一、容器生命周期及启动过程
1、容器生命周期
2、容器启动过程
二、容器管理命令
Usage: docker [OPTIONS] COMMAND A self-sufficient runtime for containers Options:
--config string Location of client config files (default "/root/.docker")
-c, --context string Name of the context to use to connect to the daemon (overrides DOCKER_HOST env var and default context set
with "docker context use")
-D, --debug Enable debug mode
-H, --host list Daemon socket(s) to connect to
-l, --log-level string Set the logging level ("debug"|"info"|"warn"|"error"|"fatal") (default "info")
--tls Use TLS; implied by --tlsverify
--tlscacert string Trust certs signed only by this CA (default "/root/.docker/ca.pem")
--tlscert string Path to TLS certificate file (default "/root/.docker/cert.pem")
--tlskey string Path to TLS key file (default "/root/.docker/key.pem")
--tlsverify Use TLS and verify the remote
-v, --version Print version information and quit Management Commands:
builder Manage builds
config Manage Docker configs
container Manage containers
context Manage contexts
engine Manage the docker engine
image Manage images
network Manage networks
node Manage Swarm nodes
plugin Manage plugins
secret Manage Docker secrets
service Manage services
stack Manage Docker stacks
swarm Manage Swarm
system Manage Docker
trust Manage trust on Docker images
volume Manage volumes Commands:
attach Attach local standard input, output, and error streams to a running container
build Build an image from a Dockerfile
commit Create a new image from a container's changes
cp Copy files/folders between a container and the local filesystem
create Create a new container
diff Inspect changes to files or directories on a container's filesystem
events Get real time events from the server
exec Run a command in a running container
export Export a container's filesystem as a tar archive
history Show the history of an image
images List images
import Import the contents from a tarball to create a filesystem image
info Display system-wide information
inspect Return low-level information on Docker objects
kill Kill one or more running containers
load Load an image from a tar archive or STDIN
login Log in to a Docker registry
logout Log out from a Docker registry
logs Fetch the logs of a container
pause Pause all processes within one or more containers
port List port mappings or a specific mapping for the container
ps List containers
pull Pull an image or a repository from a registry
push Push an image or a repository to a registry
rename Rename a container
restart Restart one or more containers
rm Remove one or more containers
rmi Remove one or more images
run Run a command in a new container
save Save one or more images to a tar archive (streamed to STDOUT by default)
search Search the Docker Hub for images
start Start one or more stopped containers
stats Display a live stream of container(s) resource usage statistics
stop Stop one or more running containers
tag Create a tag TARGET_IMAGE that refers to SOURCE_IMAGE
top Display the running processes of a container
unpause Unpause all processes within one or more containers
update Update configuration of one or more containers
version Show the Docker version information
wait Block until one or more containers stop, then print their exit codes Run 'docker COMMAND --help' for more information on a command.
1、启动容器
Usage: docker run [OPTIONS] IMAGE [COMMAND] [ARG...] Run a command in a new container Options:
--add-host list Add a custom host-to-IP mapping (host:ip)
-a, --attach list Attach to STDIN, STDOUT or STDERR
--blkio-weight uint16 Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)
--blkio-weight-device list Block IO weight (relative device weight) (default [])
--cap-add list Add Linux capabilities
--cap-drop list Drop Linux capabilities
--cgroup-parent string Optional parent cgroup for the container
--cidfile string Write the container ID to the file
--cpu-period int Limit CPU CFS (Completely Fair Scheduler) period
--cpu-quota int Limit CPU CFS (Completely Fair Scheduler) quota
--cpu-rt-period int Limit CPU real-time period in microseconds
--cpu-rt-runtime int Limit CPU real-time runtime in microseconds
-c, --cpu-shares int CPU shares (relative weight)
--cpus decimal Number of CPUs
--cpuset-cpus string CPUs in which to allow execution (0-3, 0,1)
--cpuset-mems string MEMs in which to allow execution (0-3, 0,1)
-d, --detach Run container in background and print container ID #后台运行容器，默认容器前台运行
--detach-keys string Override the key sequence for detaching a container
--device list Add a host device to the container
--device-cgroup-rule list Add a rule to the cgroup allowed devices list
--device-read-bps list Limit read rate (bytes per second) from a device (default [])
--device-read-iops list Limit read rate (IO per second) from a device (default [])
--device-write-bps list Limit write rate (bytes per second) to a device (default [])
--device-write-iops list Limit write rate (IO per second) to a device (default [])
--disable-content-trust Skip image verification (default true)
--dns list Set custom DNS servers #指定容器使用的dns地址
--dns-option list Set DNS options
--dns-search list Set custom DNS search domains #指定容器加入的域名
--domainname string Container NIS domain name
--entrypoint string Overwrite the default ENTRYPOINT of the image #容器启动执行entrypoint命令
-e, --env list Set environment variables #设置环境变量参数
--env-file list Read in a file of environment variables #从指定文件获取环境变量参数
--expose list Expose a port or a range of ports
--gpus gpu-request GPU devices to add to the container ('all' to pass all GPUs)
--group-add list Add additional groups to join
--health-cmd string Command to run to check health
--health-interval duration Time between running the check (ms|s|m|h) (default 0s)
--health-retries int Consecutive failures needed to report unhealthy
--health-start-period duration Start period for the container to initialize before starting health-retries countdown (ms|s|m|h)
(default 0s)
--health-timeout duration Maximum time to allow one check to run (ms|s|m|h) (default 0s)
--help Print usage
-h, --hostname string Container host name #指定容器主机名
--init Run an init inside the container that forwards signals and reaps processes
-i, --interactive Keep STDIN open even if not attached #保存交互状态，通常与-d参数联用
--ip string IPv4 address (e.g., 172.30.100.104)
--ip6 string IPv6 address (e.g., 2001:db8::33)
--ipc string IPC mode to use
--isolation string Container isolation technology
--kernel-memory bytes Kernel memory limit
-l, --label list Set meta data on a container #设置容器标签
--label-file list Read in a line delimited file of labels
--link list Add link to another container
--link-local-ip list Container IPv4/IPv6 link-local addresses
--log-driver string Logging driver for the container
--log-opt list Log driver options
--mac-address string Container MAC address (e.g., 92:d0:c6:0a:29:33)
-m, --memory bytes Memory limit
--memory-reservation bytes Memory soft limit
--memory-swap bytes Swap limit equal to memory plus swap: '-1' to enable unlimited swap
--memory-swappiness int Tune container memory swappiness (0 to 100) (default -1)
--mount mount Attach a filesystem mount to the container
--name string Assign a name to the container
--network network Connect a container to a network
--network-alias list Add network-scoped alias for the container
--no-healthcheck Disable any container-specified HEALTHCHECK
--oom-kill-disable Disable OOM Killer
--oom-score-adj int Tune host's OOM preferences (-1000 to 1000)
--pid string PID namespace to use
--pids-limit int Tune container pids limit (set -1 for unlimited)
--platform string Set platform if server is multi-platform capable
--privileged Give extended privileges to this container #使用管理员身份启动容器
-p, --publish list Publish a container's port(s) to the host #手动指定宿主机端口映射到容器端口上
-P, --publish-all Publish all exposed ports to random ports #使用宿主机随机端口映射到容器声明暴露的全部端口
--read-only Mount the container's root filesystem as read only #只读方式启动容器
--restart string Restart policy to apply when a container exits (default "no") #指定容器重启方式 默认no
--rm Automatically remove the container when it exits #当容器退出时自动删除
--runtime string Runtime to use for this container #指定容器运行时模式
--security-opt list Security Options
--shm-size bytes Size of /dev/shm
--sig-proxy Proxy received signals to the process (default true)
--stop-signal string Signal to stop a container (default "SIGTERM")
--stop-timeout int Timeout (in seconds) to stop a container
--storage-opt list Storage driver options for the container
--sysctl map Sysctl options (default map[])
--tmpfs list Mount a tmpfs directory
-t, --tty Allocate a pseudo-TTY #分配给容器tty终端，通常联合-i 实现容器交互访问，容器必须支持shell
--ulimit ulimit Ulimit options (default [])
-u, --user string Username or UID (format: <name|uid>[:<group|gid>]) #指定容器内运行用户
--userns string User namespace to use
--uts string UTS namespace to use
-v, --volume list Bind mount a volume #映射数据目录，结合数据管理使用
--volume-driver string Optional volume driver for the container
--volumes-from list Mount volumes from the specified container(s)
-w, --workdir string Working directory inside the container #指定容器工作目录
--restart 四种模式
no 容器退出时不要自动重新启动。默认设置
on-failure[:max-retries] 仅当容器以非零退出状态退出时才重新启动。（可选）限制Docker守护进程尝试重新启动的重试次数
always 无论退出状态如何，始终重新启动容器。当您指定始终时，Docker守护进程将尝试无限期地重新启动容器。容器也将始终在后台进程启动时启动，而与容器的当前状态无关
unless-stopped 无论退出状态如何，都要重新启动容器，包括在守护程序启动时，除非容器在Docker守护程序停止之前处于停止状态。
注意：当容器启动后，如果容器内没有前台运行的进程，容器将自动退出并停止运行
使用 exit 将从容器内退出并停止容器
使用 ctrl+p+q，从容器内退出，不停止容器运行
1.1 使用 hello-world 镜像启动容器
[root@Docker-Ubu1804-p11:~]# docker run hello-world
Unable to find image 'hello-world:latest' locally
latest: Pulling from library/hello-world
2db29710123e: Pull complete
Digest: sha256:2498fce14358aa50ead0cc6c19990fc6ff866ce72aeb5546e1d59caac3d0d60f
Status: Downloaded newer image for hello-world:latest Hello from Docker!
