Docker 기본 사용법

$ sudo wget -qO- https://get.docker.com/ | sh

$ sudo curl -fsSL https://get.docker.com | sh

$ sudo apt update
$ sudo apt install -y \
    ca-certificates \
    curl \
    gnupg \
    lsb-release
$ sudo mkdir -p /etc/apt/keyrings
$ curl -fsSL https://download.docker.com/linux/ubuntu/gpg | \
    sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
$ echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] \
    https://download.docker.com/linux/ubuntu \
    $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
$ sudo apt update
$ sudo apt install docker-ce docker-ce-cli containerd.io docker-compose-plugin

$ sudo yum install -y yum-utils
$ sudo yum-config-manager \
    --add-repo \
    https://download.docker.com/linux/rhel/docker-ce.repo
$ sudo yum install docker-ce docker-ce-cli containerd.io docker-compose-plugin

$ sudo yum install -y yum-utils
$ sudo yum-config-manager \
    --add-repo \
    https://download.docker.com/linux/centos/docker-ce.repo
$ sudo yum install docker-ce docker-ce-cli containerd.io docker-compose-plugin

 sudo yum install docker

$ sudo systemctl start docker

$ sudo chkconfig docker on

$ sudo docker search ubuntu
NAME                             DESCRIPTION                                     STARS     OFFICIAL   AUTOMATED
ubuntu                           Ubuntu is a Debian-based Linux operating sys…   14904     [OK]
websphere-liberty                WebSphere Liberty multi-architecture images …   288       [OK]
ubuntu-upstart                   DEPRECATED, as is Upstart (find other proces…   112       [OK]
neurodebian                      NeuroDebian provides neuroscience research s…   92        [OK]
ubuntu/nginx                     Nginx, a high-performance reverse proxy & we…   58
open-liberty                     Open Liberty multi-architecture images based…   54        [OK]
ubuntu-debootstrap               DEPRECATED; use "ubuntu" instead                46        [OK]

$ sudo docker pull ubuntu:latest

$ sudo docker images
REPOSITORY   TAG       IMAGE ID       CREATED      SIZE
ubuntu       latest    2dc39ba059dc   7 days ago   77.8MB

$ sudo docker run -i -t --name hello ubuntu /bin/bash

$ sudo docker ps -a
CONTAINER ID   IMAGE     COMMAND       CREATED         STATUS                     PORTS     NAMES
f8b0bf04c340   ubuntu    "/bin/bash"   5 seconds ago   Exited (0) 3 seconds ago             hello

$ sudo docker start hello

$ sudo docker ps
CONTAINER ID   IMAGE     COMMAND       CREATED          STATUS         PORTS     NAMES
f8b0bf04c340   ubuntu    "/bin/bash"   40 seconds ago   Up 4 seconds             hello

$ sudo docker restart hello

$ sudo docker attach hello
root@f8b0bf04c340:/#

$ sudo docker exec hello echo "Hello World"
Hello World

$ sudo docker ps
CONTAINER ID   IMAGE     COMMAND       CREATED         STATUS              PORTS     NAMES
f8b0bf04c340   ubuntu    "/bin/bash"   2 minutes ago   Up About a minute             hello

$ sudo docker stop hello

$ sudo docker ps
CONTAINER ID   IMAGE     COMMAND   CREATED   STATUS    PORTS     NAMES

$ sudo docker rm hello

$ sudo docker ps -a
CONTAINER ID   IMAGE     COMMAND   CREATED   STATUS    PORTS     NAMES

$ sudo docker rmi ubuntu:latest

$ sudo docker images
REPOSITORY   TAG       IMAGE ID   CREATED   SIZE

~$ mkdir example
~$ cd example

FROM ubuntu:22.04
MAINTAINER Foo Bar <foo@bar.com>

RUN apt update
RUN apt install -y nginx
RUN echo "\ndaemon off;" >> /etc/nginx/nginx.conf
RUN chown -R www-data:www-data /var/lib/nginx

VOLUME ["/data", "/etc/nginx/site-enabled", "/var/log/nginx"]

WORKDIR /etc/nginx

CMD ["nginx"]

EXPOSE 80
EXPOSE 443

$ sudo docker build --tag hello:0.1 .

