title: “Docker 镜像操作”
tags:
- “Docker”
toc: false
indent: false
original: true
draft: false
更新记录
| 时间 | 内容 |
|---|---|
| 2020-06-12 | 初稿 |
| 2022-09-01 | 文档整理 |
一、docker 老命令
由于docker的发展历史，
docker关于操作image的指令有两种：
一种是下面这些老命令。
1.1、Usage
docker --help
➜ docker -h
Flag shorthand -h has been deprecated, please use --helpUsage: docker [OPTIONS] COMMANDCommands:build Build an image from a Dockerfilecommit Create a new image from a container's changeshistory Show the history of an imageimages List imagesimport Import the contents from a tarball to create a filesystem imageload Load an image from a tar archive or STDINpull Pull an image or a repository from a registrypush Push an image or a repository to a registryrmi Remove one or more imagessave Save one or more images to a tar archive (streamed to STDOUT by default)search Search the Docker Hub for imagestag Create a tag TARGET_IMAGE that refers to SOURCE_IMAGERun 'docker COMMAND --help' for more information on a command.
docker 命令详解
Usage: docker [OPTIONS] COMMAND➜ docker build # 通过Dockerfile构建镜像
➜ docker commit # 通过对正在运行的容器的改变创建镜像
➜ docker history # 查看镜像历史
➜ docker images # 查看镜像列表
➜ docker import # 导入镜像
➜ docker load # 导入镜像
➜ docker pull # 拉取镜像
➜ docker push # 推送镜像
➜ docker rmi # 删除镜像
➜ docker save # 保存镜像
➜ docker search # 搜索镜像
➜ docker tag # 打tag标签
1.2、查看镜像列表
Usage: docker images [OPTIONS] [REPOSITORY[:TAG]]# 列出所有镜像 不加参数
➜ docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
reg.test.local/library/info-ad-service 0.0.1-SNAPSHOT 41ee9a10fa37 3 days ago 482MB
reg.test.local/library/info-payment-service 0.0.1-SNAPSHOT 7580f87ec4f1 5 days ago 487MB
reg.test.local/library/info-groupon-service 0.0.1-SNAPSHOT b5353f0c27ca 5 days ago 448MB
reg.test.local/library/info-gateway 0.0.1-SNAPSHOT beea9a106b2b 5 days ago 441MB
k8s.gcr.io/kube-proxy v1.16.10 495a36f501e1 3 weeks ago 116MB
k8s.gcr.io/kube-apiserver v1.16.10 d925057c2fa5 3 weeks ago 170MB
k8s.gcr.io/kube-controller-manager v1.16.10 95b2e4f548f1 3 weeks ago 162MB
k8s.gcr.io/kube-scheduler v1.16.10 e81d6df90318 3 weeks ago 93.6MB# 列出同一仓库下的所有镜像 REPOSITORY/*
➜ docker images k8s.gcr.io/*
REPOSITORY TAG IMAGE ID CREATED SIZE
k8s.gcr.io/kube-proxy v1.16.10 495a36f501e1 3 weeks ago 116MB
k8s.gcr.io/kube-controller-manager v1.16.10 95b2e4f548f1 3 weeks ago 162MB
k8s.gcr.io/kube-apiserver v1.16.10 d925057c2fa5 3 weeks ago 170MB
k8s.gcr.io/kube-scheduler v1.16.10 e81d6df90318 3 weeks ago 93.6MB
k8s.gcr.io/etcd 3.3.15-0 b2756210eeab 9 months ago 247MB
k8s.gcr.io/coredns 1.6.2 bf261d157914 10 months ago 44.1MB
k8s.gcr.io/pause 3.1 da86e6ba6ca1 2 years ago 742kB# 列出同一个镜像
➜ docker images calico/node
REPOSITORY TAG IMAGE ID CREATED SIZE
calico/node v3.13.1 2e5029b93d4a 3 months ago 260MB
calico/node v3.8.2 11cd78b9e13d 10 months ago 189MB
1.3、删除镜像
Usage: docker rmi [OPTIONS] IMAGE [IMAGE...]# 删除镜像很简单直接指定要删除的镜像即可
➜ docker rmi calico/cni:v3.8.2 calico/kube-controllers:v3.8.2 calico/node:v3.8.2 calico/pod2daemon-flexvol:v3.8.2
