入門：Docker常用命令及解釋

一、容器生命週期管理

1. create

命令解釋：創建一個容器，但不啓動，容器名稱爲 mynginx

leoheng-MacBook-Pro:~ leo$ docker create --name mynginx   nginx:latest
Unable to find image 'nginx:latest' locally
latest: Pulling from library/nginx
a5a6f2f73cd8: Pull complete 
1ba02017c4b2: Pull complete 
33b176c904de: Pull complete 
Digest: sha256:5d32f60db294b5deb55d078cd4feb410ad88e6fe77500c87d3970eca97f54dba
Status: Downloaded newer image for nginx:latest
3a9e561b7629c6880c776a9331dcc9d052685f08c98f58c940e1a164c1f8d77c
leoheng-MacBook-Pro:~ leo$

2. run

命令解釋：創建一個容器並運行它
可選參數：
-a stdin: 指定標準輸入輸出內容類型，可選 STDIN/STDOUT/STDERR 三項；
-d: 後臺運行容器，並返回容器ID；
-i: 以交互模式運行容器，通常與 -t 同時使用；
-p: 端口映射，格式爲：主機(宿主)端口:容器端口
-t: 爲容器重新分配一個僞輸入終端，通常與 -i 同時使用；
--name="mynginx": 爲容器指定一個名稱；
--dns 8.8.8.8: 指定容器使用的DNS服務器，默認和宿主一致；
--dns-search example.com: 指定容器DNS搜索域名，默認和宿主一致；
-h "leo": 指定容器的hostname；
-e username="uleo": 設置環境變量；
--env-file=[]: 從指定文件讀入環境變量；
--cpuset="0-2" 或者 --cpuset="0,1,2": 綁定容器到指定CPU運行；
-m :設置容器使用內存最大值；
--net="bridge": 指定容器的網絡連接類型，支持 bridge/host/none/container: 四種類型；
--link=[]: 添加鏈接到另一個容器；
--expose=[]: 開放一個端口或一組端口；

leoheng-MacBook-Pro:~ leo$ docker run -it -d -p 222:22 -p 8080:80 --restart=always  --name nginx nginx:latest
feea481119cb053e84bf3bda6f1b29beaddb3f91899f4d28775c4015f0dafa2f
leoheng-MacBook-Pro:~ leo$ docker ps –a #查看容器進程
CONTAINER ID        IMAGE               COMMAND                  CREATED              STATUS              PORTS                                       NAMES
feea481119cb        nginx:latest        "nginx -g 'daemon of…"   About a minute ago   Up About a minute   0.0.0.0:222->22/tcp, 0.0.0.0:8080->80/tcp   nginx
leoheng-MacBook-Pro:~ leo$

3. start/stop/restart

命令解釋：容器的啓動，關閉，重啓

leoheng-MacBook-Pro:~ leo$ docker ps 
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                                       NAMES
feea481119cb        nginx:latest        "nginx -g 'daemon of…"   3 minutes ago       Up 3 minutes        0.0.0.0:222->22/tcp, 0.0.0.0:8080->80/tcp   nginx
leoheng-MacBook-Pro:~ leo$ docker stop feea481119cb
feea481119cb
leoheng-MacBook-Pro:~ leo$ docker ps 
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
leoheng-MacBook-Pro:~ leo$ docker restrat feea481119cb
docker: 'restrat' is not a docker command.
See 'docker --help'
leoheng-MacBook-Pro:~ leo$ docker restart feea481119cb
feea481119cb
leoheng-MacBook-Pro:~ leo$ docker ps 
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                                       NAMES
feea481119cb        nginx:latest        "nginx -g 'daemon of…"   3 minutes ago       Up 2 seconds        0.0.0.0:222->22/tcp, 0.0.0.0:8080->80/tcp   nginx
leoheng-MacBook-Pro:~ leo$

