sudo apt-get install \    apt-transport-https \    ca-certificates \    curl \    gnupg \    lsb-release

curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg

curl -fsSL https://mirrors.aliyun.com/docker-ce/linux/ubuntu/gpg | sudo apt-key add -

echo \  "deb [arch=amd64 signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/ubuntu \  $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

sudo add-apt-repository "deb [arch=amd64] https://mirrors.aliyun.com/docker-ce/linux/ubuntu \$(lsb_release -cs) stable"

#查询keyid,下图sudo apt-key list#keyid 就是9DC8那一串sudo apt-key del 
  
  
   
   #加参数-r可以移除sudo add-apt-repository -r "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"
  
  

sudo apt-get update

sudo apt-get install docker-ce docker-ce-cli containerd.io

apt-cache madison docker-ce

sudo apt-get install docker-ce=
  
  
   
    docker-ce-cli=
   
   
     containerd.io 
   
  
  

sudo gpasswd -a ${USER} docker

newgrp - docker

sudo service docker restart

docker ps

systemctl start docker

docker version

sudo mkdir -p /etc/dockersudo tee /etc/docker/daemon.json <<-'EOF'{  "registry-mirrors": ["https://eko3tl65.mirror.aliyuncs.com"]}EOFsudo systemctl daemon-reloadsudo systemctl restart docker

# 显示docker的版本信息docker version# 显示docker的系统信息 包括镜像和容器的数量docker info# 帮助命令docker 命令 --help

malulu@malulu:~/桌面$ docker imagesREPOSITORY    TAG       IMAGE ID       CREATED       SIZEnginx         latest    519e12e2a84a   4 days ago    133MBhello-world   latest    d1165f221234   5 weeks ago   13.3kB# 解释REPOSITORY	镜像的仓库源TAG			镜像的标签IMAGE ID	镜像的IDCREATED		镜像的创建时间SIZE		镜像的大小# 可选项  -a, --all             # 列出所有镜像  -q, --quiet           # 只显示镜像的ID

# 可选项--filter=STARS=3000		# 搜索出来的镜像就是STARS大于3000的

# 下载镜像docker pull 镜像名[:tag]malulu@malulu:~/桌面$ docker pull mysqlUsing default tag: latest		# 如果不写tag(版本) 默认就是latestlatest: Pulling from library/mysqlf7ec5a41d630: Already exists	# 分层下载 docker image的核心 联合文件系统 9444bb562699: Pull complete 6a4207b96940: Pull complete 181cefd361ce: Pull complete 8a2090759d8a: Pull complete 15f235e0d7ee: Pull complete d870539cd9db: Pull complete 5726073179b6: Pull complete eadfac8b2520: Pull complete f5936a8c3f2b: Pull complete cca8ee89e625: Pull complete 6c79df02586a: Pull complete Digest: sha256:6e0014cdd88092545557dee5e9eb7e1a3c84c9a14ad2418d5f2231e930967a38	# 签名Status: Downloaded newer image for mysql:latestdocker.io/library/mysql:latest	# 真实地址# 下面两条命令等价docker pull mysqldocker pull docker.io/library/mysql:latest# 指定版本下载 必须在仓库有这个版本malulu@malulu:~/桌面$ docker pull mysql:5.75.7: Pulling from library/mysqlf7ec5a41d630: Already exists 9444bb562699: Already exists 6a4207b96940: Already exists 181cefd361ce: Already exists 8a2090759d8a: Already exists 15f235e0d7ee: Already exists d870539cd9db: Already exists 7310c448ab4f: Pull complete 4a72aac2e800: Pull complete b1ab932f17c4: Pull complete 1a985de740ee: Pull complete Digest: sha256:e42a18d0bd0aa746a734a49cbbcc079ccdf6681c474a238d38e79dc0884e0eccStatus: Downloaded newer image for mysql:5.7docker.io/library/mysql:5.7

# 删除指定的镜像docker rmi -f 镜像ID# 删除多个镜像docker rmi -f 镜像ID 镜像ID 镜像ID 镜像ID # 删除全部镜像docker rmi -f $(docker images -aq)

docker pull centos

docker run [可选参数] image# 参数说明--name="Name"	# 容器名字 mysql01 mysql02 用来区分容器-d				# 后台方式运行-it				# 使用交互方式运行(需要提供一个控制台) 进入容器查看内容-p				# 指定容器的端口 -p 8080:8080	-p ip:主机端口:容器端口	-p 主机端口:容器端口 (常用)	-p 容器端口	容器端口-P				# 随机指定端口# 测试# 启动并进入容器malulu@malulu:~/桌面$ docker run -it centos /bin/bash[root@a8d9ce9627a4 /]# ls	# 查看容器内的centos 基础镜像 很多命令都是不完善的bin  etc   lib	  lost+found  mnt  proc  run   srv  tmp  vardev  home  lib64  media       opt  root  sbin  sys  usr# 从容器中退回主机[root@a8d9ce9627a4 /]# exitexitmalulu@malulu:~/桌面$ 

