成人电影,亚洲中文全新无码亚洲人一成,啦啦啦www在线观看免费

盜夢空間

? 使用docker時，應時刻注意自己在哪兒，防止誤操作。docker容器一般都是root全新，這個時候往往是宿主機、各容器相互交錯，甚至有時候還有自己的筆記本遠程登錄維護的場景；一個不慎，就是生產事故。

? 解決辦法：設置PS1變量，每個用戶下顏色不一樣，提示符不一樣。同時加強用戶權限的管理和落地，賦予運維人員崗位角色最小的權限，嚴格控制特殊權限如root的申請流程和雙人復核制度；

參考bashrc

將以下代碼保存為 bashrc

#!/bin/bash
#export DYLD_FALLBACK_LIBRARY_PATH="${HOME}/wine/wine-1.2/lib:/usr/X11/lib:/usr/
lib"
export TERM=xterm-color
export CLICOLOR=1
export LSCOLORS=ExFxCxDxBxegedabagacad
export EDITOR=vi
#export CDPATH=$CDPATH:/Users/auxten/Documents/Codes/

use_color=false

# Set colorful PS1 only on colorful terminals.
# dircolors --print-database uses its own built-in database
# instead of using /etc/DIR_COLORS.  Try to use the external file
# first to take advantage of user additions.  Use internal bash
# globbing instead of external grep binary.
safe_term=${TERM//[^[:alnum:]]/?}   # sanitize TERM
match_lhs=""
[[ -f ~/.dir_colors   ]] && match_lhs="${match_lhs}$(<~/.dir_colors)"
[[ -f /etc/DIR_COLORS ]] && match_lhs="${match_lhs}$(</etc/DIR_COLORS)"
[[ -z ${match_lhs}    ]] \
    && type -P dircolors >/dev/null \
    && match_lhs=$(dircolors --print-database)
[[ $'\n'${match_lhs} == *$'\n'"TERM "${safe_term}* ]] && use_color=true

if ${use_color} ; then
    # Enable colors for ls, etc.  Prefer ~/.dir_colors #64489
    if type -P dircolors >/dev/null ; then
        if [[ -f ~/.dir_colors ]] ; then
            eval $(dircolors -b ~/.dir_colors)
        elif [[ -f /etc/DIR_COLORS ]] ; then
            eval $(dircolors -b /etc/DIR_COLORS)
        fi
    fi

    if [[ ${EUID} == 0 ]] ; then
        PS1='\[\033[01;31m\]\h\[\033[01;34m\] \w \$\[\033[00m\] '
    else
        PS1='\[\033[01;33m\]\u.\[\033[01;34m\]\[\033[01;32m\]\h\[\033[01;34m\] \
w \$\[\033[00m\] '
    #PS1='\[\033[01;32m\]\u@\h\[\033[01;34m\] \w \$\[\033[00m\] '
    fi

    alias ls='ls -G'
    alias grep='grep --colour=auto'
else
    if [[ ${EUID} == 0 ]] ; then
        # show root@ when we don't have colors
        PS1='\u@\h \W \$ '
    else
        PS1='\u@\h \w \$ '
    fi
fi

# Try to keep environment pollution down, EPA loves us.
unset use_color safe_term match_lhs

設置命令

cp bashrc ~/.bashrc
. ~/.bashrc

贈與root

sudo cp ~/.bashrc /root/
sudo su -

效果展示

基本操作

docker stop

停止docker容器。

建議不使用，直接使用docker rm -f 停止并刪除容器:干凈整潔不留垃圾；stop命令略慢，rm命令毫秒級別。以下是演示，

停止，清理容器

AnInputForce.teach ~ $ docker run --name="centos_kch" -itd centos tail -f /etc/hosts
608ca094cbf836087a749f464e4e1175502cd0e0d184e174b99bfe59b4a18015
AnInputForce.teach ~ $ docker ps | grep kch
608ca094cbf8        centos                         "tail -f /etc/hosts"     28 seconds ago      Up 26 seconds                                                                           centos_kch
AnInputForce.teach ~ $ docker stop centos_kch
centos_kch
AnInputForce.teach ~ $ docker ps | grep kch
AnInputForce.teach ~ $ docker ps -a | grep kch
608ca094cbf8        centos                         "tail -f /etc/hosts"     About a minute ago   Exited (137) 16 seconds ago                                                                       centos_kch
AnInputForce.teach ~ $ docker rm centos_kch
centos_kch
AnInputForce.teach ~ $ docker ps -a | grep kch