4. pause/unpause

命令解釋：容器的暫停或恢復暫停容器，暫停狀態無法正常使用該容器。

leoheng-MacBook-Pro:~ leo$ docker ps 
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                                       NAMES
feea481119cb        nginx:latest        "nginx -g 'daemon of…"   4 minutes ago       Up About a minute   0.0.0.0:222->22/tcp, 0.0.0.0:8080->80/tcp   nginx
leoheng-MacBook-Pro:~ leo$ docker pause feea481119cb
feea481119cb
leoheng-MacBook-Pro:~ leo$ docker ps 
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS                  PORTS                                       NAMES
feea481119cb        nginx:latest        "nginx -g 'daemon of…"   6 minutes ago       Up 2 minutes (Paused)   0.0.0.0:222->22/tcp, 0.0.0.0:8080->80/tcp   nginx
leoheng-MacBook-Pro:~ leo$ docker unpause feea481119cb
feea481119cb
leoheng-MacBook-Pro:~ leo$ docker ps 
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                                       NAMES
feea481119cb        nginx:latest        "nginx -g 'daemon of…"   6 minutes ago       Up 2 minutes        0.0.0.0:222->22/tcp, 0.0.0.0:8080->80/tcp   nginx
leoheng-MacBook-Pro:~ leo$

5. exec

命令解釋：在運行的容器中執行命令或者進去容器

leoheng-MacBook-Pro:~ leo$ docker exec -it nginx  /bin/bash
root@feea481119cb:/# hostname 
feea481119cb
root@feea481119cb:/#

6. kill

命令解釋：終止一個運行中的容器
參數：
-s ：向容器發送終止信號

leoheng-MacBook-Pro:~ leo$ docker ps 
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                                       NAMES
feea481119cb        nginx:latest        "nginx -g 'daemon of…"   14 minutes ago      Up 10 minutes       0.0.0.0:222->22/tcp, 0.0.0.0:8080->80/tcp   nginx
leoheng-MacBook-Pro:~ leo$ docker kill nginx
nginx
leoheng-MacBook-Pro:~ leo$ docker  ps
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
leoheng-MacBook-Pro:~ leo$

7. rm

命令解釋：刪除一個或者多個容器
參數：
-f :通過終止信號強制刪除一個運行中的容器
-l :移除容器間的網絡連接，而非容器本身
-v :刪除與容器關聯的卷

leoheng-MacBook-Pro:~ leo$ docker ps 
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                                       NAMES
feea481119cb        nginx:latest        "nginx -g 'daemon of…"   16 minutes ago      Up 41 seconds       0.0.0.0:222->22/tcp, 0.0.0.0:8080->80/tcp   nginx
leoheng-MacBook-Pro:~ leo$ docker rm nginx
Error response from daemon: You cannot remove a running container feea481119cb053e84bf3bda6f1b29beaddb3f91899f4d28775c4015f0dafa2f. Stop the container before attempting removal or force remove
leoheng-MacBook-Pro:~ leo$ docker stop  nginx
nginx
leoheng-MacBook-Pro:~ leo$ docker rm nginx
nginx
leoheng-MacBook-Pro:~ leo$ docker ps -a
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
leoheng-MacBook-Pro:~ leo$

二、容器操作

1. ps

命令解釋：列出容器
參數：
-a :顯示所有的容器，包括未運行的容器。
-f :根據條件過濾顯示的內容
--format :指定返回值的模版
-l :顯示最近創建的容器
-n :列出最近創建的n個容器
--no-trunc :不截斷輸出
-q :靜默模式，只顯示容器編號
-s :顯示總的文件大小。

leoheng-MacBook-Pro:~ leo$ docker ps 
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
leoheng-MacBook-Pro:~ leo$ docker ps -a
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS                            PORTS               NAMES
feea481119cb        nginx:latest        "nginx -g 'daemon of…"   16 minutes ago      Exited (137) About a minute ago                       nginx
leoheng-MacBook-Pro:~ leo$

