免费视频淫片aa毛片_日韩高清在线亚洲专区vr_日韩大片免费观看视频播放_亚洲欧美国产精品完整版

$ sudo docker versionClient version: 1.3.2Client API version: 1.15Go version (client): go1.3.3Git commit (client): 39fa2fa/1.3.2OS/Arch (client): linux/amd64Server version: 1.3.2Server API version: 1.15Go version (server): go1.3.3Git commit (server): 39fa2fa/1.3.2

$ sudo docker search ubuntu

$ sudo docker pull ubuntu # 獲取 ubuntu 官方鏡像 $ sudo docker images # 查看當(dāng)前鏡像列表 

$ sudo docker run -i -t ubuntu:14.04 /bin/bash

$ sudo docker ps # 查看當(dāng)前運(yùn)行的容器, ps -a 列出當(dāng)前系統(tǒng)所有的容器 CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES6c9129e9df10        ubuntu:14.04        /bin/bash 6 minutes ago       Up 6 minutes                            cranky_babbage

$ sudo docker   # docker 命令幫助Commands:    attach    Attach to a running container                 # 當(dāng)前 shell 下 attach 連接指定運(yùn)行鏡像    build     Build an image from a Dockerfile              # 通過(guò) Dockerfile 定制鏡像    commit    Create a new image from a container's changes # 提交當(dāng)前容器為新的鏡像    cp        Copy files/folders from the containers filesystem to the host path              # 從容器中拷貝指定文件或者目錄到宿主機(jī)中    create    Create a new container                        # 創(chuàng)建一個(gè)新的容器，同 run，但不啟動(dòng)容器    diff      Inspect changes on a container's filesystem   # 查看 docker 容器變化    events    Get real time events from the server          # 從 docker 服務(wù)獲取容器實(shí)時(shí)事件    exec      Run a command in an existing container        # 在已存在的容器上運(yùn)行命令    export    Stream the contents of a container as a tar archive                 # 導(dǎo)出容器的內(nèi)容流作為一個(gè) tar 歸檔文件[對(duì)應(yīng) import ]    history   Show the history of an image                  # 展示一個(gè)鏡像形成歷史    images    List images                                   # 列出系統(tǒng)當(dāng)前鏡像    import    Create a new filesystem image from the contents of a tarball                # 從tar包中的內(nèi)容創(chuàng)建一個(gè)新的文件系統(tǒng)映像[對(duì)應(yīng) export]    info      Display system-wide information               # 顯示系統(tǒng)相關(guān)信息    inspect   Return low-level information on a container   # 查看容器詳細(xì)信息    kill      Kill a running container                      # kill 指定 docker 容器    load      Load an image from a tar archive              # 從一個(gè) tar 包中加載一個(gè)鏡像[對(duì)應(yīng) save]    login     Register or Login to the docker registry server                 # 注冊(cè)或者登陸一個(gè) docker 源服務(wù)器    logout    Log out from a Docker registry server         # 從當(dāng)前 Docker registry 退出    logs      Fetch the logs of a container                 # 輸出當(dāng)前容器日志信息    port      Lookup the public-facing port which is NAT-ed to PRIVATE_PORT              # 查看映射端口對(duì)應(yīng)的容器內(nèi)部源端口    pause     Pause all processes within a container        # 暫停容器    ps        List containers                               # 列出容器列表    pull      Pull an image or a repository from the docker registry server              # 從docker鏡像源服務(wù)器拉取指定鏡像或者庫(kù)鏡像    push      Push an image or a repository to the docker registry server              # 推送指定鏡像或者庫(kù)鏡像至docker源服務(wù)器    restart   Restart a running container                   # 重啟運(yùn)行的容器    rm        Remove one or more containers                 # 移除一個(gè)或者多個(gè)容器    rmi       Remove one or more images                               # 移除一個(gè)或多個(gè)鏡像[無(wú)容器使用該鏡像才可刪除，否則需刪除相關(guān)容器才可繼續(xù)或 -f 強(qiáng)制刪除]    run       Run a command in a new container              # 創(chuàng)建一個(gè)新的容器并運(yùn)行一個(gè)命令    save      Save an image to a tar archive                # 保存一個(gè)鏡像為一個(gè) tar 包[對(duì)應(yīng) load]    search    Search for an image on the Docker Hub         # 在 docker hub 中搜索鏡像    start     Start a stopped containers                    # 啟動(dòng)容器    stop      Stop a running containers                     # 停止容器    tag       Tag an image into a repository                # 給源中鏡像打標(biāo)簽    top       Lookup the running processes of a container   # 查看容器中運(yùn)行的進(jìn)程信息    unpause   Unpause a paused container                    # 取消暫停容器    version   Show the docker version information           # 查看 docker 版本號(hào)    wait      Block until a container stops, then print its exit code                 # 截取容器停止時(shí)的退出狀態(tài)值Run 'docker COMMAND --help' for more information on a command.

