1、创建一个容器并同时执行echo命令

 # 快速启动一个容器执行特定的一次性命令并查看输出结果，输出结果后容器直接退出[root@docker ~]# docker run -it --name=a0 centos:latest echo "abc"abc[root@docker ~]# docker psCONTAINER ID   IMAGE     COMMAND   CREATED   STATUS    PORTS     NAMES[root@docker ~]# docker ps -aCONTAINER ID   IMAGE           COMMAND       CREATED         STATUS                     PORTS     NAMESa1c0c9551a19   centos:latest   "echo abc"    8 seconds ago   Exited (0) 7 seconds ago             a041c9a7796fde   centos:latest   "/bin/bash"   19 hours ago    Exited (0) 13 hours ago              c0

2、删除容器

 # 删除名为a0的容器[root@docker ~]# docker rm  a0a0# 开启容器[root@docker ~]# docker start c0c0[root@docker ~]# docker psCONTAINER ID   IMAGE           COMMAND       CREATED        STATUS         PORTS     NAMES41c9a7796fde   centos:latest   "/bin/bash"   19 hours ago   Up 3 seconds             c0# 由于该容器正在运行不能直接删除[root@docker ~]# docker rm c0Error response from daemon: cannot remove container "/c0": container is running: stop the container before removing or force remove# 使用-f选项强制移除正在运行中的容器[root@docker ~]# docker rm -f c0c0

3、设置远程管理

 # 自己规定套接字文件的位置并通过TCP协议在所有网络接口（0.0.0.0代表监听所有IP地址）的2375端口上接受连接[root@docker ~]# vim /etc/docker/daemon.json "hosts" : ["tcp://0.0.0.0:2375","unix:///var/run/docker.sock"]# 启动Docker服务时执行的命令为/usr/bin/dockerd，即启动Docker守护进程[root@docker ~]# vim /usr/lib/systemd/system/docker.service ExecStart=/usr/bin/dockerd# 重新加载系统的服务管理器配置[root@docker ~]# systenctl daemon-reload# 重新启动Docker服务，使对Docker服务配置文件的修改生效[root@docker ~]# systemctl restart docker# version用于查看指定IP地址（10.0.0.100）上的Docker版本信息；images用于查看指定IP地址上的Docker镜像列表。命令中的参数-H用于指定连接到的 Docker守护进程的地址[root@docker ~]# docker -H10.0.0.100 varsion|images

4、docker image中pull的使用，从镜像仓库中下载镜像

 [root@docker ~]# docker image --helppull        Download an image from a registry[root@docker ~]# docker image pull --helpUsage:  docker image pull [OPTIONS] NAME[:TAG|@DIGEST]Download an image from a registryAliases:docker image pull, docker pullOptions:-a, --all-tags                Download all tagged images in the repository--disable-content-trust   Skip image verification (default true)--platform string         Set platform if server is multi-platform capable-q, --quiet                   Suppress verbose output# 从仓库中拉取centos的镜像[root@docker ~]# docker image pull -q centos# 查看本地镜像[root@docker ~]# docker imagesREPOSITORY   TAG       IMAGE ID       CREATED       SIZEcentos       latest    5d0da3dc9764   2 years ago   231MB

5、使用save将镜像打包

 # 查看帮助文件，找到save，可以将镜像保存为一个tar包[root@docker ~]# docker --helpsave        Save one or more images to a tar archive (streamed to STDOUT by default)# 查看save使用方式[root@docker ~]# docker save  --helpUsage:  docker save [OPTIONS] IMAGE [IMAGE...]Save one or more images to a tar archive (streamed to STDOUT by default)Aliases:docker image save, docker saveOptions:-o, --output string   Write to a file, instead of STDOUT# 查看现有镜像[root@docker ~]# docker imagesREPOSITORY   TAG       IMAGE ID       CREATED       SIZEcentos       latest    5d0da3dc9764   2 years ago   231MB# 打包镜像[root@docker ~]# docker save -o centos.tar centos:latest# 可以将tar发给其他用户，也可以作为备份[root@docker ~]# lsanaconda-ks.cfg  centos.tar  v

