本文是对官方文档的总结与备注。
官方文档:https://docs.docker.com/engine/userguide/
这一部分内容详情可以查看:https://cloud.tencent.com/developer/article/1047265
$ sudo docked
https://docs.docker.com/engine/admin/start-containers-automatically/
$ docker run --restart no | on-failure | unless-stopped | always
https://docs.docker.com/engine/admin/resource_constraints/
-m
或 --memory=4m
--memory-swap
--memory-swappiness
--memory-reservation
--kernel-memory
--oom-kill-disable
--cpus
--cpu-period
--cpu-quota
--cpuset-cpus
--cpu-shares
https://docs.docker.com/engine/admin/pruning/
https://cloud.tencent.com/developer/article/1047235
https://docs.docker.com/engine/admin/live-restore/
https://docs.docker.com/engine/admin/systemd/
https://cloud.tencent.com/developer/article/1047173
https://docs.docker.com/engine/admin/logging/view_container_logs/
$ docker logs CONTAINER_NAME
$ docker service logs SERVICE_NAME
https://docs.docker.com/engine/security/security/
https://docs.docker.com/engine/swarm/configs/
docker config
命令
以 redis
为例
$ echo "This is a config" | docker config create my-config -
# 配置文件默认挂载到 /my-config ,也可以通过 target 进行配置
$ docker service create \
--name redis \
# --config my-config \
--config source=my-config,target=/config/path \
redis:alpine
$ docker config ls
# 当配置文件被使用时,不能删除
$ docker config rm my-config
https://docs.docker.com/engine/swarm/secrets/
docker secret
命令
以 nginx
为例
$ docker secret create site.key site.key
$ docker secret create site.crt site.crt
$ docker secret create site.conf site.conf
$ docker secret ls
# 默认挂载到 /run/secrets/*** ,你可以通过 target 配置
$ docker service create \
--name nginx \
--secret site.key \
--secret site.crt \
--secret source=site.conf,target=/etc/nginx/conf.d/site.conf \
--publish target=3000,port=443 \
nginx:latest \
sh -c "exec nginx -g 'daemon off;'"
https://docs.docker.com/engine/admin/multi-service_container/