This message shows that your installation appears to be working correctly. To generate this message, Docker took the following steps:
1. The Docker client contacted the Docker daemon.
2. The Docker daemon pulled the "hello-world" image from the Docker Hub.
(amd64)
3. The Docker daemon created a new container from that image which runs the
executable that produces the output you are currently reading.
4. The Docker daemon streamed that output to the Docker client, which sent it
to your terminal. To try something more ambitious, you can run an Ubuntu container with:
$ docker run -it ubuntu bash Share images, automate workflows, and more with a free Docker ID:
https://hub.docker.com/ For more examples and ideas, visit:
https://docs.docker.com/get-started/
1.2、使用一次性命令运行容器
[root@Docker-Ubu1804-p11:~]# docker run alpine echo hello
hello
[root@Docker-Ubu1804-p11:~]#
1.3、指定运行容器名称
[root@Docker-Ubu1804-p11:~]# docker run --name alpine1 alpine
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
1dbebe78a341 alpine "/bin/sh" 5 seconds ago Exited (0) 4 seconds ago alpine1
1.4、运行交互时容器并退出
# 使用 exit 退出
[root@Docker-Ubu1804-p11:~]# docker run -it --name alpine2 alpine sh
/ # ls
bin dev etc home lib media mnt opt proc root run sbin srv sys tmp usr var
/ # exit
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
9be449b24e1c alpine "sh" 47 seconds ago Exited (0) 28 seconds ago alpine2
1dbebe78a341 alpine "/bin/sh" About a minute ago Exited (0) About a minute ago alpine1
#使用 Ctrl+p+q 退出
[root@Docker-Ubu1804-p11:~]# docker run -it --name alpine3 alpine sh
/ # ls
bin dev etc home lib media mnt opt proc root run sbin srv sys tmp usr var
/ # [root@Docker-Ubu1804-p11:
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
c5d572106164 alpine "sh" 14 seconds ago Up 12 seconds alpine3
9be449b24e1c alpine "sh" About a minute ago Exited (0) About a minute ago alpine2
1dbebe78a341 alpine "/bin/sh" 2 minutes ago Exited (0) 2 minutes ago alpine1
[root@Docker-Ubu1804-p11:~]#
1.5、设置容器内主机名称
[root@Docker-Ubu1804-p11:~]# docker run -it --name alpine3 -h alpine3 alpine
/ # hostname
alpine3
/ #
1.6、运行一次性容器，退出后删除（通常用于测试）
[root@Docker-Ubu1804-p11:~]# docker run --rm -it alpine
/ # hostname
2da5181abd95
/ # exit
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
534f8441a227 alpine "/bin/sh" About a minute ago Up About a minute alpine3
9be449b24e1c alpine "sh" About an hour ago Exited (0) About an hour ago alpine2
1dbebe78a341 alpine "/bin/sh" About an hour ago Exited (0) About an hour ago alpine1
[root@Docker-Ubu1804-p11:~]# docker run --rm alpine cat /etc/issue
Welcome to Alpine Linux 3.15
Kernel \r on an \m (\l)
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
534f8441a227 alpine "/bin/sh" 3 minutes ago Up 3 minutes alpine3
9be449b24e1c alpine "sh" About an hour ago Exited (0) About an hour ago alpine2
1dbebe78a341 alpine "/bin/sh" About an hour ago Exited (0) About an hour ago alpine1
1.7、启用前台守护式容器
守护式容器
能够长期运行
无需会话式交互
适合运行应用程序或服务
[root@Docker-Ubu1804-p11:~]# docker run nginx
/docker-entrypoint.sh: /docker-entrypoint.d/ is not empty, will attempt to perform configuration
/docker-entrypoint.sh: Looking for shell scripts in /docker-entrypoint.d/
/docker-entrypoint.sh: Launching /docker-entrypoint.d/10-listen-on-ipv6-by-default.sh
10-listen-on-ipv6-by-default.sh: info: Getting the checksum of /etc/nginx/conf.d/default.conf
10-listen-on-ipv6-by-default.sh: info: Enabled listen on IPv6 in /etc/nginx/conf.d/default.conf
/docker-entrypoint.sh: Launching /docker-entrypoint.d/20-envsubst-on-templates.sh
/docker-entrypoint.sh: Launching /docker-entrypoint.d/30-tune-worker-processes.sh
/docker-entrypoint.sh: Configuration complete; ready for start up
2023/04/27 16:14:36 [notice] 1#1: using the "epoll" event method
2023/04/27 16:14:36 [notice] 1#1: nginx/1.21.5
2023/04/27 16:14:36 [notice] 1#1: built by gcc 10.2.1 20210110 (Debian 10.2.1-6)
2023/04/27 16:14:36 [notice] 1#1: OS: Linux 4.15.0-209-generic
2023/04/27 16:14:36 [notice] 1#1: getrlimit(RLIMIT_NOFILE): 1048576:1048576
2023/04/27 16:14:36 [notice] 1#1: start worker processes
2023/04/27 16:14:36 [notice] 1#1: start worker process 30
1.8、启用后台守护式容器
[root@Docker-Ubu1804-p11:~]# docker run --name nginx1 -d nginx
ad85b3ce358ad832c491514f2f71fa3f9bf3c79ba7fffb257a61e7780d464d82
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
ad85b3ce358a nginx "/docker-entrypoint.…" 14 seconds ago Up 13 seconds 80/tcp nginx1
1.9、--restart 设置容器开机自启
##通常情况容器在宿主机发生重启后，容器不会自动重新启动
[root@Docker-Ubu1804-p11:~]# docker run --name nginx1 -d nginx
94512d6530943e6ab0934bc740e51ed5ce72cb07743eb1fe33855f8fc798fe93
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
94512d653094 nginx "/docker-entrypoint.…" 3 seconds ago Up 2 seconds 80/tcp nginx1
[root@Docker-Ubu1804-p11:~]# reboot Channel(Socket) closed from remote host(Docker-Ubuntu-1804-p11) at 00:22:18. Type `help' to learn how to use Xshell prompt.
[C:\~]$ Last login: Fri Apr 28 00:22:40 2023 from 10.0.0.1
sudo su -
janzen@Docker-Ubu1804-p11:~$ sudo su -
[sudo] password for janzen:
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
94512d653094 nginx "/docker-entrypoint.…" 59 seconds ago Exited (0) 43 seconds ago nginx1
设置容器自动重启
[root@Docker-Ubu1804-p11:~]# docker run --restart=always --name nginx2 -d nginx
3563284776fd3f2940f3574076f1bc7fc728023a542536d74ff4578302be499e
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
3563284776fd nginx "/docker-entrypoint.…" 2 seconds ago Up 1 second 80/tcp nginx2
94512d653094 nginx "/docker-entrypoint.…" 2 minutes ago Exited (0) 2 minutes ago nginx1
[root@Docker-Ubu1804-p11:~]# docker start nginx1
nginx1
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
3563284776fd nginx "/docker-entrypoint.…" 30 seconds ago Up 29 seconds 80/tcp nginx2
94512d653094 nginx "/docker-entrypoint.…" 3 minutes ago Up 2 seconds 80/tcp nginx1
[root@Docker-Ubu1804-p11:~]# reboot
Connection closing...Socket close. Connection closed by foreign host. Disconnected from remote host(Docker-Ubuntu-1804-p11) at 00:25:34. Type `help' to learn how to use Xshell prompt.