6、使用rmi删除镜像

 [root@docker ~]# docker --helprm          Remove one or more containersrmi         Remove one or more images[root@docker ~]# docker ps -aCONTAINER ID   IMAGE           COMMAND       CREATED         STATUS                     PORTS     NAMES6e2dbeb436db   centos:latest   "/bin/bash"   9 seconds ago   Exited (0) 4 seconds ago             c0# 由于有容器在使用该镜像，所以不能直接删除该镜像[root@docker ~]# docker rmi centos:latest Error response from daemon: conflict: unable to remove repository reference "centos:latest" (must force) - container 6e2dbeb436db is using its referenced image 5d0da3dc9764# 删除容器，退出容器up状态[root@docker ~]# docker rm c0c0[root@docker ~]# docker rmi centos:latest Untagged: centos:latestUntagged: centos@sha256:a27fd8080b517143cbbbab9dfb7c8571c40d67d534bbdee55bd6c473f432b177Deleted: sha256:5d0da3dc976460b72c77d94c8a1ad043720b0416bfc16c52c45d4847e53fadb6Deleted: sha256:74ddd0ec08fa43d09f32636ba91a0a3053b02cb4627c35051aff89f853606b59[root@docker ~]# docker imagesREPOSITORY   TAG       IMAGE ID   CREATED   SIZE

7、使用load从tar文件中引入镜像

 [root@docker ~]# docker --helpload        Load an image from a tar archive or STDIN[root@docker ~]# docker load --helpUsage:  docker load [OPTIONS]Load an image from a tar archive or STDINAliases:docker image load, docker loadOptions:-i, --input string   Read from tar archive file, instead of STDIN-q, --quiet          Suppress the load output[root@docker ~]# docker load -i centos.tar 74ddd0ec08fa: Loading layer  238.6MB/238.6MBLoaded image: centos:latest[root@docker ~]# docker imagesREPOSITORY   TAG       IMAGE ID       CREATED       SIZEcentos       latest    5d0da3dc9764   2 years ago   231MB

8、使用export封装镜像，使用import导入镜像

 [root@docker ~]# docker run -it --name c0 centos:latest /bin/bash[root@5906fffd3383 /]# cd /etc/yum.repos.d     [root@5906fffd3383 yum.repos.d]# rm -rf *[root@5906fffd3383 yum.repos.d]# curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-vault-8.5.2111.repo% Total    % Received % Xferd  Average Speed   Time    Time     Time  CurrentDload  Upload   Total   Spent    Left  Speed100  2495  100  2495    0     0   6316      0 --:--:-- --:--:-- --:--:--  6316[root@5906fffd3383 yum.repos.d]# lsCentOS-Base.repo[root@5906fffd3383 yum.repos.d]# yum -y install epel[root@5906fffd3383 yum.repos.d]# yum clean all && yum makecache# 保持容器是运行状态[root@41c9a7796fde /]# read escape sequence# 查看帮助文档[root@docker ~]# docker --help[root@docker ~]# docker export --helpUsage:  docker export [OPTIONS] CONTAINERExport a container's filesystem as a tar archiveAliases:docker container export, docker exportOptions:-o, --output string   Write to a file, instead of STDOUT# 使用指令，将容器导出为tar包[root@docker ~]# docker export -o centos_yum.tar c0# 查看新生成的tar包[root@docker ~]# lsanaconda-ks.cfg  centos.tar  centos_yum.tar  v# 查看帮助文档[root@docker ~]# docker --help[root@docker ~]# docker import --helpUsage:  docker import [OPTIONS] file|URL|- [REPOSITORY[:TAG]]Import the contents from a tarball to create a filesystem imageAliases:docker image import, docker importOptions:-c, --change list       Apply Dockerfile instruction to the created image-m, --message string    Set commit message for imported image--platform string   Set platform if server is multi-platform capable# 使用指令，[root@docker ~]# docker import -m yum centos_yum.tar centos:yumsha256:f3ca4715914e87e2d1527365e66775d9ab47b2a0208128e3ec52c0d45c364146# 查看镜像[root@docker ~]# docker imagesREPOSITORY   TAG       IMAGE ID       CREATED              SIZEcentos       yum       f3ca4715914e   About a minute ago   326MBcentos       latest    5d0da3dc9764   2 years ago          231MB

