Docker学习笔记

sudo apt-get update
sudo apt-get install -y docker.io
sudo ln -sf /usr/bin/docker.io /usr/local/bin/docker
sudo sed -i '$acomplete -F _docker docker' /etc/bash_completion.d/docker.io

sudo apt-get install apt-transport-https
sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 36A1D7869245C8950F966E92D8576A8BA88D21E9
sudo bash -c "echo deb https://get.docker.io/ubuntu docker main > /etc/apt/sources.list.d/docker.list"
sudo apt-get update
sudo apt-get install lxc-docker

curl -sSL https://get.daocloud.io/docker | sh

echo "DOCKER_OPTS=\"\$DOCKER_OPTS --registry-mirror=http://×××××.m.daocloud.io\"" | sudo tee -a /etc/default/docker
sudo service docker restart

docker pull ubuntu:14.04

docker -h

A self-sufficient runtime for linux containers.

Options:

  --api-cors-header=                   Set CORS headers in the remote API
  -b, --bridge=                        Attach containers to a network bridge
  --bip=                               Specify network bridge IP
  -D, --debug=false                    Enable debug mode
  -d, --daemon=false                   Enable daemon mode
  --default-gateway=                   Container default gateway IPv4 address
  --default-gateway-v6=                Container default gateway IPv6 address
  --default-ulimit=[]                  Set default ulimits for containers
  --dns=[]                             DNS server to use
  --dns-search=[]                      DNS search domains to use
  -e, --exec-driver=native             Exec driver to use
  --exec-opt=[]                        Set exec driver options
  --exec-root=/var/run/docker          Root of the Docker execdriver
  --fixed-cidr=                        IPv4 subnet for fixed IPs
  --fixed-cidr-v6=                     IPv6 subnet for fixed IPs
  -G, --group=docker                   Group for the unix socket
  -g, --graph=/var/lib/docker          Root of the Docker runtime
  -H, --host=[]                        Daemon socket(s) to connect to
  -h, --help=false                     Print usage
  --icc=true                           Enable inter-container communication
  --insecure-registry=[]               Enable insecure registry communication
  --ip=0.0.0.0                         Default IP when binding container ports
  --ip-forward=true                    Enable net.ipv4.ip_forward
  --ip-masq=true                       Enable IP masquerading
  --iptables=true                      Enable addition of iptables rules
  --ipv6=false                         Enable IPv6 networking
  -l, --log-level=info                 Set the logging level
  --label=[]                           Set key=value labels to the daemon
  --log-driver=json-file               Default driver for container logs
  --log-opt=map[]                      Set log driver options
  --mtu=0                              Set the containers network MTU
  -p, --pidfile=/var/run/docker.pid    Path to use for daemon PID file
  --registry-mirror=[]                 Preferred Docker registry mirror
  -s, --storage-driver=                Storage driver to use
  --selinux-enabled=false              Enable selinux support
  --storage-opt=[]                     Set storage driver options
  --tls=false                          Use TLS; implied by --tlsverify
  --tlscacert=~/.docker/ca.pem         Trust certs signed only by this CA
  --tlscert=~/.docker/cert.pem         Path to TLS certificate file
  --tlskey=~/.docker/key.pem           Path to TLS key file
  --tlsverify=false                    Use TLS and verify the remote
  --userland-proxy=true                Use userland proxy for loopback traffic
  -v, --version=false                  Print version information and quit

Commands:
    attach    Attach to a running container
    build     Build an image from a Dockerfile
    commit    Create a new image from a container's changes
    cp        Copy files/folders from a container's filesystem to the host path
    create    Create a new container
    diff      Inspect changes on a container's filesystem
    events    Get real time events from the server
    exec      Run a command in a running container
    export    Stream the contents of a container as a tar archive
    history   Show the history of an image
    images    List images
    import    Create a new filesystem image from the contents of a tarball
    info      Display system-wide information
    inspect   Return low-level information on a container or image
    kill      Kill a running container
    load      Load an image from a tar archive
    login     Register or log in to a Docker registry server
    logout    Log out from a Docker registry server
    logs      Fetch the logs of a container
    pause     Pause all processes within a container
    port      Lookup the public-facing port that is NAT-ed to PRIVATE_PORT
    ps        List containers
    pull      Pull an image or a repository from a Docker registry server
    push      Push an image or a repository to a Docker registry server
    rename    Rename an existing container
    restart   Restart a running container
    rm        Remove one or more containers
    rmi       Remove one or more images
    run       Run a command in a new container
    save      Save an image to a tar archive
    search    Search for an image on the Docker Hub
    start     Start a stopped container
    stats     Display a stream of a containers' resource usage statistics
    stop      Stop a running container
    tag       Tag an image into a repository
    top       Lookup the running processes of a container
    unpause   Unpause a paused container
    version   Show the Docker version information
    wait      Block until a container stops, then print its exit code

