下载镜像： docker pull registry.cn-hangzhou.aliyuncs.com/zhuyijun/oracle:19c运行镜像：创建目录 ora2,权限建立777[root@mis ora2]# mkdir -p /ora2 [root@mis ora2]# chmod 777 /ora2/#需要等待DBCA建立完成数据库。docker run -p 1522:1521 \ -p 5555:5500 \ -e ORACLE_SID=orcl \ -e ORACLE_PDB=orclpdb1 \ -e ORACLE_PWD=123456 \ -e ORACLE_CHARACTERSET=zhs16gbk \ -e ORACLE_BASE=/opt/oracle \ -e ORACLE_HOME=/opt/oracle/product/19c/dbhome_1 \ -e PATH=/opt/oracle/product/19c/dbhome_1/bin:/opt/oracle/product/19c/dbhome_1/OPatch/:/usr/sbin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin -v \/ora2:/opt/oracle/oradata \ --name orcl registry.cn-hangzhou.aliyuncs.com/zhuyijun/oracle:19c进入系统：[root@mis docker]# docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES a19b7ca7171d registry.cn-hangzhou.aliyuncs.com/zhuyijun/oracle:19c "/bin/sh -c 'exec $O 3 minutes ago Up 3 minutes 0.0.0.0:1522->1521/tcp, 0.0.0.0:5555->5500/tcp orcl [root@mis docker]# docker exec -ti a19b7ca7171d /bin/bash [oracle@a19b7ca7171d ~]$ ps -ef|grep pmon oracle 709 1 0 06:36 ? 00:00:00 ora_pmon_ORCL oracle 780 687 0 06:36 ? 00:00:00 grep --color=auto pmon [oracle@a19b7ca7171d ~]$ export ORACLE_SID=ORCL [oracle@a19b7ca7171d ~]$ sqlplus / as sysdba SQL*Plus: Release 19.0.0.0.0 - Production on Thu May 27 06:37:14 2021 Version 19.3.0.0.0 Copyright (c) 1982, 2019, Oracle. All rights reserved. Connected to: Oracle Database 19c Enterprise Edition Release 19.0.0.0.0 - Production Version 19.3.0.0.0 SQL> show pdbs; SQL>

docker管理常用命令总结ls：列出容器inspect:查看一个或多个容器详细信息exec:在运行容器中执行命令，通常用来进入容器commit:从容器创建一个新镜像cp:拷贝文件/文件夹到容器logs：获取容器的日志port:列出或指定容器的端口映射top:显示容器运行的进程stats:显示容器资源使用的统计stop/start/restart:停止/开启/重启动容器rm：删除容器prune:移除已经停止的容器docker container prune删除所有容器：docker rm -f $(docker ps -aq)

为什么要安装特定版本的docker?兼容性需求。首先删除系统原有的docker版本root@ecs-beijing1:~# sudo apt-get remove docker docker-engine docker.io containerd runcReading package lists... DoneBuilding dependency tree       Reading state information... DonePackage 'docker-engine' is not installed, so not removedPackage 'docker' is not installed, so not removedPackage 'containerd' is not installed, so not removedPackage 'docker.io' is not installed, so not removedPackage 'runc' is not installed, so not removed0 upgraded, 0 newly installed, 0 to remove and 69 not upgraded.apt更新/安装依赖包：root@ecs-beijing1:~#  sudo apt-get updateHit:1 http://repo.huaweicloud.com/ubuntu bionic InReleaseHit:2 http://repo.huaweicloud.com/ubuntu bionic-updates InRelease                Hit:3 http://repo.huaweicloud.com/ubuntu bionic-backports InRelease              Hit:4 http://repo.huaweicloud.com/ubuntu bionic-security InRelease               Reading package lists... Done                                                    root@ecs-beijing1:~# sudo apt-get install     apt-transport-https     ca-certificates     curl     gnupg-agent     software-properties-common  Reading package lists... DoneBuilding dependency tree       Reading state information... Doneca-certificates is already the newest version (20210119~18.04.1).software-properties-common is already the newest version (0.96.24.32.14).The following additional packages will be installed:  libcurl4The following NEW packages will be installed:  apt-transport-https gnupg-agentThe following packages will be upgraded:  curl libcurl42 upgraded, 2 newly installed, 0 to remove and 67 not upgraded.Need to get 384 kB of archives.After this operation, 209 kB of additional disk space will be used.Do you want to continue? [Y/n] yGet:1 http://repo.huaweicloud.com/ubuntu bionic-updates/universe amd64 apt-transport-https all 1.6.13 [1,692 B]Get:2 http://repo.huaweicloud.com/ubuntu bionic-updates/main amd64 curl amd64 7.58.0-2ubuntu3.13 [159 kB]Get:3 http://repo.huaweicloud.com/ubuntu bionic-updates/main amd64 libcurl4 amd64 7.58.0-2ubuntu3.13 [219 kB]Get:4 http://repo.huaweicloud.com/ubuntu bionic-updates/universe amd64 gnupg-agent all 2.2.4-1ubuntu1.4 [4,864 B]Fetched 384 kB in 0s (4,626 kB/s) Selecting previously unselected package apt-transport-https.(Reading database ... 111034 files and directories currently installed.)Preparing to unpack .../apt-transport-https_1.6.13_all.deb ...Unpacking apt-transport-https (1.6.13) ...Preparing to unpack .../curl_7.58.0-2ubuntu3.13_amd64.deb ...Unpacking curl (7.58.0-2ubuntu3.13) over (7.58.0-2ubuntu3.12) ...Preparing to unpack .../libcurl4_7.58.0-2ubuntu3.13_amd64.deb ...Unpacking libcurl4:amd64 (7.58.0-2ubuntu3.13) over (7.58.0-2ubuntu3.12) ...Selecting previously unselected package gnupg-agent.Preparing to unpack .../gnupg-agent_2.2.4-1ubuntu1.4_all.deb ...Unpacking gnupg-agent (2.2.4-1ubuntu1.4) ...Setting up apt-transport-https (1.6.13) ...Setting up libcurl4:amd64 (7.58.0-2ubuntu3.13) ...Setting up gnupg-agent (2.2.4-1ubuntu1.4) ...Setting up curl (7.58.0-2ubuntu3.13) ...Processing triggers for man-db (2.8.3-2ubuntu0.1) ...Processing triggers for libc-bin (2.27-3ubuntu1.4) ...