练习：制作httpd镜像

 [root@docker ~]# docker run -it --name c0 centos:yum1 /bin/bash[root@865090f46fbd /]# yum -y install httpd[root@865090f46fbd /]# echo "aaa" > /var/www/html/index.html[root@865090f46fbd /]# httpd -k startAH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.17.0.3. Set the 'ServerName' directive globally to suppress this message[root@c717adc1969a /]# [root@docker ~]#[root@docker ~]# docker psCONTAINER ID   IMAGE         COMMAND       CREATED          STATUS          PORTS     NAMES865090f46fbd   centos:yum1   "/bin/bash"   44 seconds ago   Up 44 seconds             c0[root@docker ~]# docker export -o centos_httpd.tar c0[root@docker ~]# docker import -m httpd centos_httpd.tar centos:httpdsha256:195d7f041bf5c9e17f5cfe172c85c6d2e7d11241e530e839dfe7770186296bb1[root@docker ~]# docker imagesREPOSITORY   TAG       IMAGE ID       CREATED          SIZEcentos       httpd     195d7f041bf5   13 seconds ago   268MBcentos       yum1      a2a0a138806b   3 hours ago      260MBcentos       latest    5d0da3dc9764   2 years ago      231MB[root@docker ~]# docker run -it --name c0 centos:httpd /bin/bash[root@5f6e6f840b2b /]# httpd -k startAH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.17.0.4. Set the 'ServerName' directive globally to suppress this message[root@5f6e6f840b2b /]# curl localhost  hh

9、查看容器ip地址的方法

 # 直接进入到容器中查看IP地址[root@docker ~]# docker attach c1[root@452771f307cc /]# ip addrinet 172.17.0.3/16 brd 172.17.255.255 scope # 查看容器信息，可以查看ip地址[root@docker ~]# docker inspect c0# 在外部调用指令，查看容器ip地址[root@docker ~]# docker exec  c1 ip ainet 172.17.0.3/16 brd 172.17.255.255 scope 

练习测试：使用exec touch一个文件

 [root@docker ~]# docker exec  c1 touch 1.txt[root@docker ~]# docker attach c1[root@452771f307cc /]# ls1.txt  dev  home  lib64       media  opt   root  sbin  sys  usrbin    etc  lib   lost+found  mnt    proc  run   srv   tmp  var

10、容器中虚拟端口映射

 # 将容器中的80端口映射到宿主机（docker主机）的80端口   -p宿主机端口：容器端口[root@docker ~]# docker run -it --name c2 -p80:80/tcp centos:httpd1 /bin/bash[root@5f6e6f840b2b /]# httpd -k startAH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.17.0.4. Set the 'ServerName' directive globally to suppress this message[root@5f6e6f840b2b /]# curl localhost  hh[root@5f6e6f840b2b /]# [root@docker ~]# [root@docker ~]# docker inspect c2"IPAddress": "172.17.0.4",[root@docker ~]# curl 172.17.0.4hh# 浏览器访问宿主机的80端口

 # 将容器中的80端口映射到宿主机（docker主机）的12345端口[root@docker ~]# docker run -it --name c3 -p12345:80 centos:httpd1 /bin/bash# 需要启动服务[root@fa074e53e1d6 /]# curl localhost  curl: (7) Failed to connect to localhost port 80: Connection refused[root@fa074e53e1d6 /]# httpd -k startAH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.17.0.5. Set the 'ServerName' directive globally to suppress this message[root@fa074e53e1d6 /]# curl localhosthh[root@fa074e53e1d6 /]# [root@docker ~]# [root@docker ~]# docker psCONTAINER ID   IMAGE           COMMAND       CREATED          STATUS          PORTS                                     NAMESfa074e53e1d6   centos:httpd1   "/bin/bash"   5 minutes ago    Up 5 minutes    0.0.0.0:12345->80/tcp, :::12345->80/tcp   c35f6e6f840b2b   centos:httpd1   "/bin/bash"   13 minutes ago   Up 13 minutes   0.0.0.0:80->80/tcp, :::80->80/tcp         c2# 浏览器访问宿主机的12345端口

 # 宿主机上所有端口的应用情况，防止映射端口时产生端口冲突[root@docker ~]# less /etc/services# 停止容器[root@docker ~]# docker stop c0 c1 c2 c3c0c1c2c3# 删除容器[root@docker ~]# docker rm c0 c1 c2 c3c0c1c2c3# 随机为容器指定映射端口（映射端口大于等于32767端口）[root@docker ~]# docker run -it --name c0 -p80 centos:httpd1 /bin/bash[root@46580643be3c /]# httpd -k startAH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.17.0.2. Set the 'ServerName' directive globally to suppress this message[root@46580643be3c /]# curl localhost  hh[root@46580643be3c /]# [root@docker ~]# [root@docker ~]# docker ps CONTAINER ID   IMAGE           COMMAND       CREATED          STATUS          PORTS                                     NAMES46580643be3c   centos:httpd1   "/bin/bash"   35 seconds ago   Up 34 seconds   0.0.0.0:32768->80/tcp, :::32768->80/tcp   c0# 浏览器访问宿主机的32768端口