直接停止并刪除容器

AnInputForce.teach ~ $ docker run --name="centos_kch" -itd centos tail -f /etc/hosts
e916042b88f1fe5829d400188c7cb806d7075751a9142c5fb9935a81b7924f56
AnInputForce.teach ~ $ docker ps | grep kch
e916042b88f1        centos                         "tail -f /etc/hosts"     18 seconds ago      Up 17 seconds                                                                           centos_kch
AnInputForce.teach ~ $ docker rm -f centos_kch
centos_kch
AnInputForce.teach ~ $ docker ps | grep kch
AnInputForce.teach ~ $ docker ps -a | grep kch
AnInputForce.teach ~ $

docker exec 進入容器簡化

我們經常要寫這條命令，進入容器交互bash：

docker exec -it centos_kch bash

有網友寫了個腳本簡化這件事：帖子看這里(http://askubuntu.com/questions/505506/how-to-get-bash-or-ssh-into-a-running-container-in-background-mode )，看3樓的回復

#!/bin/bash -xe

# docker id might be given as a parameter
DID=$1

if [[ "$DID" == "" ]]; then
  # if no id given simply just connect to the first running instance
    DID=$(docker ps | grep -Eo "^[0-9a-z]{8,}\b")
fi

docker exec -i -t $DID bash

修訂一下：如果不帶參數，默認進入第一個運行的容器，但是過濾出來的是所有運行的容器。此處修訂：

保存腳本為dgo

#!/bin/bash -xe

# docker id might be given as a parameter
DID=$1

if [[ "$DID" == "" ]]; then
  # if no id given simply just connect to the first running instance
    DID=$(docker ps | grep -Eo "^[0-9a-z]{8,}\b" | head -n 1)
fi

docker exec -i -t $DID bash

設置Setup

Put docker-ssh file in your $PATH with the following contents

有root權限的話，我們直接copy到bin目錄

演示Usage

If you have one running instance simply run

Otherwise provide it with a docker id parmeter that you get from docker ps (first col)

dgo $docker-id，# dgo 3ccdb6bcf75a
dgo $container-name，# dgo centos_kch

AnInputForce.teach ~ $ docker run --name="centos_kch" -itd centos tail -f /etc/hosts
3ccdb6bcf75a197b4cfbeec3d6754d3d55630e11544f396e5cd942064dae220e
AnInputForce.teach ~ $ dgo centos_kch
+ DID=centos_kch
+ [[ centos_kch == '' ]]
+ docker exec -i -t centos_kch bash
[root@3ccdb6bcf75a /]#

腳本參數

bash -xe
-x 顯示執行日志

把它執行的每條命令都打到console上，有助于讓大家了解都執行的什么，有助于提醒這個腳本是個自定義命令；這是一個非常好的習慣；

-e 執行完退出；

docker run -v -p

-v 映射目錄
-p 映射端口

Tips：端口映射docker是用iptable實現的，CentOS7引入了firewalld，本質上比iptable好用一些，如果docker用到端口映射，firewalld服務就不能聽。內網使用，可以一上來用firewalld把所有端口都打開，這樣比較方便docker管理端口映射。

驗證思路

篩選端口有沒有占用，沒有輸出則可用

sudo netstat -nltp | grep 8084

將宿主機home目錄的data文件夾映射到容器的/data目錄，同時將宿主機的8084端口映射到宿主機的80端口

docker run --name"kch-centos" -v ~/data:/data -p 8084:80 -itd centos tail -f /etc/hosts

