Top
本案例要求制作自定义镜像：
基于centos镜像使用commit创建新的镜像文件基于centos镜像使用Dockerfile文件创建一个新的镜像文件实现此案例需要按照如下步骤进行。
步骤一：使用镜像启动容器
1）在该容器基础上修改yum源
[root@docker1 docker_images]# docker run -it centos[root@8d07ecd7e345 /]# rm -rf /etc/yum.repos.d/*[root@8d07ecd7e345 /]# vi /etc/yum.repos.d/dvd.repo[dvd]name=dvdbaseurl=ftp://192.168.1.254/systemenabled=1gpgcheck=0[root@8d07ecd7e345 /]# yum clean all[root@8d07ecd7e345 /]# yum repolist2）安装测试软件
[root@8d07ecd7e345 /]# yum -y install net-tools iproute psmisc vim-enhanced3）ifconfig查看
[root@8d07ecd7e345 /]# ifconfigeth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500inet 172.17.0.3 netmask 255.255.0.0 broadcast 0.0.0.0inet6 fe80::42:acff:fe11:3 prefixlen 64 scopeid 0x20<link>ether 02:42:ac:11:00:03 txqueuelen 0 (Ethernet)RX packets 2488 bytes 28317945 (27.0 MiB)RX errors 0 dropped 0 overruns 0 frame 0TX packets 1858 bytes 130264 (127.2 KiB)TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0[root@8d07ecd7e345 /]# exitexit步骤二：另存为另外一个镜像
1）创建新建镜像
[root@docker1 docker_images]# docker start 8d07ecd7e345 //可以简写为8d，要保证唯一性8d07ecd7e345[root@docker1 docker_images]# docker commit 8d07ecd7e345 myos:v1sha256:ac3f9c2e8c7e13db183636821783f997890029d687b694f5ce590a473ad82c5f2）查看新建的镜像，如图-1所示：
图-1
3）验证新建镜像
[root@docker1 docker_images]# docker run -it myos:v1[root@497c7b4664bf /]# ifconfigeth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500inet 172.17.0.6 netmask 255.255.0.0 broadcast 0.0.0.0inet6 fe80::42:acff:fe11:6 prefixlen 64 scopeid 0x20<link>ether 02:42:ac:11:00:06 txqueuelen 0 (Ethernet)RX packets 0 bytes 0 (0.0 B)RX errors 0 dropped 0 overruns 0 frame 0TX packets 7 bytes 578 (578.0 B)TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0步骤三：使用Dockerfile文件创建一个新的镜像文件
Dockerfile语法格式：
– FROM:基础镜像
– MAINTAINER:镜像创建者信息(说明)
– EXPOSE:开放的端口
– ENV:设置环境变量
– ADD:复制文件到镜像
– RUN:制作镜像时执行的命令,可以有多个
– WORKDIR:定义容器默认工作目录
– CMD:容器启动时执行的命令,仅可以有一条CMD
1）创建一个Apache的镜像文件
[root@docker1 ~]# mkdir oo[root@docker1 ~]# cd oo[root@docker1 oo]# touch Dockerfile //Dockerfile文件第一个字母要大写[root@docker1 oo]# cp /etc/yum.repos.d/local.repo ./[root@docker1 oo]# vi DockerfileFROM myos:v1RUN yum -y install httpdENV EnvironmentFile=/etc/sysconfig/httpdWORKDIR /var/www/html/ //定义容器默认工作目录RUN echo "test" > /var/www/html/index.htmlEXPOSE 80 //设置开放端口号CMD ["/usr/sbin/httpd", "-DFOREGROUND"][root@docker1 oo]# docker build -t myos:http .[root@docker1 oo]# docker run -d myos:httpd9a5402709b26b42cd304c77be442559a5329dc784ec4f6c90e4abac1c88e206[root@docker1 oo]# docker inspect d9[root@docker1 oo]# curl 172.17.0.7test本案例要求创建私有的镜像仓库：
Docker主机：192.168.1.20镜像仓库服务器：192.168.1.10实现此案例需要按照如下步骤进行。
步骤一：自定义私有仓库
1）定义一个私有仓库
[root@docker1 oo]# vim /etc/docker/daemon.json //不写这个文件会报错{"insecure-registries" : ["192.168.1.10:5000"] //使用私有仓库运行容器}[root@docker1 oo]# systemctl restart docker[root@docker1 oo]# docker run -d -p 5000:5000 registry273be3d1f3280b392cf382f4b74fea53aed58968122eff69fd016f638505ee0e[root@docker1 oo]# curl 192.168.1.10:5000/v2/{} //出现括号[root@docker1 oo]# docker tag busybox:latest 192.168.1.10:5000/busybox:latest//打标签[root@docker1 oo]# docker push 192.168.1.10:5000/busybox:latest //上传[root@docker1 oo]# docker tag myos:http 192.168.1.10:5000/myos:http[root@docker1 oo]# docker push 192.168.1.10:5000/myos:http2）在docker2上面启动
