docker 入坑1
本文是记录一下学习docker的过程,希望可以帮助到入门的朋友。
系统:ubuntu16.04
docker:18.09
打开官网:https://docs.docker.com/install/linux/docker-ce/ubuntu/
OS requirements
To install Docker Engine - Community, you need the 64-bit version of one of these Ubuntu versions:
- Disco 19.04
- Cosmic 18.10
- Bionic 18.04 (LTS)
- Xenial 16.04 (LTS)
Docker Engine - Community is supported on
x86_64
(oramd64
),armhf
,arm64
,s390x
(IBM Z), andppc64le
(IBM Power) architectures.
查看我们的系统是否符合最新版docker安装的要求:
1 mantishell@zkl:~$ uname -a 2 Linux zkl 4.15.0-55-generic #60~16.04.2-Ubuntu SMP Thu Jul 4 09:03:09 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux 3 mantishell@zkl:~$ lsb_release -a 4 No LSB modules are available. 5 Distributor ID: Ubuntu 6 Description: Ubuntu 16.04.6 LTS 7 Release: 16.04 8 Codename: xenial
符合最后一条:Xenial 16.04 (LTS)
如果不符合,怎么办呢?不要灰心,可以安装历史版本。官网也有说明。
Install Docker Engine - Community
You can install Docker Engine - Community in different ways, depending on your needs:
Most users set up Docker’s repositories and install from them, for ease of installation and upgrade tasks. This is the recommended approach.
Some users download the DEB package and install it manually and manage upgrades completely manually. This is useful in situations such as installing Docker on air-gapped systems with no access to the internet.
In testing and development environments, some users choose to use automated convenience scripts to install Docker.
Install using the repository
Before you install Docker Engine - Community for the first time on a new host machine, you need to set up the Docker repository. Afterward, you can install and update Docker from the repository.
Set up the repository
Update the
apt
package index:$ sudo apt-get update
Install packages to allow
apt
to use a repository over HTTPS:$ sudo apt-get install apt-transport-https ca-certificates curl gnupg-agent software-properties-common
Add Docker’s official GPG key:
$ curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
Verify that you now have the key with the fingerprint
9DC8 5822 9FC7 DD38 854A E2D8 8D81 803C 0EBF CD88
, by searching for the last 8 characters of the fingerprint.$ sudo apt-key fingerprint 0EBFCD88 pub rsa4096 2017-02-22 [SCEA] 9DC8 5822 9FC7 DD38 854A E2D8 8D81 803C 0EBF CD88 uid [ unknown] Docker Release (CE deb) <docker@docker.com> sub rsa4096 2017-02-22 [S]
Use the following command to set up the stable repository. To add the nightly or test repository, add the word
nightly
ortest
(or both) after the wordstable
in the commands below. Learn about nightly and test channels.Note: The
lsb_release -cs
sub-command below returns the name of your Ubuntu distribution, such asxenial
. Sometimes, in a distribution like Linux Mint, you might need to change$(lsb_release -cs)
to your parent Ubuntu distribution. For example, if you are usingLinux Mint Tessa
, you could usebionic
. Docker does not offer any guarantees on untested and unsupported Ubuntu distributions.$ sudo add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"
Install Docker Engine - Community
Update the
apt
package index.$ sudo apt-get update
Install the latest version of Docker Engine - Community and containerd, or go to the next step to install a specific version:
$ sudo apt-get install docker-ce docker-ce-cli containerd.io
Got multiple Docker repositories?
If you have multiple Docker repositories enabled, installing or updating without specifying a version in the
apt-get install
orapt-get update
command always installs the highest possible version, which may not be appropriate for your stability needs.To install a specific version of Docker Engine - Community, list the available versions in the repo, then select and install:
a. List the versions available in your repo:
$ apt-cache madison docker-ce docker-ce | 5:18.09.1~3-0~ubuntu-xenial | https://download.docker.com/linux/ubuntu xenial/stable amd64 Packages docker-ce | 5:18.09.0~3-0~ubuntu-xenial | https://download.docker.com/linux/ubuntu xenial/stable amd64 Packages docker-ce | 18.06.1~ce~3-0~ubuntu | https://download.docker.com/linux/ubuntu xenial/stable amd64 Packages docker-ce | 18.06.0~ce~3-0~ubuntu | https://download.docker.com/linux/ubuntu xenial/stable amd64 Packages ...
b. Install a specific version using the version string from the second column, for example,
5:18.09.1~3-0~ubuntu-xenial
.$ sudo apt-get install docker-ce=<VERSION_STRING> docker-ce-cli=<VERSION_STRING> containerd.io
Verify that Docker Engine - Community is installed correctly by running the
hello-world
image.$ sudo docker run hello-world
This command downloads a test image and runs it in a container. When the container runs, it prints an informational message and exits.
Docker Engine - Community is installed and running. The
docker
group is created but no users are added to it. You need to usesudo
to run Docker commands. Continue to Linux postinstall to allow non-privileged users to run Docker commands and for other optional configuration steps.Upgrade Docker Engine - Community
To upgrade Docker Engine - Community, first run
sudo apt-get update
, then follow the installation instructions, choosing the new version you want to install.Install from a package
If you cannot use Docker’s repository to install Docker Engine - Community, you can download the
.deb
file for your release and install it manually. You need to download a new file each time you want to upgrade Docker.