[C:\~]$
Last login: Fri Apr 28 00:25:54 2023 from 10.0.0.1
sudo su -
janzen@Docker-Ubu1804-p11:~$ sudo su -
[sudo] password for janzen:
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
3563284776fd nginx "/docker-entrypoint.…" 2 minutes ago Up About a minute 80/tcp nginx2
94512d653094 nginx "/docker-entrypoint.…" 4 minutes ago Exited (0) About a minute ago nginx1
1.10、--privileged 使容器获得root权限
--privileged 可以让容器内的root账号真正拥有root权限，否则 容器内的root只是外部的一个普通用户权限，privileged 启动容器后，可以看到很多宿主机上的设备，并且可以执行mount命令，甚至允许在容器内启动容器
#常规权限启动容器，挂载光盘数据
[root@Docker-Ubu1804-p11:~]# docker run -it --rm centos:7 bash
[root@b176345c438e /]# ls
anaconda-post.log bin dev etc home lib lib64 media mnt opt proc root run sbin srv sys tmp usr var
[root@b176345c438e /]# lsblk
lsblk: dm-0: failed to get device path
lsblk: dm-0: failed to get device path
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sr0 11:0 1 945M 0 rom
sda 8:0 0 10G 0 disk
|-sda2 8:2 0 1G 0 part
|-sda3 8:3 0 9G 0 part
`-sda1 8:1 1M 0 part
[root@b176345c438e /]# mount /dev/sr0 /mnt
mount: permission denied
[root@b176345c438e /]# ##privileged 启动容器，挂载光盘数据
[root@Docker-Ubu1804-p11:~]# docker run -it --rm --privileged centos:7 bash
[root@4c0deff6df65 /]# ls
anaconda-post.log bin dev etc home lib lib64 media mnt opt proc root run sbin srv sys tmp usr var
[root@4c0deff6df65 /]# lsblk
lsblk: dm-0: failed to get device path
lsblk: dm-0: failed to get device path
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sr0 11:0 1 945M 0 rom
sda 8:0 0 10G 0 disk
|-sda2 8:2 0 1G 0 part
|-sda3 8:3 0 9G 0 part
`-sda1 8:1 1M 0 part
[root@4c0deff6df65 /]# mount /dev/sr0 /mnt
mount: /dev/sr0 is write-protected, mounting read-only
[root@4c0deff6df65 /]# ls /mnt
EFI README.diskdefines boot casper dists install isolinux md5sum.txt pics pool preseed ubuntu
[root@4c0deff6df65 /]#
2、查看容器信息
2.1、查看当前存在的容器
Usage: docker ps [OPTIONS] List containers Options:
-a, --all Show all containers (default shows just running)
-f, --filter filter Filter output based on conditions provided
--format string Pretty-print containers using a Go template
-n, --last int Show n last created containers (includes all states) (default -1)
-l, --latest Show the latest created container (includes all states)
--no-trunc Don't truncate output
-q, --quiet Only display numeric IDs
-s, --size Display total file sizes
#查看运行中的容器
[root@Docker-Ubu1804-p11:~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
d9388e3c2645 janzen/app1 "nginx" 18 seconds ago Up 17 seconds 80/tcp, 443/tcp elegant_lehmann
64757c743e9e nginx "/docker-entrypoint.…" 41 seconds ago Up 40 seconds 80/tcp peaceful_chaplygin #查看存在的所有容器
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
7507c2d3cb19 janzen/nginx-centos7:1.20.1-v2.0 "nginx" 25 seconds ago Exited (0) 3 seconds ago blissful_booth
d9388e3c2645 janzen/app1 "nginx" 2 minutes ago Up 2 minutes 80/tcp, 443/tcp elegant_lehmann
64757c743e9e nginx "/docker-entrypoint.…" 2 minutes ago Up 2 minutes 80/tcp peaceful_chaplygin
1b794f218ced centos:7 "/bin/bash" 3 minutes ago Exited (0) 2 minutes ago compassionate_brattain
0c22ecafcbd4 alpine "/bin/sh" 3 minutes ago Exited (0) 3 minutes ago peaceful_dirac #显示运行中的容器ID
[root@Docker-Ubu1804-p11:~]# docker ps -q
d9388e3c2645
64757c743e9e #显示所有容器ID
[root@Docker-Ubu1804-p11:~]# docker ps -aq
7507c2d3cb19
d9388e3c2645
64757c743e9e
1b794f218ced
0c22ecafcbd4 #显示容器大小
[root@Docker-Ubu1804-p11:~]# docker ps -s -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES SIZE
7507c2d3cb19 janzen/nginx-centos7:1.20.1-v2.0 "nginx" 3 minutes ago Exited (0) 2 minutes ago blissful_booth 0B (virtual 562MB)
d9388e3c2645 janzen/app1 "nginx" 5 minutes ago Up 5 minutes 80/tcp, 443/tcp elegant_lehmann 2B (virtual 572MB)
64757c743e9e nginx "/docker-entrypoint.…" 5 minutes ago Up 5 minutes 80/tcp peaceful_chaplygin 1.09kB (virtual 141MB)
1b794f218ced centos:7 "/bin/bash" 5 minutes ago Exited (0) 5 minutes ago compassionate_brattain 0B (virtual 204MB)
0c22ecafcbd4 alpine "/bin/sh" 6 minutes ago Exited (0) 6 minutes ago peaceful_dirac 0B (virtual 5.59MB) #显示最新创建的容器
[root@Docker-Ubu1804-p11:~]# docker ps -l
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
7507c2d3cb19 janzen/nginx-centos7:1.20.1-v2.0 "nginx" 3 minutes ago Exited (0) 3 minutes ago blissful_booth #查看指定状态容器
[root@Docker-Ubu1804-p11:~]# docker ps -f "status=exited"
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
7507c2d3cb19 janzen/nginx-centos7:1.20.1-v2.0 "nginx" 5 minutes ago Exited (0) 4 minutes ago blissful_booth
1b794f218ced centos:7 "/bin/bash" 7 minutes ago Exited (0) 7 minutes ago compassionate_brattain
0c22ecafcbd4 alpine "/bin/sh" 7 minutes ago Exited (0) 7 minutes ago peaceful_dirac
2.2、查看容器内进程
Usage: docker top CONTAINER [ps OPTIONS]
[root@Docker-Ubu1804-p11:~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
d9388e3c2645 janzen/app1 "nginx" 9 minutes ago Up 9 minutes 80/tcp, 443/tcp elegant_lehmann
64757c743e9e nginx "/docker-entrypoint.…" 10 minutes ago Up 10 minutes 80/tcp peaceful_chaplygin
[root@Docker-Ubu1804-p11:~]# docker top d9388e3c2645
UID PID PPID C STIME TTY TIME CMD
root 2994 2969 0 00:45 ? 00:00:00 nginx: master process nginx
999 3029 2994 0 00:45 ? 00:00:00 nginx: worker process
2.3、查看容器资源使用情况
Usage: docker stats [OPTIONS] [CONTAINER...] Display a live stream of container(s) resource usage statistics Options:
-a, --all Show all containers (default shows just running)
--format string Pretty-print images using a Go template
--no-stream Disable streaming stats and only pull the first result
--no-trunc Do not truncate output
#查看指定容器资源使用情况
[root@Docker-Ubu1804-p11:~]# docker stats app1 CONTAINER ID NAME CPU % MEM USAGE / LIMIT MEM % NET I/O BLOCK I/O PIDS
95fef1f3eba4 app1 0.00% 2.391MiB / 959.6MiB 0.25% 976B / 0B 0B / 0B 2 #查看所有容器资源使用情况
[root@Docker-Ubu1804-p11:~]# docker stats CONTAINER ID NAME CPU % MEM USAGE / LIMIT MEM % NET I/O BLOCK I/O PIDS
9542bfcd7012 nginx1 0.00% 2.387MiB / 959.6MiB 0.25% 796B / 0B 0B / 8.19kB 2
95fef1f3eba4 app1 0.00% 2.391MiB / 959.6MiB 0.25% 976B / 0B 0B / 0B 2
2.4、查看容器详细信息
Usage: docker inspect [OPTIONS] NAME|ID [NAME|ID...] Return low-level information on Docker objects Options:
-f, --format string Format the output using the given Go template
-s, --size Display total file sizes if the type is container
--type string Return JSON for specified type
[root@Docker-Ubu1804-p11:~]# docker inspect app1
[
{
"Id": "95fef1f3eba444ea8df446f4cd2ea09f01bc53874e0633e75f60bf9f24638806",
"Created": "2023-04-27T16:58:37.381048713Z",
"Path": "nginx",
"Args": [],
"State": {
"Status": "running",
"Running": true,
"Paused": false,
"Restarting": false,
"OOMKilled": false,
"Dead": false,
"Pid": 3684,
"ExitCode": 0,
"Error": "",
"StartedAt": "2023-04-27T16:58:37.787117281Z",
"FinishedAt": "0001-01-01T00:00:00Z"
},
"Image": "sha256:4919aacb5ea0aa5d93a5f386f0df115c74cf774ff2df2bd68caf12b66fee3fe7",
"ResolvConfPath": "/var/lib/docker/containers/95fef1f3eba444ea8df446f4cd2ea09f01bc53874e0633e75f60bf9f24638806/resolv.conf",