安装docker的官方key：root@ecs-beijing1:~# curl -fsSL https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu/gpg | sudo apt-key add -  OK验证密钥是否为：9DC8 5822 9FC7 DD38 854A E2D8 8D81 803C 0EBF CD88root@ecs-beijing1:~# sudo apt-key fingerprint 0EBFCD88pub   rsa4096 2017-02-22 [SCEA]      9DC8 5822 9FC7 DD38 854A  E2D8 8D81 803C 0EBF CD88uid           [ unknown] Docker Release (CE deb) <docker@docker.com>sub   rsa4096 2017-02-22 [S]使用以下指令设置稳定版仓库  ：root@ecs-beijing1:~# sudo add-apt-repository \>    "deb [arch=amd64] https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu/ \>   $(lsb_release -cs) \>   stable"Hit:1 http://repo.huaweicloud.com/ubuntu bionic InReleaseHit:2 http://repo.huaweicloud.com/ubuntu bionic-updates InReleaseHit:3 http://repo.huaweicloud.com/ubuntu bionic-backports InRelease               Hit:4 http://repo.huaweicloud.com/ubuntu bionic-security InRelease                Get:5 https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic InRelease [64.4 kB]Get:6 https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages [18.1 kB]Fetched 82.6 kB in 1s (98.2 kB/s)   Reading package lists... Doneroot@ecs-beijing1:~# sudo apt-get updateHit:1 http://repo.huaweicloud.com/ubuntu bionic InReleaseHit:2 http://repo.huaweicloud.com/ubuntu bionic-updates InRelease                                     Hit:3 http://repo.huaweicloud.com/ubuntu bionic-backports InRelease                                                                 Hit:4 http://repo.huaweicloud.com/ubuntu bionic-security InRelease                                                                  Hit:5 https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic InRelease                                                           Reading package lists... Done         列出仓库中可用的版本：                                     root@ecs-beijing1:~# apt-cache madison docker-ce docker-ce | 5:20.10.6~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:20.10.5~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:20.10.4~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:20.10.3~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:20.10.2~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:20.10.1~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:20.10.0~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:19.03.15~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:19.03.14~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:19.03.13~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:19.03.12~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:19.03.11~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:19.03.10~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:19.03.9~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:19.03.8~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:19.03.7~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:19.03.6~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:19.03.5~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:19.03.4~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:19.03.3~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:19.03.2~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:19.03.1~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:19.03.0~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:18.09.9~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:18.09.8~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:18.09.7~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:18.09.6~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:18.09.5~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:18.09.4~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:18.09.3~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:18.09.2~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:18.09.1~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 5:18.09.0~3-0~ubuntu-bionic | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 18.06.3~ce~3-0~ubuntu | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 18.06.2~ce~3-0~ubuntu | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 18.06.1~ce~3-0~ubuntu | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 18.06.0~ce~3-0~ubuntu | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages docker-ce | 18.03.1~ce~3-0~ubuntu | https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 Packages安装特定版本的docker:root@ecs-beijing1:~# sudo apt-get install docker-ce= 5:18.09.7~3-0~ubuntu-bionic docker-ce-cli=5:18.09.7~3-0~ubuntu-bionic containerd.ioReading package lists... DoneBuilding dependency tree       Reading state information... DoneE: Version '' for 'docker-ce' was not foundE: Unable to locate package 5:18.09.7~3-0~ubuntu-bionicE: Couldn't find any package by glob '5:18.09.7~3-0~ubuntu-bionic'E: Couldn't find any package by regex '5:18.09.7~3-0~ubuntu-bionic'root@ecs-beijing1:~# sudo apt-get install docker-ce=<5:18.09.7~3-0~ubuntu-bionic> docker-ce-cli=<5:18.09.7~3-0~ubuntu-bionic> containerd.io-bash: 5:18.09.7~3-0~ubuntu-bionic: No such file or directoryroot@ecs-beijing1:~# sudo apt-get install docker-ce=5:18.09.7~3-0~ubuntu-bionic docker-ce-cli=5:18.09.7~3-0~ubuntu-bionic containerd.io    Reading package lists... DoneBuilding dependency tree       Reading state information... DoneThe following additional packages will be installed:  aufs-tools cgroupfs-mount libltdl7 pigzThe following NEW packages will be installed:  aufs-tools cgroupfs-mount containerd.io docker-ce docker-ce-cli libltdl7 pigz0 upgraded, 7 newly installed, 0 to remove and 67 not upgraded.Need to get 59.1 MB of archives.After this operation, 286 MB of additional disk space will be used.Do you want to continue? [Y/n] yGet:1 http://repo.huaweicloud.com/ubuntu bionic/universe amd64 pigz amd64 2.4-1 [57.4 kB]Get:2 http://repo.huaweicloud.com/ubuntu bionic/universe amd64 aufs-tools amd64 1:4.9+20170918-1ubuntu1 [104 kB]Get:3 http://repo.huaweicloud.com/ubuntu bionic/universe amd64 cgroupfs-mount all 1.4 [6,320 B]Get:4 http://repo.huaweicloud.com/ubuntu bionic/main amd64 libltdl7 amd64 2.4.6-2 [38.8 kB]Get:5 https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 containerd.io amd64 1.4.4-1 [28.3 MB]Get:6 https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 docker-ce-cli amd64 5:18.09.7~3-0~ubuntu-bionic [13.2 MB]Get:7 https://mirrors.ustc.edu.cn/docker-ce/linux/ubuntu bionic/stable amd64 docker-ce amd64 5:18.09.7~3-0~ubuntu-bionic [17.4 MB]  Fetched 59.1 MB in 8s (7,173 kB/s)                                                                                                  Selecting previously unselected package pigz.(Reading database ... 111042 files and directories currently installed.)Preparing to unpack .../0-pigz_2.4-1_amd64.deb ...Unpacking pigz (2.4-1) ...Selecting previously unselected package aufs-tools.Preparing to unpack .../1-aufs-tools_1%3a4.9+20170918-1ubuntu1_amd64.deb ...Unpacking aufs-tools (1:4.9+20170918-1ubuntu1) ...Selecting previously unselected package cgroupfs-mount.Preparing to unpack .../2-cgroupfs-mount_1.4_all.deb ...Unpacking cgroupfs-mount (1.4) ...Selecting previously unselected package containerd.io.Preparing to unpack .../3-containerd.io_1.4.4-1_amd64.deb ...Unpacking containerd.io (1.4.4-1) ...Selecting previously unselected package docker-ce-cli.Preparing to unpack .../4-docker-ce-cli_5%3a18.09.7~3-0~ubuntu-bionic_amd64.deb ...Unpacking docker-ce-cli (5:18.09.7~3-0~ubuntu-bionic) ...Selecting previously unselected package docker-ce.Preparing to unpack .../5-docker-ce_5%3a18.09.7~3-0~ubuntu-bionic_amd64.deb ...Unpacking docker-ce (5:18.09.7~3-0~ubuntu-bionic) ...Selecting previously unselected package libltdl7:amd64.Preparing to unpack .../6-libltdl7_2.4.6-2_amd64.deb ...Unpacking libltdl7:amd64 (2.4.6-2) ...Setting up aufs-tools (1:4.9+20170918-1ubuntu1) ...Setting up containerd.io (1.4.4-1) ...Created symlink /etc/systemd/system/multi-user.target.wants/containerd.service → /lib/systemd/system/containerd.service.Setting up cgroupfs-mount (1.4) ...Setting up libltdl7:amd64 (2.4.6-2) ...Setting up docker-ce-cli (5:18.09.7~3-0~ubuntu-bionic) ...Setting up pigz (2.4-1) ...Setting up docker-ce (5:18.09.7~3-0~ubuntu-bionic) ...update-alternatives: using /usr/bin/dockerd-ce to provide /usr/bin/dockerd (dockerd) in auto modeCreated symlink /etc/systemd/system/multi-user.target.wants/docker.service → /lib/systemd/system/docker.service.Created symlink /etc/systemd/system/sockets.target.wants/docker.socket → /lib/systemd/system/docker.socket.Processing triggers for libc-bin (2.27-3ubuntu1.4) ...Processing triggers for systemd (237-3ubuntu10.44) ...Processing triggers for man-db (2.8.3-2ubuntu0.1) ...Processing triggers for ureadahead (0.100.0-21) ...root@ecs-beijing1:~# docker versionClient: Version:           18.09.7 API version:       1.39 Go version:        go1.10.8 Git commit:        2d0083d Built:             Thu Jun 27 17:56:23 2019 OS/Arch:           linux/amd64 Experimental:      falseServer: Docker Engine - Community Engine:  Version:          18.09.7  API version:      1.39 (minimum version 1.12)  Go version:       go1.10.8  Git commit:       2d0083d  Built:            Thu Jun 27 17:23:02 2019  OS/Arch:          linux/amd64  Experimental:     falseroot@ecs-beijing1:~# 

