Docker 学习总结

# 初始化 Vagrantfile 文件
$ vagrant init centos/7
# 安装 centos7 虚拟机
$ vagrant up
# ssh进入虚拟机
$ vagrant ssh

> sudo yum update
> exit # 退出

$ vagrant status
# 停止
$ vagrant halt
# 删除
$ vagrant destroy

# 查看docker版本
$ sudo docker version
$ sudo docker info
# 启动 docker
$ sudo systemctl start docker
# $ sudo docker run hello-world

config.vm.provision "shell", inline: <<-SHELL
    sudo yum remove docker docker-client docker-client-latest docker-common docker-latest docker-latest-logrotate docker-logrotate docker-engine
    sudo yum install -y yum-utils
    sudo yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
    sudo yum install docker-ce docker-ce-cli containerd.io
    sudo systemctl start docker
SHELL

$ vagrant up

# 创建 docker - demo
$ docker-machine create demo
$ docker-machine ls
$ docker-machine ssh demo
$ exit
$ docker-machine stop demo
$ docker-machine env demo

$ docker image ls

$ docker search hello-world

$ docker pull docker.io/hello-world
# docker 官方提供的 image 文件都放在 docker.io 默认组里，可以省略
$ docker pull hello-world

$ docker rmi hello-world

# 启动镜像 ubuntu 并在启动的容器里执行命令 /bin/echo "Hello world"
$ docker run ubuntu /bin/echo "Hello world"
# 运行交互式的容器，允许对容器内的标准输入(STDIN)进行交互
$ docker run -it ubuntu /bin/bash
# 可以通过运行exit命令或者使用 CTRL+D 来退出容器

$ docker start [containerId]

$ docker stop [containerId]

$ docker attach [containerID]

$ docker container -exec -it [containerID] /bin/bash
$ docker exec -it [containerID] ip a # 打印容器ip

$ docker ps
# 显示所有的容器，包括已停止的
$ docker container ls -a
# 显示最新的那个容器
$ docker container ls -l

$ docker run --detach centos ping www.csxiaoyao.com
# 查看 docker 容器的输出
$ docker logs --follow abcd123efg

$ docker kill abcd123efg

# 删除容器
$ docker rm [containerId]
# 删除镜像
$ docker rmi [imageId]
# 删除所有停止运行的容器
$ docker rm $(docker ps -a -q)

$ docker container cp [containerId] /README.md .

$ docker run --rm ubuntu /bin/bash

$ docker run --cpu-shares=10 --memory=200M xxx/ubuntu-stress --vm 1 --verbose

$ docker top [CONTAINER ID/NAMES]

# $ docker commit -m "test commit" -a "csxiaoyao" [containerId] csxiaoyao/testimage:1.0.0
$ docker commit -m "test commit" -a "csxiaoyao" [containerId] csxiaoyao/testimage:latest
$ docker image ls
$ docker run csxiaoyao/testimage /bin/bash
$ docker rm [containerId]
$ docker rmi [imageId]

$ docker inspect centos

FROM centos  # 制作 base image
FROM ubuntu:14.04

LABEL version="1.0"
LABEL description="test"

RUN yum update && yum install -y vim \
    python-dev

WORKDIR /test
WORKDIR demo
RUN pwd      # 输出 /test/demos

ADD test.tar.gz /  # 添加到根目录并解压
WORKDIR /root
ADD hello test/    # /root/test/hellos

ENV MYSQL_VERSION 5.6  # 设置常量
RUN apt-get install -y mysql-server="${MYSQL_VERSION}" \
    && rm -rf /var/lib/apt/lists/*

...
CMD ["python", "app.py"]

COPY docker-entrypoint.sh /usr/local/bin/
ENTRYPOINT ["./docker-entrypoint.sh"]
CMD ["mongod"]

.git
node_modules

# 安装 npm
# 安装 node
$ npm install n -g
$ n latest
$ npm init -y
$ vi server.js
# ...

FROM node
COPY ./app /app
WORKDIR /app
RUN npm install
EXPOSE 3000
CMD node server.js

$ npm install express-generator -g
$ express app

FROM node
COPY ./app /app
WORKDIR /app
RUN npm install
EXPOSE 3000
CMD npm start

# -t 指定image镜像的名称，后面还可以加冒号指定标签，如果不指定默认是latest
# . 表示 Dockerfile 文件所在路径，. 表示当前路径
$ docker build -t csxiaoyao/express-demo:latest .
$ docker image ls

