docker build [OPTIONS] PATH | URL | -

# use Dockerfile in current path to build a image
docker build -t [repository]/[username]/[remote_image_name]:[tag] ./
# or
docker build -t [local_image_name]  ./
docker image tag [local_image_name] [repository]/[username]/[remote_image_name]:[tag]
# finally
docker push [repository]/[username]/[remote_image_name]:[tag]

ENV FOO=BAR
# cid=$(docker run -e FOO=BAR <image>)
# docker commit $cid

# 创建一个守护态的Docker容器
docker run -itd ubuntu:14.04 /bin/bash 

# docker ps
# 进入容器
docker attach <container_id> 
# 当多个窗口同时使用该命令进入该容器时，所有的窗口都会同步显示

# enter a Docker container. 
docker exec -it CONTAINER_NAME /bin/bash

# 创建一个新的容器并运行一个命令
docker run [OPTIONS] IMAGE [COMMAND] [ARG...]

docker start # 启动一个或多少已经被停止的容器
docker stop # 停止一个运行中的容器
docker restart # 重启容器

docker pause # 暂停容器中所有的进程。
docker unpause # 恢复容器中所有的进程。

# 确保CTRL-D或C	TRL-C不会关闭容器
docker attach --sig-proxy=false

# 创建一个新的容器但不启动它
docker create [OPTIONS] IMAGE [COMMAND] [ARG...]

# 在运行的容器中执行命令
docker exec [OPTIONS] CONTAINER COMMAND [ARG...]

# tty size
docker exec -it -e LINES=$(tput lines) -e COLUMNS=$(tput cols) <cid> bash

# Kill one or more running containers
# <signal>
# KILL
docker kill -s <signal>

docker cp [OPTIONS] CONTAINER:SRC_PATH DEST_PATH|-
docker cp [OPTIONS] SRC_PATH|- CONTAINER:DEST_PATH

# --limit int       Max number of search results (default 25)
# --no-trunc        Don't truncate output
docker search <something> 

docker pull debian
# daemon mode
container_id=`docker run -itd debian /bin/bash `
docker exec -it $container_id /bin/bash  
docker attach $container_id

docker commit <container_id> <image_name>
docker tag <image_name> <username>/<imagename>:<tagname>
docker login -u <username> -p <password>
docker push <username>/<imagename>:<tagname>
docker logout

docker tag SOURCE_IMAGE[:TAG] TARGET_IMAGE[:TAG]

# Create a new image from a container's changes
docker commit <container_id> <image_name>
# -a, --author string   Author
# -m, --message string  Commit message

cid=$(docker run -e FOO=BAR <image>)
docker commit $cid

# -a, --all         Show all images (default hides intermediate images)
# --digests         Show digests
# --no-trunc        Don't truncate output
# -q, --quiet       Only show numeric IDs
docker images

# -f, --force
docker rmi [OPTIONS] IMAGE [IMAGE...]

# Show the history of an image
# --no-trunc        Don't truncate output
docker history [OPTIONS] IMAGE

# Save one or more images to a tar archive
docker save -o <tar_file_name> <image>

# Load an image from a tar archive or STDIN。
docker load -i <tar_file_name>

#!/bin/bash

if [ $# -lt 1 ]
then
cat << HELP

dockertags  --  list all tags for a Docker image on a remote registry.

EXAMPLE: 
    - list all tags for ubuntu:
       dockertags ubuntu

    - list all php tags containing apache:
       dockertags php apache

HELP
fi

image="$1"
tags=`wget -q https://registry.hub.docker.com/v1/repositories/${image}/tags -O -  | sed -e 's/[][]//g' -e 's/"//g' -e 's/ //g' | tr '}' '\n'  | awk -F: '{print $3}'`

if [ -n "$2" ]
then
    tags=` echo "${tags}" | grep "$2" `
fi

echo "${tags}"

# https://docs.docker.com/engine/install/debian/
sudo apt-get install \
    apt-transport-https \
    ca-certificates \
    curl \
    gnupg \
    lsb-release -y
curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
echo \
  "deb [arch=amd64 signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/debian \
  $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

sudo apt-get update
sudo apt-get install docker-ce docker-ce-cli containerd.io

sudo systemctl status docker

sudo usermod -aG docker $USER

sudo apt-get install docker.io
# order to perform docker without sudo prefix 
sudo usermod -aG docker $USER

sudo systemctl start docker

sudo docker run --rm hello-world

sudo apt-get autoremove --purge docker-io 
rm -rf /var/lib/docker

sudo dnf install docker
# 启动 Docker 服务
# sudo service docker start
sudo systemctl start docker
docker run --rm hello-world

docker version
docker info
# 为避免输入sudo，可以把用户加入 Docker 用户组
sudo groupadd docker
sudo usermod -aG docker $USER

