docker container（容器）
docker 容器
Docker容器类似于一个轻量级的沙箱，Docker利用容器来运行和隔离应用
容器是从镜像创建的应用运行实例。它可以启动，开始，停止，删除，而这些容器都是彼此相互隔离,互不可见的。同时，可以把容器看作一个简易版的linux系统环境(包括root用户权限，进程空间，用户空间，网络空间等)以及运行在其中的应用程序打包而成的盒子。
创建容器常用命令选项
docker 创建容器
创建容器： root@S1:~# docker create alpine e3ddcf97b360624cd6f38b6edf846fac2029c8009c6ca78f5411b52986d55e7e root@S1:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES e3ddcf97b360 alpine "/bin/sh" 13 seconds ago Created sad_jang 启动容器 root@S1:~# docker start e3ddcf97b360 e3ddcf97b360 root@S1:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES e3ddcf97b360 alpine "/bin/sh" About a minute ago Exited (0) 1 second ago sad_jang 创建并启动容器，一条docker run container 命令的时候，docker后台运行的标准操作： 1.检查本地是否存在指定的镜像，不存在就从公有仓库下载 2.利用镜像创建一个容器，并启动该容器 3.分配一个文件系统给容器，并在只读的镜像层外面挂载一层可读写层 4.从宿主主机配置的网桥接口中桥接一个虚拟接口到容器中去 5.从网桥的地址池配置一个IP地址给容器 6.给执行用户指定的应用程序 7.执行完毕后容器被自动终止 eg： root@S1:~# docker run alpine root@S1:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 55c626545c72 alpine "/bin/sh" 2 seconds ago Exited (0) 2 seconds ago stoic_ritchie e3ddcf97b360 alpine "/bin/sh" About a minute ago Exited (0) 32 seconds ago sad_jang 利用docker run alpine 创建交互式bash终端
-i: 以交互模式运行容器，通常与 -t 同时使用；
-t: 为容器重新分配一个伪输入终端，通常与 -i 同时使用
root@S1:~# docker run -it alpine /bin/bash root@S1:~# docker run -it alpine /bin/sh / # ps -ef PID USER TIME COMMAND 1 root 0:00 /bin/sh 6 root 0:00 ps -ef 注意事项：错误代码 125：docker daemon 执行出错，例如指定了不支持的docker 参数 126：所有指令无法执行，例如权限出错 127：容器内命令无法找到 后台启动docker容器 root@S1:~# docker run -it -d alpine /bin/sh 5b1a3e413a68487aa7963274f1438c8c63ecf1fb821994ed3e2959e241ca08c9 root@S1:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 5b1a3e413a68 alpine "/bin/sh" 3 seconds ago Up 2 seconds pensive_heyrovsky
docker创建容器常用参数命令
-h 指定容器 hostname root@S1:~# docker run -it -h web01 alpine /bin/sh / # hostname web01 --name 指定容器名称 root@S1:~# docker run -it -d -h nginx-web --name nginx-web alpine /bin/sh 0eb95f85ec984a8872ee5a2b12f1b02d7eff34801e217fac1d82b3991d0b6226 root@S1:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 0eb95f85ec98 alpine "/bin/sh" 2 seconds ago Up 2 seconds nginx-web -p ip:port : port root@S1:~# docker run -it -d -h mysql01 -p 127.0.0.1:3306:3306 --name mysql01 mysql /bin/sh 263b7ed4038d6d9f41e6a88560c72322a3dd5db5b7a56d67a11122adef731f56 root@S1:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 263b7ed4038d mysql "docker-entrypoint.s…" 3 seconds ago Up 2 seconds 127.0.0.1:3306->3306/tcp, 33060/tcp mysql01 0eb95f85ec98 alpine "/bin/sh" 4 minutes ago Up 4 minutes nginx-web root@S1:~# netstat -tnlp Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN 8121/docker-proxy tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 846/sshd -P 随机映射端口主机 root@S1:~# docker run -it -d -h mysql02 -P --name mysql02 mysql /bin/sh c8170d5fbb1825d0412155388a4defecaf6ca45b6f48d50681be584f5cb438cd root@S1:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES c8170d5fbb18 mysql "docker-entrypoint.s…" 3 seconds ago Up 2 seconds 0.0.0.0:32769->3306/tcp, 0.0.0.0:32768->33060/tcp mysql02 root@S1:~# netstat -tnlp Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp6 0 0 :::32768 :::* LISTEN 8386/docker-proxy tcp6 0 0 :::32769 :::* LISTEN 8398/docker-proxy 如果在执行run命令时没有指定-a，那么docker默认会挂载所有标准数据流，包括输入输出和错误。