# 列出当前正在运行的容器docker ps# 可选项-a		# 列出当前正在运行的容器 + 历史运行过的容器-n=?	# 显示最近创建的n个容器-q		# 只显示容器的编号

exit	# 直接停止容器并退出ctrl+P+Q	# 容器不停止退出

# 删除指定的容器 不能删除正在运行的容器 强制删除用rm -fdocker rm 容器ID# 删除所有的容器# 方式一 常用docker rm -f $(docker ps -aq)# 方式二docker ps -a -q|xargs docker rm

docker start 容器ID	# 启动容器docker restart 容器ID	# 重启容器docker stop 容器ID	# 停止当前正在运行的容器docker kill 容器ID	# 强制删除当前容器

# 后台启动容器docker run -d 镜像名# 比如 后台启动centosdocker run -d centos# 问题 docker ps 时 发现 centos 停止了# 常见的坑:docker容器使用后台运行，就必须要有一个前台进程，docker发现没有应用，就会自动停止# 比如nginx，容器启动后，发现自己没有提供服务，就会立刻停止，就是没有程序了

docker logs -f -t --tail number 容器ID# 可选项 -tf			# 显示日志 --tail number	# 要显示日志条数# 自己编写一段shell脚本docker run -d centos /bin/sh -c "while true;do echo 666;sleep 1;done"

docker top 容器ID

docker inspect 容器ID

# 方式一# 命令docker exec -it 容器ID bashShell# 测试malulu@malulu:~/桌面$ docker psCONTAINER ID   IMAGE     COMMAND                  CREATED         STATUS         PORTS     NAMES9ff3b9c7ebd5   centos    "/bin/sh -c 'while t…"   8 seconds ago   Up 6 seconds             lucid_wrightmalulu@malulu:~/桌面$ docker exec -it 9ff3b9c7ebd5 /bin/bash[root@9ff3b9c7ebd5 /]# lsbin  etc   lib	  lost+found  mnt  proc  run   srv  tmp  vardev  home  lib64  media       opt  root  sbin  sys  usr[root@9ff3b9c7ebd5 /]# # 方式二docker attach 容器ID# 测试malulu@malulu:~/桌面$ docker psCONTAINER ID   IMAGE     COMMAND                  CREATED         STATUS         PORTS     NAMES9ff3b9c7ebd5   centos    "/bin/sh -c 'while t…"   8 minutes ago   Up 8 minutes             lucid_wrightmalulu@malulu:~/桌面$ docker attach 9ff3b9c7ebd5666666666666666666# docker exec	# 进入容器后开启一个新的终端 可以在里面操作(常用)# docker attach	# 进入容器正在执行的终端 不会启动新的终端

docker cp 容器Id:容器内路径 目的的主机路径

attach      Attach local standard input, output, and error streams to a running containerbuild       Build an image from a Dockerfilecommit      Create a new image from a container's changescp          Copy files/folders between a container and the local filesystemcreate      Create a new containerdiff        Inspect changes to files or directories on a container's filesystemevents      Get real time events from the serverexec        Run a command in a running containerexport      Export a container's filesystem as a tar archivehistory     Show the history of an imageimages      List imagesimport      Import the contents from a tarball to create a filesystem imageinfo        Display system-wide informationinspect     Return low-level information on Docker objectskill        Kill one or more running containersload        Load an image from a tar archive or STDINlogin       Log in to a Docker registrylogout      Log out from a Docker registrylogs        Fetch the logs of a containerpause       Pause all processes within one or more containersport        List port mappings or a specific mapping for the containerps          List containerspull        Pull an image or a repository from a registrypush        Push an image or a repository to a registryrename      Rename a containerrestart     Restart one or more containersrm          Remove one or more containersrmi         Remove one or more imagesrun         Run a command in a new containersave        Save one or more images to a tar archive (streamed to STDOUT by default)search      Search the Docker Hub for imagesstart       Start one or more stopped containersstats       Display a live stream of container(s) resource usage statisticsstop        Stop one or more running containerstag         Create a tag TARGET_IMAGE that refers to SOURCE_IMAGEtop         Display the running processes of a containerunpause     Unpause all processes within one or more containersupdate      Update configuration of one or more containersversion     Show the Docker version informationwait        Block until one or more containers stop, then print their exit codes

malulu@malulu:~/桌面$ docker pull nginxUsing default tag: latestlatest: Pulling from library/nginxf7ec5a41d630: Already exists aa1efa14b3bf: Pull complete b78b95af9b17: Pull complete c7d6bca2b8dc: Pull complete cf16cd8e71e0: Pull complete 0241c68333ef: Pull complete Digest: sha256:75a55d33ecc73c2a242450a9f1cc858499d468f077ea942867e662c247b5e412Status: Downloaded newer image for nginx:latestdocker.io/library/nginx:latestmalulu@malulu:~/桌面$ 