2. inspect

命令解釋：獲取容器／鏡像的元數據
參數：
-f : 指定返回值的模版文件
-s :顯示在難過的文件大小
--type :爲指定類型返回json

查看nginx:latest的元信息

leoheng-MacBook-Pro:~ leo$ docker inspect nginx:latest
[
    {
        "Id": "sha256:568c4670fa800978e08e4a51132b995a54f8d5ae83ca133ef5546d092b864acf",
        "RepoTags": [
            "nginx:latest"
        ],
        "RepoDigests": [
            "nginx@sha256:5d32f60db294b5deb55d078cd4feb410ad88e6fe77500c87d3970eca97f54dba"
        ],
        "Parent": "",
        "Comment": "",
        "Created": "2018-11-27T22:21:45.207738888Z",
        "Container": "1455cab9c97f6945336dd97d5dfca0429eacbb739fcd362cc528ed8a175fcc7b",
        "ContainerConfig": {
            "Hostname": "1455cab9c97f",
            "Domainname": "",
            "User": "",
            "AttachStdin": false,
            "AttachStdout": false,
            "AttachStderr": false,
            "ExposedPorts": {
                "80/tcp": {}
            },
            "Tty": false,
            "OpenStdin": false,
            "StdinOnce": false,
            "Env": [
                "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
                "NGINX_VERSION=1.15.7-1~stretch",
                "NJS_VERSION=1.15.7.0.2.6-1~stretch"
            ],
            "Cmd": [
                "/bin/sh",
                "-c",
                "#(nop) ",
                "CMD [\"nginx\" \"-g\" \"daemon off;\"]"
            ],
            "ArgsEscaped": true,
            "Image": "sha256:cf9409661039371fa3448619fb988625e4542108921c4c8f923c5bccc51601eb",
            "Volumes": null,
            "WorkingDir": "",
            "Entrypoint": null,
            "OnBuild": [],
            "Labels": {
                "maintainer": "NGINX Docker Maintainers <[email protected]>"
            },
            "StopSignal": "SIGTERM"
        },
        "DockerVersion": "17.06.2-ce",
        "Author": "",
        "Config": {
            "Hostname": "",
            "Domainname": "",
            "User": "",
            "AttachStdin": false,
            "AttachStdout": false,
            "AttachStderr": false,
            "ExposedPorts": {
                "80/tcp": {}
            },
            "Tty": false,
            "OpenStdin": false,
            "StdinOnce": false,
            "Env": [
                "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
                "NGINX_VERSION=1.15.7-1~stretch",
                "NJS_VERSION=1.15.7.0.2.6-1~stretch"
            ],
            "Cmd": [
                "nginx",
                "-g",
                "daemon off;"
            ],
            "ArgsEscaped": true,
            "Image": "sha256:cf9409661039371fa3448619fb988625e4542108921c4c8f923c5bccc51601eb",
            "Volumes": null,
            "WorkingDir": "",
            "Entrypoint": null,
            "OnBuild": [],
            "Labels": {
                "maintainer": "NGINX Docker Maintainers <[email protected]>"
            },
            "StopSignal": "SIGTERM"
        },
        "Architecture": "amd64",
        "Os": "linux",
        "Size": 109116878,
        "VirtualSize": 109116878,
        "GraphDriver": {
            "Data": {
                "LowerDir": "/var/lib/docker/overlay2/b2a9c894aa016618fdae88f2cd152cf11f1f05461d927d4682efe60c4366f038/diff:/var/lib/docker/overlay2/a9bc2292493221b766a47272eb1d9d7c2b0049bda74a745dd82bc82443f5ec1f/diff",
                "MergedDir": "/var/lib/docker/overlay2/b9af4051377bdbc6e1435834a73ed8c23d5bb89bfef33eb199347ff315038f32/merged",
                "UpperDir": "/var/lib/docker/overlay2/b9af4051377bdbc6e1435834a73ed8c23d5bb89bfef33eb199347ff315038f32/diff",
                "WorkDir": "/var/lib/docker/overlay2/b9af4051377bdbc6e1435834a73ed8c23d5bb89bfef33eb199347ff315038f32/work"
            },
            "Name": "overlay2"
        },
        "RootFS": {
            "Type": "layers",
            "Layers": [
                "sha256:ef68f6734aa485edf13a8509fe60e4272428deaf63f446a441b79d47fc5d17d3",
                "sha256:ad5345cbb119f7c720123e3adf28b164143e4157ca6e46a629ca694e75f7825f",
                "sha256:ece4f9fdef598687f23d39643bacbf2c609201b087b93bbae81b931da72d2a64"
            ]
        },
        "Metadata": {
            "LastT
agTime": "0001-01-01T00:00:00Z"
        }
    }
]
leoheng-MacBook-Pro:~ leo$

獲取容器的ip方法

leoheng-MacBook-Pro:~ leo$ docker inspect -f {{.NetworkSettings.Networks.bridge.IPAddress}}  nginx
172.17.0.2