"HostnamePath": "/var/lib/docker/containers/95fef1f3eba444ea8df446f4cd2ea09f01bc53874e0633e75f60bf9f24638806/hostname",
"HostsPath": "/var/lib/docker/containers/95fef1f3eba444ea8df446f4cd2ea09f01bc53874e0633e75f60bf9f24638806/hosts",
"LogPath": "/var/lib/docker/containers/95fef1f3eba444ea8df446f4cd2ea09f01bc53874e0633e75f60bf9f24638806/95fef1f3eba444ea8df446f4cd2ea09f01bc53874e0633e75f60bf9f24638806-json.log",
"Name": "/app1",
"RestartCount": 0,
"Driver": "overlay2",
"Platform": "linux",
"MountLabel": "",
"ProcessLabel": "",
"AppArmorProfile": "docker-default",
"ExecIDs": null,
"HostConfig": {
"Binds": null,
"ContainerIDFile": "",
"LogConfig": {
"Type": "json-file",
"Config": {}
},
"NetworkMode": "default",
"PortBindings": {},
"RestartPolicy": {
"Name": "no",
"MaximumRetryCount": 0
},
"AutoRemove": false,
"VolumeDriver": "",
"VolumesFrom": null,
"CapAdd": null,
"CapDrop": null,
"Capabilities": null,
"Dns": [],
"DnsOptions": [],
"DnsSearch": [],
"ExtraHosts": null,
"GroupAdd": null,
"IpcMode": "private",
"Cgroup": "",
"Links": null,
"OomScoreAdj": 0,
"PidMode": "",
"Privileged": false,
"PublishAllPorts": false,
"ReadonlyRootfs": false,
"SecurityOpt": null,
"UTSMode": "",
"UsernsMode": "",
"ShmSize": 67108864,
"Runtime": "runc",
"ConsoleSize": [
0,
0
],
"Isolation": "",
"CpuShares": 0,
"Memory": 0,
"NanoCpus": 0,
"CgroupParent": "",
"BlkioWeight": 0,
"BlkioWeightDevice": [],
"BlkioDeviceReadBps": null,
"BlkioDeviceWriteBps": null,
"BlkioDeviceReadIOps": null,
"BlkioDeviceWriteIOps": null,
"CpuPeriod": 0,
"CpuQuota": 0,
"CpuRealtimePeriod": 0,
"CpuRealtimeRuntime": 0,
"CpusetCpus": "",
"CpusetMems": "",
"Devices": [],
"DeviceCgroupRules": null,
"DeviceRequests": null,
"KernelMemory": 0,
"KernelMemoryTCP": 0,
"MemoryReservation": 0,
"MemorySwap": 0,
"MemorySwappiness": null,
"OomKillDisable": false,
"PidsLimit": null,
"Ulimits": null,
"CpuCount": 0,
"CpuPercent": 0,
"IOMaximumIOps": 0,
"IOMaximumBandwidth": 0,
"MaskedPaths": [
"/proc/asound",
"/proc/acpi",
"/proc/kcore",
"/proc/keys",
"/proc/latency_stats",
"/proc/timer_list",
"/proc/timer_stats",
"/proc/sched_debug",
"/proc/scsi",
"/sys/firmware"
],
"ReadonlyPaths": [
"/proc/bus",
"/proc/fs",
"/proc/irq",
"/proc/sys",
"/proc/sysrq-trigger"
]
},
"GraphDriver": {
"Data": {
"LowerDir": "/var/lib/docker/overlay2/a65f25e477e872b0fd02f56f82ace0898c8f874547cf2d5a88798e74582e2458-init/diff:/var/lib/docker/overlay2/f8d7a1d5eb0d8502ae92b147370ca2f98a04f499ca8d15b9d64e93f77ddf4f60/diff:/var/lib/docker/overlay2/5d97937e774ff42c6d67fbce8ce268f5d8b517e435a077996a7d7e7807ac0a81/diff",
"MergedDir": "/var/lib/docker/overlay2/a65f25e477e872b0fd02f56f82ace0898c8f874547cf2d5a88798e74582e2458/merged",
"UpperDir": "/var/lib/docker/overlay2/a65f25e477e872b0fd02f56f82ace0898c8f874547cf2d5a88798e74582e2458/diff",
"WorkDir": "/var/lib/docker/overlay2/a65f25e477e872b0fd02f56f82ace0898c8f874547cf2d5a88798e74582e2458/work"
},
"Name": "overlay2"
},
"Mounts": [],
"Config": {
"Hostname": "95fef1f3eba4",
"Domainname": "",
"User": "",
"AttachStdin": false,
"AttachStdout": false,
"AttachStderr": false,
"ExposedPorts": {
"443/tcp": {},
"80/tcp": {}
},
"Tty": false,
"OpenStdin": false,
"StdinOnce": false,
"Env": [
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
],
"Cmd": null,
"Image": "janzen/nginx-centos7:1.20.1-v2.0",
"Volumes": null,
"WorkingDir": "",
"Entrypoint": [
"nginx"
],
"OnBuild": null,
"Labels": {
"author": "janzen<janzen.com>",
"description": "Installed nginx-1.20.1-10.el7 by yum",
"org.label-schema.build-date": "20201113",
"org.label-schema.license": "GPLv2",
"org.label-schema.name": "CentOS Base Image",
"org.label-schema.schema-version": "1.0",
"org.label-schema.vendor": "CentOS",
"org.opencontainers.image.created": "2020-11-13 00:00:00+00:00",
"org.opencontainers.image.licenses": "GPL-2.0-only",
"org.opencontainers.image.title": "CentOS Base Image",
"org.opencontainers.image.vendor": "CentOS",
"version": "v2.0"
}
},
"NetworkSettings": {
"Bridge": "",
"SandboxID": "c4b9c62a0bc926e276f35cb2a5ac43512029ffad2d17f6356c9475c990fa3399",
"HairpinMode": false,
"LinkLocalIPv6Address": "",
"LinkLocalIPv6PrefixLen": 0,
"Ports": {
"443/tcp": null,
"80/tcp": null
},
"SandboxKey": "/var/run/docker/netns/c4b9c62a0bc9",
"SecondaryIPAddresses": null,
"SecondaryIPv6Addresses": null,
"EndpointID": "5590d59c01bbd1a63f628e2379ec2b1659014d2cfc6c2acee0c6088ce69e8b86",
"Gateway": "172.17.0.1",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"IPAddress": "172.17.0.2",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"MacAddress": "02:42:ac:11:00:02",
"Networks": {
"bridge": {
"IPAMConfig": null,
"Links": null,
"Aliases": null,
"NetworkID": "dd4e4f652edf182ce7f44dfa5caaeb56eeeb22db05a9b3c705cc8ec8cbc82ecd",
"EndpointID": "5590d59c01bbd1a63f628e2379ec2b1659014d2cfc6c2acee0c6088ce69e8b86",
"Gateway": "172.17.0.1",
"IPAddress": "172.17.0.2",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"MacAddress": "02:42:ac:11:00:02",
"DriverOpts": null
}
}
}
}
]
#过滤模式查看容器详细信息
[root@Docker-Ubu1804-p11:~]# docker inspect app1 --format="{{.State}}"
{running true false false false false 3684 0 2023-04-27T16:58:37.787117281Z 0001-01-01T00:00:00Z <nil>}
[root@Docker-Ubu1804-p11:~]# docker inspect app1 -f "{{.State}}"
{running true false false false false 3684 0 2023-04-27T16:58:37.787117281Z 0001-01-01T00:00:00Z <nil>}
3、删除容器
Usage: docker rm [OPTIONS] CONTAINER [CONTAINER...] Remove one or more containers Options:
-f, --force Force the removal of a running container (uses SIGKILL)
-l, --link Remove the specified link
-v, --volumes Remove anonymous volumes associated with the container
#删除指定容器
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
f9c556915c06 centos:7 "/bin/bash" 13 seconds ago Exited (0) 13 seconds ago blissful_liskov
0b872ce6a3fe centos:7 "/bin/bash" 46 seconds ago Exited (0) 45 seconds ago gifted_mestorf
6ed14d8829a3 alpine "/bin/sh" 52 seconds ago Exited (0) 52 seconds ago busy_panini
9542bfcd7012 nginx "/docker-entrypoint.…" 14 minutes ago Up 14 minutes 80/tcp nginx1
95fef1f3eba4 janzen/nginx-centos7:1.20.1-v2.0 "nginx" 14 minutes ago Up 14 minutes 80/tcp, 443/tcp app1
[root@Docker-Ubu1804-p11:~]# docker rm 0b872ce6a3fe
0b872ce6a3fe #删除带有匿名卷的容器，并删除匿名卷
[root@Docker-Ubu1804-p11:~]# docker inspect f9c556915c06 -f "{{.Mounts}}"
[{volume 09e5f582ae1afcc4e61399af1ce931113213cd65de391c630f1737f2c250ead7 /var/lib/docker/volumes/09e5f582ae1afcc4e61399af1ce931113213cd65de391c630f1737f2c250ead7/_data /usr/lib/data local true }]
[root@Docker-Ubu1804-p11:~]# ll /var/lib/docker/volumes/09e5f582ae1afcc4e61399af1ce931113213cd65de391c630f1737f2c250ead7/_data
total 8
drwxr-xr-x 2 root root 4096 Apr 28 01:12 ./
drwx-----x 3 root root 4096 Apr 28 01:12 ../
[root@Docker-Ubu1804-p11:~]# docker rm -v f9c556915c06
f9c556915c06
[root@Docker-Ubu1804-p11:~]# ll /var/lib/docker/volumes/09e5f582ae1afcc4e61399af1ce931113213cd65de391c630f1737f2c250ead7/_data