你可以特别指定挂载哪个标准流。 root@S1:~# docker run -a stdin -a stdout -it ubuntu /bin/sh 只挂载了标准输入和标准输出 一般这个选项不经常用 -e 指定参数（环境变量） root@S1:~# docker run -d --name web -e test=test01 -p 88:80 -h web nginx 4faf1e7d69b4d751eaca37d1992991cddc07b948631dc31d1e70ab891b2f1e40 root@S1:~# root@S1:~# docker ps -l CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 4faf1e7d69b4 nginx "nginx -g 'daemon of…" 14 seconds ago Up 13 seconds 0.0.0.0:88->80/tcp web root@S1:~# docker exec -it web /bin/bash root@web:/# echo $test test01 --link 容器之间的连接地址 root@S1:~# docker run -it -d --name test01 ubuntu /bin/bash 239115eedf1f899532387fa5536cc337684a7cd7c19ceea5d44d67023e8c581e root@S1:~# docker run -it -d --name test02 --link test01 ubuntu /bin/bash a1485616496fe8530e373f1cb992a3a407d5cf37e2ea353b9b51f9a8ccdf47ec root@S1:~# docker exec -it test02 /bin/bash root@a1485616496f:/# ping test01 PING test01 (172.17.0.2): 56 data bytes 64 bytes from 172.17.0.2: icmp_seq=0 ttl=64 time=0.116 ms 64 bytes from 172.17.0.2: icmp_seq=1 ttl=64 time=0.088 ms ^C--- test01 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.088/0.102/0.116/0.000 ms root@a1485616496f:/#
管理容器常用命令
列出所有容器 root@S1:~# docker container ls CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES a1485616496f ubuntu "/bin/bash" 6 minutes ago Up 6 minutes test02 239115eedf1f ubuntu "/bin/bash" 6 minutes ago Up 6 minutes test01 root@S1:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES a1485616496f ubuntu "/bin/bash" 6 minutes ago Up 6 minutes test02 239115eedf1f ubuntu "/bin/bash" 6 minutes ago Up 6 minutes test01 进入正在运行的容器 root@S1:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 3845f0c67437 ubuntu "/bin/bash" 2 seconds ago Up 1 second test02 21466d64e370 ubuntu "/bin/bash" 6 seconds ago Up 5 seconds test01 root@S1:~# docker attach test01 root@21466d64e370:/# exit exit root@S1:~# docker exec -it test02 /bin/bash root@3845f0c67437:/# exit exit root@S1:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 3845f0c67437 ubuntu "/bin/bash" 24 seconds ago Up 24 seconds test02 21466d64e370 ubuntu "/bin/bash" 28 seconds ago Exited (0) 16 seconds ago test01 root@S1:~# 观察以上两种进入容器的方式： attach ：进入容器 退出后 容器后退出，并且如果多个终端使用attach 进入容器，界面上会同时输出相同的内容，所以我们工作过程中一般都是用exec的方式进入终端
docker commit
root@S1:~# docker commit --help Usage: docker commit [OPTIONS] CONTAINER [REPOSITORY[:TAG]] Create a new image from a container's changes Options: -a, --author string 提交者的镜像作者 -c, --change list 使用Dockerfile指令来创建镜像 -m, --message string 提交时的说明文字 -p, --pause 在commit时，将容器暂停 root@S1:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 3845f0c67437 ubuntu "/bin/bash" 21 minutes ago Up 17 minutes test02 21466d64e370 ubuntu "/bin/bash" 21 minutes ago Up 17 minutes test01 root@S1:~# docker commit -p -a zzl -m "add file" 21466d64e370 ubuntu_file sha256:a48bd97b8d36091395e839cd2971f3b642ffc21668d8dda029ed5b1e777367c0 root@S1:~# docker images REPOSITORY TAG IMAGE ID CREATED SIZE ubuntu_file latest a48bd97b8d36 10 seconds ago 88.9MB
docker cp：
docker cp命令类似于UNIX中的cp -a命令，递归复制目录下的所有子目录和文件
-表示通过标准输入/输出设备以流的方式读取或写入tar文件
本地文件系统中的路径可以是绝对路径，也可以是相对路径，相对于当前命令执行的路径
容器中的路径都是相对容器的/根路径