Usage of docker:  --api-enable-cors=false                Enable CORS headers in the remote API                      # 遠(yuǎn)程 API 中開(kāi)啟 CORS 頭  -b, --bridge=''                        Attach containers to a pre-existing network bridge         # 橋接網(wǎng)絡(luò)                                           use 'none' to disable container networking  --bip=''                               Use this CIDR notation address for the network bridge's IP, not compatible with -b                                         # 和 -b 選項(xiàng)不兼容，具體沒(méi)有測(cè)試過(guò)  -d, --daemon=false                     Enable daemon mode                                         # daemon 模式  -D, --debug=false                      Enable debug mode                                          # debug 模式  --dns=[]                               Force docker to use specific DNS servers                   # 強(qiáng)制 docker 使用指定 dns 服務(wù)器  --dns-search=[]                        Force Docker to use specific DNS search domains            # 強(qiáng)制 docker 使用指定 dns 搜索域  -e, --exec-driver='native'             Force the docker runtime to use a specific exec driver     # 強(qiáng)制 docker 運(yùn)行時(shí)使用指定執(zhí)行驅(qū)動(dòng)器  --fixed-cidr=''                        IPv4 subnet for fixed IPs (ex: 10.20.0.0/16)                                           this subnet must be nested in the bridge subnet (which is defined by -b or --bip)  -G, --group='docker'                   Group to assign the unix socket specified by -H when running in daemon mode                                           use '' (the empty string) to disable setting of a group  -g, --graph='/var/lib/docker'          Path to use as the root of the docker runtime              # 容器運(yùn)行的根目錄路徑  -H, --host=[]                          The socket(s) to bind to in daemon mode                    # daemon 模式下 docker 指定綁定方式[tcp or 本地 socket]                                           specified using one or more tcp://host:port, unix:///path/to/socket, fd://* or fd://socketfd.  --icc=true                             Enable inter-container communication                       # 跨容器通信  --insecure-registry=[]                 Enable insecure communication with specified registries (no certificate verification for HTTPS and enable HTTP fallback) (e.g., localhost:5000 or 10.20.0.0/16)  --ip='0.0.0.0'                         Default IP address to use when binding container ports     # 指定監(jiān)聽(tīng)地址，默認(rèn)所有 ip  --ip-forward=true                      Enable net.ipv4.ip_forward                                 # 開(kāi)啟轉(zhuǎn)發(fā)  --ip-masq=true                         Enable IP masquerading for bridge's IP range  --iptables=true                        Enable Docker's addition of iptables rules                 # 添加對(duì)應(yīng) iptables 規(guī)則  --mtu=0                                Set the containers network MTU                             # 設(shè)置網(wǎng)絡(luò) mtu                                           if no value is provided: default to the default route MTU or 1500 if no default route is available  -p, --pidfile='/var/run/docker.pid'    Path to use for daemon PID file                            # 指定 pid 文件位置  --registry-mirror=[]                   Specify a preferred Docker registry mirror                    -s, --storage-driver=''                Force the docker runtime to use a specific storage driver  # 強(qiáng)制 docker 運(yùn)行時(shí)使用指定存儲(chǔ)驅(qū)動(dòng)  --selinux-enabled=false                Enable selinux support                                     # 開(kāi)啟 selinux 支持  --storage-opt=[]                       Set storage driver options                                 # 設(shè)置存儲(chǔ)驅(qū)動(dòng)選項(xiàng)  --tls=false                            Use TLS; implied by tls-verify flags                       # 開(kāi)啟 tls  --tlscacert='/root/.docker/ca.pem'     Trust only remotes providing a certificate signed by the CA given here  --tlscert='/root/.docker/cert.pem'     Path to TLS certificate file                               # tls 證書(shū)文件位置  --tlskey='/root/.docker/key.pem'       Path to TLS key file                                       # tls key 文件位置  --tlsverify=false                      Use TLS and verify the remote (daemon: verify client, client: verify daemon) # 使用 tls 并確認(rèn)遠(yuǎn)程控制主機(jī)  -v, --version=false                    Print version information and quit                         # 輸出 docker 版本信息