ls: cannot access '/var/lib/docker/volumes/09e5f582ae1afcc4e61399af1ce931113213cd65de391c630f1737f2c250ead7/_data': No such file or directory #删除运行中的容器
[root@Docker-Ubu1804-p11:~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
9542bfcd7012 nginx "/docker-entrypoint.…" 18 minutes ago Up 18 minutes 80/tcp nginx1
95fef1f3eba4 janzen/nginx-centos7:1.20.1-v2.0 "nginx" 18 minutes ago Up 18 minutes 80/tcp, 443/tcp app1
[root@Docker-Ubu1804-p11:~]# docker rm app1
Error response from daemon: You cannot remove a running container 95fef1f3eba444ea8df446f4cd2ea09f01bc53874e0633e75f60bf9f24638806. Stop the container before attempting removal or force remove
[root@Docker-Ubu1804-p11:~]# docker rm -f app1
app1
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
6ed14d8829a3 alpine "/bin/sh" 5 minutes ago Exited (0) 5 minutes ago busy_panini
9542bfcd7012 nginx "/docker-entrypoint.…" 18 minutes ago Up 18 minutes 80/tcp nginx1
#删除指定状态的容器
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
88c0c8c0b3e8 alpine "/bin/sh" 40 seconds ago Exited (0) 40 seconds ago eager_booth
8dc0d20e17e0 alpine "/bin/sh" 42 seconds ago Exited (0) 41 seconds ago elastic_kowalevski
dca29e7d8df3 alpine "/bin/sh" 43 seconds ago Exited (0) 42 seconds ago reverent_merkle
6ed14d8829a3 alpine "/bin/sh" 14 minutes ago Exited (0) 13 minutes ago busy_panini
9542bfcd7012 nginx "/docker-entrypoint.…" 27 minutes ago Up 27 minutes 80/tcp nginx1
[root@Docker-Ubu1804-p11:~]# docker ps -qf "status=exited" | xargs docker rm -fv
88c0c8c0b3e8
8dc0d20e17e0
dca29e7d8df3
6ed14d8829a3
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
9542bfcd7012 nginx "/docker-entrypoint.…" 28 minutes ago Up 28 minutes 80/tcp nginx1 #删除所有容器
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
5312f5a51957 nginx "/docker-entrypoint.…" 4 seconds ago Up 3 seconds 80/tcp modest_keldysh
fc0387eaa16e nginx "/docker-entrypoint.…" 9 seconds ago Up 9 seconds 80/tcp ecstatic_shaw
bf954b53df83 alpine "/bin/sh" 16 seconds ago Exited (0) 16 seconds ago wonderful_wescoff
b5bd48ac6ccd alpine "/bin/sh" 18 seconds ago Exited (0) 17 seconds ago elated_wu
9542bfcd7012 nginx "/docker-entrypoint.…" 29 minutes ago Up 29 minutes 80/tcp nginx1
[root@Docker-Ubu1804-p11:~]# docker ps -aq | xargs docker rm -fv
5312f5a51957
fc0387eaa16e
bf954b53df83
b5bd48ac6ccd
9542bfcd7012
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES [root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
057791fe74cd janzen/app1:v3.0 "nginx" 9 seconds ago Up 9 seconds 80/tcp, 443/tcp nervous_kirch
ccb6665a6f69 janzen/app1:v3.0 "nginx" 26 seconds ago Exited (0) 13 seconds ago sweet_nightingale
862326646c78 alpine "/bin/sh" 43 seconds ago Exited (0) 42 seconds ago vigorous_kepler
c86366f583f6 nginx "/docker-entrypoint.…" 53 seconds ago Up 52 seconds 80/tcp eager_dirac
[root@Docker-Ubu1804-p11:~]# docker rm -fv `docker ps -aq`
057791fe74cd
ccb6665a6f69
862326646c78
c86366f583f6
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
4、容器启动和停止
docker statr|stop|restart|pause|unpause 容器ID
#停止，启动，重启 容器
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
79122ed71c8b nginx "/docker-entrypoint.…" 9 seconds ago Up 8 seconds 80/tcp nginx1
95ef5312654d janzen/app1:v3.0 "nginx" 19 seconds ago Up 18 seconds 80/tcp, 443/tcp app1
[root@Docker-Ubu1804-p11:~]# docker stop app1
app1
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
79122ed71c8b nginx "/docker-entrypoint.…" 18 seconds ago Up 17 seconds 80/tcp nginx1
95ef5312654d janzen/app1:v3.0 "nginx" 28 seconds ago Exited (0) 1 second ago app1 [root@Docker-Ubu1804-p11:~]# docker start app1
app1
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
79122ed71c8b nginx "/docker-entrypoint.…" 35 seconds ago Up 33 seconds 80/tcp nginx1
95ef5312654d janzen/app1:v3.0 "nginx" 45 seconds ago Up 2 seconds 80/tcp, 443/tcp app1
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
79122ed71c8b nginx "/docker-entrypoint.…" 42 seconds ago Up 40 seconds 80/tcp nginx1
95ef5312654d janzen/app1:v3.0 "nginx" 52 seconds ago Up 9 seconds 80/tcp, 443/tcp app1 [root@Docker-Ubu1804-p11:~]# docker restart app1
app1
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
79122ed71c8b nginx "/docker-entrypoint.…" 58 seconds ago Up 57 seconds 80/tcp nginx1
95ef5312654d janzen/app1:v3.0 "nginx" About a minute ago Up 1 second 80/tcp, 443/tcp app1 #启动并进入容器
[root@Docker-Ubu1804-p11:~]# docker run -it --name centos centos:7 bash
[root@db7c68fceee3 /]# exit
exit
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
db7c68fceee3 centos:7 "bash" 7 seconds ago Exited (0) 5 seconds ago centos
79122ed71c8b nginx "/docker-entrypoint.…" 6 minutes ago Up 6 minutes 80/tcp nginx1
95ef5312654d janzen/app1:v3.0 "nginx" 7 minutes ago Exited (0) 4 minutes ago app1
[root@Docker-Ubu1804-p11:~]# docker start -i centos
[root@db7c68fceee3 /]# exit
exit #停止所有容器
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
ca0eadefe3e8 nginx "/docker-entrypoint.…" 6 seconds ago Up 5 seconds 80/tcp nginx2
828dfe7a4d59 nginx "/docker-entrypoint.…" 16 seconds ago Exited (0) 14 seconds ago nginx1
7030861c96fd nginx "/docker-entrypoint.…" 23 seconds ago Exited (0) 20 seconds ago nginx
[root@Docker-Ubu1804-p11:~]# docker start `docker ps -a`
Error response from daemon: No such container: CONTAINER
Error response from daemon: No such container: ID
Error response from daemon: No such container: IMAGE
Error response from daemon: No such container: COMMAND
Error response from daemon: No such container: CREATED
Error response from daemon: No such container: STATUS
Error response from daemon: No such container: PORTS
Error response from daemon: No such container: NAMES
ca0eadefe3e8
nginx
Error response from daemon: No such container: "/docker-entrypoint.…"
Error response from daemon: No such container: 32
Error response from daemon: No such container: seconds
Error response from daemon: No such container: ago
Error response from daemon: No such container: Up
Error response from daemon: No such container: 31
Error response from daemon: No such container: seconds
Error response from daemon: No such container: 80/tcp
nginx2
828dfe7a4d59
nginx
Error response from daemon: No such container: "/docker-entrypoint.…"
Error response from daemon: No such container: 42
Error response from daemon: No such container: seconds
Error response from daemon: No such container: ago
Error response from daemon: No such container: Exited
Error response from daemon: No such container: (0)
Error response from daemon: No such container: 40
Error response from daemon: No such container: seconds
Error response from daemon: No such container: ago
nginx1
7030861c96fd
nginx
Error response from daemon: No such container: "/docker-entrypoint.…"
Error response from daemon: No such container: 49
Error response from daemon: No such container: seconds
Error response from daemon: No such container: ago
Error response from daemon: No such container: Exited
