下載地址：鏈接: https://pan.baidu.com/s/1lJbQOkfRw3NIZkUnUCkB_A 提取碼: 8hv1
鏡像制作：
基于容器制作
在容器中完成操作后制作；
基于鏡像制作
編輯一個Dockerfile，而后根據此文件制作；
基于容器制作：
docker commit
docker commit [OPTIONS] CONTAINER [REPOSITORY[:TAG]]
–author, -a
–pause, -p
–message, -m
–change, -c
將鏡像文件導出為tar文件:
docker save
Save one or more images to a tar archive (streamed to STDOUT by default)
docker save [OPTIONS] IMAGE [IMAGE…]
從tar文件導入鏡像 ：
docker load
Load an image from a tar archive or STDIN
docker load [OPTIONS]
–input, -i Read from tar archive file, instead of STDIN
–quiet, -q false Suppress the load output
Docker參考手冊：
https://docs.docker.com/engine/reference/commandline/dockerd/
配置docker守護進程的屬性信息的方法：/etc/docker/daemon.json
每一個可設置的鍵是dockerd的可用的選項，其值為選項的參數；但有些參數不可用于此文件中，例如add-registry,
insecure-registry；
有些選項的參數是數組的格式，需要放置于[]；
官方手冊（完整的可用參數列表）：
https://docs.docker.com/engine/reference/commandline/dockerd/#run-multiple-daemons
{
“authorization-plugins”: [],
2018/8/23 Docker.txt
file:///C:/Users/Administrator/Desktop/Docker.txt
4
/14
“data-root”: “”,
“dns”: [],
“dns-opts”: [],
“dns-search”: [],
“exec-opts”: [],
“exec-root”: “”,
“experimental”: false,
“storage-driver”: “”,
“storage-opts”: [],
“labels”: [],
“live-restore”: true,
“log-driver”: “”,
“log-opts”: {},
“mtu”: 0,
“pidfile”: “”,
“cluster-store”: “”,
“cluster-store-opts”: {},
“cluster-advertise”: “”,
“max-concurrent-downloads”: 3,
“max-concurrent-uploads”: 5,
“default-shm-size”: “64M”,
“shutdown-timeout”: 15,
“debug”: true,
“hosts”: [],
“log-level”: “”,
“tls”: true,
“tlsverify”: true,
“tlscacert”: “”,
“tlscert”: “”,
“tlskey”: “”,
“swarm-default-advertise-addr”: “”,
“api-cors-header”: “”,
“selinux-enabled”: false,
“userns-remap”: “”,
“group”: “”,
“cgroup-parent”: “”,
“default-ulimits”: {},
“init”: false,
“init-path”: “/usr/libexec/docker-init”,
“ipv6”: false,
“iptables”: false,
“ip-forward”: false,
“ip-masq”: false,
“userland-proxy”: false,
“userland-proxy-path”: “/usr/libexec/docker-proxy”,
“ip”: “0.0.0.0”,
“bridge”: “”,
“bip”: “”,
“fixed-cidr”: “”,
“fixed-cidr-v6”: “”,
“default-gateway”: “”,
“default-gateway-v6”: “”,
“icc”: false,
“raw-logs”: false,
“allow-nondistributable-artifacts”: [],
“registry-mirrors”: [],
“seccomp-profile”: “”,
“insecure-registries”: [],
“disable-legacy-registry”: false,
“no-new-privileges”: false,
“default-runtime”: “runc”,
“oom-score-adjust”: -500,
“runtimes”: {
“runc”: {
“path”: “runc”
},
“custom”: {
“path”: “/usr/local/bin/my-runc-replacement”,
“runtimeArgs”: [
“–debug”
]
}
}
}
2018/8/23 Docker.txt
file:///C:/Users/Administrator/Desktop/Docker.txt 5/14
dockerd守護進程的C/S，其默認僅監聽Unix SOcket格式的地址，/var/run/docker.sock；如果使用TCP套接字，
/etc/docker/daemon.json：
“hosts”: [“tcp://0.0.0.0:2375”, “unix:///var/run/docker.sock”]
也可向dockerd直接傳遞“-H|–host”選項；
自定義docker0橋的網絡屬性信息：/etc/docker/daemon.json文件
{
“bip”: “192.168.1.5/24”,
“fixed-cidr”: “10.20.0.0/16”,
“fixed-cidr-v6”: “2001:db8::/64”,
“mtu”: 1500,
“default-gateway”: “10.20.1.1”,
“default-gateway-v6”: “2001:db8:abcd::89”,
“dns”: [“10.20.1.2″,”10.20.1.3”]
}
核心選項為bip，即bridge ip之意，用于指定docker0橋自身的IP地址；其它選項可通過此地址計算得出。
文檔路徑：
https://docs.docker.com/engine/userguide/networking/default_network/custom-docker0/
容器構建示例：
https://github.com/mysql/mysql-docker
容器的資源限制：
CPU:
RAM：
Device：
–device-read-bps value Limit read rate (bytes per second) from a device (default [])
–device-read-iops value Limit read rate (IO per second) from a device (default [])
–device-write-bps value Limit write rate (bytes per second) to a device (default [])
–device-write-iops value Limit write rate (IO per second) to a device (default [])
Docker private Registry的Nginx反代配置方式：
client_max_body_size 0;
location / {
proxy_pass http://registrysrvs;
proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
proxy_redirect off;
proxy_buffering off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
auth_basic “Docker Registry Service”;
auth_basic_user_file “/etc/nginx/.ngxpasswd”;
}
Docker-distribution配置文件格式詳細信息：
https://docs.docker.com/registry/configuration/#list-of-configuration-options
Kubernetes
架構：master/agent
master主機：
kube-apiserver
kube-scheduler
kube-controller-manager
agent主機（node）：
kubelet
2018/8/23 Docker.txt
file:///C:/Users/Administrator/Desktop/Docker.txt 6/14
container runtime(docker/rkt/…)
kube-proxy
容器編排三套解決方案：
kubernetes
mesos+marathon
machine+swarn+compose
Kubernetes：
組件：master, nodes, database(k/v store)
master：apiserver, controller-manager, scheduler
nodes: kubelet, kube-proxy, container runtime
核心術語：
Pod, label, service, ingress
網絡插件：flannel, …
Kubernetes-1.8安裝：
yum 倉庫：
https://yum.kubernetes.io/
https://packages.cloud.google.com/yum/rep