工程技术

DevOps 漫谈：Docker

摘要

  • Docker ABC:常用命令、自定义制作、发布

This article is part of an Virtualization Technology tutorial series. Make sure to check out my other articles as well:

ABC

  • Docker 常用命令
  • Docker 自定义制作

Docker 常用命令

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
$ docker version
$ docker info

# service 命令的用法
$ sudo service docker start

# 列出本机的所有 image 文件。
$ docker image ls
# 删除 image 文件
$ docker image rm [imageName]

# Hello World
$ docker image pull hello-world
$ docker container run hello-world

# 启动已经生成、已经停止运行
$ docker container start [containerID]
# 终止容器 [SIGTERM]
$ docker container stop [containerID]
# 终止容器 [SIGKILL]
$ docker container kill [containID]
# 列出本机正在运行的容器
$ docker container ls

# 列出本机所有容器，包括终止运行的容器
$ docker container ls --all

# 进入一个正在运行的容器
$ docker container exec -it [containerID] /bin/bash
# 将文件从容器拷贝到本机
$ docker container cp [containID]:[/path/to/file] .
$ docker container logs

Docker 自定义制作

  • 项目根目录创建 .dockerignore 文件(需要忽略打包的文件)

    1
    2
    .git
    logs

  • 创建 Dockerfile 文件

  • 构建 image 文件

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    ## You need to add a dot（"docker build" requires exactly 1 argument(s)）
    $ docker image build -t gospider .
    Sending build context to Docker daemon  12.47MB
    Step 1/4 : FROM node:8.4
    8.4: Pulling from library/node
    aa18ad1a0d33: Downloading [===============>                                   ]  16.18MB/52.6MB
    90f6d19ae388: Download complete
    94273a890192: Downloading [================>                                  ]  14.13MB/43.23MB
    c9110c904324: Downloading [===>                                               ]  10.25MB/134.7MB
    788d73c0fb6b: Waiting
    f221bb562f24: Waiting
    14414a6a768d: Waiting
    af6d2b2ad991: Waiting
    ......
    14414a6a768d: Pull complete
    af6d2b2ad991: Pull complete
    Digest: sha256:080488acfe59bae32331ce28373b752f3f848be8b76c2c2d8fdce28205336504
    Status: Downloaded newer image for node:8.4
     ---> 386940f92d24
    Step 2/4 : COPY . /app
     ---> 5dea8aef5c00
    Step 3/4 : WORKDIR /app
    Removing intermediate container de21dc94fd49
     ---> c04960e1036b
    Step 4/4 : EXPOSE 3001
     ---> Running in 7e5efe5e0b43
    Removing intermediate container 7e5efe5e0b43
     ---> bcadd82be353
    Successfully built bcadd82be353
    Successfully tagged gospider:latest

    $ docker image ls
    REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
    gospider            latest              bcadd82be353        7 minutes ago       685MB

  • 制作容器
    docker container run 从 image 文件生成容器。
    可选参数：

  • -p 参数：p1:p2 [容器端口]映射到[本机端口]

  • imagename

  • /bin/bash：保证用户可以使用 Shell

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
$ docker container run -it gospider /bin/bash
root@d2d7bfd9f4c1:/app#
root@d2d7bfd9f4c1:/app#
root@d2d7bfd9f4c1:/app# ls
Dockerfile		     
gmof_caipiao_month.go	    gmof_cdc_epide_month.go	    publish		    ttank_zyuc_handle.go
charset.go		     gmof_caipiao_month_spider.go   gmof_cdc_epide_month_spider.go  test		    ttank_zyuc_register.go
dbutils_csv.go		     gmof_casad_info_spider.go	    gmof_person.go		    ttank-echarts	    zyuc_task_info.go
dbutils_kafka.go	     gmof_casad_list.go		    gmof_person_region.go	    ttank.go		    zyuc_task_spider.go
dbutils_pg.go		     gmof_casad_list_spider.go	    gmof_person_region_spider.go    ttank_gmof_handle.go    
gmof_caipiao_list.go	     gmof_cdc_epide_list.go	    kafka			    ttank_gmof_register.go
gmof_caipiao_list_spider.go  gmof_cdc_epide_list_spider.go  ops				    ttank_tasks.go
root@d2d7bfd9f4c1:/app#
root@d2d7bfd9f4c1:/app# id
uid=0(root) gid=0(root) groups=0(root)
root@d2d7bfd9f4c1:/app# whoami
root

Docker 发布

  • 注册账户：hub.docker.com 或 cloud.docker.com
  • 登录
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    $ docker login
    Login with your Docker ID to push and pull images from Docker Hub.
    If you don\'t have a Docker ID, head over to https://hub.docker.com to create one.
    Username: riboseyim
    Password:
    Login Succeeded

    # 为本地的 image 标注用户名和版本。
    $ docker image tag [imageName] [username]/[repository]:[tag]

    # 发布
    $ docker image push riboseyim/gospider
    The push refers to repository [docker.io/riboseyim/gospider]
    db602e58edca: Pushed
    c5b2ac536264: Mounted from library/node
    6c08a5b7d8f4: Mounted from library/node
    50867bb8f5d7: Mounted from library/node
    72d6c6f0ea06: Mounted from library/node
    8686c6b8d999: Mounted from library/node
    44b57351135e: Mounted from library/node
    00b029f9aa09: Mounted from library/node
    18f9b4e2e1bc: Mounted from library/node
    latest: digest: sha256:4388ba2cc83adc0d1e9b3ca4c0b273f5812ad6365a36aeef33ff87d62b236d5d size: 2217

Docker 构建

Examples

Docker 安全

1.容器操作系统与多租户
2.容器内容（使用可信源）
3.容器注册 (容器镜像加密访问)
4.构建过程安全
5.控制集群中可部署的内容
6.容器编排：加强容器平台安全
7.网络隔离
8.存储
9.API 管理, 终端安全和单点登录 (SSO)
10.角色和访问控制管理

Docker 网络

Docker 监控

Docker 参考书

扩展阅读

DevOps 漫谈系列

DevOps 实践的本质是文化

  • 学习力－团队生命之根
  • 带领团队翻译书籍
  • Don’t make me think
  • 凡是被很多人不断重复的好习惯，要将其自动化整合到工具

参考文献

推荐文章