_64#CPUs: 8#Total Memory: 31.42GiB#Name: node1 # ID: 7AEY:XQVU:W6YN:J3LZ:H4A6:J42K:23BH:O3E7:2T6N:AFTI:EIS5:HHFV#Docker Root Dir: /var/lib/docker#Debug Mode: true# File Descriptors: 27# Goroutines: 42# System Time: 2023-01-06T23:56:37.348498969Z# EventsListeners: 0#Registry: https://index.docker.io/v1/#Labels:#Experimental: true#Insecure Registries:# 127.0.0.1# 127.0.0.0/8#Live Restore Enabled: false#Product License: Community Engine# # WARNING: API is accessible on http://0.0.0.0:2375 without encryption. # Access to the remote API is equivalent to root access on the host. Refer # to the 'Docker daemon attack surface' section in the documentation for # more information: https://docs.docker.com/go/attack-surface/# WARNING: No swap limit support# WARNING: bridge-nf-call-iptables is disabled# WARNING: bridge-nf-call-ip6tables is disabled显示docker engine的配置信息
docker#Usage:......##Options: ......##Management Commands:#builder Manage builds#buildx* Docker Buildx (Docker Inc., v0.8.2)#checkpointManage checkpoints#compose*Docker Compose (Docker Inc., v2.6.1)#configManage Docker configs#container Manage containers#context Manage contexts#image Manage images#manifestManage Docker image manifests and manifest lists#network Manage networks#nodeManage Swarm nodes#pluginManage plugins#secretManage Docker secrets#service Manage services#stack Manage Docker stacks#swarm Manage Swarm#systemManage Docker#trust Manage trust on Docker images#volumeManage volumes##Commands:#attachAttach local standard input, output, and error streams to a running container#build Build an image from a Dockerfile#commitCreate a new image from a container's changes#cpCopy files/folders between a container and the local filesystem#createCreate a new container#diffInspect changes to files or directories on a container's filesystem#eventsGet real time events from the server#execRun a command in a running container#exportExport a container's filesystem as a tar archive#history Show the history of an image#imagesList images#importImport the contents from a tarball to create a filesystem image#infoDisplay system-wide information#inspect Return low-level information on Docker objects#killKill one or more running containers#loadLoad an image from a tar archive or STDIN#login Log in to a Docker registry#logoutLog out from a Docker registry#logsFetch the logs of a container#pause Pause all processes within one or more containers#portList port mappings or a specific mapping for the container#psList containers#pullPull an image or a repository from a registry#pushPush an image or a repository to a registry#renameRename a container#restart Restart one or more containers#rmRemove one or more containers#rmi Remove one or more images#run Run a command in a new container#saveSave one or more images to a tar archive (streamed to STDOUT by default)#searchSearch the Docker Hub for images#start Start one or more stopped containers#stats Display a live stream of container(s) resource usage statistics#stopStop one or more running containers#tag Create a tag TARGET_IMAGE that refers to SOURCE_IMAGE#top Display the running processes of a container#unpause Unpause all processes within one or more containers#updateUpdate configuration of one or more containers#version Show the Docker version information#waitBlock until one or more containers stop, then print their exit codes#.....2017年之后，docker指令集变为管理指令集，旧指令依然有效。但是新的指令更有条理。
旧指令：docker (OPTIONS)
新指令：docker (OPTIONS)
# docker run = docker conatiner rundocker container ls启动nginx服务器
docker container run --publish 80:80 nginx尝试访问
- publish会转发端口，可以缩写成-p
docker container run --publish 80:80 --detach nginx- detach将docker运行在后台，不会向终端打印日志，可以缩写成-d
docker container ls# CONTAINER ID IMAGE COMMANDCREATEDSTATUSPORTSNAMES# 24da086df26c nginx "/docker-entrypoint.…" About a minute ago Up About a minute 0.0.0.0:80->80/tcp ecstatic_proskuriakovadocker container ls = docker ps
显示正在运行的docker
docker container stop 24ddocker container lsName是一个正面形容词+科学名人的姓氏，ecstatic_proskuriakova 热情的普罗斯库里亚科娃（玛雅考古学者）
docker container ls -a# CONTAINER ID IMAGE COMMANDCREATED STATUSPORTS NAMES# 24da086df26c nginx "/docker-entrypoint.…" 4 minutes ago Exited (0) 10 seconds ago ecstatic_proskuriakova# 5db308ba196b nginx "/docker-entrypoint.…" 5 minutes ago Exited (0) 4 minutes agoeloquent_easley出现了两个nginx，因为我们从同一个镜像启动了两次docker，产生了两个容器
再次启动nginx，指定一个名字
docker container run --publish 80:80 --detach --name webhost nginxdocker container ls -a反复刷新页面，产生一些log
通过名字查看docker
docker container logs webhostdocker container logs = docker logs
除了使用log，还可以利用top指令查看容器内部的进程
docker container top webhost# PID USERTIMECOMMAND# 15337 root0:00nginx: master process nginx -g daemon off;# 15394 101 0:00nginx: worker process# 15395 101 0:00nginx: worker process删除容器docker container rm = docker rm
docker container ls -adocker container rm dc8 24d 5db# Error response from daemon: You cannot remove a running container dc856922ccad8fa3a2e895f844968d4458c6208ce0d7551df2b9c2e4ea735f3e. Stop the container before attempting removal or force removedocker container rm -f dc8docker container ls -a容器的本质是进程
启动一个mongoDB，并且打印运行中的进程
topps aux | grep mongodocker container run --name mongo -d mongodocker container lsdocker container top mongo查看主机上的进程
topps aux | grep mongodocker container stop mongops aux | grep mongo查看容器内部
# 容器内进程docker container top# 容器配置docker container inspect# 容器性能状态docker container stats举个栗子，启动一个mysql
docker container run -d --name mysql -e MYSQL_ROOT_PASSWORD=1234 mysqldocker container ls -adocker container top mysqldocker container inspect mysqldocker container stats# CONTAINER ID NAMECPU % MEM USAGE / LIMIT MEM % NET I/O BLOCK I/O PIDS# 26752b058036 mysql 0.74% 409.1MiB / 31.42GiB 1.27% 0B / 0B 115kB / 368MB 38# 9762e80b86e9 nginx 0.00% 9.285MiB / 31.42GiB 0.03% 0B / 0B 0B / 8.19kB 9