1.4、搜索镜像
Usage: docker search [OPTIONS] TERM# 搜索出不同仓库下的busybox镜像
➜ docker search busybox
NAME DESCRIPTION STARS OFFICIAL AUTOMATED
busybox Busybox base image. 1918 [OK]
progrium/busybox 71 [OK]
radial/busyboxplus Full-chain, Internet enabled, busybox made f… 31 [OK]
arm32v7/busybox Busybox base image. 8
yauritux/busybox-curl Busybox with CURL 8
armhf/busybox Busybox base image. 6
odise/busybox-curl 4 [OK]
1.5、拉取镜像
1.5.1、Usage
Usage: docker pull [OPTIONS] NAME[:TAG|@DIGEST]
1.5.2、按标签
# 默认标签
# 如果未提供标签，则Docker Engine将使用该:latest标签作为默认标签。此命令将拉出busybox:latest镜像
➜ docker pull busybox
Using default tag: latest
latest: Pulling from library/busybox
76df9210b28c: Pull complete
Digest: sha256:95cf004f559831017cdf4628aaf1bb30133677be8702a8c5f2994629f637a209
Status: Downloaded newer image for busybox:latest
docker.io/library/busybox:latest# 指定标签
➜ docker pull nginx:1.16.1
1.16.1: Pulling from library/nginx
5546cfc92772: Pull complete
50f62e3cdaf7: Pull complete
Digest: sha256:d20aa6d1cae56fd17cd458f4807e0de462caf2336f0b70b5eeb69fcaaf30dd9c
Status: Downloaded newer image for nginx:1.16.1
docker.io/library/nginx:1.16.1
1.5.3、按摘要
使用名称和标签是使用镜像的便捷方法。使用标签时，您可以docker pull再次拉取镜像以确保您具有该镜像的最新版本。例如，docker pull nginx:1.18.0提取最新版本的 nginx 1.18.0 镜像。
在某些情况下，您不希望将镜像更新为较新的版本，而是希望使用镜像的固定版本。Docker使您能够按其摘要提取映像 。当按摘要提取镜像时，您可以确切指定要提取的镜像版本。这样，您可以将镜像"固定"到该版本，并确保所使用的镜像始终相同。
要了解镜像摘要，请先拉取镜像。让我们从 Docker Hub 中获取 nginx 1.18.0 的最新镜像：
➜ docker pull nginx:1.18.0
1.18.0: Pulling from library/nginx
8559a31e96f4: Pull complete
9a38be3aab21: Pull complete
522e5edd83fa: Pull complete
2ccf5a90baa6: Pull complete
Digest: sha256:159aedcc6acb8147c524ec2d11f02112bc21f9e8eb33e328fb7c04b05fc44e1c
Status: Downloaded newer image for nginx:1.18.0
docker.io/library/nginx:1.18.0
拉取完成后，Docker将打出镜像的摘要。在上面的示例中，镜像的摘要为：
Digest: sha256:159aedcc6acb8147c524ec2d11f02112bc21f9e8eb33e328fb7c04b05fc44e1c
当推送到仓库时，Docker也会打出镜像的摘要。如果您想固定到刚推送的镜像版本，这可能会很有用。
按摘要拉取镜像时，请运行以下命令
➜ docker pull nginx@sha256:159aedcc6acb8147c524ec2d11f02112bc21f9e8eb33e328fb7c04b05fc44e1c
sha256:159aedcc6acb8147c524ec2d11f02112bc21f9e8eb33e328fb7c04b05fc44e1c: Pulling from library/nginx
Digest: sha256:159aedcc6acb8147c524ec2d11f02112bc21f9e8eb33e328fb7c04b05fc44e1c
Status: Image is up to date for nginx@sha256:159aedcc6acb8147c524ec2d11f02112bc21f9e8eb33e328fb7c04b05fc44e1c
docker.io/library/nginx@sha256:159aedcc6acb8147c524ec2d11f02112bc21f9e8eb33e328fb7c04b05fc44e1c
1.6、推送镜像
要推送的镜像的名称必须跟要推送到的仓库一致
Usage: docker push [OPTIONS] NAME[:TAG]# 推送 nginx
➜ docker images nginx
REPOSITORY TAG IMAGE ID CREATED SIZE
nginx 1.18.0 9fc56f7e4c11 6 days ago 132MB
nginx 1.16.1 dfcfd8e9a5d3 7 weeks ago 127MB
➜ docker tag nginx:1.16.1 reg.test.local/library/nginx:1.16.1
➜ docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
nginx 1.18.0 9fc56f7e4c11 6 days ago 132MB
nginx 1.16.1 dfcfd8e9a5d3 7 weeks ago 127MB
reg.test.local/library/nginx 1.16.1 dfcfd8e9a5d3 7 weeks ago 127MB
➜ docker push reg.test.local/library/nginx:1.16.1