被操作的容器可以是在运行状态，也可以是停止状态
不能复制/proc, /sys, /dev, tmpfs和容器中mount的路径下的文件
-表示通过标准输入/输出设备以流的方式读取或写入tar文件
本地文件系统中的路径可以是绝对路径，也可以是相对路径，相对于当前命令执行的路径
容器中的路径都是相对容器的/根路径
被操作的容器可以是在运行状态，也可以是停止状态
不能复制/proc, /sys, /dev, tmpfs和容器中mount的路径下的文件
root@S1:~# docker cp --help Usage: docker cp [OPTIONS] CONTAINER:SRC_PATH DEST_PATH|- 从容器中复制文件或目录到执行命令所在机器的指定路径 docker cp [OPTIONS] SRC_PATH|- CONTAINER:DEST_PATH 从执行命令所在的机器复制文件或目录到容器内部的指定路径 Copy files/folders between a container and the local filesystem 在容器和本地文件系统之间复制文件/文件夹 Options: -a, --archive Archive mode (copy all uid/gid information) 归档模式（复制所有UID / GID信息） -L, --follow-link Always follow symbol link in SRC_PATH 总是跟在源地址符号链接 root@S1:~# docker cp /data/ 21466d64e370:/home root@S1:~# docker exec -it 21466d64e370 /bin/bash root@21466d64e370:/# ls /home/ data root@21466d64e370:/# ls /home/data/ 02 test01 root@21466d64e370:/# ls /home/data/test01/ 01 02 root@21466d64e370:/# exit exit root@S1:~# docker cp 21466d64e370:/home/data/test01 /home root@S1:~# tree /home/ /home/ └── test01 ├── 01 └── 02 1 directory, 2 files
查看容器日志: docker logs
root@S1:~# docker logs --help Usage: docker logs [OPTIONS] CONTAINER Fetch the logs of a container Options: --details 显示更多的详细信息 -f, --follow 跟踪实时日志,相当于查看文件的tail -f 命令 --since string Show logs since timestamp (e.g. 2013-01-02T13:23:37) or relative (e.g. 42m for 42 minutes) 显示自某个timestamp之后的日志，或相对时间，如42m（即42分钟） --tail string Number of lines to show from the end of the logs (default "all") 从日志末尾显示多少行日志， 默认是all -t, --timestamps Show timestamps 显示时间戳 --until string Show logs before a timestamp (e.g. 2013-01-02T13:23:37) or relative (e.g. 42m for 42 minutes) 显示自某个timestamp之前的日志，或相对时间，如42m（即42分钟） 指定时间后的日志，只显示2行： root@S1:~# docker logs -f -t --since="2019-04-08" --tail=2 041f78444522 2019-04-09T11:09:22.934492726Z 222.129.12.90 - - [09/Apr/2019:11:09:22 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36" "-" 2019-04-09T11:09:24.627818454Z 222.129.12.90 - - [09/Apr/2019:11:09:24 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36" "-" 查看最近多久的日志： root@S1:~# docker logs --since 1m 041f78444522 root@S1:~# root@S1:~# docker logs --since 4m 041f78444522 222.129.12.90 - - [09/Apr/2019:11:09:22 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36" "-" 222.129.12.90 - - [09/Apr/2019:11:09:24 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36" "-" 查看某一个时间以后的日志： docker logs -t --since="2019-04-09T19:08:00" 041f78444522 查看某一个时间段的日志： docker logs -t --since="2019-04-09T19:08:00" --until "2019-04-09T19:16:00" 041f78444522
查看容器：docker top ，docker stat，docker inspect
docker top：这个命令类似于linux系统中的top命令，会打印出容器内的进程信息，包括PID，用户，时间，命令等
root@S1:~# docker top web02 UID PID PPID C STIME TTY TIME CMD root 4682 4663 0 19:00 ? 00:00:00 nginx: master process nginx -g daemon off; systemd+ 4718 4682 0 19:00 ? 00:00:00 nginx: worker process
docker stats：会显示cpu，内存，存储，网络等使用情况的统计信息
