# 在第一次运行时使用，将镜像放到容器中
docker run

# 以后再次启动这个容器时
docker start containerName
docker start docker-mysql-5.6

# 进入一个正在运行的 docker 容器 `[Ctrl-p] + [Ctrl-q]` Exit without shutting down a container
docker exec -it docker-mysql-5.6 bash

docker run --name redis --detach redis:6-alpine

# 设置 TZ=Asia/Shanghai 和 挂载 /etc/localtime
  --env TZ=Asia/Shanghai \
  --volume /etc/localtime:/usr/share/zoneinfo/Asia/Shanghai:ro \

# 或者
  --env TZ=Asia/Shanghai \
  --volume /usr/share/zoneinfo:/usr/share/zoneinfo:ro \
  --volume /etc/localtime:/etc/localtime:ro \

# docker container logs
# [docker container logs | Docker Docs](https://docs.docker.com/reference/cli/docker/container/logs)
#
# Docker stores logs in JSON format by default. The log files are typically located in the /var/lib/docker/containers/<container-id>/<container-id>-json.log
#
# Option    Default    Description
# --details        Show extra details provided to logs
# -f, --follow        Follow log output
# --since        Show logs since timestamp (e.g. 2013-01-02T13:23:37Z) or relative (e.g. 42m for 42 minutes)
# -n, --tail    all    Number of lines to show from the end of the logs
# -t, --timestamps        Show timestamps
# --until        API 1.35+ Show logs before a timestamp (e.g. 2013-01-02T13:23:37Z) or relative (e.g. 42m for 42 minutes)

docker logs --tail 5 --follow <container_name_or_id>
docker logs --since <YYYY-MM-DDTHH:MM:SS> --until <YYYY-MM-DDTHH:MM:SS> <container_name_or_id>

docker logs -f containerID
docker logs --details --since 60m --until 1m -t -f containerID

# Multi-Container Logging
docker compose logs

# export Docker logs to a file
docker logs container_name > container_log.log 2>&1

# 不使用 run 命令
# 基于镜像创建一个容器（container create）
docker container create --name test01 nginx:1.13.5

# 将需要的文件或者目录从容器中拷贝出来
docker container cp test01:/etc/nginx/nginx.conf .

# 使用 run 命令启动 container 后
docker run --name test01 nginx:1.13.5
docker cp test01:/etc/nginx/nginx.conf .

docker exec [container_name] bash -c "[command1] && [command2] && [command3]"


# The -w option specifies the working directory in which docker exec should run the command. Therefore, we can use it in place of the cd command.
docker exec -w [target_directory] [container_name] [command_to_execute]

# instead of chaining the export command and another command such as env in a shell process, we can use the -e or –env option to create environment variables:
docker exec -e [variable=value] -e [variable=value] [container_name] env

# change the user with -u or –user option. For example, if combining commands that switch user and execute whoami
# When using the -u option, we may specify a user id in place of the username or combine user id and group id.
docker exec -u [username] [container_name] whoami


# Redirecting a Script File to a Shell's Input
docker exec -i [container_name] sh < [script_file]

# Redirect a Heredoc Input to a Shell Process
docker exec -i [container_name] bash << EOF
[command1]
[command2]
[command3]
EOF

# Instead of a direct heredoc redirection, we can pipe a heredoc input to docker exec using cat:
cat << EOF | docker exec -i [container_name] bash
[command1]
[command2]
[command3]
EOF

# Using a for Loop or a while Loop

docker compose --help  # see other available commands
docker compose up  # start up your application
docker compose up -d --force-recreate  # run your services in the background
docker compose down  # Stop the application
docker compose down --volumes  # bring everything down, removing the containers entirely

# [docker compose | Docker Docs](https://docs.docker.com/reference/cli/docker/compose/)
-p, --project-name    # Project name  docker compose -p my_project ps -a
-f, --file    # Compose configuration files
--env-file    # Specify an alternate environment file
--dry-run    # Execute command in dry run mode
--project-directory    # Specify an alternate working directory (default: the path of the, first specified, Compose file)

docker compose logs -f

docker run -d --name db \
  -p 5432:5432 \
  -v pgdata:/var/lib/postgresql/data \
  -e POSTGRES_PASSWORD=devpassword \
  -e POSTGRES_DB=mydb \
  --restart unless-stopped \
  postgres:16