The push refers to repository [reg.test.local/library/nginx]
c23548ea0b99: Pushed
82068c842707: Pushed
c2adabaecedb: Pushed
1.16.1: digest: sha256:2963fc49cc50883ba9af25f977a9997ff9af06b45c12d968b7985dc1e9254e4b size: 948# 批量推送
# 例如我们要批量推送k8s镜像
➜ kubeadm config images list
I0615 18:19:23.043038 2946627 version.go:251] remote version is much newer: v1.18.3; falling back to: stable-1.16
k8s.gcr.io/kube-apiserver:v1.16.10
k8s.gcr.io/kube-controller-manager:v1.16.10
k8s.gcr.io/kube-scheduler:v1.16.10
k8s.gcr.io/kube-proxy:v1.16.10
k8s.gcr.io/pause:3.1
k8s.gcr.io/etcd:3.3.15-0
k8s.gcr.io/coredns:1.6.2# 脚本批量修改tag并推送
➜ vim batch_tag_push.sh
for i in `kubeadm config images list`
doimageName=${i#k8s.gcr.io/} docker tag k8s.gcr.io/$imageName reg.test.local/google_containers/$imageNamedocker push reg.test.local/google_containers/$imageNamedocker rmi reg.test.local/google_containers/$imageName
done
1.7、镜像历史
Usage: docker history [OPTIONS] IMAGE# 查看镜像历史，每一层命令都会记录
➜ docker history nginx:1.16.1
IMAGE CREATED CREATED BY SIZE COMMENT
dfcfd8e9a5d3 7 weeks ago /bin/sh -c #(nop) CMD ["nginx" "-g" "daemon… 0B
<missing> 7 weeks ago /bin/sh -c #(nop) STOPSIGNAL SIGTERM 0B
<missing> 7 weeks ago /bin/sh -c #(nop) EXPOSE 80 0B
<missing> 7 weeks ago /bin/sh -c ln -sf /dev/stdout /var/log/nginx… 22B
<missing> 7 weeks ago /bin/sh -c set -x && addgroup --system -… 57.5MB
<missing> 7 weeks ago /bin/sh -c #(nop) ENV PKG_RELEASE=1~buster 0B
<missing> 7 weeks ago /bin/sh -c #(nop) ENV NJS_VERSION=0.3.8 0B
<missing> 7 weeks ago /bin/sh -c #(nop) ENV NGINX_VERSION=1.16.1 0B
<missing> 7 weeks ago /bin/sh -c #(nop) LABEL maintainer=NGINX Do… 0B
<missing> 7 weeks ago /bin/sh -c #(nop) CMD ["bash"] 0B
<missing> 7 weeks ago /bin/sh -c #(nop) ADD file:9b8be2b52ee0fa31d… 69.2MB
1.8、镜像提交
通过对正在运行的容器的改变创建镜像
Usage: docker commit [OPTIONS] CONTAINER [REPOSITORY[:TAG]]# 没修改部分
# 先run一个容器
➜ docker run --name mynginx -d nginx:1.16.1
522225bbf8293397789cae9c9a7150ed51927874cce74a8b14722ea57de578be
➜ docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
522225bbf829 nginx:1.16.1 "nginx -g 'daemon of…" 20 seconds ago Up 15 seconds 80/tcp mynginx
# 获取容器IP地址
➜ docker inspect mynginx -f '{{ .NetworkSettings.IPAddress }}'
172.17.0.2
# 没修改前返回的内容
➜ curl 172.17.0.2
<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>body {width: 35em;margin: 0 auto;font-family: Tahoma, Verdana, Arial, sans-serif;}
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p><p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p><p><em>Thank you for using nginx.</em></p>
</body>
</html># 修改部分
# 开始进入容器修改主页面
➜ docker exec -it mynginx /bin/bash
root@522225bbf829:/# cd /usr/share/nginx/html
root@522225bbf829:/usr/share/nginx/html# ls
50x.html index.html
root@522225bbf829:/usr/share/nginx/html# > index.html
root@522225bbf829:/usr/share/nginx/html# echo "Hello, Nginx!" >> index.html # 修改主页
root@522225bbf829:/usr/share/nginx/html# exit
exit
# 修改成功，返回的内容
➜ curl 172.17.0.2
Hello, Nginx!