$ sudo docker search --helpUsage: docker search TERMSearch the Docker Hub for images # 從 Docker Hub 搜索鏡像 --automated=false Only show automated builds  --no-trunc=false Don't truncate output  -s, --stars=0 Only displays with at least xxx stars

$ sudo docker search -s 100 ubuntu # 查找 star 數(shù)至少為 100 的鏡像，找出只有官方鏡像 start 數(shù)超過(guò) 100，默認(rèn)不加 s 選項(xiàng)找出所有相關(guān) ubuntu 鏡像 NAME      DESCRIPTION                  STARS     OFFICIAL   AUTOMATEDubuntu    Official Ubuntu base image 425 [OK] 

$ sudo docker info Containers: 1 # 容器個(gè)數(shù) Images: 22 # 鏡像個(gè)數(shù) Storage Driver: devicemapper # 存儲(chǔ)驅(qū)動(dòng) Pool Name: docker-8:17-3221225728-pool Pool Blocksize: 65.54 kB Data file: /data/docker/devicemapper/devicemapper/data Metadata file: /data/docker/devicemapper/devicemapper/metadata Data Space Used: 1.83 GB Data Space Total: 107.4 GB Metadata Space Used: 2.191 MB Metadata Space Total: 2.147 GB Library Version: 1.02.84-RHEL7 (2014-03-26) Execution Driver: native-0.2 # 存儲(chǔ)驅(qū)動(dòng) Kernel Version: 3.10.0-123.el7.x86_64Operating System: CentOS Linux 7 (Core) 

$ sudo docker pull --help # pull 拉取鏡像 Usage: docker pull [OPTIONS] NAME[:TAG] Pull an image or a repository from the registry  -a, --all-tags=false Download all tagged images in the repository $ sudo docker push # push 推送指定鏡像 Usage: docker push NAME[:TAG] Push an image or a repository to the registry

$ sudo docker pull ubuntu # 下載官方 ubuntu docker 鏡像，默認(rèn)下載所有 ubuntu 官方庫(kù)鏡像 $ sudo docker pull ubuntu:14.04 # 下載指定版本 ubuntu 官方鏡像 

$ sudo docker push 192.168.0.100:5000/ubuntu # 推送鏡像庫(kù)到私有源[可注冊(cè) docker 官方賬戶，推送到官方自有賬戶] $ sudo docker push 192.168.0.100:5000/ubuntu:14.04 # 推送指定鏡像到私有源 

$ sudo docker images --helpUsage: docker images [OPTIONS] [NAME] List images  -a, --all=false Show all images (by default filter out the intermediate image layers) # -a 顯示當(dāng)前系統(tǒng)的所有鏡像，包括過(guò)渡層鏡像，默認(rèn) docker images 顯示最終鏡像，不包括過(guò)渡層鏡像 -f, --filter=[] Provide filter values (i.e. 'dangling=true') --no-trunc=false Don't truncate output  -q, --quiet=false Only show numeric IDs

$ sudo docker images # 顯示當(dāng)前系統(tǒng)鏡像，不包括過(guò)渡層鏡像 $ sudo docker images -a # 顯示當(dāng)前系統(tǒng)所有鏡像，包括過(guò)渡層鏡像 $ sudo docker images ubuntu # 顯示當(dāng)前系統(tǒng) docker ubuntu 庫(kù)中的所有鏡像 REPOSITORY                 TAG                 IMAGE ID            CREATED             VIRTUAL SIZEubuntu                     12.04               ebe4be4dd427 4 weeks ago         210.6 MBubuntu                     14.04               e54ca5efa2e9 4 weeks ago         276.5 MBubuntu                     14.04-ssh           6334d3ac099a 7 weeks ago         383.2 MB