root@S1:~# docker stats --help Usage: docker stats [OPTIONS] [CONTAINER...] Display a live stream of container(s) resource usage statistics Options: -a, --all 展示所有的容器统计信息，默认仅展示运行中的。 --format string 格式化输出信息 --no-stream 不持续输出结果，默认会自动更新持续刷新结果 --no-trunc 不截断输出信息， root@S1:~# docker stats --all --no-stream --format "table {{.Container}}\t{{.CPUPerc}}\t{{.MemUsage}}" web02 CONTAINER CPU % MEM USAGE / LIMIT web02 0.00% 1.379MiB / 7.796GiB root@S1:~# docker stats --all --no-stream --no-trunc web02 CONTAINER ID NAME CPU % MEM USAGE / LIMIT MEM % NET I/O BLOCK I/O PIDS 041f78444522e966db1799939d6f4d3214211e175169c467f9fd2a274e5a3dfd web02 0.00% 1.379MiB / 7.796GiB 0.02% 23.1kB / 16.9kB 0B / 0B 2
docker inspect :查看容器的具体信息，会以json格式返回包括容器id，创建时间，路径，状态，镜像，配置等在内的各项信息。
root@S1:~# docker inspect web02 [ { "Id": "041f78444522e966db1799939d6f4d3214211e175169c467f9fd2a274e5a3dfd", "Created": "2019-04-09T11:00:48.284799764Z", "Path": "nginx", "Args": [ "-g", "daemon off;" ], "State": { "Status": "running", "Running": true, "Paused": false, "Restarting": false, "OOMKilled": false, "Dead": false, "Pid": 4682, "ExitCode": 0, "Error": "", "StartedAt": "2019-04-09T11:00:48.686519835Z", "FinishedAt": "0001-01-01T00:00:00Z" }, "Image": "sha256:2bcb04bdb83f7c5dc30f0edaca1609a716bda1c7d2244d4f5fbbdfef33da366c", "ResolvConfPath": "/var/lib/docker/containers/041f78444522e966db1799939d6f4d3214211e175169c467f9fd2a274e5a3dfd/resolv.conf", "HostnamePath": "/var/lib/docker/containers/041f78444522e966db1799939d6f4d3214211e175169c467f9fd2a274e5a3dfd/hostname", "HostsPath": "/var/lib/docker/containers/041f78444522e966db1799939d6f4d3214211e175169c467f9fd2a274e5a3dfd/hosts", "LogPath": "/var/lib/docker/containers/041f78444522e966db1799939d6f4d3214211e175169c467f9fd2a274e5a3dfd/041f78444522e966db1799939d6f4d3214211e175169c467f9fd2a274e5a3dfd-json.log", "Name": "/web02", "RestartCount": 0, "Driver": "overlay2", "Platform": "linux", "MountLabel": "", "ProcessLabel": "", "AppArmorProfile": "docker-default", "ExecIDs": null, "HostConfig": { "Binds": null, "ContainerIDFile": "", "LogConfig": { "Type": "json-file", "Config": {} }, "NetworkMode": "default", "PortBindings": { "80/tcp": [ { "HostIp": "", "HostPort": "8000" } ] }, "RestartPolicy": { "Name": "no", "MaximumRetryCount": 0 }, "AutoRemove": false, "VolumeDriver": "", "VolumesFrom": null, "CapAdd": null, "CapDrop": null, "Dns": [], "DnsOptions": [], "DnsSearch": [], "ExtraHosts": null, "GroupAdd": null, "IpcMode": "shareable", "Cgroup": "", "Links": null, "OomScoreAdj": 0, "PidMode": "", "Privileged": false, "PublishAllPorts": false, "ReadonlyRootfs": false, "SecurityOpt": null, "UTSMode": "", "UsernsMode": "", "ShmSize": 67108864, "Runtime": "runc", "ConsoleSize": [ 0, 0 ], "Isolation": "", "CpuShares": 0, "Memory": 0, "NanoCpus": 0, "CgroupParent": "", "BlkioWeight": 0, "BlkioWeightDevice": [], "BlkioDeviceReadBps": null, "BlkioDeviceWriteBps": null, "BlkioDeviceReadIOps": null, "BlkioDeviceWriteIOps": null, "CpuPeriod": 0, "CpuQuota": 0, "CpuRealtimePeriod": 0, "CpuRealtimeRuntime": 0, "CpusetCpus": "", "CpusetMems": "", "Devices": [], "DeviceCgroupRules": null, "DiskQuota": 0, "KernelMemory": 0, "MemoryReservation": 0, "MemorySwap": 0, "MemorySwappiness": null, "OomKillDisable": false, "PidsLimit": 0, "Ulimits": null, "CpuCount": 0, "CpuPercent": 0, "IOMaximumIOps": 0, "IOMaximumBandwidth": 0, "MaskedPaths": [ "/proc/asound", "/proc/acpi", "/proc/kcore", "/proc/keys", "/proc/latency_stats", "/proc/timer_list", "/proc/timer_stats", "/proc/sched_debug", "/proc/scsi", "/sys/firmware" ], "ReadonlyPaths": [ "/proc/bus", "/proc/fs", "/proc/irq", "/proc/sys", "/proc/sysrq-trigger" ] }, "GraphDriver": { "Data": { "LowerDir": "/var/lib/docker/overlay2/4c7f2ac8bf897e6332a8c6a3047f445404927bd09e83a7b27a04f1cc05344681-init/diff:/var/lib/docker/overlay2/9ca2d931df59289149c6b44a79f56f8062b13a7b25e59ef7beb536e0549d4903/diff:/var/lib/docker/overlay2/2ef3c325706f26099a8587acfc86ed12f1fa1caf2f2d80f47cda4376352c7208/diff:/var/lib/docker/overlay2/395f2e0d9649aafaf32df2a7bae0789b52998e1b1c5244a100e4a05ef7ca1645/diff", "MergedDir": "/var/lib/docker/overlay2/4c7f2ac8bf897e6332a8c6a3047f445404927bd09e83a7b27a04f1cc05344681/merged", "UpperDir": "/var/lib/docker/overlay2/4c7f2ac8bf897e6332a8c6a3047f445404927bd09e83a7b27a04f1cc05344681/diff", "WorkDir": "/var/lib/docker/overlay2/4c7f2ac8bf897e6332a8c6a3047f445404927bd09e83a7b27a04f1cc05344681/work" }, "Name": "overlay2" }, "Mounts": [], "Config": { "Hostname": "web02", "Domainname": "", "User": "", "AttachStdin": false, "AttachStdout": false, "AttachStderr": false, "ExposedPorts": { "80/tcp": {} }, "Tty": false, "OpenStdin": false, "StdinOnce": false, "Env": [ "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", "NGINX_VERSION=1.15.10-1~stretch", "NJS_VERSION=1.15.10.0.3.0-1~stretch" ], "Cmd": [ "nginx", "-g", "daemon off;" ], "ArgsEscaped": true, "Image": "nginx", "Volumes": null, "WorkingDir": "", "Entrypoint": null, "OnBuild": null, "Labels": { "maintainer": "NGINX Docker Maintainers <docker-maint@nginx.com>" }, "StopSignal": "SIGTERM" }, "NetworkSettings": { "Bridge": "", "SandboxID": "f4e4797bec40962423f65407c89766d857fea447d52a7ade8cfe5aaf20858061", "HairpinMode": false, "LinkLocalIPv6Address": "", "LinkLocalIPv6PrefixLen": 0, "Ports": { "80/tcp": [ { "HostIp": "0.0.0.0", "HostPort": "8000" } ] }, "SandboxKey": "/var/run/docker/netns/f4e4797bec40", "SecondaryIPAddresses": null, "SecondaryIPv6Addresses": null, "EndpointID": "f77a0b8bb56d8015db589406b5dfd0b3ba0fa80909534f557bc1e7add35f3897", "Gateway": "172.17.0.1", "GlobalIPv6Address": "", "GlobalIPv6PrefixLen": 0, "IPAddress": "172.17.0.3", "IPPrefixLen": 16, "IPv6Gateway": "", "MacAddress": "02:42:ac:11:00:03", "Networks": { "bridge": { "IPAMConfig": null, "Links": null, "Aliases": null, "NetworkID": "23bf65ad51ee330fd8c1b980da68b6cc2cd72ebb95a3c4b0782227fae94fc8f6", "EndpointID": "f77a0b8bb56d8015db589406b5dfd0b3ba0fa80909534f557bc1e7add35f3897", "Gateway": "172.17.0.1", "IPAddress": "172.17.0.3", "IPPrefixLen": 16, "IPv6Gateway": "", "GlobalIPv6Address": "", "GlobalIPv6PrefixLen": 0, "MacAddress": "02:42:ac:11:00:03", "DriverOpts": null } } } } ]
停止容器 ：docker pause/unpause ，stop，start, restart，prune