# 转换成docker compose的配置文件，便得到了如下结果：
services:
  db:
    image: postgres:16
    container_name: db
    environment:
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_DB: ${POSTGRES_DB}
    volumes:
      - pgdata:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL","pg_isready -U postgres -d ${POSTGRES_DB}"]
      interval: 5s
      timeout: 3s
      retries: 10
    ports:
      - "5432:5432"
    restart: unless-stopped

volumes:
  pgdata:

# check a docker container restart policy
docker inspect <containerID> | grep -A 3 RestartPolicy

# The default restart policy is no. For the created containers use docker update to update restart policy.
# docker update --restart RestartPolicy <containerID>
docker update --restart unless-stopped <containerID>
# updates the restart-policy
docker update --restart=no $(docker ps -a -q)

# --gpus all 或者 --gpus 0,1
docker run --gpus all --name 容器名 -d -t 镜像id

# Ubuntu操作系统 查看NVIDIA Container Toolkit 是否安装
sudo dpkg -l | grep nvidia-container-toolkit

# 配置源
curl -fsSL https://nvidia.github.io/libnvidia-container/gpgkey | sudo gpg --dearmor -o /usr/share/keyrings/nvidia-container-toolkit-keyring.gpg \
  && curl -s -L https://nvidia.github.io/libnvidia-container/stable/deb/nvidia-container-toolkit.list | \
    sed 's#deb https://#deb [signed-by=/usr/share/keyrings/nvidia-container-toolkit-keyring.gpg] https://#g' | \
    sudo tee /etc/apt/sources.list.d/nvidia-container-toolkit.list

sudo apt-get update

# 安装
sudo apt-get install -y nvidia-container-toolkit

# 重启Docker服务
sudo systemctl restart docker

docker images # Show all images in your local repository
# find SHA256_HASH
docker images --digests

docker image inspect --format '{{json .RepoDigests}}' imageName
# ["nginx@sha256:644a70516a26004c97d0d85c7fe1d0c3a67ea8ab7ddf4aff193d9f301670cf36","localhost:5000/library/nginx@sha256:644a70516a26004c97d0d85c7fe1d0c3a67ea8ab7ddf4aff193d9f301670cf36"]
# The RepoDigest field in the image inspect will have a sha256 reference if you pulled the image from a registry
docker image inspect --format '{{index .RepoDigests 0}}' node:latest
docker inspect $(docker ps  | awk '{print $2}' | grep -v ID) | jq .[].RepoTags
# multiple images
docker ps --format '{{.Image}}' | xargs docker image inspect --format '{{if .RepoDigests}}{{index .RepoDigests 0}}{{end}}'

docker commit [OPTIONS] CONTAINER [REPOSITORY[:TAG]]
docker tag server:latest myname/server:latest # Rename image
docker tag IMAGE[:TAG] [REGISTRY_HOST[:REGISTRY_PORT]/]REPOSITORY[:TAG]

# remove container
docker rm <container_id/contaner_name>
docker rm $(docker ps -a -q | grep -v $(docker ps -q)) # Remove all containers from this machine except the running one
docker rm $(docker ps -a -q) # Remove all containers from this machine

# remove image
docker rmi <image_id/image_name ...>
# 清理无用的镜像
docker image ls --format '{{.Repository}}:{{.Tag}}'
docker image rm $(docker image ls --format '{{.Repository}}:{{.Tag}}')
docker image rm $(docker image ls | awk '{print $1 ":" $2}' | grep -v nginx | grep -v pandora)

# clean up unused images. By default, docker image prune only cleans up dangling images. A dangling image is one that is not tagged and is not referenced by any container. [Prune unused Docker objects](https://docs.docker.com/config/pruning/)
docker image prune

docker save <image-id> -o filename # 创建一个镜像的压缩文件，这个文件能够在另外一个主机的Docker上使用. 和export命令不同，这个命令为每一个层都保存了它们的元数据。这个命令只能对镜像生效。
docker load -i filename # Load an image from a tar archive or STDIN