$ sudo docker rmi --helpUsage: docker rmi IMAGE [IMAGE...] Remove one or more images  -f, --force=false Force removal of the image # 強(qiáng)制移除鏡像不管是否有容器使用該鏡像 --no-prune=false Do not delete untagged parents # 不要?jiǎng)h除未標(biāo)記的父鏡像 

$ sudo docker run --helpUsage: docker run [OPTIONS] IMAGE [COMMAND] [ARG...] Run a command in a new container  -a, --attach=[] Attach to stdin, stdout or stderr.  -c, --cpu-shares=0 CPU shares (relative weight) # 設(shè)置 cpu 使用權(quán)重 --cap-add=[] Add Linux capabilities  --cap-drop=[] Drop Linux capabilities  --cidfile='' Write the container ID to the file # 把容器 id 寫(xiě)入到指定文件 --cpuset='' CPUs in which to allow execution (0-3, 0,1) # cpu 綁定 -d, --detach=false Detached mode: Run container in the background, print new container id # 后臺(tái)運(yùn)行容器 --device=[] Add a host device to the container (e.g. --device=/dev/sdc:/dev/xvdc) --dns=[] Set custom dns servers # 設(shè)置 dns --dns-search=[] Set custom dns search domains # 設(shè)置 dns 域搜索 -e, --env=[] Set environment variables # 定義環(huán)境變量 --entrypoint='' Overwrite the default entrypoint of the image # ？ --env-file=[] Read in a line delimited file of ENV variables # 從指定文件讀取變量值 --expose=[] Expose a port from the container without publishing it to your host # 指定對(duì)外提供服務(wù)端口 -h, --hostname='' Container host name # 設(shè)置容器主機(jī)名 -i, --interactive=false Keep stdin open even if not attached # 保持標(biāo)準(zhǔn)輸出開(kāi)啟即使沒(méi)有 attached --link=[] Add link to another container (name:alias) # 添加鏈接到另外一個(gè)容器 --lxc-conf=[] (lxc exec-driver only) Add custom lxc options --lxc-conf='lxc.cgroup.cpuset.cpus = 0,1' -m, --memory='' Memory limit (format: number>, where unit = b, k, m or g) # 內(nèi)存限制 --name='' Assign a name to the container # 設(shè)置容器名 --net='bridge' Set the Network mode for the container # 設(shè)置容器網(wǎng)絡(luò)模式 'bridge': creates a new network stack for the container on the docker bridge 'none': no networking for this container 'container:': reuses another container network stack 'host': use the host network stack inside the container.  Note: the host mode gives the container full access to local system services such as D-bus and is therefore considered insecure.  -P, --publish-all=false Publish all exposed ports to the host interfaces # 自動(dòng)映射容器對(duì)外提供服務(wù)的端口 -p, --publish=[] Publish a container's port to the host             # 指定端口映射  format: ip:hostPort:containerPort | ip::containerPort | hostPort:containerPort  (use 'docker port' to see the actual mapping) --privileged=false Give extended privileges to this container # 提供更多的權(quán)限給容器 --restart='' Restart policy to apply when a container exits (no, on-failure[:max-retry], always) --rm=false Automatically remove the container when it exits (incompatible with -d) # 如果容器退出自動(dòng)移除和 -d 選項(xiàng)沖突 --security-opt=[] Security Options  --sig-proxy=true Proxify received signals to the process (even in non-tty mode). SIGCHLD is not proxied.  -t, --tty=false Allocate a pseudo-tty # 分配偽終端 -u, --user='' Username or UID # 指定運(yùn)行容器的用戶 uid 或者用戶名 -v, --volume=[] Bind mount a volume (e.g., from the host: -v /host:/container, from docker: -v /container) # 掛載卷 --volumes-from=[] Mount volumes from the specified container(s) # 從指定容器掛載卷 -w, --workdir='' Working directory inside the container # 指定容器工作目錄 