映射目錄驗證

AnInputForce.teach ~ $ docker run --name "kch-centos" -v ~/data:/data -p 8084:80 -itd centos tail -f /etc/hosts
9bae287a1df72f557a218044e58dc61c473b8d746f9f4e02c801cf58e014385f
AnInputForce.teach ~ $ ll
總用量 16
-rw-r--r-- 1 AnInputForce  231 11月 15 09:15 20161115.bashrc
drwxr-xr-x 2 root         4096 11月 15 19:42 data
drwxr-xr-x 6 root         4096 10月 16 10:41 open-falcon
-rwxr-xr-x 1 AnInputForce  377 10月 16 11:42 runof.sh
AnInputForce.teach ~ $ docker exec -it kch-centos /bin/bash
[root@9bae287a1df7 /]# ll | grep data
drwxr-xr-x   2 root root  4096 Nov 15 11:42 data
[root@9bae287a1df7 /]# echo xxxyyy > data/xxx
[root@9bae287a1df7 /]# exit
exit
AnInputForce.teach ~ $ cat data/xxx
xxxxyyy
AnInputForce.teach ~ $

端口映射驗證

進入容器，啟動一個python的SimpleHTTPServer，綁定80端口；

在瀏覽器中輸入http://localhost:8084，成功訪問；

演示使用的是教學機http://reboot.linrc.com:8084

AnInputForce.teach ~ $ docker exec -it kch-centos /bin/bash
[root@9bae287a1df7 /]# python -m SimpleHTTPServer 80
Serving HTTP on 0.0.0.0 port 80 ...
219.142.60.11 - - [15/Nov/2016 12:03:14] "GET / HTTP/1.1" 200 -
219.142.60.11 - - [15/Nov/2016 12:03:14] code 404, message File not found
219.142.60.11 - - [15/Nov/2016 12:03:14] "GET /favicon.ico HTTP/1.1" 404 -

docker inspect

$docker id | $docker name

docker inspect centos_kch

我們在使用docker過程中，如果碰上莫名其妙的問題，比如沒寫絕對路徑時，不知道目錄映射到哪兒了，就可以運行此命令，看"Mounts"屬性；

docker 創建鏡像

推薦用dockerfile來構建鏡像，因為可以提交git版本控制：清楚展現了所經歷的過程。不推薦在現有容器中yum安裝配置后，再commit創建鏡像。后者參考：Docker學習之路（六）用commit命令創建鏡像

commit

docker commit -m "Added something" -a "Docker Newbee" centos centos:v2

docker rmi

-a 就是author，作者
dockerfile

FROM ubuntu:14.04
MAINTAINER Docker Newbee newbee@docker.com
RUN apt-get -qq update
RUN apt-get -qqy install ruby ruby-dev
RUN gem install sinatra

科普：bash黑科技

ctrl + u：#移到行尾，按快捷鍵暫存，當前命令行清空
ctrl + y：# 恢復剛暫存的目錄
Ctrl + r：# 輸入字符查找上一條命令
sudo !! ：執行上一條因權限不足而未能執行的命令

演示：徒手寫Dockerfile

我們寫個dockerfile，給鏡像安裝一個vim

查看centos有哪些版本：dockerhub

保存腳本為centos-vim/Dockerfile

FROM centos:7
MAINTAINER mdr<kang.cunhua@qq.com>
RUN yum install -y vim

AnInputForce.teach ~ $ mkdir experment
AnInputForce.teach ~ $ cd experment/
AnInputForce.teach ~/experment $ mkdir centos-vim
AnInputForce.teach ~/experment $ cd centos-vim/
AnInputForce.teach ~/experment $ vi Dockerfile

構建鏡像 docker build centos-vim/

AnInputForce.teach ~/experment $ cd centos-vim/
AnInputForce.teach ~/experment/centos-vim $ ll
總用量 4
-rw-rw-r-- 1 root 72 11月 15 20:34 Dockerfile
AnInputForce.teach ~/experment/centos-vim $ cd ..
AnInputForce.teach ~/experment $ pwd
/home/AnInputForce/experment
AnInputForce.teach ~/experment $ ll
總用量 4
drwxrwxr-x 2 AnInputForce 4096 11月 15 20:36 centos-vim
AnInputForce.teach ~/experment $ docker build centos-vim/
Sending build context to Docker daemon 2.048 kB
Step 1 : FROM centos:7
---> 0584b3d2cf6d
Step 2 : MAINTAINER mdr<kang.cunhua@qq.com>
---> Running in ec9eae8742d8
---> 9153702517b5
Removing intermediate container ec9eae8742d8
Step 3 : RUN yum install -y vim
---> Running in 4e3ec7cee383
Loaded plugins: fastestmirror, ovl
......                                                   