Error response from daemon: No such container: (0)
Error response from daemon: No such container: 46
Error response from daemon: No such container: seconds
Error response from daemon: No such container: ago
nginx
Error: failed to start containers: CONTAINER, ID, IMAGE, COMMAND, CREATED, STATUS, PORTS, NAMES, "/docker-entrypoint.…", 32, seconds, ago, Up, 31, seconds, 80/tcp, "/docker-entrypoint.…", 42, seconds, ago, Exited, (0), 40, seconds, ago, "/docker-entrypoint.…", 49, seconds, ago, Exited, (0), 46, seconds, ago
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
ca0eadefe3e8 nginx "/docker-entrypoint.…" 37 seconds ago Up 37 seconds 80/tcp nginx2
828dfe7a4d59 nginx "/docker-entrypoint.…" 47 seconds ago Up 4 seconds 80/tcp nginx1
7030861c96fd nginx "/docker-entrypoint.…" 54 seconds ago Up 5 seconds 80/tcp nginx
#启动所有容器
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
ca0eadefe3e8 nginx "/docker-entrypoint.…" 37 seconds ago Up 37 seconds 80/tcp nginx2
828dfe7a4d59 nginx "/docker-entrypoint.…" 47 seconds ago Up 4 seconds 80/tcp nginx1
7030861c96fd nginx "/docker-entrypoint.…" 54 seconds ago Up 5 seconds 80/tcp nginx
[root@Docker-Ubu1804-p11:~]# docker ps -aq |xargs docker stop
ca0eadefe3e8
828dfe7a4d59
7030861c96fd
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
ca0eadefe3e8 nginx "/docker-entrypoint.…" About a minute ago Exited (0) 2 seconds ago nginx2
828dfe7a4d59 nginx "/docker-entrypoint.…" About a minute ago Exited (0) 2 seconds ago nginx1
7030861c96fd nginx "/docker-entrypoint.…" About a minute ago Exited (0) 2 seconds ago nginx #容器暂停
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
bd2deeaf88ee nginx "/docker-entrypoint.…" 7 seconds ago Up 6 seconds 80/tcp nginx
[root@Docker-Ubu1804-p11:~]# docker top nginx
UID PID PPID C STIME TTY TIME CMD
root 9512 9487 0 01:52 ? 00:00:00 nginx: master process nginx -g daemon off;
systemd+ 9568 9512 0 01:52 ? 00:00:00 nginx: worker process
[root@Docker-Ubu1804-p11:~]# ps -aux | grep nginx
root 9512 0.0 0.5 8852 5384 ? Ss 01:52 0:00 nginx: master process nginx -g daemon off;
systemd+ 9568 0.0 0.2 9272 2420 ? S 01:52 0:00 nginx: worker process
root 9601 0.0 0.1 13216 1112 pts/0 S+ 01:52 0:00 grep --color=auto nginx [root@Docker-Ubu1804-p11:~]# docker pause nginx
nginx
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
bd2deeaf88ee nginx "/docker-entrypoint.…" About a minute ago Up About a minute (Paused) 80/tcp nginx
[root@Docker-Ubu1804-p11:~]# docker top nginx
UID PID PPID C STIME TTY TIME CMD
root 9512 9487 0 01:52 ? 00:00:00 nginx: master process nginx -g daemon off;
systemd+ 9568 9512 0 01:52 ? 00:00:00 nginx: worker process
[root@Docker-Ubu1804-p11:~]# ps -aux | grep nginx
root 9512 0.0 0.5 8852 5384 ? Ds 01:52 0:00 nginx: master process nginx -g daemon off;
systemd+ 9568 0.0 0.2 9272 2420 ? D 01:52 0:00 nginx: worker process
root 9649 0.0 0.1 13216 1096 pts/0 S+ 01:53 0:00 grep --color=auto nginx #容器取消暂停
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
bd2deeaf88ee nginx "/docker-entrypoint.…" About a minute ago Up About a minute (Paused) 80/tcp nginx
[root@Docker-Ubu1804-p11:~]# docker top nginx
UID PID PPID C STIME TTY TIME CMD
root 9512 9487 0 01:52 ? 00:00:00 nginx: master process nginx -g daemon off;
systemd+ 9568 9512 0 01:52 ? 00:00:00 nginx: worker process
[root@Docker-Ubu1804-p11:~]# ps -aux | grep nginx
root 9512 0.0 0.5 8852 5384 ? Ds 01:52 0:00 nginx: master process nginx -g daemon off;
systemd+ 9568 0.0 0.2 9272 2420 ? D 01:52 0:00 nginx: worker process
root 9649 0.0 0.1 13216 1096 pts/0 S+ 01:53 0:00 grep --color=auto nginx
[root@Docker-Ubu1804-p11:~]# docker unpause nginx
nginx
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
bd2deeaf88ee nginx "/docker-entrypoint.…" 2 minutes ago Up 2 minutes 80/tcp nginx
[root@Docker-Ubu1804-p11:~]# docker top nginx
UID PID PPID C STIME TTY TIME CMD
root 9512 9487 0 01:52 ? 00:00:00 nginx: master process nginx -g daemon off;
systemd+ 9568 9512 0 01:52 ? 00:00:00 nginx: worker process
[root@Docker-Ubu1804-p11:~]# ps -aux | grep nginx
root 9512 0.0 0.5 8852 5384 ? Ss 01:52 0:00 nginx: master process nginx -g daemon off;
systemd+ 9568 0.0 0.2 9272 2420 ? S 01:52 0:00 nginx: worker process
root 9711 0.0 0.1 13216 1040 pts/0 S+ 01:55 0:00 grep --color=auto nginx
5、给运行中的容器发送信号
Usage: docker kill [OPTIONS] CONTAINER [CONTAINER...] Kill one or more running containers Options:
-s, --signal string Signal to send to the container (default "KILL")
#当容器出现无法响应，也无法通过stop指令控制时，可使用 docker kill 强行关闭容器
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
bd2deeaf88ee nginx "/docker-entrypoint.…" 10 minutes ago Up 10 minutes 80/tcp nginx
[root@Docker-Ubu1804-p11:~]# docker kill nginx
nginx
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
bd2deeaf88ee nginx "/docker-entrypoint.…" 10 minutes ago Exited (137) 1 second ago nginx
6、进入运行中的容器
6.1、使用attach命令
类似于VNC模式进入容器，所有操作会同步输出到所有attach的连接窗口中，且exit退出后，容器自动关闭（不推荐）
Usage: docker attach [OPTIONS] CONTAINER Attach local standard input, output, and error streams to a running container Options:
--detach-keys string Override the key sequence for detaching a container
--no-stdin Do not attach STDIN
--sig-proxy Proxy all received signals to the process (default true)
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED
0a36288058f6 centos:7 "/bin/bash" 27 seconds
[root@Docker-Ubu1804-p11:~]# docker attach centos
[root@0a36288058f6 /]#
[root@0a36288058f6 /]# cat /etc/passwd
root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
sync:x:5:0:sync:/sbin:/bin/sync
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
halt:x:7:0:halt:/sbin:/sbin/halt
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
operator:x:11:0:operator:/root:/sbin/nologin
games:x:12:100:games:/usr/games:/sbin/nologin
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
nobody:x:99:99:Nobody:/:/sbin/nologin
systemd-network:x:192:192:systemd Network Management:/:/sbin/nologin
dbus:x:81:81:System message bus:/:/sbin/nologin
[root@0a36288058f6 /]# exit
exit
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
0a36288058f6 centos:7 "/bin/bash" About a minute ago Exited (0) 6 seconds ago centos
[root@Docker-Ubu1804-p11:~]#
6.2、使用exec命令
docker exec 可以对容器执行单次命令 或者 进入容器，且 exit 退出后，不影响容器继续运行（推荐）
Usage: docker exec [OPTIONS] CONTAINER COMMAND [ARG...] Run a command in a running container Options:
-d, --detach Detached mode: run command in the background
--detach-keys string Override the key sequence for detaching a container
-e, --env list Set environment variables
-i, --interactive Keep STDIN open even if not attached
--privileged Give extended privileges to the command
-t, --tty Allocate a pseudo-TTY
-u, --user string Username or UID (format: <name|uid>[:<group|gid>])
-w, --workdir string Working directory inside the container
#使用单命令模式向容器发送命令
[root@Docker-Ubu1804-p11:~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
0a36288058f6 centos:7 "/bin/bash" 6 minutes ago Up 2 minutes centos