[root@docker2 ~]# scp 192.168.1.10:/etc/docker/daemon.json /etc/docker/[root@docker2 ~]# systemctl restart docker[root@docker2 ~]# docker images[root@docker2 ~]# docker run -it 192.168.1.10:5000/myos:http /bin/bash //直接启动步骤二：查看私有仓库
1）查看里面有什么镜像
[root@docker1 oo]# curl http://192.168.1.10:5000/v2/_catalog{"repositories":["busybox","myos"]}2）查看里面的镜像标签
[root@docker1 oo]# curl http://192.168.1.10:5000/v2/busybox/tags/list{"name":"busybox","tags":["latest"]}[root@docker1 oo]# curl http://192.168.1.10:5000/v2/myos/tags/list{"name":"myos","tags":["http"]}本案例要求创建NFS共享，能映射到容器里：
服务器创建NFS共享存储，共享目录为/content，权限为rw客户端挂载共享，并将共享目录映射到容器中本方案要求需要一台NFS服务器（NFS用真机代替），ip为192.168.1.254，一台客户端docker1主机，ip为192.168.1.10，一台户端docker2主机，ip为192.168.1.20，实现客户端挂载共享，并将共享目录映射到容器中，docker1更新文件时，docker2实现同步更新，方案如图-2所示：
图-2
实现此案例需要按照如下步骤进行。
步骤一：配置NFS服务器
[root@room9pc01 ~]# yum -y install nfs-utils[root@room9pc01 ~]# mkdir /content[root@room9pc01 ~]# vim /etc/exports/content *(rw，no_root_squash)[root@room9pc01 ~]# systemctl restart nfs-server.service[root@room9pc01 ~]# systemctl restart nfs-secure.service[root@room9pc01 ~]# exportfs -rvexporting *:/content[root@room9pc01 ~]# chmod 777 /content[root@room9pc01 ~]# echo 11 > /content/index.html步骤二：配置客户端
[root@docker1 oo]# yum -y install nfs-utils[root@docker1 oo]# systemctl restart nfs-server.service[root@docker1 oo]# showmount -e 192.168.1.254Export list for 192.168.1.254:/content *[root@docker1 ~]# mkdir /mnt/qq[root@docker1 ~]# mount -t nfs 192.168.1.254:/content /mnt/qq[root@docker1 ~]# ls /mnt/qqindex.html[root@docker1 ~]# cat /mnt/qq/index.html11[root@docker1 ~]# docker run -d -p 80:80 -v /mnt/qq:/var/www/html -it myos:http224248f0df5d795457c43c2a7dad0b7e5ec86abdc3f31d577e72f7929f020e01[root@docker1 ~]# curl 192.168.1.1011[root@docker2 ~]# yum -y install nfs-utils[root@docker2 ~]# showmount -e 192.168.1.254Export list for 192.168.1.254:/content *[root@docker2 ~]# mkdir /mnt/qq[root@docker2 ~]# mount -t nfs 192.168.1.254:/content /mnt/qq[root@docker2 ~]# docker run -d -p 80:80 -v /mnt/qq:/var/www/html -it 192.168.1.10:5000/myos:http00346dabec2c7a12958da4b7fee6551020249cdcb111ad6a1058352d2838742a[root@docker2 ~]# curl 192.168.1.2011[root@docker1 ~]# touch /mnt/qq/a.sh[root@docker1 ~]# echo 22 > /mnt/qq/index.html[root@docker2 ~]#ls /mnt/qq/a.sh index.html[root@docker2 ~]# cat /mnt/qq/index.html22本案例要求：
创建网桥设备docker01设定网段为172.30.0.0/16启动nginx容器，nginx容器桥接docker01设备映射真实机8080端口与容器的80端口实现此案例需要按照如下步骤进行。
步骤一：新建Docker网络模型
1）新建docker1网络模型