### 名称及链接 [云容器快速搭建网站](https://edu.huaweicloud.com/certifications/03f499a1c54611e7b956286ed488f0b3)   ### 课程章节 1. 容器的概念和发展 2. Docker容器技术 3. 华为云容器引擎CCE 4. 云容器建站实践   ### 证书    ### 笔记 1. 容器的发展 1. chroot、freeBSD jails、linux vserver、solaris、openvz、process容器、control groups、LXC、warden、docker、rocket、windows容器 2. 物理集装箱 vs docker容器 1. 打包对象 2. 硬件依赖 3. 隔离性 4. 自动化 5. 高效性 6. 职责分工 3. 容器本质上是进程级别的资源隔离，是基于内核实现的轻量级高性能资源隔离机制（cgroups、namespace） 4. 虚拟机是操作系统级别的资源隔离 5. docker的基本架构：client 、host 、images 、container 、dockerDaemon 、registry 6. docker的关键技术：build-ship-run 7. CCE：基于开源k8s、docker技术的企业级容器服务 8. wordpress：PHP语言开发的博客平台   ### 备注 1. 感谢老师的教学与课件 2. 欢迎各位同学一起来交流学习心得^_^ 3. 在线课程、沙箱实验、博客和直播，其中包含了许多优质的内容，推荐了解与学习。

推送镜像到华为云镜像仓库华为云的镜像仓库没有提供nacos的镜像，所以需要自己推送一个到私有镜像仓库中    在容器引擎的节点上拉取nacos镜像docker pull nacos/nacos-server:latest    修改组织    登陆容器镜像服务    获取登陆指令    在节点上执行获取到的指令(以下命令用上图获取的指令替代)docker login -u cn-south-1@xxx-p xxx swr.cn-south-1.myhuaweicloud.com    1    推送镜像docker push swr.cn-south-1.myhuaweicloud.com/mygroup/nacos-server:1.4.0    1创建数据库    数据库版本：mysql5.7    创建schema：nacos_config    执行ddl创建表结构：nacos-mysql.sql创建负载    创建无状态负载       选择实例数量1    容器设置    2.1 添加容器，选择我的镜像中的nacos-server       容器规格选择内存大小2560M       注：NACOS默认配置内存最大值为2G，容器内存配额如果不足将会导致启动失败，并建议留出20%的内存。    或者下一步添加环境变量时可以通过添加JVM_XMS，JVM_XMX，JVM_XMN变量修改相应jvm参数因内存配额不足启动失败时，负载日志中可以看到如下信息，是内存超限进程被KILL

安装k8s之前需要把docker的域名改过来。方法是编辑（或生成）vim /etc/docker/daemon.json这只是一个文本格式的文件，但是，对文件格式的要求非常严格：不能有空格，不能有其他字符，居然还不能缩进！文件格式出错，docker进程重启动报错：root@ecs-385f:~# systemctl status docker.service● docker.service - Docker Application Container Engine   Loaded: loaded (/lib/systemd/system/docker.service; enabled; vendor preset: enabled)   Active: failed (Result: start-limit-hit) since Wed 2021-05-12 15:46:40 CST; 347ms ago     Docs: https://docs.docker.com  Process: 28720 ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock (code=exited, status=1/FAILURE) Main PID: 28720 (code=exited, status=1/FAILURE)May 12 15:46:38 ecs-385f systemd[1]: Failed to start Docker Application Container Engine.May 12 15:46:38 ecs-385f systemd[1]: docker.service: Unit entered failed state.May 12 15:46:38 ecs-385f systemd[1]: docker.service: Failed with result 'exit-code'.May 12 15:46:40 ecs-385f systemd[1]: docker.service: Service hold-off time over, scheduling restart.May 12 15:46:40 ecs-385f systemd[1]: Stopped Docker Application Container Engine.May 12 15:46:40 ecs-385f systemd[1]: docker.service: Start request repeated too quickly.May 12 15:46:40 ecs-385f systemd[1]: Failed to start Docker Application Container Engine.May 12 15:46:40 ecs-385f systemd[1]: docker.service: Unit entered failed state.May 12 15:46:40 ecs-385f systemd[1]: docker.service: Failed with result 'start-limit-hit'.字面指示是容器起不来了，其实跟容器没啥关系，docker进程起不来了。把字符格式清理干净后，故障排除了。root@ecs-385f:~# vim /etc/docker/daemon.json{"exec-opts": ["native.cgroupdriver=systemd"]}

root@ecs-385f:~# curl -fsSL https://get.docker.com | bash -s docker --mirror Aliyun# Executing docker install script, commit: 7cae5f8b0decc17d6571f9f52eb840fbc13b2737+ sh -c 'apt-get update -qq >/dev/null'+ sh -c 'DEBIAN_FRONTEND=noninteractive apt-get install -y -qq apt-transport-https ca-certificates curl >/dev/null'+ sh -c 'curl -fsSL "https://mirrors.aliyun.com/docker-ce/linux/ubuntu/gpg" | apt-key add -qq - >/dev/null'+ sh -c 'echo "deb [arch=amd64] https://mirrors.aliyun.com/docker-ce/linux/ubuntu xenial stable" > /etc/apt/sources.list.d/docker.list'+ sh -c 'apt-get update -qq >/dev/null'+ '[' -n '' ']'+ sh -c 'apt-get install -y -qq --no-install-recommends docker-ce >/dev/null'+ '[' -n 1 ']'+ sh -c 'DEBIAN_FRONTEND=noninteractive apt-get install -y -qq docker-ce-rootless-extras >/dev/null'+ sh -c 'docker version'Client: Docker Engine - Community Version:           20.10.6 API version:       1.41 Go version:        go1.13.15 Git commit:        370c289 Built:             Fri Apr  9 22:47:12 2021 OS/Arch:           linux/amd64 Context:           default Experimental:      trueServer: Docker Engine - Community Engine:  Version:          20.10.6  API version:      1.41 (minimum version 1.12)  Go version:       go1.13.15  Git commit:       8728dd2  Built:            Fri Apr  9 22:45:24 2021  OS/Arch:          linux/amd64  Experimental:     false containerd:  Version:          1.4.4  GitCommit:        05f951a3781f4f2c1911b05e61c160e9c30eaa8e runc:  Version:          1.0.0-rc93  GitCommit:        12644e614e25b05da6fd08a38ffa0cfe1903fdec docker-init:  Version:          0.19.0  GitCommit:        de40ad0================================================================================To run Docker as a non-privileged user, consider setting up theDocker daemon in rootless mode for your user:    dockerd-rootless-setuptool.sh installVisit https://docs.docker.com/go/rootless/ to learn about rootless mode.To run the Docker daemon as a fully privileged service, but granting non-rootusers access, refer to https://docs.docker.com/go/daemon-access/WARNING: Access to the remote API on a privileged Docker daemon is equivalent         to root access on the host. Refer to the 'Docker daemon attack surface'         documentation for details: https://docs.docker.com/go/attack-surface/================================================================================一条命令安装docker!