docker export <container-id> # 将 container 创建一个`tar`文件，并且移除了元数据和不必要的层，将多个层整合成了一个层，只保存了当前统一视角看到的内容（译者注：expoxt后的容器再import到Docker中，通过`docker images –tree`命令只能看到一个镜像；而save后的镜像则不同，它能够看到这个镜像的历史镜像）
docker import

docker network ls  # 列出所有网络
docker network inspect  # 查看网络详细信息
docker network create --driver bridge --subnet 192.168.1.0/24 my_network  # 创建一个新网络
docker network rm  # 删除一个或多个网络
docker network connect my_network my_container # 将一个容器连接到一个网络
docker network disconnect  my_network my_container # 将一个容器从一个网络断开
docker network rm $(docker network ls --quiet)  # 清理网络

# Try adding { "dns": ["8.8.8.8", "8.8.4.4"] } in /etc/docker/daemon.json.
docker run -it --dns 8.8.8.8 --dns 8.8.4.4 alpine
docker run -it --add-host internal.example.com:10.10.8.8
docker run -it --network=host

docker context create my-remote-context --docker "host=ssh://user@remote-server-ip"
# 切换到新的上下文
docker context use my-remote-context
# 像操作本地 Docker 一样操作远程服务器
docker ps
# 切换回本地上下文
docker context use default

#forward request and error logs to docker log collector
RUN ln -sf /dev/stdout /var/log/nginx/access.log \
    && ln -sf /dev/stderr /var/log/nginx/error.log

# 宿主机进程 22932
# 通过 docker inspect 查找到对应容器
$ docker ps -q | xargs docker inspect --format '{{.State.Pid}}, {{.ID}}' | grep 22932

# 通过 cgroupfs 找到对应容器
$ cat /etc/22932/cgroup

# 容器环境

# 已知容器中该进程 PID 为 122
# 在容器中找到对应 PID 的信息，在 /proc/$pid/sched 中包含宿主机的信息
$ cat /proc/122/sched
node (7477, #threads: 7)
...
# 宿主机环境

# 7477 就是对应的 global PID，在宿主机中可以找到
# -p 代表指定 PID
# -f 代表打印更多信息
$ ps -fp 7477
UID        PID  PPID  C STIME TTY          TIME CMD
root      7477  7161  0 Jul10 ?        00:00:38 node index.js

# install
curl -LO https://storage.googleapis.com/container-diff/latest/container-diff-linux-amd64 && \
sudo install container-diff-linux-amd64 /usr/local/bin/container-diff
# compare two images
container-diff diff image1 image2 --type=history

docker image rm $(docker image ls | awk '{print $1 ":" $2}' | grep -v nginx)
docker image rm $(docker image ls --format '{{.Repository}}:{{.Tag}}')
# remove images inside a docker
docker exec -it container_name sh -c "docker image rm \$(docker image ls --format '{{.Repository}}:{{.Tag}}')"

# prunes images, containers, and networks. Volumes are not pruned by default, and you must specify the --volumes flag for docker system prune to prune volumes.
docker system prune --filter "until=24h"

# Clean up Docker (this is aggressive, so use with caution)
docker system prune -a

# crontab
1 1 1,15 * * docker exec jenkins-docker sh -c 'echo "--- Cleanup Start: $(date) ---" && docker system prune -a -f --filter "until=24h" && echo "--- Cleanup End: $(    date) ---"' >> /tmp/docker_image_cleanup.log 2>&1

du -sh /data/lib/docker/overlay2/8dee7bf9d3ecca8c90c791498521509a1962bf2a334574cfe2688dd585353b7a
# 6.8G    /data/lib/docker/overlay2/8dee7bf9d3ecca8c90c791498521509a1962bf2a334574cfe2688dd585353b7a

# 根据开头字母 8dee7bf9d3e 查询挂载的容器 id
grep 8dee7bf9d3e /data/lib/docker/image/overlay2/layerdb/mounts/*/mount-id
# /data/lib/docker/image/overlay2/layerdb/mounts/8b98194a4ce7304cc04860ba3457a9538d7c4ed52bdb44a010c56a6deb85f87f/mount-id:8dee7bf9d3ecca8c90c791498521509a1962bf2a334574cfe2688dd585353b7a

