docker 常用命令 docker-compose参数

日志：
docker logs -t --since="2020-02-27T07:00:00" 4c04ea1238ab |less
docker exec -it  dbm-service  bash 

rpm -qa | grep -i 'docker'
if [ $? == 0 ] ; then
  echo 'I: docker has been installed, skip installation'
else
  yum remove docker 
                  docker-client 
                  docker-client-latest 
                  docker-common 
                  docker-latest 
                  docker-latest-logrotate 
                  docker-logrotate 
                  docker-engine
  yum install -y yum-utils 
                  device-mapper-persistent-data 
                  epel-release 
                  lvm2
  yum-config-manager --add-repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
  yum install -y docker-ce-18.09.6-3.el7.x86_64
  systemctl enable docker

  # change docker graph dir
  systemctl start docker
  systemctl stop docker
  test -d /var/lib/docker && mv /var/lib/docker /data/docker_lib

  # add config
  yum install -y jq
  if [ -f /etc/docker/daemon.json ] && [ "`cat /etc/docker/daemon.json`" != '' ]; then
    cat /etc/docker/daemon.json | jq '.graph="/data/docker_lib"' | tee /etc/docker/daemon.json
  else
    echo '{"graph":"/data/docker_lib","default-address-pools": [{"base":"172.17.0.0/16","size":24}]}' | jq . > /etc/docker/daemon.json
  fi

  systemctl start docker
  docker pull busybox
  docker run --rm busybox echo hello

  # add yw user to docker group, let yw user be able to use docker without sudo permission
  usermod -aG docker yw
fi

1. 安装／升级Docker客户端
推荐安装1.10.0以上版本的Docker客户端，参考文档 docker-ce

2. 配置镜像加速器
针对Docker客户端版本大于 1.10.0 的用户

您可以通过修改daemon配置文件/etc/docker/daemon.json来使用加速器
sudo mkdir -p /etc/docker
sudo tee /etc/docker/daemon.json <<-'EOF'
{
  "registry-mirrors": ["https://qs335f5p.mirror.aliyuncs.com"]
}
EOF
sudo systemctl daemon-reload
sudo systemctl restart docker

docker-compose中配置重启策略：

docker-compose：
version: '2'
services:
  database:
    build: ./mysql/
    command: mysqld --user=root --verbose
    restart: always   # docker-compose 关机或者重启docker同时重启容器restart always的配置
    environment:
      MYSQL_DATABASE: "web_level3_sqli"
      MYSQL_USER: "web_level3_sqli"
      MYSQL_PASSWORD: "thisisasecurepassword123"
      MYSQL_ROOT_PASSWORD: "root"
      MYSQL_ALLOW_EMPTY_PASSWORD: "yes"
  web:
    build: ./www/
    restart: always
    ports:
     - "12000:80"
    volumes:
      - ./www/src:/var/www/html
    links:
      - database


  - restart：always  # 重启机制：手动停止容器使用docker kill容器后不会重启，
                     # 在宿主机reboot之后，且docker已经配置了开机自启（sudo systemctl enable docker），此时设置了restart:always的服务会重启



#docker中的restart策略：

在运行docker容器时可以加如下参数来保证每次docker服务重启后容器也自动重启：
docker run --restart=always
对于运行状态的容器则可以使用如下命令：
docker update --restart=always <CONTAINER ID>

https://docs.docker.com/config/containers/start-containers-automatically/
https://docs.docker.com/engine/reference/run/#restart-policies---restart
$ docker run --restart=always redis
This will run the redis container with a restart policy of always so that if the container exits, Docker will restart it.

$ docker run --restart=on-failure:10 redis
This will run the redis container with a restart policy of on-failure and a maximum restart count of 10. If the redis container exits with a non-zero exit status more than 10 times in a row Docker will abort trying to restart the container. Providing a maximum restart limit is only valid for the on-failure policy.

docker中redis的持久化：

https://hub.docker.com/_/redis?tab=description

  redis:
    image: redis
    ports:
      - "6379:6379"
    container_name: test-redis-compose
    restart: always
    #启动redis服务并添加密码为：123456,并开启redis的持久化
    command: redis-server --requirepass 123456 --appendonly yes

#docker-compose的版本
version: '3'

#定义服务
services:

  #服务名称，可随意定义
  backend:
    build:
      #dockerfile的路径
      context: backend
      #dockerfile的名称
      dockerfile: Dockerfile
    #相当于docker run -v的作用
    volumes:
      - "./jar:/opt/test"
    #容器名称
    container_name: test-backend-compose
    #该服务依赖的其他服务，该配置选项可修改启动顺序
    depends_on:
      - mysql
      - redis
      - rabbitmq
    ports:
      - "8082:8082"

  frontend:
    build:
      context: frontend
      dockerfile: Dockerfile
    ports:
      - "4010:4010"
    container_name: test-frontend-compose

  mysql:
    build:
      context: mysql
      dockerfile: Dockerfile
    ports:
      - "3306:3306"
    #相当于docker run命令中的-e
    environment:
      MYSQL_ROOT_PASSWORD: root
      #初始化的数据库名称
      MYSQL_DATABASE: test
    container_name: test-mysql-compose
    restart: always
    #数据卷映射关系，把本机的./mysql/db目录映射到容器中的/var/lib/mysql
    volumes:
      - "./mysql/db/:/var/lib/mysql"
    #该选项中的命令会覆盖Dockfile中的CMD中的命令.lower_case_table_names参数是为了表名不区分大小写，default-authentication-plugin是8.0中密码加密策略不同带来的链接问题，如果不用8.0可不加此选项
    command: mysqld --lower_case_table_names=1 --default-authentication-plugin=mysql_native_password

  redis:
    image: redis
    ports:
      - "6379:6379"
    container_name: test-redis-compose
    restart: always
    #启动redis服务并添加密码为：123456,并开启redis的持久化
    command: redis-server --requirepass 123456 --appendonly yes

  rabbitmq:
    image: rabbitmq:management
    ports:
      - "5672:5672"
      - "15672:15672"
    container_name: test-rabbitmq-compose
    environment:
      #rabbitmq的初始用户名
      RABBITMQ_DEFAULT_USER: admin
      #rabbitmq的初始密码
      RABBITMQ_DEFAULT_PASS: 123456

#指定使用的网络，此处是使用已经提前创建好的自定义网络
#网络创建命令：docker network create -d bridge --subnet 172.50.0.0/16 cooperationassociation
#--subnet指定网段 -d指定连接方式，最后的cooperationassociation为网络名称
#使用新的指定网络是为了防止网段占用完，这样会导致启动容器时XShell会自动退出，且本地用不了访问不了服务（服务器已有大量连接时可能会出现）
#查看网段占用情况的命令：route -n
networks:
  default:
    external:
      name: cooperationassociation

https://www.jianshu.com/p/528fa4d62ace

docker-compose控制启动顺序：

https://www.jianshu.com/p/9446f210e327
https://blog.csdn.net/hu_zhenghui/article/details/79819209