Run 'docker COMMAND --help' for more information on a command.

docker search -s 3 --automated --no-trunc django

--automated=false    Only show automated builds 只列出 automated build 类型的镜像--no-trunc=false     Don't truncate output 显示完整的镜像描述
  -s, --stars=0        Only displays with at least x stars 只列出不低于 x 个收藏的镜像

docker pull Ubuntu:latest

-a, --all-tags=false    Download all tagged images in the repository 拉取所有 tagged 镜像

docker images ubuntu

-a, --all=false      Show all images (default hides intermediate images) 列出所有镜像（含中间映像层，默认情况下，过滤掉中间映像层）  --digests=false      Show digests 展示镜像的摘要
  -f, --filter=[]      Filter output based on conditions provided 过滤镜像，如：-f ['dangling=true'] 只列出满足 dangling=true 条件的镜像
  --no-trunc=false     Don't truncate output 显示完整的镜像 ID
  -q, --quiet=false    Only show numeric IDs 仅列出镜像 ID

  -a, --all=false       Show all containers (default shows just running) 列出所有  容器（含沉睡镜像）--before=             Show only container created before Id or Name 列出在某一  容器  之前创建的  容器 ，接受 容器  名称和 ID 作为参数
  -f, --filter=[]       Filter output based on conditions provided -f [exited=<int>] 列出满足 exited=<int> 条件的  容器 -l, --latest=false    Show the latest created container, include non-running 仅列出最新创建的一个 容器
  -n=-1                 Show n last created containers, include non-running 列出最近创建的 n 个  容器
  --no-trunc=false      Don't truncate output 显示完整的  容器ID
  -q, --quiet=false     Only display numeric IDs 仅列出  容器ID
  -s, --size=false      Display total file sizes 显示  容器  大小
  --since=              Show created since Id or Name, include non-running 列出在某一  容器  之后创建的  容器 ，接受 容器  名称和 ID 作为参数

docker rmi nginx:latest ubuntu:14.04

-f, --force=false    Force removal of the image 强行移除该镜像，即使其正被使用
  --no-prune=false     Do not delete untagged parents 不移除该镜像的过程镜像，默认移除

docker rm harrysun/lnmp
docker rm -l webapp/redis

  -f, --force=false      Force the removal of a running container (uses SIGKILL) 强行移除该  容器 ，即使其正在运行-l, --link=false       Remove the specified link 移除 容器  间的网络连接，而非  容器  本身
  -v, --volumes=false    Remove the volumes associated with the container 移除与  容器  关联的空间

docker history -H harrysun/lnmp:0.1

-H, --human=true     Print sizes and dates in human readable format 以可读的格式打印镜像大小和日期
  --no-trunc=false     Don't truncate output 显示完整的提交记录
  -q, --quiet=false    Only show numeric IDs 仅列出提交记录 ID

docker start -i b5e08e1435b3

  -a, --attach=false         Attach STDOUT/STDERR and forward signals 启动一个  容器  并打印输出结果和错误
  -i, --interactive=false    Attach container's STDIN 启动一个  容器  并进入交互模式
  -t, --time=10      Seconds to wait for stop before killing the container 停止或者重启  容器  的超时时间（秒），超时后系统将杀死进程。

docker kill -s KILL 94c6b3c3f04a

  -s, --signal=KILL    Signal to send to the container 自定义发送至  容器  的信号

docker events --since="20150720" --until="20150808"

-f, --filter=[]    Filter output based on conditions provided--since=           Show all events created since timestamp 开始时间
  --until=           Stream events until this timestamp 结束时间

docker save -o ubuntu14.04.tar ubuntu:14.04

-o, --output=      Write to an file, instead of STDOUT 输出到的文件

docker load -i ubuntu14.04.tar

-i, --input=       Read from a tar archive file, instead of STDIN 加载的 tar 文件

docker export -o ubuntu14.04.tar 94c6b3c3f04a

-o, --output=      Write to a file, instead of STDOUT

cat ./ubuntu14.04.tar | sudo docker import - ubuntu:14.04

docker inspect --format '{{.DockerVersion}}' ubuntu:14.04

-f, --format=      Format the output using the given go template 指定返回值的模板文件

sudo docker tag 5db5f8471261 harrysun/lnmp:0.2

-f, --force=false    Force 会覆盖已有标记

docker push harrysun/lnmp:0.2

docker logs -f --tail 10 94c6b3c3f04a

  -f, --follow=false        Follow log output 跟踪  容器  日志的最近更新
  --since=                  Show logs since timestamp 开始时间
  -t, --timestamps=false    Show timestamps 显示  容器  日志的时间戳
  --tail=all                Number of lines to show from the end of the logs 仅列出最新 n 条  容器  日志