# 根据容器id 开头字母 8b98194a 查询容器名称
docker ps | grep 8b98194a
# 8b98194a4ce7   infiniflow/ragflow:v0.18.0-slim  "./entrypoint.sh"  37 hours ago   Up 37 hours  0.0.0.0:8080->80/tcp,   ragflow-server

# /data/lib/docker/volumes/e60b5b4e95839637715849fecf13de5dc92851daca7e9963ae4bc2450e01a3f2

docker ps -a --format "{{.ID}}\t{{.Names}}\t{{.Mounts}}" | grep e60b5b4e
# aa3da2bbc3b6    jenkins-docker  /data/docker/j…,/home/jasolar/…,/data/docker/j…,e60b5b4e958396…,jenkins-docker…

# start a ubuntu container and running bash
docker run -itd ubuntu:14.04 /bin/bash
# start a nginx server with
docker run -d -p 80:80 --name webserver nginx
# start a tensorflow container
docker run -d --name tensorflow tensorflow/tensorflow

docker run --rm --name redis -p 6379:6379 -d redis:6-alpine
docker run --rm --name mysql -e MYSQL_ROOT_PASSWORD=pwd -p 3306:3306 -d mysql:8.0
mysql -h 127.0.0.1 -P 3306 -u root -p'pwd'
docker run --rm --name mongo -d mongo:4.2.7

docker run -it --rm --name postgres postgres:16.3 psql
docker run -d -it --name postgres -e POSTGRES_PASSWORD=password postgres:16.3

# Jenkins with blue ocean
docker run -d -p 8081:8080 -p 50000:50000 -v /data/docker/jenkins/jenkins_home:/var/jenkins_home -v /usr/share/apache-maven:/usr/local/maven -v /etc/localtime:/etc/localtime --name jenkins jenkinsci/blueocean:1.25.5

# windows image
# [dockur/windows: Windows inside a Docker container.](https://github.com/dockur/windows)
docker run -it --rm -p 8006:8006 -e VERSION="11" --device=/dev/kvm --device=/dev/net/tun --cap-add NET_ADMIN --stop-timeout 120 dockurr/windows

#!/bin/bash

docker run --detach \
    --hostname 127.0.0.1 \
    --publish 8443:443 --publish 8080:80 --publish 22:22 \
    --name gitlab \
    --restart always \
    -e TZ=Asia/Shanghai \
    --volume /data/gitlab/config:/etc/gitlab \
    --volume /data/gitlab/logs:/var/log/gitlab \
    --volume /data/gitlab/data:/var/opt/gitlab \
    gitlab/gitlab-ce:8.16.4-ce.0

FROM centos:7
COPY . /data
WORKDIR /data
RUN yum install -y iproute
EXPOSE 8080

CMD ["/usr/sbin/init", ""]

# 创建 image 文件
docker image build -t imageName /path/to/DockerfileFolder
docker run -p 8080:8080 -it imageName /bin/bash

sudo yum install -y yum-utils device-mapper-persistent-data lvm2
sudo yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo

sudo yum install -y docker-ce docker-ce-cli containerd.io
sudo systemctl enable docker
sudo usermod -aG docker $(whoami)
sudo systemctl start docker
sudo docker run hello-world

# data-root default is /var/lib/docker
sudo mkdir -p /etc/docker

sudo tee /etc/docker/daemon.json <<EOF
{
  "log-driver": "json-file",
  "log-opts": {
    "max-size": "500m",
    "max-file": "10",
    "compress": "true"
  },
  "registry-mirrors": [
      "https://hub.uuuadc.top",
      "https://docker.anyhub.us.kg",
      "https://dockerhub.jobcher.com",
      "https://dockerhub.icu",
      "https://docker.ckyl.me",
      "https://docker.awsl9527.cn",
      "https://ud6340vz.mirror.aliyuncs.com",
      "https://ot2k4d59.mirror.aliyuncs.com/"
  ],
  "insecure-registries": [
      "IP:PORT"
  ],
  "data-root":"/data/lib/docker",
  "bip":"192.168.0.1/24",
  "default-address-pools":[
    {"base":"192.169.0.0/16","size":24},
    {"base":"192.170.0.0/16","size":24}
  ]
}
EOF

# 重启服务
# sudo systemctl daemon-reload
sudo systemctl restart docker

# 检查加速器是否生效
docker info | grep -A 2 Mirrors