或者

leoheng-MacBook-Pro:~ leo$ docker inspect --format='{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' nginx
172.17.0.2
leoheng-MacBook-Pro:~ leo$

3. top

命令解釋：查看容器中運行的進程信息，支持ps的參數

leoheng-MacBook-Pro:~ leo$ docker top nginx
PID                 USER                TIME                COMMAND
3208                root                0:00                nginx: master process nginx -g daemon off;
3251                101                 0:00                nginx: worker process
leoheng-MacBook-Pro:~ leo$

查看所有容器的進程信息

leoheng-MacBook-Pro:~ leo$ for i in `docker ps |grep Up|awk '{print $1}'` ; do echo \ && docker top $i ; done

PID                 USER                TIME                COMMAND
3208                root                0:00                nginx: master process nginx -g daemon off;
3251                101                 0:00                nginx: worker process
leoheng-MacBook-Pro:~ leo$

4. logs

命令解釋：獲取容器的日誌
參數：
-f :跟蹤日誌輸出
--since :顯示某個開始時間的所有日誌
-t :顯示時間戳
--tail :僅列出最新N條容器日誌

leoheng-MacBook-Pro:~ leo$ docker logs -f nginx 
172.17.0.1 - - [08/Dec/2018:03:22:35 +0000] "GET / HTTP/1.1" 200 612 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "-"
2018/12/08 03:22:36 [error] 24#24: *1 open() "/usr/share/nginx/html/favicon.ico" failed (2: No such file or directory), client: 172.17.0.1, server: localhost, request: "GET /favicon.ico HTTP/1.1", host: "192.168.1.3:8080", referrer: "http://192.168.1.3:8080/"
172.17.0.1 - - [08/Dec/2018:03:22:36 +0000] "GET /favicon.ico HTTP/1.1" 404 555 "http://192.168.1.3:8080/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "-"
172.17.0.1 - - [08/Dec/2018:03:22:47 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "-"
172.17.0.1 - - [08/Dec/2018:03:23:48 +0000] "GET / HTTP/1.1" 200 612 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.2 Safari/605.1.15" "-"
2018/12/08 03:23:48 [error] 24#24: *5 open() "/usr/share/nginx/html/favicon.ico" failed (2: No such file or directory), client: 172.17.0.1, server: localhost, request: "GET /favicon.ico HTTP/1.1", host: "192.168.1.3:8080", referrer: "http://192.168.1.3:8080/"
172.17.0.1 - - [08/Dec/2018:03:23:48 +0000] "GET /favicon.ico HTTP/1.1" 404 153 "http://192.168.1.3:8080/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.2 Safari/605.1.15" "-"

查看容器nginx從2018/12/8的最新5條日誌

leoheng-MacBook-Pro:~ leo$ docker logs --since="2018-12-08" --tail=5 nginx
172.17.0.1 - - [08/Dec/2018:03:22:36 +0000] "GET /favicon.ico HTTP/1.1" 404 555 "http://192.168.1.3:8080/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "-"
172.17.0.1 - - [08/Dec/2018:03:22:47 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "-"
172.17.0.1 - - [08/Dec/2018:03:23:48 +0000] "GET / HTTP/1.1" 200 612 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.2 Safari/605.1.15" "-"
2018/12/08 03:23:48 [error] 24#24: *5 open() "/usr/share/nginx/html/favicon.ico" failed (2: No such file or directory), client: 172.17.0.1, server: localhost, request: "GET /favicon.ico HTTP/1.1", host: "192.168.1.3:8080", referrer: "http://192.168.1.3:8080/"
172.17.0.1 - - [08/Dec/2018:03:23:48 +0000] "GET /favicon.ico HTTP/1.1" 404 153 "http://192.168.1.3:8080/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.2 Safari/605.1.15" "-"
leoheng-MacBook-Pro:~ leo$

5. events

命令解釋：從服務器獲取實時事件
參數：
-f ：根據條件過濾事件；
--since ：從指定的時間戳後顯示所有事件;
--until ：流水時間顯示到指定的時間爲止；