# source container
docker run --name mysql -e MYSQL_ROOT_PASSWORD=server -d mysql

# received container
# 在nginx的容器中，使用db或者aliasmysql作为连接地址来连接MySQL服务
docker run --name nginx --link mysql:aliasmysql -d nginx

echo "net.ipv4.ip_forward=1" >>/usr/lib/sysctl.d/00-system.conf
systemctl restart network && systemctl restart docker

docker volume create data
docker run -v data:/path/to/data --name data_container \
	-d -it --rm \
	busybox /bin/sh

docker run --rm --volumes-from data_container -v $(pwd):/backup busybox tar cvf /backup/data_backup.tar path/to/data

docker run -v data:/path/to/data --name data_container2 \
	-d -it --rm \
	busybox /bin/bash

docker run --rm --volumes-from data_container2 \
	-v $(pwd):/backup busybox \
	bash -c "cd /path/to/data && tar xvf /backup/data_backup.tar --strip 1"

docker ps -a
# Show the latest created container, Only display numeric IDs
docker ps -lq

docker ps --format 'table {{.Names}}\t{{.Image}}'

vim ~/.docker/config.json.
{
  "psFormat": "table {{.Names}}\\t{{.Image}}\\t{{.RunningFor}} ago\\t{{.Status}}\\t{{.Command}}",
  "imagesFormat": "table {{.Repository}}\\t{{.Tag}}\\t{{.ID}}\\t{{.Size}}"
}

# 显示容器的第一个进程的PID
docker inspect -f {{.State.Pid}} <container_id> 

docker inspect --format='{{.RootFS.Layers}}' <image_id> 

docker inspect --format='{{.NetworkSettings.IPAddress }}' <container_id> 

docker diff <container_id>

docker top [OPTIONS] CONTAINER [ps OPTIONS]

# 查看所有运行容器的进程信息
for i in  `docker ps |grep Up|awk '{print $1}'`;do echo \ &&docker top $i; done

docker logs [OPTIONS] CONTAINER
tail -f /var/lib/docker/containers/<cid>/<cid>-json.log

# 用 fluentd 收集容器日志
docker run -d \
	--log-driver=fluentd \
	--log-opt fluentd-address=${fluentd_address} \
	--log-opt tag="docker.{{.Name}}" \
nginx

docker events [OPTIONS]

docker export [OPTIONS] CONTAINER

docker wait CONTAINER [CONTAINER...]

docker port CONTAINER [PRIVATE_PORT[/PROTO]]

# Delete all containers
docker rm $(docker ps -a -q)
# Delete all images
docker rmi $(docker images -q)

wget https://www.kernel.org/pub/linux/utils/util-linux/v2.32/util-linux-2.32.tar.gz
tar -zxf util-linux-2.32.tar.gz &&  cd util-linux-2.32
./configure
make

# make && make install，可能影响操作系统底层工具
cp nsenter /usr/local/bin/

#!/bin/sh

if [ -e $(dirname "$0")/nsenter ]; then
  # with boot2docker, nsenter is not in the PATH but it is in the same folder
  NSENTER=$(dirname "$0")/nsenter
else
  NSENTER=nsenter
fi

if [ -z "$1" ]; then
  echo "Usage: $(basename "$0") CONTAINER [COMMAND [ARG]...]"
  echo ""
  echo "Enters the Docker CONTAINER and executes the specified COMMAND."
  echo "If COMMAND is not specified, runs an interactive shell in CONTAINER."
else
  PID=$(docker inspect --format "{{.State.Pid}}" "$1")
  if [ -z "$PID" ]; then
    exit 1
  fi
  shift

  OPTS="--target $PID --mount --uts --ipc --net --pid --"

  if [ -z "$1" ]; then
    # No command given.
    # Use su to clear all host environment variables except for TERM,
    # initialize the environment variables HOME, SHELL, USER, LOGNAME, PATH,
    # and start a login shell.
    "$NSENTER" $OPTS su - root
  else
    # Use env to clear all host environment variables.
    "$NSENTER" $OPTS env --ignore-environment -- "$@"
  fi
fi