Complete!
---> 5c72d36ad69e
Removing intermediate container 4e3ec7cee383
Successfully built 5c72d36ad69e

查看鏡像

AnInputForce.teach ~/experment $ docker images
REPOSITORY                TAG                 IMAGE ID            CREATED             SIZE
<none>                    <none>              5c72d36ad69e        2 minutes ago       361.1 MB
centos-vim                latest              37e42772dafe        11 days ago         361.1 MB
centos                    7                   0584b3d2cf6d        12 days ago         196.5 MB
centos                    latest              0584b3d2cf6d        12 days ago         196.5 MB

給鏡像美容

docker tag $dockerid $imagename #默認不寫，tag是latest

docker tag $dockerid $image-name:$tag #也可以指定tag

默認

AnInputForce.teach ~ $ docker tag 5c72d36ad69e centos-vim
AnInputForce.teach ~ $ docker images
REPOSITORY                TAG                 IMAGE ID            CREATED             SIZE
centos-vim                latest              5c72d36ad69e        10 minutes ago      361.1 MB

寫$tag

AnInputForce.teach ~ $ docker tag 5c72d36ad69e centos-vim:mdr
AnInputForce.teach ~ $ docker images
REPOSITORY                TAG                 IMAGE ID            CREATED             SIZE
centos-vim                latest              5c72d36ad69e        13 minutes ago      361.1 MB
centos-vim                mdr                 5c72d36ad69e        13 minutes ago      361.1 MB
<none>                    <none>              37e42772dafe        11 days ago         361.1 MB

注意

可以給一個鏡像打多個tag，他們可以共存。

但是$image-name需全局唯一，如果你使用了已有的名字，原來叫這個名字的就會變成<none> <none> ，請注意上文日志中docker id為“37e42772dafe”的前后變化；

測試新鏡像

docker rm -f kch-centos刪除之前的容器，

AnInputForce.teach ~ $ docker run --name "mdr-centos" -v ~/data:/data -p 8084:80 -itd centos-vim tail -f /etc/hosts
7ce8203e0431a7571df28e51fe7bb2152093fa49ebb8495516342046af23e953
AnInputForce.teach ~ $ dgo mdr-centos
+ DID=mdr-centos
+ [[ mdr-centos == '' ]]
+ docker exec -i -t mdr-centos bash
[root@7ce8203e0431 /]# vim

可以看到，成功進入vim；

小練習：新增賬號后打包鏡像

基于centos鏡像，加一個賬號，然后build鏡像，鏡像名字自己起。同時安裝SSH服務，這個后續有用。

Dockerfile參考

FROM centos:7
MAINTAINER mdr<kang.cunhua@qq.com>
RUN useradd mdr
RUN yum install -y openssh-server

構建演示

AnInputForce.teach ~ $ cd experment/
AnInputForce.teach ~/experment $ mkdir centos-dev
AnInputForce.teach ~/experment $ cd centos-dev/
AnInputForce.teach ~/experment/centos-dev $ vi Dockerfile 
AnInputForce.teach ~/experment/centos-dev $ cd ..
AnInputForce.teach ~/experment $ docker build centos-dev/
Sending build context to Docker daemon 2.048 kB
Step 1 : FROM centos:7
---> 0584b3d2cf6d
......
Complete!
---> 7677fcb139ca
Removing intermediate container 9bb12e1ee067
Successfully built 7677fcb139ca
AnInputForce.teach ~/experment $ docker images
REPOSITORY                TAG                 IMAGE ID            CREATED             SIZE
<none>                    <none>              7677fcb139ca        44 seconds ago      307.8 MB
centos-vim                latest              5c72d36ad69e        24 hours ago        361.1 MB
centos-vim                mdr                 5c72d36ad69e        24 hours ago        361.1 MB
AnInputForce.teach ~/experment $ docker tag 7677fcb139ca centos-dev:mdr
AnInputForce.teach ~/experment $ docker images | grep mdr
centos-dev                mdr                 7677fcb139ca        3 minutes ago       307.8 MB
centos-vim                mdr                 5c72d36ad69e        24 hours ago        361.1 MB
AnInputForce.teach ~/experment $