獲取2018/12/8的所有事件

leoheng-MacBook-Pro:~ leo$ docker events --since="2018-12-08" 
2018-12-08T09:46:57.832351102+08:00 image pull nginx:latest (maintainer=NGINX Docker Maintainers <[email protected]>, name=nginx)
2018-12-08T09:46:57.938764857+08:00 container create 3a9e561b7629c6880c776a9331dcc9d052685f08c98f58c940e1a164c1f8d77c (image=nginx:latest, maintainer=NGINX Docker Maintainers <[email protected]>, name=mynginx)
2018-12-08T10:23:52.553078826+08:00 container create feea481119cb053e84bf3bda6f1b29beaddb3f91899f4d28775c4015f0dafa2f (image=nginx:latest, maintainer=NGINX Docker Maintainers <[email protected]>, name=nginx)
2018-12-08T10:23:52.678445332+08:00 network connect 2651d136cf62ba9dc0ebe674eca0c1d9f73cf4230e345aec01be0ddd797715bb (container=feea481119cb053e84bf3bda6f1b29beaddb3f91899f4d28775c4015f0dafa2f, name=bridge, type=bridge)
2018-12-08T10:23:53.133906581+08:00 container start feea481119cb053e84bf3bda6f1b29beaddb3f91899f4d28775c4015f0dafa2f (image=nginx:latest, maintainer=NGINX Docker Maintainers <[email protected]>, name=nginx)
2018-12-08T10:25:07.949445750+08:00 container destroy 3a9e561b7629c6880c776a9331dcc9d052685f08c98f58c940e1a164c1f8d77c (image=nginx:latest, maintainer=NGINX Docker Maintainers <[email protected]>, name=mynginx)

如果指定的時間是到秒級的，需要將時間轉成時間戳。如果時間爲日期的話，可以直接使用，如--since="2016-07-01"。

6. wait

命令說明：阻塞運行知道容器停止，然後打印出它的退出代碼

leoheng-MacBook-Pro:~ leo$ docker wait nginx

7. attach

命令解釋：連接到正在運行中的容器
--sig-proxy:防止CTRL+D 或 CRTL+C退出容器

leoheng-MacBook-Pro:~ leo$ docker attach --sig-proxy=false nginx
172.17.0.1 - - [08/Dec/2018:03:37:47 +0000] "GET / HTTP/1.1" 200 612 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.2 Safari/605.1.15" "-"

8. port

命令解釋：列出指定的容器的端口映射，或查找將PRIVATE_PORT NAT到面向公衆的端口。

leoheng-MacBook-Pro:~ leo$ docker port nginx 
22/tcp -> 0.0.0.0:222
80/tcp -> 0.0.0.0:8080
leoheng-MacBook-Pro:~ leo$

9. export

命令解釋：將文件系統作爲一個tar歸檔文件導出到STDOUT。保存當前鏡像狀態。

leoheng-MacBook-Pro:~ leo$ docker export -o nginx-leo.tar nginx
leoheng-MacBook-Pro:~ leo$ ls nginx-leo.tar 
nginx-leo.tar
leoheng-MacBook-Pro:~ leo$

三、容器rootfs命令

1. commit

命令解釋：從容器創建一個新的鏡像，提交到鏡像庫。
參數：
-a :提交的鏡像作者；
-c :使用Dockerfile指令來創建鏡像；
-m :提交時的說明文字；
-p :在commit時，將容器暫停。

leoheng-MacBook-Pro:~ leo$ docker commit -a "leo"  -m "leo commit nginx test"  nginx  leo:v1 
sha256:6ec4ef7718a8b311f261e8eb12f2b55a42f631e75ad7cd7a5c105620c6abd7ce
leoheng-MacBook-Pro:~ leo$ docker images  leo:v1
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
leo                 v1                  6ec4ef7718a8        10 seconds ago      109MB
leoheng-MacBook-Pro:~ leo$

2. cp

命令說明：用於容器與主機之間的數據拷貝
參數說明：
-L :保持源目標中的鏈接

leoheng-MacBook-Pro:~ leo$ echo "nginxtest"  >> test
leoheng-MacBook-Pro:~ leo$ docker cp test  nginx:/
leoheng-MacBook-Pro:~ leo$ docker exec -it nginx /bin/bash
root@96ddce20c551:/# cat test
nginxtest
root@96ddce20c551:/#