$ sudo docker images ubuntuREPOSITORY          TAG                 IMAGE ID            CREATED             VIRTUAL SIZEubuntu              14.04               e54ca5efa2e9 4 weeks ago         276.5 MB... ... $ sudo docker run -t -i -c 100 -m 512MB -h test1 -d --name='docker_test1' ubuntu /bin/bash # 創(chuàng)建一個(gè) cpu 優(yōu)先級(jí)為 100，內(nèi)存限制 512MB，主機(jī)名為 test1，名為 docker_test1 后臺(tái)運(yùn)行 bash 的容器 a424ca613c9f2247cd3ede95adfbaf8d28400cbcb1d5f9b69a7b56f97b2b52e5 $ sudo docker ps CONTAINER ID        IMAGE           COMMAND         CREATED             STATUS              PORTS       NAMESa424ca613c9f        ubuntu:14.04    /bin/bash 6 seconds ago       Up 5 seconds                    docker_test1 $ sudo docker attach docker_test1root@test1:/# pwd /root@test1:/# exit exit 

docker exec --helpUsage: docker exec [OPTIONS] CONTAINER COMMAND [ARG...] Run a command in an existing container  -d, --detach=false Detached mode: run command in the background  -i, --interactive=false Keep STDIN open even if not attached  -t, --tty=false Allocate a pseudo-TTY

$ docker exec -it ubuntu_bash bash

$ docker create -t -i fedora bash6d8af538ec541dd581ebc2a24153a28329acb5268abe5ef868c1f1a261221752

$ docker start -a -i 6d8af538ec5bash-4.2#

$ docker run --security-opt label:type:svirt_apache -i -t centos \ bash

# Find IP address of container with ID container_id> 通過(guò)容器 id 獲取 ip $ sudo docker inspect container_id> | grep IPAddress | cut -d ’'’ -f 4

$ sudo docker run -t -P --expose 22 --name server  ubuntu:14.04

$ sudo docker run -p [([host_interface>:[host_port]])|(host_port>):]container_port>[/udp] image> cmd>

# Bind TCP port 8080 of the container to TCP port 80 on 127.0.0.1 of the host machine. $ sudo docker run -p 127.0.0.1:80:8080 image> cmd> # Bind TCP port 8080 of the container to a dynamically allocated TCP port on 127.0.0.1 of the host machine. $ sudo docker run -p 127.0.0.1::8080 image> cmd> # Bind TCP port 8080 of the container to TCP port 80 on all available interfaces of the host machine. $ sudo docker run -p 80:8080 image> cmd> # Bind TCP port 8080 of the container to a dynamically allocated TCP port on all available interfaces $ sudo docker run -p 8080 image> cmd>

# Bind UDP port 5353 of the container to UDP port 53 on 127.0.0.1 of the host machine. $ sudo docker run -p 127.0.0.1:53:5353/udp image> cmd>

$ sudo brctl show # brctl 工具依賴 bridge-utils 軟件包 bridge name bridge id STP enabled interfacesdocker0 8000.000000000000 no

$ sudo ifconfig docker0docker0 Link encap:Ethernet HWaddr xx:xx:xx:xx:xx:xxinet addr:172.17.42.1 Bcast:0.0.0.0 Mask:255.255.0.0

$ sudo docker run -t -i -d ubuntu /bin/bash52f811c5d3d69edddefc75aff5a4525fc8ba8bcfa1818132f9dc7d4f7c7e78b4 $ sudo brctl showbridge name bridge id STP enabled interfacesdocker0 8000.fef213db5a66 no vethQCDY1N

# Stopping Docker and removing docker0 $ sudo service docker stop $ sudo ip link set dev docker0 down $ sudo brctl delbr docker0 # Create our own bridge $ sudo brctl addbr bridge0 $ sudo ip addr add 192.168.5.1/24 dev bridge0 $ sudo ip link set dev bridge0 up # Confirming that our bridge is up and running $ ip addr show bridge04: bridge0:  mtu 1500 qdisc noop state UP group default    link/ether 66:38:d0:0d:76:18 brd ff:ff:ff:ff:ff:ff    inet 192.168.5.1/24 scope global bridge0       valid_lft forever preferred_lft forever # Tell Docker about it and restart (on Ubuntu) $ echo 'DOCKER_OPTS='-b=bridge0'' >> /etc/default/docker $ sudo service docker start