 [root@docker ~]# docker run -it --name c1 -p80 centos:httpd1 /bin/bash[root@fe69a949d832 /]# httpd -k startAH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.17.0.3. Set the 'ServerName' directive globally to suppress this message[root@fe69a949d832 /]# [root@docker ~]# [root@docker ~]# docker psCONTAINER ID   IMAGE           COMMAND       CREATED          STATUS          PORTS                                     NAMESfe69a949d832   centos:httpd1   "/bin/bash"   20 seconds ago   Up 19 seconds   0.0.0.0:32769->80/tcp, :::32769->80/tcp   c146580643be3c   centos:httpd1   "/bin/bash"   4 minutes ago    Up 4 minutes    0.0.0.0:32768->80/tcp, :::32768->80/tcp   c0

11、通过宿主机中其他的ip地址的端口映射容器的端口

 # 添加一块虚拟网卡[root@docker ~]# ifconfig ens33:0 10.0.0.101 broadcast 10.0.0.101 netmask 255.255.255.255 up# 强制删除正在运行中的容器[root@docker ~]# docker rm -f c0 c1c0c1# 创建一个容器将容器的80端口映射到宿主机的10.0.0.101地址下的随机端口上[root@docker ~]# docker run -it --name c0 -p10.0.0.101::80 centos:httpd1 /bin/bash[root@c9ea4034d9e2 /]# httpd -k startAH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.17.0.2. Set the 'ServerName' directive globally to suppress this message[root@c9ea4034d9e2 /]# curl localhost  hh[root@c9ea4034d9e2 /]# [root@docker ~]# [root@docker ~]# docker psCONTAINER ID   IMAGE           COMMAND       CREATED          STATUS          PORTS                      NAMESc9ea4034d9e2   centos:httpd1   "/bin/bash"   43 seconds ago   Up 43 seconds   10.0.0.101:32768->80/tcp   c0# 浏览器访问宿主机10.0.0.101的32768端口

12、容器数据持久化保存（卷映射）

因为dockers容器只是一个工具，不需要保存数据，不需要在持久化，如果要做持久化，那么就需要保存到宿主机上，需要宿主机和容器之间有一个共享卷。

 [root@docker ~]# docker psCONTAINER ID   IMAGE           COMMAND       CREATED          STATUS          PORTS                      NAMESc9ea4034d9e2   centos:httpd1   "/bin/bash"   23 minutes ago   Up 23 minutes   10.0.0.101:32768->80/tcp   c0# 强制删除正在运行中的容器[root@docker ~]# docker rm -f c0c0# 创建映射目录[root@docker ~]# mkdir /source# 创建一个容器并将容器的/data目录映射到宿主机的/source目录上[root@docker ~]# docker run -it --name c0 -v /source:/data centos:httpd1 /bin/bash[root@13f4660eef3e /]# lsbin   dev  home  lib64       media  opt   root  sbin  sys  usrdata  etc  lib   lost+found  mnt    proc  run   srv   tmp  var[root@13f4660eef3e /]# [root@docker ~]# [root@docker ~]# touch /source/hh.txt[root@docker ~]# docker exec c0 ls /datahh.txt[root@docker ~]# docker exec c0 touch /data/hehe.txt[root@docker ~]# ls /source/hehe.txt  hh.txt

13、总结：

（1）镜像的迁移

1）打包

 docker save -o centos.tar centos:lstest

2）加载

 docker load -i centos.tar docker images# 停用关闭容器docker rm c0# 删除镜像docker rmi centos:latest

（2）创建镜像

1）创建镜像

 docker run -it --name c0 centos:latest /bin/bash# 下载阿里云仓库# clean，，makecachectrl p q

2）容器打包

 docker export -o centos_yum.tar c0

3）引入镜像

 docker import -m "updata yum repo" centos_yum.tar centos:yum​docker images

（3）ip网络

1）交互式

 docker start c0docker attach c0yum -y install iprouteip a

2）inspect

 docker inspect c0

3）exec

 docker exec c0 yum -y install net-toolsdocker exec c0 ifconfig

（4）端口

1）指定端口映射

 docker run -it --name c0 -p70:80 centos:httpd /bin/bash

2）随机端口映射

 docker run -it --name c0 -p80 centos:httpd /bin/bash

3）指定其他ip的端口映射

 ifconfig ens33:0 10.0.0.101 broadcast 10.0.0.101 netmask 255.255.255.255 updocker run -it --name c0 -p10.0.0.101::80 centos:httpd /bin/bash

（5）持久化

1）挂载

 mkdir /sourcedocker run -it --name c0 -v /source:/data sentos:httpd /bin/bash