$ sudo docker images
REPOSITORY   TAG       IMAGE ID       CREATED         SIZE
hello        0.1       8307ff628ec8   9 seconds ago   170MB
ubuntu       22.04     2dc39ba059dc   7 days ago      77.8MB

$ sudo docker run --name hello-nginx -d -p 80:80 -v /root/data:/data hello:0.1

$ sudo docker ps
CONTAINER ID   IMAGE       COMMAND   CREATED          STATUS          PORTS                                        NAMES
9f4bb4c4a3d8   hello:0.1   "nginx"   11 seconds ago   Up 10 seconds   0.0.0.0:80->80/tcp, :::80->80/tcp, 443/tcp   hello-nginx

$ sudo docker history hello:0.1
IMAGE          CREATED         CREATED BY                                      SIZE      COMMENT
8307ff628ec8   5 minutes ago   /bin/sh -c #(nop)  EXPOSE 443                   0B
adbb8a7ef64d   5 minutes ago   /bin/sh -c #(nop)  EXPOSE 80                    0B
a405f9d28415   5 minutes ago   /bin/sh -c #(nop)  CMD ["nginx"]                0B
a9726f7e681e   5 minutes ago   /bin/sh -c #(nop) WORKDIR /etc/nginx            0B
78f354dbdbcc   5 minutes ago   /bin/sh -c #(nop)  VOLUME [/data /etc/nginx/…   0B
66f885084c19   5 minutes ago   /bin/sh -c chown -R www-data:www-data /var/l…   0B
5c54eb835f57   5 minutes ago   /bin/sh -c echo "\ndaemon off;" >> /etc/ngin…   1.46kB
9fc2f61ad2f4   5 minutes ago   /bin/sh -c apt install -y nginx                 55.6MB
9c80ad1c1c34   6 minutes ago   /bin/sh -c apt update                           36.2MB
69b49943b930   6 minutes ago   /bin/sh -c #(nop)  MAINTAINER Foo Bar <foo@b…   0B
2dc39ba059dc   7 days ago      /bin/sh -c #(nop)  CMD ["bash"]                 0B
<missing>      7 days ago      /bin/sh -c #(nop) ADD file:a7268f82a86219801…   77.8MB

$ sudo docker cp hello-nginx:/etc/nginx/nginx.conf ./

$ sudo docker commit -a "Foo Bar <foo@bar.com>" -m "add hello.txt" hello-nginx hello:0.2

$ sudo docker images
REPOSITORY   TAG       IMAGE ID       CREATED          SIZE
hello        0.2       011ff3ff87e9   14 seconds ago   170MB
hello        0.1       8307ff628ec8   6 minutes ago    170MB
ubuntu       22.04     2dc39ba059dc   7 days ago       77.8MB

$ sudo docker diff hello-nginx
C /etc
C /etc/nginx
A /etc/nginx/site-enabled
A /data
C /var
C /var/lib
C /var/lib/nginx
A /var/lib/nginx/body
A /var/lib/nginx/fastcgi
A /var/lib/nginx/proxy
A /var/lib/nginx/scgi
A /var/lib/nginx/uwsgi
C /run
A /run/nginx.pid