# -d 后台运行# --name 给容器命名# -p 宿主机端口:容器内部端口malulu@malulu:~/桌面$ docker run -d --name nginx01 -p 3344:80 nginx699b9cecd0a07f8db6e888722a2dada1c9b9be6d77efc7996c4b6758dd72f587malulu@malulu:~/桌面$ docker psCONTAINER ID   IMAGE     COMMAND                  CREATED              STATUS              PORTS                  NAMES699b9cecd0a0   nginx     "/docker-entrypoint.…"   About a minute ago   Up About a minute   0.0.0.0:3344->80/tcp   nginx01malulu@malulu:~/桌面$ curl localhost:3344# 进入容器malulu@malulu:~/桌面$ docker exec -it nginx01 /bin/bashroot@699b9cecd0a0:/# whereis nginxnginx: /usr/sbin/nginx /usr/lib/nginx /etc/nginx /usr/share/nginxroot@699b9cecd0a0:/# cd /etc/nginx/root@699b9cecd0a0:/etc/nginx# lsconf.d	fastcgi_params	koi-utf  koi-win  mime.types  modules  nginx.conf  scgi_params	uwsgi_params  win-utfroot@699b9cecd0a0:/etc/nginx# exit

# es 暴露的端口很多# es 十分的耗内存# es 数据一般需要放置到安全目录 挂载docker run -d --name elasticsearch --net somenetwork -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" elasticsearch:tag

# --net somenetwork 网络配置# 启动 Elasticsearchdocker run -d --name elasticsearch01 -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" elasticsearch:7.12.0# 启动之后，服务器会特别卡# 所以需要增加内存的限制# 修改配置文件 -e 环境配置修改docker run -d --name elasticsearch02 -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" -e ES_JAVA_OPTS="-Xms64m -Xmx512m" elasticsearch:7.12.0

# 查看CPU使用情况docker stats 容器ID

# 测试es是否安装成功curl localhost:9200

docker image inspect redis:latest

docker commit 提交容器成为一个新的镜像docker commit -m="提交的描述信息" -a="作者" 容器Id 目标镜像名:[TAG]

docker run -v 主机内目录:容器内目录

"Mounts": [            {                "Type": "bind",                "Source": "/home/ceshi",	# 主机内地址                "Destination": "/home",		# docker容器内地址                "Mode": "",                "RW": true,                "Propagation": "rprivate"            }        ],

# 获取镜像docker pull mysql:5.7# 运行容器 需要做数据挂载# 注意: 安装启动mysql时 需要配置密码的# 官方测试(DockerHub) docker run --name some-mysql -e MYSQL_ROOT_PASSWORD=my-secret-pw -d mysql:tag# 启动docker run -d -p 3310:3306 -v /home/mysql/conf:/etc/mysql/conf.d -v /home/mysql/data:/var/lib/mysql -e MYSQL_ROOT_PASSWORD=Malulu@960610 --name mysql01 mysql:5.7# 启动成功后 在使用Navicat来测试# Navicat连接到Ubuntu的3310 3310和容器内的3306映射 此时我们就可以连接上了

# 查看所有卷的信息docker volume ls# 匿名挂载-v 容器内目录docker run -d -P --name nginx -v /etc/nginx nginx# 这样就属于匿名挂载 在 -v 后只写了容器内目录 没有写主机的目录

docker run -d -P --name nginx02 -v juming-nginx:/etc/nginx nginx

-v 容器内路径			 # 匿名挂载-v 卷名:容器内路径			# 具名挂载-v /宿主机路径:容器内路径	  # 指定路径挂载

# 通过 -v 容器内路径:ro rw 改变读写权限ro readonly 	# 只读rw readwrite	# 可读可写# 一旦设置了这个权限 容器对我们挂载出来的内容就有限定了docker run -d -P --name nginx02 -v juming-nginx:/etc/nginx:ro nginxdocker run -d -P --name nginx02 -v juming-nginx:/etc/nginx:rw nginx# ro 只要看到ro就说明这个路径只能通过宿主机来操作 容器内部是无法操作的

# 创建一个dockerfile文件 名字可以随机 建议Dockerfile# 文件中的内容 # 指令(大写) 参数FROM centosVOLUME ["volume01","volume02"]CMD echo "-----end-----"CMD /bin/bash# 这里的每个命令镜像的一层

docker build -f ./dockerfile1 -t malulu-centos:1.0 .