docker imagesdocker run --name some-mysql -e MYSQL_ROOT_PASSWORD=password -d mysqldocker run --name mysql01 -e MYSQL_ROOT_PASSWORD=root -p 3307:3306 -d mysql:5.7docker execdocker logs  iiddocker exec -it id /bin/bashdocker run -d -p 1521:1521 -v /Users/wangbo/Downloads/oracle_data:/u01/app/oracle/ --name xe  sath89/oracle-xe-11gdocker pull docker.io/mysqldocker pull mysql:5.7docker pull sath89/oracle-12cdocker pull sath89/oracle-xe-11g

源站点列表及使用说明　　源站点地址可能发生变化，当某个源无法访问时，尝试使用其他源。 　　容器制作环境部署以及容器制作具体步骤请参考《边缘计算网关二次开发指南》软件开发指导章节。【docker软件源】　Ubuntu环境准备时需要安装docker-ce，安装前要更新docker软件仓，添加源命令为：add-apt-repository "deb [arch=amd64] cid:link_2 $(lsb_release -cs) stable"　整理可用源站点列表如下，根据实际网络情况替换（鉴于国内网络问题，建议使用国内源）docker软件仓源站点源站点地址官方源cid:link_10清华cid:link_3中科大cid:link_5上海交通大学cid:link_6阿里cid:link_7163cid:link_8腾讯cid:link_4使用说明表格中的源站点地址可以直接替换命令中的源地址；可通过cat /etc/apt/source.list查看软件源是否添加成功；源添加成功后执行apt-get update进行软件仓更新，如果更新成功表明源可用；失败情况下首先检查源地址是否正确，如果源地址正确但是更新失败，则优先选择替换其他源。【debian源】　制作容器编译环境镜像时，需要从网上拉取docker镜像，根据实际网络情况选择替换Dockerfile中的debian镜像源。例如在eciot-ova/build目录下执行如下命令将cid:link_17/替换为cid:link_11/。sed -i s#cid:link_1 ../system/sdk/Dockerfile_base　整理debian镜像源站点列表如下debian镜像源站点源站点地址官方源cid:link_17华为cid:link_13清华cid:link_11中科大cid:link_14上海交通大学cid:link_15阿里cid:link_16163cid:link_18腾讯cid:link_12使用说明表格中的源地址可以直接用于上述sed -i命令中，替换当前使用的镜像源；国内debian镜像源地址实际需要加上/debian，比如清华大学debian镜像源站点地址为： cid:link_11/debian， 表格给出的地址主要为了方便替换（替换后Dockerfile中会是完整的镜像源地址）；可以通过查看eciot-ova/system/sdk/Dockerfile_base文件内容获得当前使用的镜像源地址。因为环境制作的时候最简包没有ca证书，所以源地址全部使用http协议而不是更安全的https协议lxc容器制作使用的Debian源lxc容器制作时同样需要从社区源中拉去所需要的软件包，如官方源连接慢，可编译环境中使用以下命令替换使用第三方源，以清华源为例：sed -i s#ftp.cn.debian.org#mirrors.tuna.tsinghua.edu.cn#g /usr/local/bin/create-rootfs使用说明可使用源列表可参照前一章节中的的源列表编译环境中的工具文件每次启动会重新生成，如需修改使用源，请重启后重新运行上述命令进行修改可以通过查看/usr/local/bin/create-rootfs文件内容获得当前使用的镜像源地址。因为环境制作的时候最简包没有ca证书，所以源地址全部使用http协议而不是更安全的https协议

docker的四种网络模式bridge-net=bridge默认网络, Docker启动后创建一个docker0网桥,默认创建的容器也是添加到这个网桥中。也可以自定义网络，相比默认的具备内部DNS发现,可以通过容器名容器之间网络通信。host-net=host容器不会获得一个独立的network namespace,而是与宿主机共用一个。这就意味着容器不会有自己的网卡信息,而是使用宿主机的。容器除了网络,其他都是隔离的。none-net=none获取独立的network namespace,但不为容器进行任何网络配置,需要我们手动配置。container-net=container:Name/ID与指定的容器使用同一个network namespace,具有同样的网络配置信息,两个容器除了网络,其他都还是隔离的。

使用-v 直接将宿主机的目录挂载到容器之中。root@ecs-385f:~# docker run -d -v /tmp:/usr/share/nginx/html nginxc68541510001b2cb557486d5d0d8f9c4da0dfb762122efe0c7b5a17338253adbroot@ecs-385f:~# docker psCONTAINER ID   IMAGE     COMMAND                  CREATED         STATUS         PORTS                    NAMESc68541510001   nginx     "/docker-entrypoint.…"   4 seconds ago   Up 2 seconds   80/tcp                   strange_lamportroot@ecs-385f:~# docker inspect c68541510001[    {        "Id": "c68541510001b2cb557486d5d0d8f9c4da0dfb762122efe0c7b5a17338253adb",        "Created": "2021-04-22T00:51:47.771591346Z",        "Path": "/docker-entrypoint.sh",        "Args": [            "nginx",            "-g",            "daemon off;"        ],        "State": {            "Status": "running",            "Running": true,            "Paused": false,            "Restarting": false,            "OOMKilled": false,            "Dead": false,            "Pid": 6905,            "ExitCode": 0,            "Error": "",            "StartedAt": "2021-04-22T00:51:48.848089393Z",            "FinishedAt": "0001-01-01T00:00:00Z"        },        "Image": "sha256:62d49f9bab67f7c70ac3395855bf01389eb3175b374e621f6f191bf31b54cd5b",        "ResolvConfPath": "/var/lib/docker/containers/c68541510001b2cb557486d5d0d8f9c4da0dfb762122efe0c7b5a17338253adb/resolv.conf",        "HostnamePath": "/var/lib/docker/containers/c68541510001b2cb557486d5d0d8f9c4da0dfb762122efe0c7b5a17338253adb/hostname",        "HostsPath": "/var/lib/docker/containers/c68541510001b2cb557486d5d0d8f9c4da0dfb762122efe0c7b5a17338253adb/hosts",        "LogPath": "/var/lib/docker/containers/c68541510001b2cb557486d5d0d8f9c4da0dfb762122efe0c7b5a17338253adb/c68541510001b2cb557486d5d0d8f9c4da0dfb762122efe0c7b5a17338253adb-json.log",        "Name": "/strange_lamport",        "RestartCount": 0,        "Driver": "overlay2",        "Platform": "linux",        "MountLabel": "",        "ProcessLabel": "",        "AppArmorProfile": "docker-default",        "ExecIDs": null,        "HostConfig": {            "Binds": [                "/tmp:/usr/share/nginx/html"            ],            "ContainerIDFile": "",            "LogConfig": {                "Type": "json-file",                "Config": {}            },            "NetworkMode": "default",            "PortBindings": {},            "RestartPolicy": {                "Name": "no",                "MaximumRetryCount": 0            },            "AutoRemove": false,            "VolumeDriver": "",            "VolumesFrom": null,            "CapAdd": null,            "CapDrop": null,            "CgroupnsMode": "host",            "Dns": [],            "DnsOptions": [],            "DnsSearch": [],            "ExtraHosts": null,            "GroupAdd": null,            "IpcMode": "private",            "Cgroup": "",            "Links": null,            "OomScoreAdj": 0,            "PidMode": "",            "Privileged": false,            "PublishAllPorts": false,            "ReadonlyRootfs": false,            "SecurityOpt": null,            "UTSMode": "",            "UsernsMode": "",            "ShmSize": 67108864,            "Runtime": "runc",            "ConsoleSize": [                0,                0            ],            "Isolation": "",            "CpuShares": 0,            "Memory": 0,            "NanoCpus": 0,            "CgroupParent": "",            "BlkioWeight": 0,            "BlkioWeightDevice": [],            "BlkioDeviceReadBps": null,            "BlkioDeviceWriteBps": null,            "BlkioDeviceReadIOps": null,            "BlkioDeviceWriteIOps": null,            "CpuPeriod": 0,            "CpuQuota": 0,            "CpuRealtimePeriod": 0,            "CpuRealtimeRuntime": 0,            "CpusetCpus": "",            "CpusetMems": "",            "Devices": [],            "DeviceCgroupRules": null,            "DeviceRequests": null,            "KernelMemory": 0,            "KernelMemoryTCP": 0,            "MemoryReservation": 0,            "MemorySwap": 0,            "MemorySwappiness": null,            "OomKillDisable": false,            "PidsLimit": null,            "Ulimits": null,            "CpuCount": 0,            "CpuPercent": 0,            "IOMaximumIOps": 0,            "IOMaximumBandwidth": 0,            "MaskedPaths": [                "/proc/asound",                "/proc/acpi",                "/proc/kcore",                "/proc/keys",                "/proc/latency_stats",                "/proc/timer_list",                "/proc/timer_stats",                "/proc/sched_debug",                "/proc/scsi",                "/sys/firmware"            ],            "ReadonlyPaths": [                "/proc/bus",                "/proc/fs",                "/proc/irq",                "/proc/sys",                "/proc/sysrq-trigger"            ]        },        "GraphDriver": {            "Data": {                "LowerDir": "/var/lib/docker/overlay2/fc651f43fa87f33aa26ccffaadc6ba738819c6d8702acd8b33cb9c027788c4a8-init/diff:/var/lib/docker/overlay2/1b0ce365993b029d6c9a352016e15e4c7df1110d277c0e277b67261aa3851898/diff:/var/lib/docker/overlay2/ffdaa39cbfff795d0080c2a92ad5bde091e31247890c50833ec63a26cc86718b/diff:/var/lib/docker/overlay2/14cdd520024124f51e6b97fcb9cc67d2d30b27f9c8ad904649ef127e124f58a9/diff:/var/lib/docker/overlay2/04840e78cf61aa88fa7f9aa87fb3faae607824e9e4810e2aa3d1d6b0afc9247e/diff:/var/lib/docker/overlay2/f03eba729507a74abfb7dd076c3e13d725046b9af792e0d6d52e2b43b10856a3/diff:/var/lib/docker/overlay2/0a3577aa8ecc41d21c41486d6f1bafbec0b6d22e2053377aff91e5f85b8e13ed/diff",                "MergedDir": "/var/lib/docker/overlay2/fc651f43fa87f33aa26ccffaadc6ba738819c6d8702acd8b33cb9c027788c4a8/merged",                "UpperDir": "/var/lib/docker/overlay2/fc651f43fa87f33aa26ccffaadc6ba738819c6d8702acd8b33cb9c027788c4a8/diff",                "WorkDir": "/var/lib/docker/overlay2/fc651f43fa87f33aa26ccffaadc6ba738819c6d8702acd8b33cb9c027788c4a8/work"            },            "Name": "overlay2"        },        "Mounts": [            {                "Type": "bind",                "Source": "/tmp",                "Destination": "/usr/share/nginx/html",                "Mode": "",                "RW": true,                "Propagation": "rprivate"            }        ],        "Config": {            "Hostname": "c68541510001",            "Domainname": "",            "User": "",            "AttachStdin": false,            "AttachStdout": false,            "AttachStderr": false,            "ExposedPorts": {                "80/tcp": {}            },            "Tty": false,            "OpenStdin": false,            "StdinOnce": false,            "Env": [                "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",                "NGINX_VERSION=1.19.10",                "NJS_VERSION=0.5.3",                "PKG_RELEASE=1~buster"            ],            "Cmd": [                "nginx",                "-g",                "daemon off;"            ],            "Image": "nginx",            "Volumes": null,            "WorkingDir": "",            "Entrypoint": [                "/docker-entrypoint.sh"            ],            "OnBuild": null,            "Labels": {                "maintainer": "NGINX Docker Maintainers <docker-maint@nginx.com>"            },            "StopSignal": "SIGQUIT"        },        "NetworkSettings": {            "Bridge": "",            "SandboxID": "8861c5baead84033b30a538b86e1aa01aa39c8ff00716504cee3a1a12ee3da72",            "HairpinMode": false,            "LinkLocalIPv6Address": "",            "LinkLocalIPv6PrefixLen": 0,            "Ports": {                "80/tcp": null            },            "SandboxKey": "/var/run/docker/netns/8861c5baead8",            "SecondaryIPAddresses": null,            "SecondaryIPv6Addresses": null,            "EndpointID": "46a693c50bd51e79f0e984e18ac57d58536b44c22198dffb3e7b1a56cb2c45a3",            "Gateway": "172.17.0.1",            "GlobalIPv6Address": "",            "GlobalIPv6PrefixLen": 0,            "IPAddress": "172.17.0.5",            "IPPrefixLen": 16,            "IPv6Gateway": "",            "MacAddress": "02:42:ac:11:00:05",            "Networks": {                "bridge": {                    "IPAMConfig": null,                    "Links": null,                    "Aliases": null,                    "NetworkID": "f60976860a019df6c57c33cdc1ec8035f8163f1b6abb5bf49b69cb88ce30510b",                    "EndpointID": "46a693c50bd51e79f0e984e18ac57d58536b44c22198dffb3e7b1a56cb2c45a3",                    "Gateway": "172.17.0.1",                    "IPAddress": "172.17.0.5",                    "IPPrefixLen": 16,                    "IPv6Gateway": "",                    "GlobalIPv6Address": "",                    "GlobalIPv6PrefixLen": 0,                    "MacAddress": "02:42:ac:11:00:05",                    "DriverOpts": null                }            }        }    }]root@ecs-385f:~# curl 172.17.0.5<html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx/1.19.10</center></body></html>在/tmp目录中新增一个文件index.htmlroot@ecs-385f:/# echo 123 > /tmp/index.htmlroot@ecs-385f:/# curl 172.17.0.5           123

首先创建一个容器，然后在其内修改数据（新增一个文件）。root@ecs-385f:~# docker run -i -t --name cakin24 docker/whalesay /bin/bashUnable to find image 'docker/whalesay:latest' locallylatest: Pulling from docker/whalesayImage docker.io/docker/whalesay:latest uses outdated schema1 manifest format. Please upgrade to a schema2 image for better future compatibility. More information at https://docs.docker.com/registry/spec/deprecated-schema-v1/e190868d63f8: Pull complete 909cd34c6fd7: Pull complete 0b9bfabab7c1: Pull complete a3ed95caeb02: Pull complete 00bf65475aba: Pull complete c57b6bcc83e3: Pull complete 8978f6879e2f: Pull complete 8eed3712d2cf: Pull complete Digest: sha256:178598e51a26abbc958b8a2e48825c90bc22e641de3d31e18aaf55f3258ba93bStatus: Downloaded newer image for docker/whalesay:latestroot@64c1b958e789:/cowsay# cd /usr/local     root@64c1b958e789:/usr/local# lsbin  etc  games  include  lib  man  sbin  share  srcroot@64c1b958e789:/usr/local# touch test.txtroot@64c1b958e789:/usr/local# commitbash: commit: command not foundroot@64c1b958e789:/usr/local# exitexit使用commit命令提交容器。root@ecs-385f:~# docker commit cakin24 cakin24:v2sha256:7cdf53218952eb8165377b0d03494e563e349716ba515e894ceabaa376e299e4之后使用新推送的版本号创建另一个容器，查看容器内的数据，发现有刚才新建的文件test.root@ecs-385f:~# docker run -i -t --name cakin24_V2  cakin24:v2root@1e4cea6d0d6f:/cowsay# cd /usr/localroot@1e4cea6d0d6f:/usr/local# lsbin  etc  games  include  lib  man  sbin  share  src  test.txtroot@1e4cea6d0d6f:/usr/local# exitexitroot@ecs-385f:~# docker imagesREPOSITORY                                                       TAG           IMAGE ID       CREATED         SIZEcakin24                                                          v2            7cdf53218952   2 minutes ago   247MBdocker/whalesay                                                  latest        6b362a9f73eb   5 years ago     247MBroot@ecs-385f:~# 

直接运行docker run -p 8080:80 nginx运行之后，一直卡住，也没有任何输出。使用浏览器输入ECS的EIP：8080测试访问，结果返回connection refused。首先反应的是，防火墙了，抓包分析了一下，ecs确实返回了rst的包。查询ecs上的docker状态，docker ps没有显示docker ps -a可以查看到刚才生成的容器id这说明容器虽然生成了，但是并没有启用，直接用docker start 容器id再次浏览器访问，就可以正常访问了。