root@S1:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 041f78444522 nginx "nginx -g 'daemon of…" 41 minutes ago Up 41 minutes 0.0.0.0:8000->80/tcp web02 #暂停运行着的容器 root@S1:~# docker pause web02 web02 root@S1:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 041f78444522 nginx "nginx -g 'daemon of…" 41 minutes ago Up 41 minutes (Paused) 0.0.0.0:8000->80/tcp web02 #恢复暂停时的容器为运行状态 root@S1:~# docker unpause web02 web02 root@S1:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 041f78444522 nginx "nginx -g 'daemon of…" 41 minutes ago Up 41 minutes 0.0.0.0:8000->80/tcp web02 关闭正在运行的状态，该命令首先向容器放送一个SIGTERM信号，等待一段时间后（默认是10秒），在发送SIGKILL信号，来终止运行 root@S1:~# docker stop web02 web02 root@S1:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 041f78444522 nginx "nginx -g 'daemon of…" 41 minutes ago Exited (0) 2 seconds ago web02 启动已经停止的容器 root@S1:~# docker start web02 web02 root@S1:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 041f78444522 nginx "nginx -g 'daemon of…" 42 minutes ago Up 2 seconds 0.0.0.0:8000->80/tcp web02 也可以重启 root@S1:~# docker restart web02 web02 root@S1:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 041f78444522 nginx "nginx -g 'daemon of…" 43 minutes ago Up 2 seconds 0.0.0.0:8000->80/tcp web02 该命令会擦除所有停止的容器 root@S1:~# docker container prune WARNING! This will remove all stopped containers. Are you sure you want to continue? [y/N] y Deleted Containers: 041f78444522e966db1799939d6f4d3214211e175169c467f9fd2a274e5a3dfd Total reclaimed space: 0B root@S1:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES root@S1:~#
删除容器：docker rm
root@S1:~# docker rm --help Usage: docker rm [OPTIONS] CONTAINER [CONTAINER...] Remove one or more containers Options: -f, --force 强制终止并删除一个正在运行中的容器，也就是docker直接发送SIGKILL信号 -l, --link 删除容器的连接，但是保留容器 -v, --volumes 删除容器挂载的数据卷 root@S1:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES ae42c0f6014c nginx "nginx -g 'daemon of…" 3 minutes ago Up 3 minutes 0.0.0.0:8000->80/tcp web02 root@S1:~# docker rm ae Error response from daemon: You cannot remove a running container ae42c0f6014c80efa723938238a33e1c0f15197f04e442daff01d4c45edad5de. Stop the container before attempting removal or force remove root@S1:~# docker rm -f ae ae
像以上这种命令还有很多，附上官网连接地址：https://docs.docker.com/engine/reference/run/
容器资源限制
内存限定示例：
--memory 限制容器使用内存为512m 可使用交换分区为612-512=100m 禁用oom-kill root@S1:~# docker run -d --name web01 --memory="512m" --memory-swap="612m" --oom-kill-disable nginx 81cb2576b8591a20b42a276bd8cef76d62836c5ee8df701e4cd223ec396348ba 可使用交换分区为0M root@S1:~# docker run -d --name web02 --memory="512m" --memory-swap="512m" --oom-kill-disable nginx 2763ef83db8ef343e73dc34a8067cb703887728b955bb14af63ae029258c701e 不设置交换分区 是指可以使用交换分区为限定内存的2倍 root@S1:~# docker run -d --name web03 --memory="512m" --oom-kill-disable nginx 5a99b7a49796ce4db884ad66f13b3665c950336180dea616cc39788e05afbc01 不限制使用内存 root@S1:~# docker run -d --name web04 nginx 952cc1ee0a2f199b2bab2a188eecbfcafd65bcaac728ddd6393ac21fd412c433 root@S1:~# docker stats --no-stream CONTAINER ID NAME CPU % MEM USAGE / LIMIT MEM % NET I/O BLOCK I/O PIDS 952cc1ee0a2f web04 0.00% 1.352MiB / 7.796GiB 0.02% 0B / 0B 0B / 0B 2 5a99b7a49796 web03 0.00% 2.359MiB / 512MiB 0.46% 0B / 0B 0B / 0B 2 2763ef83db8e web02 0.00% 2.156MiB / 512MiB 0.42% 0B / 0B 0B / 0B 2 81cb2576b859 web01 0.00% 2.273MiB / 512MiB 0.44% 0B / 0B 0B / 0B 2
cpu限定示例:
限定容器最多使用一个半的cpu root@S1:~# docker run -d --name web05 --cpus="1.5" nginx a2dbd9b0cdf75d3aa9eedda45e16fd7a0eb47567302aa612fe6481eb9696257c 限定容器最多使用百分之50的cpu root@S1:~# docker run -d --name web06 --cpus=".5" nginx 7cd4a8f72f8dc77998f6b190c7ecc8f0df6fd86d59c096d1c00e9eedf6fe12ab