[root@Docker-Ubu1804-p11:~]# docker exec centos echo "centos test"
centos test
[root@Docker-Ubu1804-p11:~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
0a36288058f6 centos:7 "/bin/bash" 7 minutes ago Up 2 minutes centos #进入容器，并使用exit退出
[root@Docker-Ubu1804-p11:~]# docker exec -it centos bash
[root@0a36288058f6 /]# cat /etc/issue
\S
Kernel \r on an \m [root@0a36288058f6 /]# exit
exit
[root@Docker-Ubu1804-p11:~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
0a36288058f6 centos:7 "/bin/bash" 7 minutes ago Up 3 minutes centos
[root@Docker-Ubu1804-p11:~]#
7、暴露容器所有端口
#docker run -P IMAGE
Usage: docker port CONTAINER [PRIVATE_PORT[/PROTO]]
[root@Docker-Ubu1804-p11:~]# docker port nginx
80/tcp -> 0.0.0.0:32770
[root@Docker-Ubu1804-p11:~]# docker port app1
443/tcp -> 0.0.0.0:32768
80/tcp -> 0.0.0.0:32769
[root@Docker-Ubu1804-p11:~]#
8、指定端口映射
#容器80端口映射到宿主机随机端口
docker run -p 80 <image>
#容器80端口映射到宿主机81端口
docker run -p 81:80 <image>
#容器80端口映射到宿主机 10.0.0.11:80
docker run -p 10.0.0.11:81:80 <image>
#容器80端口映射到宿主机10.0.0.11随机端口
docker run -p 10.0.0.11::80 <image>
#容器53/udp 端口映射到宿主机 10.0.0.11:53/udp 端口
docker run -p 10.0.0.11:53:53/udp <image>
#多端口映射
docker run -p 80 -p 443:443 -p 10.0.0.11:53:53/udp <image>
修改指定端口映射内容
容器端口映射配置文件路径 /var/lib/docker/containers/<容器ID>/hostconfig.json
#停用docker服务，找到配置文件 HostPort 内容，修改为新的宿主机端口
[root@Docker-Ubu1804-p11:~]# docker run -itd -p 80:80 --name app1 janzen/app1:v3.0
6d72cee22c43c320ce76dc2e3f186175d9237c7e888a969a37c3a04658e0bdc8
[root@Docker-Ubu1804-p11:~]# docker port app1
80/tcp -> 0.0.0.0:80
[root@Docker-Ubu1804-p11:~]# vim /var/lib/docker/containers/6d72cee22c43c320ce76dc2e3f186175d9237c7e888a969a37c3a04658e0bdc8/hostconfig.json
[root@Docker-Ubu1804-p11:~]# cat /var/lib/docker/containers/6d72cee22c43c320ce76dc2e3f186175d9237c7e888a969a37c3a04658e0bdc8/hostconfig.json | grep HostPort
{"Binds":null,"ContainerIDFile":"","LogConfig":{"Type":"json-file","Config":{}},"NetworkMode":"default","PortBindings":{"80/tcp":[{"HostIp":"","HostPort":"80"}]},"RestartPolicy":{"Name":"no","MaximumRetryCount":0},"AutoRemove":false,"VolumeDriver":"","VolumesFrom":null,"CapAdd":null,"CapDrop":null,"Capabilities":null,"Dns":[],"DnsOptions":[],"DnsSearch":[],"ExtraHosts":null,"GroupAdd":null,"IpcMode":"private","Cgroup":"","Links":null,"OomScoreAdj":0,"PidMode":"","Privileged":false,"PublishAllPorts":false,"ReadonlyRootfs":false,"SecurityOpt":null,"UTSMode":"","UsernsMode":"","ShmSize":67108864,"Runtime":"runc","ConsoleSize":[0,0],"Isolation":"","CpuShares":0,"Memory":0,"NanoCpus":0,"CgroupParent":"","BlkioWeight":0,"BlkioWeightDevice":[],"BlkioDeviceReadBps":null,"BlkioDeviceWriteBps":null,"BlkioDeviceReadIOps":null,"BlkioDeviceWriteIOps":null,"CpuPeriod":0,"CpuQuota":0,"CpuRealtimePeriod":0,"CpuRealtimeRuntime":0,"CpusetCpus":"","CpusetMems":"","Devices":[],"DeviceCgroupRules":null,"DeviceRequests":null,"KernelMemory":0,"KernelMemoryTCP":0,"MemoryReservation":0,"MemorySwap":0,"MemorySwappiness":null,"OomKillDisable":false,"PidsLimit":null,"Ulimits":null,"CpuCount":0,"CpuPercent":0,"IOMaximumIOps":0,"IOMaximumBandwidth":0,"MaskedPaths":["/proc/asound","/proc/acpi","/proc/kcore","/proc/keys","/proc/latency_stats","/proc/timer_list","/proc/timer_stats","/proc/sched_debug","/proc/scsi","/sys/firmware"],"ReadonlyPaths":["/proc/bus","/proc/fs","/proc/irq","/proc/sys","/proc/sysrq-trigger"]}
9、查看容器日志
docker logs 查看到的日志内容，必须为容器内前台输出的内容
Usage: docker logs [OPTIONS] CONTAINER Fetch the logs of a container Options:
--details Show extra details provided to logs
-f, --follow Follow log output
--since string Show logs since timestamp (e.g. 2013-01-02T13:23:37) or relative (e.g. 42m for 42 minutes)
--tail string Number of lines to show from the end of the logs (default "all")
-t, --timestamps Show timestamps
--until string Show logs before a timestamp (e.g. 2013-01-02T13:23:37) or relative (e.g. 42m for 42 minutes)
#查看容器日志
[root@Docker-Ubu1804-p11:~]# docker logs nginx
/docker-entrypoint.sh: /docker-entrypoint.d/ is not empty, will attempt to perform configuration
/docker-entrypoint.sh: Looking for shell scripts in /docker-entrypoint.d/
/docker-entrypoint.sh: Launching /docker-entrypoint.d/10-listen-on-ipv6-by-default.sh
10-listen-on-ipv6-by-default.sh: info: Getting the checksum of /etc/nginx/conf.d/default.conf
10-listen-on-ipv6-by-default.sh: info: Enabled listen on IPv6 in /etc/nginx/conf.d/default.conf
/docker-entrypoint.sh: Launching /docker-entrypoint.d/20-envsubst-on-templates.sh
/docker-entrypoint.sh: Launching /docker-entrypoint.d/30-tune-worker-processes.sh
/docker-entrypoint.sh: Configuration complete; ready for start up
2023/04/27 18:47:48 [notice] 1#1: using the "epoll" event method
2023/04/27 18:47:48 [notice] 1#1: nginx/1.21.5
2023/04/27 18:47:48 [notice] 1#1: built by gcc 10.2.1 20210110 (Debian 10.2.1-6)
2023/04/27 18:47:48 [notice] 1#1: OS: Linux 4.15.0-209-generic
2023/04/27 18:47:48 [notice] 1#1: getrlimit(RLIMIT_NOFILE): 1048576:1048576
2023/04/27 18:47:48 [notice] 1#1: start worker processes
2023/04/27 18:47:48 [notice] 1#1: start worker process 30 #显示时间
[root@Docker-Ubu1804-p11:~]# docker logs nginx -t
2023-04-27T18:47:48.893411908Z /docker-entrypoint.sh: /docker-entrypoint.d/ is not empty, will attempt to perform configuration
2023-04-27T18:47:48.896711013Z /docker-entrypoint.sh: Looking for shell scripts in /docker-entrypoint.d/
2023-04-27T18:47:48.897924136Z /docker-entrypoint.sh: Launching /docker-entrypoint.d/10-listen-on-ipv6-by-default.sh
2023-04-27T18:47:48.921415444Z 10-listen-on-ipv6-by-default.sh: info: Getting the checksum of /etc/nginx/conf.d/default.conf
2023-04-27T18:47:48.931443450Z 10-listen-on-ipv6-by-default.sh: info: Enabled listen on IPv6 in /etc/nginx/conf.d/default.conf
2023-04-27T18:47:48.931809013Z /docker-entrypoint.sh: Launching /docker-entrypoint.d/20-envsubst-on-templates.sh
2023-04-27T18:47:48.935078168Z /docker-entrypoint.sh: Launching /docker-entrypoint.d/30-tune-worker-processes.sh
2023-04-27T18:47:48.936533187Z /docker-entrypoint.sh: Configuration complete; ready for start up
2023-04-27T18:47:48.945388543Z 2023/04/27 18:47:48 [notice] 1#1: using the "epoll" event method
2023-04-27T18:47:48.945542266Z 2023/04/27 18:47:48 [notice] 1#1: nginx/1.21.5
2023-04-27T18:47:48.945665277Z 2023/04/27 18:47:48 [notice] 1#1: built by gcc 10.2.1 20210110 (Debian 10.2.1-6)
2023-04-27T18:47:48.945784449Z 2023/04/27 18:47:48 [notice] 1#1: OS: Linux 4.15.0-209-generic
2023-04-27T18:47:48.945903853Z 2023/04/27 18:47:48 [notice] 1#1: getrlimit(RLIMIT_NOFILE): 1048576:1048576
2023-04-27T18:47:48.946243713Z 2023/04/27 18:47:48 [notice] 1#1: start worker processes
2023-04-27T18:47:48.946481894Z 2023/04/27 18:47:48 [notice] 1#1: start worker process 30 #跟踪显示
[root@Docker-Ubu1804-p11:~]# docker logs nginx -t -f
2023-04-27T18:47:48.893411908Z /docker-entrypoint.sh: /docker-entrypoint.d/ is not empty, will attempt to perform configuration