# 将修改提交为一个新镜像，hello_nginx:v0.0.1
➜ docker commit mynginx hello_nginx:v0.0.1
sha256:c52790c78338e68e6fe9e25b074dbed9af85ab49e176a8802e2e63cb2240933f
➜ docker images hello_nginx
REPOSITORY TAG IMAGE ID CREATED SIZE
hello_nginx v0.0.1 c52790c78338 15 seconds ago 127MB
# 修改成功后的镜像层
➜ docker history hello_nginx:v0.0.1
IMAGE CREATED CREATED BY SIZE COMMENT
c52790c78338 45 seconds ago nginx -g daemon off; 358B # 显示这一层为45秒前创建
dfcfd8e9a5d3 7 weeks ago /bin/sh -c #(nop) CMD ["nginx" "-g" "daemon… 0B
<missing> 7 weeks ago /bin/sh -c #(nop) STOPSIGNAL SIGTERM 0B
<missing> 7 weeks ago /bin/sh -c #(nop) EXPOSE 80 0B
<missing> 7 weeks ago /bin/sh -c ln -sf /dev/stdout /var/log/nginx… 22B
<missing> 7 weeks ago /bin/sh -c set -x && addgroup --system -… 57.5MB
<missing> 7 weeks ago /bin/sh -c #(nop) ENV PKG_RELEASE=1~buster 0B
<missing> 7 weeks ago /bin/sh -c #(nop) ENV NJS_VERSION=0.3.8 0B
<missing> 7 weeks ago /bin/sh -c #(nop) ENV NGINX_VERSION=1.16.1 0B
<missing> 7 weeks ago /bin/sh -c #(nop) LABEL maintainer=NGINX Do… 0B
<missing> 7 weeks ago /bin/sh -c #(nop) CMD ["bash"] 0B
<missing> 7 weeks ago /bin/sh -c #(nop) ADD file:9b8be2b52ee0fa31d… 69.2MB# 验证部分
# 使用新镜像拉起容器
➜ docker run --name hello_nginx -d hello_nginx:v0.0.1
b8120e67551de54037d01238ec6684e833be351b5b27fc8fdeae5f36911823b0
# 获取IP地址
➜ docker inspect hello_nginx -f '{{ .NetworkSettings.IPAddress }}'
172.17.0.4
# 验证内容
➜ curl 172.17.0.4
Hello, Nginx!
1.9、镜像的导出
docker的导出命令有两个save、export
➜ docker save jdk8:v1.1 > jdk8v11.tar
1.10、镜像构建
Usage: docker build [OPTIONS] PATH | URL | -# Dockerfile 层级
➜ tree /target/openjdk:8u201-jre-font
/target/openjdk:8u201-jre-font
└── Dockerfile# 通过 Dockerfile构建镜像
➜ cd /target/openjdk:8u201-jre-font
➜ docker build -t openjdk:8u201-jre-font .
二、docker image
docker发展到后来把命令进行整理了，使用下面这种子命令进行管理。
➜ docker image --helpUsage: docker image COMMANDManage imagesCommands:build Build an image from a Dockerfilehistory Show the history of an imageimport Import the contents from a tarball to create a filesystem imageinspect Display detailed information on one or more imagesload Load an image from a tar archive or STDINls List imagesprune Remove unused imagespull Pull an image or a repository from a registrypush Push an image or a repository to a registryrm Remove one or more imagessave Save one or more images to a tar archive (streamed to STDOUT by default)tag Create a tag TARGET_IMAGE that refers to SOURCE_IMAGERun 'docker image COMMAND --help' for more information on a command.
docker image 详解
➜ docker image build # 根据Dockfile构建镜像
➜ docker image history # 查看镜像历史
➜ docker image import # 导入镜像
➜ docker image inspect # 查看镜像详细信息
➜ docker image load # 导入镜像
➜ docker image ls # 列出镜像
➜ docker image prune # 删除未使用镜像
➜ docker image pull # 拉取镜像
➜ docker image push # 推送镜像
➜ docker image rm # 删除镜像
➜ docker image save # 导出镜像
➜ docker image tag # 给镜像打tag