[root@docker1 ~]# docker network create --subnet=172.30.0.0/16 docker01c9cf26f911ef2dccb1fd1f670a6c51491e72b49133246f6428dd732c44109462[root@docker1 ~]# docker network listNETWORK ID NAME DRIVER SCOPEbc189673f959 bridge bridge local6622752788ea docker01 bridge local53bf43bdd584 host host localac52d3151ba8 none null local[root@docker1 ~]# ip a s[root@docker1 ~]# docker network inspect docker01[{"Name": "docker01","Id": "c9cf26f911ef2dccb1fd1f670a6c51491e72b49133246f6428dd732c44109462","Scope": "local","Driver": "bridge","EnableIPv6": false,"IPAM": {"Driver": "default","Options": {},"Config": [{"Subnet": "172.30.0.0/16"}]},"Internal": false,"Containers": {},"Options": {},"Labels": {}}]2）使用自定义网桥启动容器
[root@docker1 ~]# docker run --network=docker01 -id nginx3）端口映射
[root@docker1 ~]# docker run -p 8080:80 -id nginxe523b386f9d6194e53d0a5b6b8f5ab4984d062896bab10639e41aef657cb2a53[root@docker1 ~]# curl 192.168.1.10:8080步骤二：扩展实验
1）新建一个网络模型docker02
[root@docker1 ~]# docker network create --driver bridge docker02//新建一个 名为docker02的网络模型5496835bd3f53ac220ce3d8be71ce6afc919674711ab3f94e6263b9492c7d2cc[root@docker1 ~]# ifconfig //但是在用ifconfig命令查看的时候，显示的名字并不是docker02，而是br-5496835bd3f5br-5496835bd3f5: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500inet 172.18.0.1 netmask 255.255.0.0 broadcast 0.0.0.0ether 02:42:89:6a:a2:72 txqueuelen 0 (Ethernet)RX packets 8 bytes 496 (496.0 B)RX errors 0 dropped 0 overruns 0 frame 0TX packets 8 bytes 496 (496.0 B)TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 [root@docker1 ~]# docker network list //查看显示docker02（查看加粗字样）NETWORK ID NAME DRIVER SCOPEbc189673f959 bridge bridge local5496835bd3f5 docker02 bridge local53bf43bdd584 host host localac52d3151ba8 none null local2）若要解决使用ifconfig命令可以看到docker02的问题，可以执行以下几步命令
[root@docker1 ~]# docker network list //查看docker0的NETWORK ID（加粗字样）NETWORK ID NAME DRIVER SCOPEbc189673f959 bridge bridge local5496835bd3f5 docker02 bridge local53bf43bdd584 host host localac52d3151ba8 none null local3）查看16dc92e55023的信息，如图-3所示：
[root@docker2 ~]# docker network inspect bc189673f959图-3
4）查看图片的倒数第六行有"com.docker.network.bridge.name": "docker0"字样
5）把刚刚创建的docker02网桥删掉
[root@docker1 ~]# docker network rm docker02 //删除docker02docker02[root@docker1 ~]# docker network create \docker02 -o com.docker.network.bridge.name=docker02//创建docker02网桥648bd5da03606d5a1a395c098662b5f820b9400c6878e2582a7ce754c8c05a3a[root@docker1 ~]# ifconfig //ifconfig查看有docker02docker02: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500inet 172.18.0.1 netmask 255.255.0.0 broadcast 0.0.0.0ether 02:42:94:27:a0:43 txqueuelen 0 (Ethernet)RX packets 0 bytes 0 (0.0 B)RX errors 0 dropped 0 overruns 0 frame 0TX packets 0 bytes 0 (0.0 B)TX errors 0 dropped 0 overruns 0 carrier 0 collisions 06）若想在创建docker03的时候自定义网段（之前已经创建过docker01和02，这里用docker03），执行以下命令
[root@docker1 ~]# docker network create docker03 --subnet=172.30.0.0/16 -o com.docker.network.bridge.name=docker03f003aa1c0fa20c81e4f73c12dcc79262f1f1d67589d7440175ea01dc0be4d03c[root@docker1 ~]# ifconfig //ifconfig查看，显示的是自己定义的网段docker03: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500inet 172.30.0.1 netmask 255.255.0.0 broadcast 0.0.0.0ether 02:42:27:9b:95:b3 txqueuelen 0 (Ethernet)RX packets 0 bytes 0 (0.0 B)RX errors 0 dropped 0 overruns 0 frame 0TX packets 0 bytes 0 (0.0 B)TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0