小技巧

在Dockerfile中設置用戶密碼

來自kongsys童鞋；

Run echo "yourpasswd666"|passwd kongsys --stdin

在構建鏡像時指定標簽

這樣的話，就不用構建后在給鏡像命名和打tag了--來自Roven童鞋；

docker build -t test-centos|centos7.2 centos-vim

如何拿Docker撘開發機

搭建開發機，讓各位同學能自動登錄。之前我們是通過Dockerfile構建的，此處演示我們用commit來構建。

不需要輸密碼，只要我在wheel組里

sudoedit /etc/sudoers編輯

找到

## Allows people in group wheel to run all commands
%wheel  ALL=(ALL)       ALL

## Same thing without a password
# %wheel        ALL=(ALL)       NOPASSWD: ALL

改為

## Allows people in group wheel to run all commands
# %wheel  ALL=(ALL)       ALL

## Same thing without a password
%wheel        ALL=(ALL)       NOPASSWD: ALL

演示日志

AnInputForce.teach ~ $ dgo mdr-centos
+ DID=mdr-centos
+ [[ mdr-centos == '' ]]
+ docker exec -i -t mdr-centos bash
[root@7ce8203e0431 /]# useradd mdr
[root@7ce8203e0431 /]# passwd mdr
Changing password for user mdr.
New password: 
Retype new password: 
passwd: all authentication tokens updated successfully.
[root@7ce8203e0431 /]# yum install -y openssh-server
....                                     
Dependency Installed:
 fipscheck.x86_64 0:1.4.1-5.el7       fipscheck-lib.x86_64 0:1.4.1-5.el7      
 openssh.x86_64 0:6.6.1p1-25.el7_2    tcp_wrappers-libs.x86_64 0:7.6-77.el7   

Complete!
[root@7ce8203e0431 /]# usermod -aG wheel mdr
[root@7ce8203e0431 /]# yum install -y sudo          
Loaded plugins: fastestmirror, ovl
......
Installed:
 sudo.x86_64 0:1.8.6p7-17.el7_2                                                

Complete!
[root@7ce8203e0431 /]# sudoedit /etc/sudoers
[root@7ce8203e0431 /]# exit
exit
AnInputForce.teach ~ $ docker ps
CONTAINER ID        IMAGE                          COMMAND                  CREATED             STATUS              PORTS                                                               NAMES
7ce8203e0431        centos-vim                     "tail -f /etc/hosts"     24 hours ago        Up 24 hours         0.0.0.0:8084->80/tcp                                                mdr-centos
......
AnInputForce.teach ~ $ docker commit mdr-centos centos-dev:7
sha256:f331bbce086b75f00133b8fc3385f03d1bb3c5274e7c279e69ab06a2192f63ae
AnInputForce.teach ~ $ docker images
REPOSITORY                TAG                 IMAGE ID            CREATED             SIZE
centos-dev                7                   f331bbce086b        11 seconds ago      473.3 MB
centos-dev                mdr                 7677fcb139ca        44 minutes ago      307.8 MB
centos-vim                latest              5c72d36ad69e        25 hours ago        361.1 MB
centos-vim                mdr                 5c72d36ad69e        25 hours ago        361.1 MB
......
AnInputForce.teach ~ $ docker rm -f mdr-centos
mdr-centos
AnInputForce.teach ~ $ docker run --name="mdr-centos" -v ~/data:/data -p 8088:22 -itd centos-dev:7 /usr/sbin/sshd -D
af94c0ffe40432112a4d5b7c38a2b66f2244b7baf941995c2e6b5ef95384ee76
AnInputForce.teach ~ $

登錄開發機，報錯

我們來嘗試登錄一下開發機，發現報錯，docker logs $container-id查日志排錯

ssh -P 8088 mdr@127.0.0.1
ssh: connect to host 8088 port 22: Invalid argument
AnInputForce.teach ~ $ docker logs mdr-centos
Could not load host key: /etc/ssh/ssh_host_rsa_key
Could not load host key: /etc/ssh/ssh_host_ecdsa_key
Could not load host key: /etc/ssh/ssh_host_ed25519_key

tips:ssh-keygen如何不輸入-y,搜索關鍵詞：ssh-kengen no interactive

回到簡單模式，啟動container

報錯：/etc/hosts: no such file or directory

AnInputForce.teach ~ $ docker run --name="mdr-centos" -v ~/data:/data -p 8088:22 -itd centos-dev:7 "tail -f /etc/hosts"
2fafa8f4c7fd503cd62cb083ffa0135a2f20eff7d3d7e75b421fb61e2b13e358
docker: Error response from daemon: invalid header field value "oci runtime error: container_linux.go:247: starting container process caused \"exec: \\\"tail -f /etc/hosts\\\": stat tail -f /etc/hosts: no such file or directory\"\n".