$ git clone https://github.com/jpetazzo/pipework.git$ sudo cp -rp pipework/pipework /usr/local/bin/

$ sudo apt-get install iputils-arping bridge-utils -y

# brctl showbridge name     bridge id               STP enabled     interfacesbr0             8000.000c291412cd       no              eth0docker0         8000.56847afe9799       no              vetheb48029

$ sudo service docker stop$ sudo ip link set dev docker0 down$ sudo brctl delbr docker0$ echo 'DOCKER_OPTS='-b=br0'' >> /etc/default/docker$ sudo service docker start

$ sudo systemctl stop docker$ sudo ip link set dev docker0 down$ sudo brctl delbr docker0$ cat /etc/sysconfig/docker | grep 'OPTIONS='OPTIONS=--selinux-enabled -b=br0 -H fd://$ sudo systemctl start docker

$ git clone https://github.com/jpetazzo/pipework.git$ sudo cp -rp pipework/pipework /usr/local/bin/$ pipework Syntax:pipework hostinterface> [-i containerinterface] guest> ipaddr>/subnet>[@default_gateway] [macaddr][@vlan]pipework hostinterface> [-i containerinterface] guest> dhcp [macaddr][@vlan]pipework --wait [-i containerinterface]

$ sudo docker run --rm -ti --net=none ubuntu:14.04 /bin/bashroot@a46657528059:/#$                  # Ctrl-P + Ctrl-Q 回到宿主機(jī) shell，容器 detach 狀態(tài)$ sudo docker  psCONTAINER ID    IMAGE          COMMAND       CREATED         STATUS          PORTS      NAMESa46657528059    ubuntu:14.04   '/bin/bash'   4 minutes ago   Up 4 minutes               hungry_lalande$ sudo pipework br0 -i eth0 a46657528059 192.168.115.10/24@192.168.115.2 # 默認(rèn)不指定網(wǎng)卡設(shè)備名，則默認(rèn)添加為 eth1# 另外 pipework 不能添加靜態(tài)路由，如果有需求則可以在 run 的時(shí)候加上 --privileged=true 權(quán)限在容器中手動(dòng)添加，# 但這種安全性有缺陷，可以通過(guò) ip netns 操作$ sudo docker attach a46657528059root@a46657528059:/# ifconfig eth0eth0      Link encap:Ethernet  HWaddr 86:b6:6b:e8:2e:4d            inet addr:192.168.115.10  Bcast:0.0.0.0  Mask:255.255.255.0          inet6 addr: fe80::84b6:6bff:fee8:2e4d/64 Scope:Link          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1          RX packets:8 errors:0 dropped:0 overruns:0 frame:0          TX packets:9 errors:0 dropped:0 overruns:0 carrier:0          collisions:0 txqueuelen:1000           RX bytes:648 (648.0 B)  TX bytes:690 (690.0 B)root@a46657528059:/# route -nKernel IP routing tableDestination     Gateway         Genmask         Flags Metric Ref    Use Iface0.0.0.0         192.168.115.2   0.0.0.0         UG    0      0        0 eth0192.168.115.0   0.0.0.0         255.255.255.0   U     0      0        0 eth0

$ docker inspect --format='{{ .State.Pid }}' a46657528059 # 獲取指定容器 pid6350$ sudo ln -s /proc/6350/ns/net /var/run/netns/6350$ sudo ip netns exec 6350 ip route add 192.168.0.0/16 dev eth0 via 192.168.115.2$ sudo ip netns exec 6350 ip route    # 添加成功192.168.0.0/16 via 192.168.115.2 dev eth0 ... ...

FROM image>

FROM image>

MAINTAINER name>

RUN [ 'echo', '$HOME' ]

RUN [ 'sh', '-c', 'echo', '$HOME' ]

EXPOSE port> [port>...]