docker search mysql//查找可用的mysql版本docker pull mysql:latest//拉取镜像报错：error pulling image configuration: Get https://production.cloudflare.docker.com/registry-v2/docker/registry/v2/blobs/sha256/cb/cbe8815cbea8fb86ce7d3169a82d05301e7dfe1a8d4228941f23f4f115a887f2/data?verify=1618847250-lzNSpT8IswXJGeHRU1I00Xcbgr4%3D: dial tcp: lookup production.cloudflare.docker.com on 127.0.0.53:53: no such host这个是因为dns域名解析的时候，因为没有配置resolv.conf，默认为127.0.0.53，而本地环境并没有配置DNS服务，自然就出不去的了。修改/etc/resovl.conf中的nameserver 8.8.8.8之后不用重启动："resolv.conf" 8L, 363C written                                                                                                             root@ecs-385f:/etc#  docker pull mysql:latestlatest: Pulling from library/mysqlf7ec5a41d630: Pull complete 9444bb562699: Pull complete 6a4207b96940: Pull complete 181cefd361ce: Pull complete 8a2090759d8a: Pull complete 15f235e0d7ee: Pull complete d870539cd9db: Pull complete 5726073179b6: Pull complete eadfac8b2520: Downloading [====>                                              ]  11.27MB/113.1MBf5936a8c3f2b: Download complete cca8ee89e625: Download complete 6c79df02586a: Download complete 已经跑起来了！

使用docker search 的时候报错，需要修改daemon.json文件。root@ecs-385f:~# docker search mysqlError response from daemon: Get https://index.docker.io/v1/search?q=mysql&n=25: dial tcp: i/o timeoutroot@ecs-385f:~# cd /etc/dockerroot@ecs-385f:/etc/docker# lsdaemon.json  key.jsonroot@ecs-385f:/etc/docker# vim daemon.json{        "exec-opts": ["native.cgroupdriver=systemd"]}这里要删掉原有内容，重新增加新的mirrors.                                                                                                        {            "registry-mirrors": ["https://registry.docker-cn.com"]}"daemon.json" 4L, 65C written                                                                                                              root@ecs-385f:/etc/docker# docker search mysqlNAME                              DESCRIPTION                                     STARS     OFFICIAL   AUTOMATEDmysql                             MySQL is a widely used, open-source relation…   10766     [OK]       mariadb                           MariaDB Server is a high performing open sou…   4052      [OK]       mysql/mysql-server                Optimized MySQL Server Docker images. Create…   792                  [OK]percona                           Percona Server is a fork of the MySQL relati…   533       [OK]       centos/mysql-57-centos7           MySQL 5.7 SQL database server                   87                   mysql/mysql-cluster               Experimental MySQL Cluster Docker images. Cr…   81                   centurylink/mysql                 Image containing mysql. Optimized to be link…   59                   [OK]bitnami/mysql                     Bitnami MySQL Docker Image                      50                   [OK]databack/mysql-backup             Back up mysql databases to... anywhere!         43                   deitch/mysql-backup               REPLACED! Please use http://hub.docker.com/r…   41                   [OK]prom/mysqld-exporter                                                              37                   [OK]tutum/mysql                       Base docker image to run a MySQL database se…   35                   schickling/mysql-backup-s3        Backup MySQL to S3 (supports periodic backup…   29                   [OK]linuxserver/mysql                 A Mysql container, brought to you by LinuxSe…   27                   centos/mysql-56-centos7           MySQL 5.6 SQL database server                   20                   circleci/mysql                    MySQL is a widely used, open-source relation…   20                   mysql/mysql-router                MySQL Router provides transparent routing be…   19                   arey/mysql-client                 Run a MySQL client from a docker container      17                   [OK]fradelg/mysql-cron-backup         MySQL/MariaDB database backup using cron tas…   12                   [OK]yloeffler/mysql-backup            This image runs mysqldump to backup data usi…   7                    [OK]openshift/mysql-55-centos7        DEPRECATED: A Centos7 based MySQL v5.5 image…   6                    devilbox/mysql                    Retagged MySQL, MariaDB and PerconaDB offici…   3                    ansibleplaybookbundle/mysql-apb   An APB which deploys RHSCL MySQL                2                    [OK]jelastic/mysql                    An image of the MySQL database server mainta…   1                    widdpim/mysql-client              Dockerized MySQL Client (5.7) including Curl…   1                    [OK]root@ecs-385f:/etc/docker#