3. diff

命令說明：檢查容器裏文件結構的更改

leoheng-MacBook-Pro:~ leo$ docker diff nginx
C /run
A /run/nginx.pid
C /var
C /var/cache
C /var/cache/nginx
A /var/cache/nginx/client_temp
A /var/cache/nginx/fastcgi_temp
A /var/cache/nginx/proxy_temp
A /var/cache/nginx/scgi_temp
A /var/cache/nginx/uwsgi_temp
C /root
A /root/.bash_history
A /test
leoheng-MacBook-Pro:~ leo$

四、鏡像倉庫

1. login/logout

命令解釋：登陸或登出docker鏡像倉庫
參數：
-u :登陸的用戶名
-p :登陸的密碼

因爲我下載了docker客戶端，直接命令輸入

leoheng-MacBook-Pro:~ leo$ docker login –u leo –p *******
Authenticating with existing credentials...
Login Succeeded
leoheng-MacBook-Pro:~ leo$

2. pull

命令解釋：從鏡像庫拉取鏡像活着更新指定鏡像
參數：
-a :拉取所有 tagged 鏡像
--disable-content-trust :忽略鏡像的校驗,默認開啓

leoheng-MacBook-Pro:~ leo$ docker pull nginx

3. push

命令解釋：將本地的鏡像上傳到鏡像倉庫，前提要先登錄鏡像倉庫
參數：
--disable-content-trust :忽略鏡像的校驗,默認開啓

leoheng-MacBook-Pro:~ leo$ docker push leo:v1
The push refers to repository [docker.io/library/leo]
fae8ad5437e1: Preparing 
ece4f9fdef59: Preparing 
ad5345cbb119: Preparing 
ef68f6734aa4: Preparing 
denied: requested access to the resource is denied
leoheng-MacBook-Pro:~ leo$

4. search

命令解釋：從docker hub 中查找鏡像
參數：
--automated :只列出 automated build類型的鏡像；
--no-trunc :顯示完整的鏡像描述；
-s :列出收藏數不小於指定值的鏡像。

leoheng-MacBook-Pro:~ leo$ docker search nginx
NAME                                                   DESCRIPTION                                     STARS               OFFICIAL            AUTOMATED
nginx                                                  Official build of Nginx.                        10502               [OK]                
jwilder/nginx-proxy                                    Automated Nginx reverse proxy for docker con…   1483                                    [OK]
richarvey/nginx-php-fpm                                Container running Nginx + PHP-FPM capable of…   660                                     [OK]
jrcs/letsencrypt-nginx-proxy-companion                 LetsEncrypt container to use with nginx as p…   450                                     [OK]
kong                                                   Open-source Microservice & API Management la…   257                 [OK]                
webdevops/php-nginx                                    Nginx with PHP-FPM                              118                                     [OK]

五、本地鏡像管理

1. images

命令解釋：列出本地鏡像
參數
-a :列出本地所有的鏡像（含中間映像層，默認情況下，過濾掉中間映像層）；
--digests :顯示鏡像的摘要信息；
-f :顯示滿足條件的鏡像；
--format :指定返回值的模板文件；
--no-trunc :顯示完整的鏡像信息；
-q :只顯示鏡像ID。

leoheng-MacBook-Pro:~ leo$ docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
leo                 v1                  6ec4ef7718a8        5 hours ago         109MB
nginx               latest              568c4670fa80        10 days ago         109MB
leoheng-MacBook-Pro:~ leo$

2. tag

命令說明：標記本地鏡像，將其歸入某一個倉庫

leoheng-MacBook-Pro:~ leo$ docker tag 6ec4ef7718a8 leoheng/leo:v1
leoheng-MacBook-Pro:~ leo$ docker images leoheng/leo:v1
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
leoheng/leo         v1                  6ec4ef7718a8        5 hours ago         109MB
leoheng-MacBook-Pro:~ leo$