ENV key> value>       # 只能設(shè)置一個(gè)變量ENV key>=value> ...   # 允許一次設(shè)置多個(gè)變量

ENV myName='John Doe' myDog=Rex\ The\ Dog \    myCat=fluffy

ENV myName John DoeENV myDog Rex The DogENV myCat fluffy

ADD src>... dest>

ADD hom* /mydir/        # adds all files starting with 'hom'ADD hom?.txt /mydir/    # ? is replaced with any single character

COPY src>... dest>

FROM ubuntuENTRYPOINT ['top', '-b']CMD ['-c']

FROM debian:stableRUN apt-get update && apt-get install -y --force-yes apache2EXPOSE 80 443VOLUME ['/var/www', '/var/log/apache2', '/etc/apache2']ENTRYPOINT ['/usr/sbin/apache2ctl', '-D', 'FOREGROUND']

FROM ubuntuENTRYPOINT exec top -b

FROM ubuntuENTRYPOINT top -bCMD --ignored-param1 # --ignored-param2 ... --ignored-param3 ... 依此類推

VOLUME ['/data']

USER daemon

WORKDIR /path/to/workdir

WORKDIR /aWORKDIR bWORKDIR cRUN pwd

ENV DIRPATH /pathWORKDIR $DIRPATH/$DIRNAME

ONBUILD [INSTRUCTION]

[...]ONBUILD ADD . /app/srcONBUILD RUN /usr/local/bin/python-build --dir /app/src[...]

# Automatically run the followingADD . /app/srcRUN /usr/local/bin/python-build --dir /app/src

# Nginx## VERSION               0.0.1FROM      ubuntuMAINTAINER Victor Vieux RUN apt-get update && apt-get install -y inotify-tools nginx apache2 openssh-server# Firefox over VNC## VERSION               0.3FROM ubuntu# Install vnc, xvfb in order to create a 'fake' display and firefoxRUN apt-get update && apt-get install -y x11vnc xvfb firefoxRUN mkdir ~/.vnc# Setup a passwordRUN x11vnc -storepasswd 1234 ~/.vnc/passwd# Autostart firefox (might not be the best way, but it does the trick)RUN bash -c 'echo 'firefox' >> /.bashrc'EXPOSE 5900CMD    ['x11vnc', '-forever', '-usepw', '-create']# Multiple images example## VERSION               0.1FROM ubuntuRUN echo foo > bar# Will output something like ===> 907ad6c2736fFROM ubuntuRUN echo moo > oink# Will output something like ===> 695d7793cbe4# You?ll now have two images, 907ad6c2736f with /bar, and 695d7793cbe4 with# /oink.

$ docker build --helpUsage: docker build [OPTIONS] PATH | URL | -Build a new image from the source code at PATH  --force-rm=false     Always remove intermediate containers, even after unsuccessful builds # 移除過(guò)渡容器，即使構(gòu)建失敗  --no-cache=false     Do not use cache when building the image                              # 不實(shí)用 cache          -q, --quiet=false    Suppress the verbose output generated by the containers                 --rm=true            Remove intermediate containers after a successful build               # 構(gòu)建成功后移除過(guò)渡層容器  -t, --tag=''         Repository name (and optionally a tag) to be applied to the resulting image in case of success

RUN apt-get update && apt-get install -y \  bzr \  cvs \  git \  mercurial \  subversion

RUN apt-get update && apt-get install -y \    aufs-tools \    automake \    btrfs-tools \    build-essential \    curl \    dpkg-sig \    git \    iptables \    libapparmor-dev \    libcap-dev \    libsqlite3-dev \    lxc=1.0* \    mercurial \    parallel \    reprepro \    ruby1.9.1 \    ruby1.9.1-dev \    s3cmd=1.1.0*

ENV PG_MAJOR 9.3ENV PG_VERSION 9.3.4RUN curl -SL http://example.com/postgres-$PG_VERSION.tar.xz | tar -xJC /usr/src/postgress && …ENV PATH /usr/local/postgres-$PG_MAJOR/bin:$PATH

ADD http://example.com/big.tar.xz /usr/src/things/RUN tar -xJf /usr/src/things/big.tar.xz -C /usr/src/thingsRUN make -C /usr/src/things all

RUN mkdir -p /usr/src/things \    && curl -SL http://example.com/big.tar.gz \    | tar -xJC /usr/src/things \    && make -C /usr/src/things all

$ sudo docker run --name data -v /data -t -i ubuntu:14.04 /bin/bash # 創(chuàng)建數(shù)據(jù)卷綁定到到新建容器，新建容器中會(huì)創(chuàng)建 /data 數(shù)據(jù)卷 bash-4.1# ls -ld /data/drwxr-xr-x 2 root root 4096 Jul 23 06:59 /data/bash-4.1# df -ThFilesystem    Type    Size  Used Avail Use% Mounted on... ...              ext4     91G  4.6G   82G   6% /data

$ sudo docker inspect data... ... 'Volumes': { '/data': '/var/lib/docker/vfs/dir/151de401d268226f96d824fdf444e77a4500aed74c495de5980c807a2ffb7ea9' }, # 可以看到創(chuàng)建的數(shù)據(jù)卷宿主機(jī)路徑 ... ...