docker run -i -t ubuntu:14.04 /bin/bash

  -a, --attach=[]             Attach to STDIN, STDOUT or STDERR 指定标准输入输出内容类型，可选 STDIN/STDOUT/STDERR 三项
  --add-host=[]               Add a custom host-to-IP mapping (host:ip)
  --blkio-weight=0            Block IO (relative weight), between 10 and 1000
  -c, --cpu-shares=0          CPU shares (relative weight)
  --cap-add=[]                Add Linux capabilities
  --cap-drop=[]               Drop Linux capabilities
  --cgroup-parent=            Optional parent cgroup for the container
  --cidfile=                  Write the container ID to the file
  --cpu-period=0              Limit CPU CFS (Completely Fair Scheduler) period
  --cpu-quota=0               Limit the CPU CFS quota
  --cpuset-cpus=              CPUs in which to allow execution (0-3, 0,1) 绑定  容器  到指定 CPU 运行
  --cpuset-mems=              MEMs in which to allow execution (0-3, 0,1) 绑定  容器  到指定 MEM 运行
  -d, --detach=false          Run container in background and print container ID 后台运行  容器 ，并返回 容器ID
  --device=[]                 Add a host device to the container
  --dns=[]                    Set custom DNS servers 指定  容器  使用的 DNS 服务器，默认和宿主一致
  --dns-search=[]             Set custom DNS search domains 指定  容器DNS 搜索域名，默认和宿主一致
  -e, --env=[]                Set environment variables 设置环境变量
  --entrypoint=               Overwrite the default ENTRYPOINT of the image
  --env-file=[]               Read in a file of environment variables 从指定文件读入环境变量
  --expose=[]                 Expose a port or a range of ports
  -h, --hostname=             Container host name 指定  容器  的 hostname
  --help=false                Print usage
  -i, --interactive=false     Keep STDIN open even if not attached 以交互模式运行  容器，通常与 -t 同时使用
  --ipc=                      IPC namespace to use
  -l, --label=[]              Set meta data on a container
  --label-file=[]             Read in a line delimited file of labels
  --link=[]                   Add link to another container
  --log-driver=               Logging driver for container
  --log-opt=[]                Log driver options
  --lxc-conf=[]               Add custom lxc options
  -m, --memory=               Memory limit
  --mac-address=              Container MAC address (e.g. 92:d0:c6:0a:29:33)
  --memory-swap=              Total memory (memory + swap), '-1' to disable swap
  --name=                     Assign a name to the container 为  容器  指定一个名称
  --net=bridge                Set the Network mode for the container  指定  容器  的网络连接类型，支持 bridge/host/none/container:<name|id> 四种类型
  --oom-kill-disable=false    Disable OOM Killer
  -P, --publish-all=false     Publish all exposed ports to random ports
  -p, --publish=[]            Publish a container's port(s) to the host
  --pid=                      PID namespace to use
  --privileged=false          Give extended privileges to this container
  --read-only=false           Mount the container's root filesystem as read only
  --restart=no                Restart policy to apply when a container exits
  --rm=false                  Automatically remove the container when it exits
  --security-opt=[]           Security Options
  --sig-proxy=true            Proxy received signals to the process
  -t, --tty=false             Allocate a pseudo-TTY 为  容器  重新分配一个伪输入终端，通常与 -i 同时使用
  -u, --user=                 Username or UID (format: <name|uid>[:<group|gid>])
  --ulimit=[]                 Ulimit options
  --uts=                      UTS namespace to use
  -v, --volume=[]             Bind mount a volume
  --volumes-from=[]           Mount volumes from the specified container(s)
  -w, --workdir=              Working directory inside the container 

sudo apt-get update
sudo apt-get install -y docker.io
sudo ln -sf /usr/bin/docker.io /usr/local/bin/docker
sudo sed -i '$acomplete -F _docker docker' /etc/bash_completion.d/docker.io

sudo apt-get install apt-transport-https
sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 36A1D7869245C8950F966E92D8576A8BA88D21E9
sudo bash -c "echo deb https://get.docker.io/ubuntu docker main > /etc/apt/sources.list.d/docker.list"
sudo apt-get update
sudo apt-get install lxc-docker

curl -sSL https://get.daocloud.io/docker | sh

echo "DOCKER_OPTS=\"\$DOCKER_OPTS --registry-mirror=http://×××××.m.daocloud.io\"" | sudo tee -a /etc/default/docker
sudo service docker restart

docker pull ubuntu:14.04