# -p 将容器的3000端口映射为本机的3333端口
# /bin/bash 容器启动后执行的第一个命令，会覆盖文件中配置的CMD
# --rm 在容器终止运行后自动删除容器文件
$ docker container run -p 3333:3000 -it express-demo /bin/bash
$ curl localhost:3333

# 登录 dockerhub 账户
$ docker login
$ docker login --username=csxiaoyao --password=19931128
# build
# docker image build -t [username]/[repository]:[tag] .
# 镜像打标签
# docker image tag [imageName] [username]/[repository]:[tag]
$ docker tag express-demo:v1 csxiaoyao/express-demo:v1
# 上传
$ docker push csxiaoyao/express-demo:v1

$ docker volume --help
$ docker volume create nginx-vol
$ docker volume ls
$ docker volume inspect nginx-vol

# 把新建的 nginx-vol 数据卷挂载到 /usr/share/nginx/html
# 建议使用 --mount，更通用
$ docker run -d -it --name=nginx1 --mount src=nginx-vol,dst=/usr/share/nginx/html nginx
$ docker run -d -it --name=nginx2 -v nginx-vol:/usr/share/nginx/html nginx
# mysql
$ docker run -d --name mysql -v mysql-data:/var/lib/mysql -e MYSQL_ROOT_PASSWORD=root -e MYSQL_DATABASE=wordpress mysql

# 停止容器
$ docker container stop nginx1
# 删除容器
$ docker container rm nginx1
# 删除数据卷
$ docker volume rm nginx-vol

# 列出所有的数据盘
$ docker volume ls
# 列出已经孤立的数据盘
$ docker volume ls -f dangling=true
# 删除数据盘
$ docker volume rm xxxx

$ docker run -v /mnt -it --name logs centos bash
> cd /mnt
> echo 1 > 1.txt
> exit
$ docker inspect logs

...
"Mounts": [
    {
        "Source":"/var/lib/docker/volumes/xxxxxxxx/_data",
        "Destination": "/mnt",
    }
]
...

# demo1: $(pwd):/app
$ docker run -d -p 80:5000 -v $(pwd):/app --name app xxx/test-image
# demo2: ~/data:/mnt
$ docker run -v ~/data:/mnt -ti --name logs2 centos bash # 把当前用户目录中的data目录映射到/mnt上
> cd /mnt
> echo 2 > 2.txt
> exit
$ cat ~/data/2.txt

# 创建 logger 容器
$ docker create -v /mnt --name logger centos
# 创建 logger1 容器使用 logger 的数据盘
$ docker run --volumes-from logger --name logger1 -i -t centos bash
> cd /mnt 
> touch logger1
# 创建 logger2 容器使用 logger 的数据盘
$ docker run --volumes-from logger --name logger2 -i -t centos bash
> cd /mnt
> touch logger2

# ping 验证IP可达性，telnet 验证服务(端口)可用性
$ ping 192.168.205.10
$ telnet 192.168.205.10 80

$ docker network ls
$ docker inspect bridge
$ docker run -d --name server1 nginx
$ docker run -d --name server2 nginx
$ docker exec -it server1 bash
> ping server2

$ docker run -d --name server_none --net none nginx
$ docker inspect none
$ docker exec -it server_none bash
> ip addr

$ docker run -d --name server_host --net host nginx
$ docker inspect none
$ docker exec -it server_host bash
> ip addr

# 随机分配主机端口，容器内部端口随机映射到主机高端口
$ docker run -d -P [CONTAINER ID/NAMES] python app.py
# 指定主机端口
$ docker run -d -p 80:5000 [CONTAINER ID/NAMES] python app.py
# 指定host
$ docker run -d -p 127.0.0.1:80:5000 [CONTAINER ID/NAMES] python app.py
# 指定协议，默认TCP
$ docker run -d -p 127.0.0.1:80:5000/udp [CONTAINER ID/NAMES] python app.py

# 访问主机的 8080 端口会被定向到容器的 80 端口
$ docker run -d --name server_nginx -p "8080:80" nginx
# 查看主机绑定的端口
$ docker port server_nginx

$ docker network create --driver bridge web
$ docker network inspect web
$ docker run -d --name webserver --net web nginx
$ docker network connect web webserver1
$ docker network disconnect web webserver2

$ pip install docker-compose

version: '2'
services:
  test1:
    image: nginx
    port:
      - "8080:80"
  test2:
    image: nginx
    port:
      - "8081:80"