Go to
https://download.docker.com/linux/ubuntu/dists/
, choose your Ubuntu version, browse topool/stable/
, chooseamd64
,armhf
,arm64
,ppc64el
, ors390x
, and download the.deb
file for the Docker Engine - Community version you want to install.Note: To install a nightly package, change the word
stable
in the URL tonightly
. Learn about nightly and test channels.Install Docker Engine - Community, changing the path below to the path where you downloaded the Docker package.
$ sudo dpkg -i /path/to/package.deb
The Docker daemon starts automatically.
Verify that Docker Engine - Community is installed correctly by running the
hello-world
image.$ sudo docker run hello-world
This command downloads a test image and runs it in a container. When the container runs, it prints an informational message and exits.
Docker Engine - Community is installed and running. The
docker
group is created but no users are added to it. You need to usesudo
to run Docker commands. Continue to Post-installation steps for Linux to allow non-privileged users to run Docker commands and for other optional configuration steps.Upgrade Docker Engine - Community
To upgrade Docker Engine - Community, download the newer package file and repeat the installation procedure, pointing to the new file.
Install using the convenience script
Docker provides convenience scripts at get.docker.com and test.docker.com for installing edge and testing versions of Docker Engine - Community into development environments quickly and non-interactively. The source code for the scripts is in the
docker-install
repository. Using these scripts is not recommended for production environments, and you should understand the potential risks before you use them:
- The scripts require
root
orsudo
privileges to run. Therefore, you should carefully examine and audit the scripts before running them.- The scripts attempt to detect your Linux distribution and version and configure your package management system for you. In addition, the scripts do not allow you to customize any installation parameters. This may lead to an unsupported configuration, either from Docker’s point of view or from your own organization’s guidelines and standards.
- The scripts install all dependencies and recommendations of the package manager without asking for confirmation. This may install a large number of packages, depending on the current configuration of your host machine.
- The script does not provide options to specify which version of Docker to install, and installs the latest version that is released in the “edge” channel.
- Do not use the convenience script if Docker has already been installed on the host machine using another mechanism.
This example uses the script at get.docker.com to install the latest release of Docker Engine - Community on Linux. To install the latest testing version, use test.docker.com instead. In each of the commands below, replace each occurrence of
get
withtest
.Warning:
Always examine scripts downloaded from the internet before running them locally.
$ curl -fsSL https://get.docker.com -o get-docker.sh $ sudo sh get-docker.sh <output truncated>
If you would like to use Docker as a non-root user, you should now consider adding your user to the “docker” group with something like:
sudo usermod -aG docker your-user
Remember to log out and back in for this to take effect!
Warning:
Adding a user to the “docker” group grants them the ability to run containers which can be used to obtain root privileges on the Docker host. Refer to Docker Daemon Attack Surface for more information.
Docker Engine - Community is installed. It starts automatically on
DEB
-based distributions. OnRPM
-based distributions, you need to start it manually using the appropriatesystemctl
orservice
command. As the message indicates, non-root users can’t run Docker commands by default.Upgrade Docker after using the convenience script
If you installed Docker using the convenience script, you should upgrade Docker using your package manager directly. There is no advantage to re-running the convenience script, and it can cause issues if it attempts to re-add repositories which have already been added to the host machine.
Uninstall Docker Engine - Community
Uninstall the Docker Engine - Community package:
$ sudo apt-get purge docker-ce
Images, containers, volumes, or customized configuration files on your host are not automatically removed. To delete all images, containers, and volumes:
$ sudo rm -rf /var/lib/docker
You must delete any edited configuration files manually.
上面是官方给的步骤,相信大家按照步骤一步步进行,也能搭建起来。这里呢我记录一下,我的操作步骤:
- Update the apt package index:
$ sudo apt-get update
- Install packages to allow apt to use a repository over HTTPS:
$ sudo apt-get install apt-transport-https ca-certificates curl gnupg-agent software-properties-common
- Add docker`s offical GPG key:
$ curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
- set up the repository
$ sudo add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable" $ sudo apt-get update
- Install the latest version of Docker Engine - Community and containerd, or go to the next step to install a specific version:
$ sudo apt-get install docker docker-compose
- To install a specific version of Docker Engine - Community, list the available versions in the repo, then select and install:
- List the versions available in your repo:
$ apt-cache madison docker-ce
- Install a specific version using the version string from the second column, for example, 5:18.09.1~3-0~ubuntu-xenial
$ sudo apt-get install docker-ce=<VERSION_STRING> docker-ce-cli=<VERSION_STRING> containerd.io $ sudo apt-get install docker-ce=5:18.09.0~3-0~ubuntu-xenial docker-ce-cli=5:18.09.0~3-0~ubuntu-xenial containerd.io
- List the versions available in your repo:
- Verify that Docker Engine - Community is installed correctly by running the hello-world image.
$ sudo docker run hello-world
docker容器的能力
- 文件系统隔离:每个容器都有自己的root文件系统
- 进程隔离:每个容器都运行在自己的进程环境中
- 网络隔离:容器间的虚拟网络接口和IP地址都是分开的
- 资源隔离和分组:使用cgroups將cpu和内存之类的资源独立的分配给每个docker容器