$ sudo docker inspect --format='{{ .Volumes }}' datamap[/data: /var/lib/docker/vfs/dir/151de401d268226f96d824fdf444e77a4500aed74c495de5980c807a2ffb7ea9]

$ sudo docker run --name web -v /source/:/web -t -i ubuntu:14.04 /bin/bashbash-4.1# ls -ld /web/drwxr-xr-x 2 root root 4096 Jul 23 06:59 /web/bash-4.1# df -Th... ...              ext4     91G  4.6G   82G   6% /webbash-4.1# exit 

$ sudo docker run --rm --name test -v /source/:/test:ro -t -i ubuntu:14.04 /bin/bash

$ sudo docker run -t -i -d -v /test --name test ubuntu:14.04 echo hello

$ sudo docker run -t -i -d --volumes-from test --name test1 ubuntu:14.04 /bin/bash

$ sudo docker run -t -i -d --volumes-from test --name test2 ubuntu:14.04 /bin/bash

$ sudo docker run -t -i -d --volumes-from test1 --name test3 ubuntu:14.04 /bin/bash

$ sudo docker run --rm --volumes-from test -v $(pwd):/backup ubuntu:14.04 tar cvf /backup/test.tar /testtar: Removing leading `/' from member names/test//test/b/test/d/test/c/test/a

$ ls # 宿主機(jī)當(dāng)前目錄下產(chǎn)生了 test 卷的備份文件 test.tar test.tar

$ sudo docker run -t -i -d -v /test --name test4 ubuntu:14.04  /bin/bash $ sudo docker run --rm --volumes-from test4 -v $(pwd):/backup ubuntu:14.04 tar xvf /backup/test.tar -C / # 恢復(fù)之前的文件到新建卷中，執(zhí)行完后自動(dòng)刪除容器 test/ test/b test/d test/c test/a

$ sudo docker run -d -t -i --name test ubuntu:14.04 bash              $ sudo docker  inspect --format='{{ .Nmae }}' test/test

$ sudo docker run -d --name db training/postgres

$ sudo docker run -d -P --name web --link db:db training/webapp python app.py

$ sudo docker inspect -f '{{ .HostConfig.Links }}' web[/db:/web/db]

$ sudo docker run --rm --name web2 --link db:db training/webapp env. . .DB_NAME=/web2/dbDB_PORT=tcp://172.17.0.5:5432           DB_PORT_5432_TCP=tcp://172.17.0.5:5432  # name>_PORT_port>_protocol> 協(xié)議可以是 TCP 或 UDPDB_PORT_5432_TCP_PROTO=tcpDB_PORT_5432_TCP_PORT=5432DB_PORT_5432_TCP_ADDR=172.17.0.5. . .

$ sudo docker run -t -i --rm --link db:db training/webapp /bin/bashroot@aed84ee21bde:/opt/webapp# cat /etc/hosts172.17.0.7  aed84ee21bde. . .172.17.0.5  db

$ sudo apt-get install build-essential python-dev libevent-dev python-pip liblzma-dev

sudo pip install docker-registry

$ git clone https://github.com/dotcloud/docker-registry.git$ cd docker-registry/$ cp config/config_sample.yml config/config.yml$ mkdir /data/registry -p$ pip install .

docker-registry

gunicorn -c contrib/gunicorn_config.py docker_registry.wsgi:application

gunicorn --access-logfile - --error-logfile - -k gevent -b 0.0.0.0:5000 -w 4 --max-requests 100 docker_registry.wsgi:application

$ docker tag ubuntu:12.04 私有庫(kù)IP:5000/ubuntu:12.04$ docker push 私有庫(kù)IP:5000/ubuntu