# 启动所有的服务，docker会创建默认的网络
$ docker-compose up
# 后台启动所有的服务
$ docker-compose up -d
# 打印所有的容器
$ docker-compose ps
# 停止所有服务
$ docker-compose stop
# 开始所有服务
$ docker-compose start
# 持续跟踪日志
$ docker-compose logs -f
# 进入容器
$ docker-compose exec test1 bash
# 通过服务名连接
> ping test2
# 删除服务容器
$ docker-compose rm
# 网络不会删除
$ docker network ls
# stop 并删除资源
$ docker-compose down

version: '2'
services:
  test1:
    image: nginx
    ports:
      - "8080:80"
    networks:
      - "demo_network"
    volumes:
      - "access:/mnt"
  test2:
    image: nginx
    ports:
      - "8081:80"
    networks:
      - "demo_network"
    volumes:
      - "access:/mnt"
  test3:
    image: nginx
    ports:
      - "8082:80"
    networks:
      - "default"
      - "demo_network"
networks:
  demo_network:
    driver: bridge
volumes:
  access:
    driver: local

version: '2'
services:
  test1:
    image: nginx
    ports:
      - "8080:80"
    networks:
      - "demo_network"
    volumes:
      - "access:/mnt"
      - "./test1:/usr/share/nginx/html"
  test2:
    image: nginx
    ports:
      - "8081:80"
    networks:
      - "demo_network"
    volumes:
      - "access:/mnt"
      - "./test2:/usr/share/nginx/html"
  test3:
    image: nginx
    ports:
      - "8082:80"
    networks:
      - "default"
      - "demo_network"
networks:
  demo_network:
    driver: bridge
volumes:
  access:
    driver: local

version: '3'
services:
  wordpress:
    image: wordpress
    ports:
      - 8080:80
    depends_on:
      - mysql
    environment:
      WORDPRESS_DB_HOST: mysql
      WORDPRESS_DB_PASSWORD: root
    networks:
      - my-bridge
  mysql:
    image: mysql:5.7
    environment:
      MYSQL_ROOT_PASSWORD: root
      MYSQL_DATABASE: wordpress
    volumes:
      - mysql-data:/var/lib/mysql
    networks:
      - my-bridge
volumes:
  mysql-data:
networks:
  my-bridge:
    driver: bridge

version: "3"
services:
  redis:
    image: redis
  web:
    build:
      context: .
      dockerfile: Dockerfile
    ports: ["8080"]
    environment:
      REDIS_HOST: redis
  lb:
    image: dockercloud/haproxy
    links:
      - web
    ports:
      - 80:80
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock

$ docker-compose up --scale web=3 -d

-- app/
   |-- web/                         # 应用代码
-- services/                        # 相关服务
-- images/                          # 编译的脚本和镜像
   |-- nginx/config/default.conf    # nginx 配置文件
   |-- node/Dockerfile
-- docker-compose.yml

version: '2'
services:
  node:
    build:
      context: ./images/node
      dockerfile: Dockerfile
    volumes:
      - ./app/web:/web
    depends_on:
      - db
  web:
    image: nginx
    ports:
      - "8080:80"
    volumes:
      - ./images/nginx/config:/etc/nginx/conf.d
      - ./app/web/views:/mnt/views
    depends_on:
      - node
  db:
    image: mariadb
    environment:
      MYSQL_ROOT_PASSWORD: "root"
      MYSQL_DATABASE: "node"
      MYSQL_USER: "csxiaoyao"
      MYSQL_PASSWORD: "19931128"
    volumes:
      - db:/var/lib/mysql
volumes:
  db:
    driver: local

let http=require('http');
var mysql  = require('mysql');
var connection = mysql.createConnection({
  host     : 'db',
  user     : 'csxiaoyao',
  password : '19931128',
  database : 'node'
});
connection.connect();
let server=http.createServer(function (req,res) {
  // ...
});
server.listen(3000);

"scripts": {
  "start": "node server.js"
},
"dependencies": {
  "mysql": "^2.16.0"
}

FROM node
MAINTAINER csxiaoyao <x@csxiaoyao.com>
WORKDIR /web
RUN npm install
CMD npm start

upstream backend {
  server node:3000;
}
server {
  listen 80;
  server_name localhost;
  root /mnt/views;
  index index.html index.htm;
  location /api {
    proxy_pass http://backend;
  }
}