2023-04-27T18:47:48.896711013Z /docker-entrypoint.sh: Looking for shell scripts in /docker-entrypoint.d/
2023-04-27T18:47:48.897924136Z /docker-entrypoint.sh: Launching /docker-entrypoint.d/10-listen-on-ipv6-by-default.sh
2023-04-27T18:47:48.921415444Z 10-listen-on-ipv6-by-default.sh: info: Getting the checksum of /etc/nginx/conf.d/default.conf
2023-04-27T18:47:48.931443450Z 10-listen-on-ipv6-by-default.sh: info: Enabled listen on IPv6 in /etc/nginx/conf.d/default.conf
2023-04-27T18:47:48.931809013Z /docker-entrypoint.sh: Launching /docker-entrypoint.d/20-envsubst-on-templates.sh
2023-04-27T18:47:48.935078168Z /docker-entrypoint.sh: Launching /docker-entrypoint.d/30-tune-worker-processes.sh
2023-04-27T18:47:48.936533187Z /docker-entrypoint.sh: Configuration complete; ready for start up
2023-04-27T18:47:48.945388543Z 2023/04/27 18:47:48 [notice] 1#1: using the "epoll" event method
2023-04-27T18:47:48.945542266Z 2023/04/27 18:47:48 [notice] 1#1: nginx/1.21.5
2023-04-27T18:47:48.945665277Z 2023/04/27 18:47:48 [notice] 1#1: built by gcc 10.2.1 20210110 (Debian 10.2.1-6)
2023-04-27T18:47:48.945784449Z 2023/04/27 18:47:48 [notice] 1#1: OS: Linux 4.15.0-209-generic
2023-04-27T18:47:48.945903853Z 2023/04/27 18:47:48 [notice] 1#1: getrlimit(RLIMIT_NOFILE): 1048576:1048576
2023-04-27T18:47:48.946243713Z 2023/04/27 18:47:48 [notice] 1#1: start worker processes
2023-04-27T18:47:48.946481894Z 2023/04/27 18:47:48 [notice] 1#1: start worker process 30 2023-04-27T18:50:18.049511284Z 10.0.0.7 - - [27/Apr/2023:18:50:18 +0000] "GET / HTTP/1.1" 200 615 "-" "curl/7.29.0" "-" #显示最新 5 条
[root@Docker-Ubu1804-p11:~]# docker logs nginx -t --tail 5
2023-04-27T18:50:48.979223543Z 10.0.0.7 - - [27/Apr/2023:18:50:48 +0000] "GET / HTTP/1.1" 200 615 "-" "curl/7.29.0" "-"
2023-04-27T18:50:49.549149287Z 10.0.0.7 - - [27/Apr/2023:18:50:49 +0000] "GET / HTTP/1.1" 200 615 "-" "curl/7.29.0" "-"
2023-04-27T18:50:50.140282142Z 10.0.0.7 - - [27/Apr/2023:18:50:50 +0000] "GET / HTTP/1.1" 200 615 "-" "curl/7.29.0" "-"
2023-04-27T18:50:50.730516959Z 10.0.0.7 - - [27/Apr/2023:18:50:50 +0000] "GET / HTTP/1.1" 200 615 "-" "curl/7.29.0" "-"
2023-04-27T18:50:59.198938861Z 10.0.0.11 - - [27/Apr/2023:18:50:59 +0000] "GET / HTTP/1.1" 200 615 "-" "curl/7.58.0" "-"
10、传递运行命令
[root@Docker-Ubu1804-p11:~]# docker run -d --name centos centos:7 tail -f /etc/passwd
aa4d029b8c7e12cf73b273af093f434612f0deb22f41c256770e73c3b28a9ff7
[root@Docker-Ubu1804-p11:~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
aa4d029b8c7e centos:7 "tail -f /etc/passwd" 6 seconds ago Up 5 seconds centos
0a6bd66584ef nginx "/docker-entrypoint.…" 6 minutes ago Up 6 minutes 0.0.0.0:80->80/tcp nginx
[root@Docker-Ubu1804-p11:~]#
11、容器内部hosts文件
[root@aa4d029b8c7e /]# cat /etc/hosts
127.0.0.1 localhost
::1 localhost ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
172.17.0.3 aa4d029b8c7e
[root@aa4d029b8c7e /]#
12、指定容器DNS
容器指定DNS方式：
1、在宿主机配置DNS
2、启动容器时使用 --dns=x.x.x.x 参数指定DNS
3、在 /etc/docker/daemon.json 添加 {"dns":["x.x.x.x","x.x.x.x"]}
13、容器内与宿主机之间复制文件
Usage: docker cp [OPTIONS] CONTAINER:SRC_PATH DEST_PATH|-
docker cp [OPTIONS] SRC_PATH|- CONTAINER:DEST_PATH Copy files/folders between a container and the local filesystem Use '-' as the source to read a tar archive from stdin
and extract it to a directory destination in a container.
Use '-' as the destination to stream a tar archive of a
container source to stdout. Options:
-a, --archive Archive mode (copy all uid/gid information)
-L, --follow-link Always follow symbol link in SRC_PATH
#将文件从容器复制到宿主机
[root@Docker-Ubu1804-p11:~]# docker cp -a aa4d029b8c7e:/etc/yum.repos.d/CentOS-Base.repo ~/
[root@Docker-Ubu1804-p11:~]# ls
CentOS-Base.repo disk.sh issue janzen_web_images.tar redis_install.sh
busybox_image.tar image.tar janzen_images.tar os.version system_info.sh #将文件从宿主机复制到容器内
[root@Docker-Ubu1804-p11:~]# docker cp redis_install.sh aa4d029b8c7e:/var
[root@Docker-Ubu1804-p11:~]# docker exec centos ls /var
adm
cache
db
empty
games
gopher
kerberos
lib
local
lock
log
nis
opt
preserve
redis_install.sh
run
spool
tmp
yp
14、systemd控制容器运行
[root@Docker-Ubu1804-p11:~]# vim /lib/systemd/system/app1_docker.service [Unit]
Description=Run app1 on Docker Application Container Engine
Documentation=http://${hostname -i}
After=network-online.target firewalld.service containerd.service docker.service
Wants=network-online.target
Requires=docker.socket [Service]
TimeoutStartSec=0
ExecStartPre=-/usr/bin/docker kill app1
ExecStartPre=-/usr/bin/docker rm -fv app1
ExecStart=/usr/bin/docker run --name app1 -p 80:80 janzen/app1
ExecStop=/usr/bin/docker stop app1
ExecStopPost="/usr/bin/docker rm app1" [Install]
WantedBy=multi-user.target
[root@Docker-Ubu1804-p11:~]#
[root@Docker-Ubu1804-p11:~]# systemctl daemon-reload
[root@Docker-Ubu1804-p11:~]# systemctl enable --now app1_docker.service
Created symlink /etc/systemd/system/multi-user.target.wants/app1_docker.service → /lib/systemd/system/app1_docker.service.
15、传递环境变量
mysql 镜像参数参考：https://hub.docker.com/_/mysql
#mysql传递root密码参数
[root@Docker-Ubu1804-p11:~]# docker run --name mysql -e MYSQL_ROOT_PASSWORD=passwd -d mysql
Unable to find image 'mysql:latest' locally
latest: Pulling from library/mysql
Digest: sha256:a43f6e7e7f3a5e5b90f857fbed4e3103ece771b19f0f75880f767cf66bbb6577
Status: Downloaded newer image for mysql:latest
1ab9b49af363ab9a5fa87ed7127cb7eeae15ea1135e350f141d386ebbf4198e9
[root@Docker-Ubu1804-p11:~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
1ab9b49af363 mysql "docker-entrypoint.s…" 14 seconds ago Up 13 seconds 3306/tcp, 33060/tcp mysql
fb706a7ec6a3 janzen/app1 "nginx" About a minute ago Up About a minute 0.0.0.0:80->80/tcp, 443/tcp app1
[root@Docker-Ubu1804-p11:~]# docker exec -it mysql sh
sh-4.4# mysql -uroot -ppasswd
mysql: [Warning] Using a password on the command line interface can be insecure.
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 8
Server version: 8.0.33 MySQL Community Server - GPL Copyright (c) 2000, 2023, Oracle and/or its affiliates. Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql>
#使用文件传递参数
[root@Docker-Ubu1804-p11:~]# cat env_mysql.list
MYSQL_ROOT_PASSWORD=passwd
MYSQL_DATABASE=janzen_test
MYSQL_USER=janzen
MYSQL_PASSWORD=janzenpass [root@Docker-Ubu1804-p11:~]# docker run --name some-mysql --env-file=env_mysql.list -d mysql
94e0a35875d9d1f8dd430177b0e7bb0960bd7f010d580185a223091cb70c75ca
[root@Docker-Ubu1804-p11:~]# docker exec -it some-mysql bash
bash-4.4# mysql -ujanzen -pjanzenpass janzen_test
mysql: [Warning] Using a password on the command line interface can be insecure.
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 8
Server version: 8.0.33 MySQL Community Server - GPL Copyright (c) 2000, 2023, Oracle and/or its affiliates. Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql> show databases;
+--------------------+
| Database |
+--------------------+
| information_schema |
| janzen_test |
| performance_schema |
+--------------------+
3 rows in set (0.00 sec) mysql>
