原文鏈接：http://wyb0.com/posts/docker-image-and-container

操作系統：Ubuntu14.04.1
Docker版本：Docker version 17.06.0-ce, build 02c1d87

0x00 鏡像操作

• 下載鏡像

#一般容器的id和name可以互換

$ docker search ubuntu #從公共registry搜索鏡像

$ docker pull ubuntu #從公共registry下載鏡像
$ docker pull ubuntu:14.04

• 查看當前系統鏡像

$ docker images
REPOSITORY    TAG       IMAGE ID        CREATED        SIZE
ubuntu        latest    14f60031763d    2 weeks ago    120MB
ubuntu        14.04     54333f1de4ed    2 weeks ago    188MB

• 打包鏡像

$ docker save 54333f1de4ed > /home/reber/ubuntu.tar

• 加載鏡像

$ docker load < ./ubuntu.tar
1b0c71361973: Loading layer  196.9MB/196.9MB
150e95c79e16: Loading layer  209.9kB/209.9kB
1ae9c3d1e0b7: Loading layer  7.168kB/7.168kB
4622ee8f36ae: Loading layer  4.608kB/4.608kB
4455b4d81934: Loading layer  3.072kB/3.072kB
Loaded image ID: sha256:54333f1de4ed2730bea18e49605b2ea8f8a2689db213ece94db6ccbc8cf279a6
$ docker images
REPOSITORY    TAG       IMAGE ID        CREATED        SIZE
centos        7         328edcd84f1b    7 days ago     193MB
<none>        <none>    54333f1de4ed    3 weeks ago    188MB

• 給鏡像打標簽

$ docker tag 54333f1de4ed ubuntu:14.04
$ docker images
REPOSITORY    TAG      IMAGE ID        CREATED        SIZE
centos        7        328edcd84f1b    7 days ago     193MB
ubuntu        14.04    54333f1de4ed    3 weeks ago    188MB

• 查看鏡像層組成

$ docker history ubuntu:desktop

• 刪除鏡像(刪除鏡像前要先刪除上面的容器)

$ docker rmi ubuntu:latest #docker rmi 14f60031763d

0x01 容器操作

• 運行容器(exit后容器就停止了)

$ docker run --rm -ti ubuntu:14.04 /bin/bash
root@172c8d8b0671:/# ls
bin   dev  home  lib64  mnt  proc  run   srv  tmp  var
boot  etc  lib   media  opt  root  sbin  sys  usr
root@172c8d8b0671:/# exit
exit

解釋：
--rm：告訴Docker一旦運行的進程退出就刪除容器
-ti：告訴Docker分配一個為終端并進入交互模式(這將進入容器內)
ubuntu：這是容器立足的鏡像
/bin/bash：shell

• 后臺運行容器

$ docker run -d ubuntu:14.04 ping 8.8.8.8
1f665a3ccf4bab2e1a901727e3eef9140e713f3a4699c55c0e67f8666cca5d11
#$ sudo docker run -d ubuntu:14.04 /bin/sh -c "while true; do echo hello world; sleep 1; done"

• 查看當前運行的容器

$ docker ps
CONTAINER ID   IMAGE          COMMAND          CREATED          STATUS          PORTS    NAMES
1f665a3ccf4b   ubuntu:14.04   "ping 8.8.8.8"   5 seconds ago    Up 4 seconds             goofy_dubinsky

• 查看所有容器

$ docker ps -a
CONTAINER ID   IMAGE          COMMAND          CREATED          STATUS          PORTS    NAMES
1f665a3ccf4b   ubuntu:14.04   "ping 8.8.8.8"   13 minutes ago   Up 13 minutes            goofy_dubinsky
82113ae171f1   ubuntu         "ping 8.8.8.8"   28 minutes ago   Created                  mystifying_keller

• 查看容器日志

$ docker logs 1f665a3ccf4b
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_seq=1 ttl=127 time=183 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=127 time=184 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=127 time=185 ms
64 bytes from 8.8.8.8: icmp_seq=4 ttl=127 time=183 ms
64 bytes from 8.8.8.8: icmp_seq=5 ttl=127 time=182 ms
64 bytes from 8.8.8.8: icmp_seq=6 ttl=127 time=184 ms

• 查看容器的端口映射

$ docker port 1f665a3ccf4b

• 查看容器的進程信息

$ docker top 1f665a3ccf4b

• 查看容器的文件變化

$ docker diff 1f665a3ccf4b
C /root
A /root/.bash_history
A /root/a.txt

• 從宿主機向容器復制數據

$ docker cp a.txt 1f665a3ccf4b:/root/
$ docker cp test 1f665a3ccf4b:/root/

• 從容器向宿主機復制數據

$ docker cp 1f665a3ccf4b:/root/libxml29_compat.patch ~/
$ docker cp 1f665a3ccf4b:/root/test ~/

• 導出/導入容器(導出的其實是鏡像)

$ docker export df2a7e881c8a > ./ubuntu_container.tar
$ docker import ./ubuntu_container.tar
$ docker images
REPOSITORY    TAG       IMAGE ID        CREATED               SIZE
<none>        <none>    499df17f51e7    About a minute ago    175MB
$ docker tag 499df17f51e7 ubuntu:container

• 進入容器

$ docker exec -ti goofy_dubinsky /bin/bash
root@1f665a3ccf4b:/# ps -aux|grep ping
root         1  0.0  0.0   6524   712 ?        Ss   09:38   0:00 ping 8.8.8.8

• 停止/啟動容器

$ docker stop 1f665a3ccf4b
1f665a3ccf4b
#docker kill 1f665a3ccf4b，stop會在10s后停止，kill則直接停止
$ docker start 1f665a3ccf4b
1f665a3ccf4b

• 刪除容器(容器需要先停止才能刪除)

$ docker rm 1f665a3ccf4b
Error response from daemon: You cannot remove a running container 1f665a3ccf4bab2e1a901727e3eef9140e713f3a4699c55c0e67f8666cca5d11. Stop the container before attempting removal or force remove
$ docker kill 1f665a3ccf4b
1f665a3ccf4b
$ docker rm 1f665a3ccf4b
1f665a3ccf4b

• 刪除所有容器(只能刪除停止運行的)

$ docker rm $(docker ps -a -q)
be5877380ca5
3e4b3a11d49f
2e51c9c2c6d1
dc6cadfc08f7

0x02 查看鏡像或容器的底層信息(IP、端口綁定、配置信息等)

$ docker inspect 65987aa8f0cb

0x03 例子

$ exec_ping=$(docker run -d ubuntu:14.04 ping 8.8.8.8)
$ docker logs $exec_ping
$ docker restart $exec_ping
$ docker commit $exec_ping ubuntu:ping #保存容器為鏡像
sha256:c496c5d6e3cd4ac9f54d200c5b374ded94cea11f4b2b6eef1fde25a703fcc06c
$ docker images
REPOSITORY    TAG      IMAGE ID        CREATED          SIZE
ubuntu        ping     c496c5d6e3cd    2 seconds ago    188MB
centos        7        328edcd84f1b    7 days ago       193MB
ubuntu        14.04    54333f1de4ed    3 weeks ago      188MB