3. history

命令解釋：查看指定鏡像的創建歷史
參數：
-H :以可讀的格式打印鏡像大小和日期，默認爲true；
--no-trunc :顯示完整的提交記錄；
-q :僅列出提交記錄ID。

leoheng-MacBook-Pro:~ leo$ docker history leoheng/leo:v1
IMAGE               CREATED             CREATED BY                                      SIZE                COMMENT
6ec4ef7718a8        5 hours ago         nginx -g daemon off;                            108B                leo commit nginx test
568c4670fa80        10 days ago         /bin/sh -c #(nop)  CMD ["nginx" "-g" "daemon…   0B                  
<missing>           10 days ago         /bin/sh -c #(nop)  STOPSIGNAL [SIGTERM]         0B                  
<missing>           10 days ago         /bin/sh -c #(nop)  EXPOSE 80/tcp                0B                  
<missing>           10 days ago         /bin/sh -c ln -sf /dev/stdout /var/log/nginx…   22B                 
<missing>           10 days ago         /bin/sh -c set -x  && apt-get update  && apt…   53.8MB              
<missing>           10 days ago         /bin/sh -c #(nop)  ENV NJS_VERSION=1.15.7.0.…   0B                  
<missing>           10 days ago         /bin/sh -c #(nop)  ENV NGINX_VERSION=1.15.7-…   0B                  
<missing>           3 weeks ago         /bin/sh -c #(nop)  LABEL maintainer=NGINX Do…   0B                  
<missing>           3 weeks ago         /bin/sh -c #(nop)  CMD ["bash"]                 0B                  
<missing>           3 weeks ago         /bin/sh -c #(nop) ADD file:dab9baf938799c515…   55.3MB              
leoheng-MacBook-Pro:~ leo$

4. build

命令解釋：用於Dockerfile創建鏡像
參數
--build-arg=[] :設置鏡像創建時的變量；
--cpu-shares :設置 cpu 使用權重；
--cpu-period :限制 CPU CFS週期；
--cpu-quota :限制 CPU CFS配額；
--cpuset-cpus :指定使用的CPU id；
--cpuset-mems :指定使用的內存 id；
--disable-content-trust :忽略校驗，默認開啓；
-f :指定要使用的Dockerfile路徑；
--force-rm :設置鏡像過程中刪除中間容器；
--isolation :使用容器隔離技術；
--label=[] :設置鏡像使用的元數據；
-m :設置內存最大值；
--memory-swap :設置Swap的最大值爲內存+swap，"-1"表示不限swap；
--no-cache :創建鏡像的過程不使用緩存；
--pull :嘗試去更新鏡像的新版本；
--quiet, -q :安靜模式，成功後只輸出鏡像 ID；
--rm :設置鏡像成功後刪除中間容器；
--shm-size :設置/dev/shm的大小，默認值是64M；
--ulimit :Ulimit配置。
--tag, -t: 鏡像的名字及標籤，通常 name:tag 或者 name 格式；可以在一次構建中爲一個鏡像設置多個標籤。
--network: 默認 default。在構建期間設置RUN指令的網絡模式

使用當前目錄的 Dockerfile 創建鏡像，標籤爲 runoob/ubuntu:v1。

docker build -t runoob/ubuntu:v1 .

使用URL github.com/creack/docker-firefox 的 Dockerfile 創建鏡像。

docker build github.com/creack/docker-firefox

也可以通過 -f Dockerfile 文件的位置：

docker build -f /path/to/a/Dockerfile .

在 Docker 守護進程執行 Dockerfile 中的指令前，首先會對 Dockerfile 進行語法檢查，有語法錯誤時會返回：

$ docker build -t test/myapp .
Sending build context to Docker daemon 2.048 kB
Error response from daemon: Unknown instruction: RUNCMD

5. save

命令解釋：將指定鏡像保存成tar歸檔文件

leoheng-MacBook-Pro:~ leo$ docker ps 
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                                       NAMES
96ddce20c551        nginx:latest        "nginx -g 'daemon of…"   6 hours ago         Up 5 hours          0.0.0.0:222->22/tcp, 0.0.0.0:8080->80/tcp   nginx
leoheng-MacBook-Pro:~ leo$ docker save -o nginx_leo_v1.tar  nginx
leoheng-MacBook-Pro:~ leo$ ls nginx_leo_v1.tar 
nginx_leo_v1.tar
leoheng-MacBook-Pro:~ leo$