原因：command多加了引號

AnInputForce.teach ~ $ docker run --name "mdr-centos" -v ~/data:/data -p 8088:22 -itd centos-dev:7 tail -f /etc/hosts
f47f6e673f49154c261355039da9f45bb50777106917752d17aee96a3135421c

再回到container安裝ssh

同時，根據日志提示安裝對應加密算法

Welcome to aliyun Elastic Compute Service!

-bash: /home/AnInputForce: 是一個目錄
AnInputForce.teach ~ $ dgo mdr-centos
+ DID=mdr-centos
+ [[ mdr-centos == '' ]]
+ docker exec -i -t mdr-centos bash
[root@f47f6e673f49 /]# ssh-keygen
......
+--[ RSA 2048]----+
......
+-----------------+
[root@f47f6e673f49 /]# ssh-keygen -t dsa -f /etc/ssh/ssh_host_dsa_key
......
+--[ DSA 1024]----+
......
+-----------------+
[root@f47f6e673f49 /]# ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key
......
+--[ RSA 2048]----+
......
+-----------------+

測試下：提示缺兩種非對稱加密算法

[root@f47f6e673f49 /]# /usr/sbin/sshd -D
Could not load host key: /etc/ssh/ssh_host_ecdsa_key
Could not load host key: /etc/ssh/ssh_host_ed25519_key

繼續安裝非對稱加密算法

[root@f47f6e673f49 /]# ssh-keygen -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key    
+--[ECDSA  256]---+
......
+-----------------+
[root@f47f6e673f49 /]# ssh-keygen -t ed25519 -f /etc/ssh/ssh_host_ed25519_key
......
+--[ED25519  256--+
......
+-----------------+

SSH服務成功啟動

[root@f47f6e673f49 /]# /usr/sbin/sshd -D
^C
[root@f47f6e673f49 /]#

提交打包鏡像

[root@f47f6e673f49 /]# exit
exit
AnInputForce.teach ~ $ docker images
REPOSITORY                TAG                 IMAGE ID            CREATED             SIZE
centos-dev                7                   f331bbce086b        11 hours ago        473.3 MB
centos-dev                mdr                 7677fcb139ca        12 hours ago        307.8 MB
centos-vim                latest              5c72d36ad69e        37 hours ago        361.1 MB
AnInputForce.teach ~ $ docker commit mdr-centos centos-dev:7
sha256:90fc2a3fa895faa4611731b442b7e17fcdfab2084cc488378a48d54a44e59490
AnInputForce.teach ~ $ docker commit mdr-centos centos-dev
sha256:a7d3dc16d111e7ab50fd0d8b2a5aabe8c5c4213ffdc8d7b4a2e32a7ba09f096c
AnInputForce.teach ~ $ docker images
REPOSITORY                TAG                 IMAGE ID            CREATED             SIZE
centos-dev                latest              a7d3dc16d111        4 seconds ago       473.3 MB
centos-dev                7                   90fc2a3fa895        19 seconds ago      473.3 MB
centos-dev                mdr                 7677fcb139ca        12 hours ago        307.8 MB
centos-vim                latest              5c72d36ad69e        37 hours ago        361.1 MB

測試進入開發機

AnInputForce.teach ~ $ docker rm -f mdr-centos
mdr-centos
AnInputForce.teach ~ $ docker run --name "mdr-centos" -v ~/data:/data -p 8088:22 -itd centos-dev:7 tail -f /usr/sbin/sshd -D
6d0bae922b6e380adb93ceea88b6ba230b3b578d93744e2dcc0d524080f95356
AnInputForce.teach ~ $ ssh -P 8088 mdr@reboot.linrc.com
ssh: connect to host 8088 port 22: Invalid argument
AnInputForce.teach ~ $ docker logs
"docker logs" requires exactly 1 argument(s).
See 'docker logs --help'.