6. import

命令解釋：從歸檔文件中創建鏡像
參數
-c :應用docker 指令創建鏡像；
-m :提交時的說明文字；

leoheng-MacBook-Pro:~ leo$ docker import nginx_leo_v1.tar  leoheng/leo:v1
sha256:7afc0a247e015d0984f67a8b694c7c8e8363138c7ca6e4c3c69b583c2322774e
leoheng-MacBook-Pro:~ leo$

7. rmi

命令解釋：刪除本地一個或多個鏡像
參數：
-f :強制刪除；
--no-prune :不移除該鏡像的過程鏡像，默認移除；

leoheng-MacBook-Pro:~ leo$ docker images
REPOSITORY          TAG                 IMAGE ID            CREATED              SIZE
leoheng/leo         v1                  7afc0a247e01        About a minute ago   113MB
nginx               latest              568c4670fa80        10 days ago          109MB
leoheng-MacBook-Pro:~ leo$ docker rmi 7afc0a247e01
Untagged: leoheng/leo:v1
Deleted: sha256:7afc0a247e015d0984f67a8b694c7c8e8363138c7ca6e4c3c69b583c2322774e
Deleted: sha256:c0b54e54ff0bfd2330f0a541c02bf5706674cc3d2b0c7899457a5d543acaacff
leoheng-MacBook-Pro:~ leo$

六、查看docker版本信息

1. info
命令解釋：顯示docker系統信息，包括鏡像和容器數

leoheng-MacBook-Pro:~ leo$ docker info
Containers: 1
 Running: 1
 Paused: 0
 Stopped: 0
Images: 2
Server Version: 18.09.0
Storage Driver: overlay2
 Backing Filesystem: extfs
 Supports d_type: true
 Native Overlay Diff: true
Logging Driver: json-file
Cgroup Driver: cgroupfs
Plugins:
 Volume: local
 Network: bridge host macvlan null overlay
 Log: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslog
Swarm: inactive
Runtimes: runc
Default Runtime: runc
Init Binary: docker-init
containerd version: 468a545b9edcd5932818eb9de8e72413e616e86e
runc version: 69663f0bd4b60df09991c08812a60108003fa340
init version: fec3683
Security Options:
 seccomp
  Profile: default
Kernel Version: 4.9.125-linuxkit
Operating System: Docker for Mac
OSType: linux
Architecture: x86_64
CPUs: 2
Total Memory: 1.952GiB
Name: linuxkit-025000000001
ID: 4CPI:PVLC:WBJL:QQPX:JP2X:B7RP:MGYE:SA7Y:ULC5:YOSL:RAYE:EMFD

2. version
命令解釋：顯示docker版本信息
參數：
-f :指定返回值的模板文件。

leoheng-MacBook-Pro:~ leo$ docker version 
Client: Docker Engine - Community
 Version:           18.09.0
 API version:       1.39
 Go version:        go1.10.4
 Git commit:        4d60db4
 Built:             Wed Nov  7 00:47:43 2018
 OS/Arch:           darwin/amd64
 Experimental:      false

Server: Docker Engine - Community
 Engine:
  Version:          18.09.0
  API version:      1.39 (minimum version 1.12)+
  Go version:       go1.10.4
  Git commit:       4d60db4
  Built:            Wed Nov  7 00:55:00 2018
  OS/Arch:          linux/amd64
  Experimental:     false
leoheng-MacBook-Pro:~ leo$

入門：Docker常用命令及解釋

一、容器生命週期管理

二、容器操作

三、容器rootfs命令

四、鏡像倉庫

五、本地鏡像管理

六、查看docker版本信息

運維進階：精通zabbix

進階運維：SSH無縫切換遠程加密

證書報錯修復：fail ssl hand shake error

濃縮版：雲計算運維KVM監控工具之Sensu開源版

超詳細：自動化運維之jumpserver堡壘機入門到掌握

Mac下配置sublime實現LaTeX

https://yachay.unat.edu.pe/blog/index.php?comment_area=format_blog&comment_component=blog&comment_co

linux以太網驅動總結

入門：Docker常用命令及解釋

一、 容器生命週期管理

二、 容器操作

三、 容器rootfs命令

四、 鏡像倉庫

五、 本地鏡像管理

六、 查看docker版本信息

一、容器生命週期管理

二、容器操作

三、容器rootfs命令

四、鏡像倉庫

五、本地鏡像管理

六、查看docker版本信息