Usage:  docker logs [OPTIONS] CONTAINER

Fetch the logs of a container
AnInputForce.teach ~ $ docker logs mdr-centos
tail: invalid option -- 'D'
Try 'tail --help' for more information.
AnInputForce.teach ~ $ docker rm -f mdr-centos
mdr-centos
AnInputForce.teach ~ $ docker run --name "mdr-centos" -v ~/data:/data -p 8088:22 -itd centos-dev /usr/sbin/sshd -D
b996a0f5c858ea59dae380960274371ff45c2fba4ee2b307b9eea241e0ea6e2d
AnInputForce.teach ~ $ ssh -P 8088 mdr@reboot.linrc.com
ssh: connect to host 8088 port 22: Invalid argument
AnInputForce.teach ~ $ docker logs mdr-centos
AnInputForce.teach ~ $ ssh -p 8088 mdr@reboot.linrc.com
The authenticity of host '[reboot.linrc.com]:8088 ([59.110.12.72]:8088)' can't be established.
ECDSA key fingerprint is 2e:c3:ac:e6:86:99:98:65:c8:4b:44:67:f3:84:2e:45.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '[reboot.linrc.com]:8088,[59.110.12.72]:8088' (ECDSA) to the list of known hosts.
mdr@reboot.linrc.com's password: 
[mdr@b996a0f5c858 ~]$

? 成功進入。Tips：我們在使用docker時，碰上報錯可以，使用docker logs $container-id 來查看日志。以上日志對應包含了對應排錯過程，請參考。

讓我們做得更好：免密碼登錄

我們在日常使用開發機的時候，不能每個容器都這兒操作一遍：加入id_rsa.pub 內容到.ssh/authorized_keys。能不能批量實現這個效果？可以的，用到了目錄映射：^演示賬號權限不足提示

思路

把自己目錄下的id_rsa.pub內容加入/root/.ssh/authorized_keys

演示

AnInputForce.teach ~/.ssh $ cat id_rsa.pub 
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLqCVUrRiiGCuK3lAa3kIrk1rSU0WuzpOZT9LctQE1m0TOrAGDC/C0USp6AOTQ90V+JdaRFC6hvjmI5AVrZIbnhHFbhlJpqPegnC7pZiMLFIt8Pcdi9aCZGAqvj6ALfMOsXRgM4H5vgwAKg1YAihnse4A2rLmS237UK43/Yk1E6fn/0wILzdy1gPjIuQbHbKUuJV/VAhP8655xRDLGjOj7rmfR0rm+qukyOrgfW4kCtuGSQfC0qykTHmS25pNnByWaS1tzxspgL0XWRcHIKCxzFSDgzdLgtIOvrlDR46pZFJ8lShQKaMhu/eDj4ZC4VN7QHulZNP/rjiWlB1pafkw5 AnInputForce@teach
[mdr@b996a0f5c858 log]$ sudo su -
teach ~ # vi .ssh/authorized_keys

讓所有人都可以免密碼登錄

把宿主機的ssh目錄映射到容器里，所有人都可以免密碼登錄了。只要用戶能免密碼登錄宿主機，就能免密碼登錄容器；

docker rm -f mdr-centos
sudo docker run --name='mdr-centos' -v ~/data:/data -v /root/.ssh:/root/.ssh -p 8088:22 -itd centos-dev /usr/sbin/sshd -D

也可以把自己目錄的映射到容器中。

Tips:風險--目錄映射之后，在容器中修改對應目錄或文件，也會同步到本地。需要特別注意。如果有童鞋知道如何映射本地目錄到容器中為只讀權限，麻煩您給我留言，我會更新本文。

Docker簡介總結：我們做了什么

為什么是docker：秒級啟動，化復雜安裝配置為簡潔
docker基本概念：倉庫、鏡像、容器
docker基本操作：ps、port、pull、images、run、stop、rm、exec、inspect、logs、commit
徒手寫Dockerfile構建鏡像
一個小練習：新增賬號后，打包鏡像
用Docker來搭建開發機：快速批量提供開發環境，讓所有人免密登錄

三个男躁一个女,国精产品一区一手机的秘密,麦子交换系列最经典十句话,欧美 国产 综合 欧美 视频

Docker實戰筆記：Docker簡介（二）