$ sudo docker inspect hello-nginx
[
    {
        "Id": "9f4bb4c4a3d8698a31507febffba19a655caab5a0ee78452cc2c64ea406af7bd",
        "Created": "2022-09-09T03:11:49.391803068Z",
        "Path": "nginx",
        "Args": [],
        "State": {
            "Status": "running",
            ... 생략 ...
        },
        "Image": "sha256:8307ff628ec8900bc7a80eecc54bf6f21b6019ee96d22ca3e4152a06f704756d",
        ... 생략 ...
        "Name": "/hello-nginx",
        "RestartCount": 0,
        "Driver": "overlay2",
        "Platform": "linux",
        ... 생략 ...
        "HostConfig": {
            ... 생략 ...
            "NetworkMode": "default",
            "PortBindings": {
                "80/tcp": [
                    {
                        "HostIp": "",
                        "HostPort": "80"
                    }
                ]
            },
            ... 생략 ...
        },
        ... 생략 ...
        "Config": {
            "Hostname": "9f4bb4c4a3d8",
            "Domainname": "",
            "User": "",
            "AttachStdin": false,
            "AttachStdout": false,
            "AttachStderr": false,
            "ExposedPorts": {
                "443/tcp": {},
                "80/tcp": {}
            },
            "Tty": false,
            "OpenStdin": false,
            "StdinOnce": false,
            "Env": [
                "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
            ],
            "Cmd": [
                "nginx"
            ],
            "Image": "hello:0.1",
            "Volumes": {
                "/data": {},
                "/etc/nginx/site-enabled": {},
                "/var/log/nginx": {}
            },
            "WorkingDir": "/etc/nginx",
            "Entrypoint": null,
            "OnBuild": null,
            "Labels": {}
        },
        "NetworkSettings": {
            "Bridge": "",
            "SandboxID": "0adee39c61d22d570a50a3e9ba174dc7901ffea732f6aca75e5ea00a330f9fa3",
            "HairpinMode": false,
            "LinkLocalIPv6Address": "",
            "LinkLocalIPv6PrefixLen": 0,
            "Ports": {
                "443/tcp": null,
                "80/tcp": [
                    {
                        "HostIp": "0.0.0.0",
                        "HostPort": "80"
                    },
                    {
                        "HostIp": "::",
                        "HostPort": "80"
                    }
                ]
            },
            ... 생략 ...
        }
    }
]
}]

$ sudo docker run --name db -d mongo

$ sudo docker stop hello-nginx

$ sudo docker run --name web -d -p 80:80 --link db:db nginx

$ sudo docker ps
CONTAINER ID   IMAGE     COMMAND                  CREATED         STATUS         PORTS                               NAMES
a391f7cf7199   nginx     "/docker-entrypoint.…"   9 seconds ago   Up 7 seconds   0.0.0.0:80->80/tcp, :::80->80/tcp   web
abe4e3ffe358   mongo     "docker-entrypoint.s…"   2 minutes ago   Up 2 minutes   27017/tcp                           db

mongodb://db:27017/exampledb

$ sudo dockerd --insecure-registry localhost:5000

{
  "insecure-registries": ["localhost:5000"]
}

$ sudo systemctl restart docker

$ sudo docker pull registry:latest

$ sudo docker run -d -p 5000:5000 --name hello-registry \
    -v /tmp/registry:/tmp/registry \
    registry

$ sudo docker tag hello:0.1 localhost:5000/hello:0.1
$ sudo docker push localhost:5000/hello:0.1

$ sudo docker pull 172.31.23.145:5000/hello:0.1

{
  "insecure-registries": ["localhost:5000", "172.31.23.145:5000"]
}

$ sudo docker images
REPOSITORY                 TAG       IMAGE ID       CREATED          SIZE
hello                      0.2       011ff3ff87e9   29 minutes ago   170MB
172.31.23.145:5000/hello   0.1       8307ff628ec8   35 minutes ago   170MB
hello                      0.1       8307ff628ec8   35 minutes ago   170MB
localhost:5000/hello       0.1       8307ff628ec8   35 minutes ago   170MB
mongo                      latest    d34d21a9eb5b   7 days ago       693MB
ubuntu                     22.04     2dc39ba059dc   7 days ago       77.8MB
nginx                      latest    2b7d6430f78d   2 weeks ago      142MB
registry                   latest    3a0f7b0a13ef   4 weeks ago      24.1MB

$ sudo docker rmi 172.31.23.145:5000/hello:0.1

$ sudo docker stop hello-registry

$ sudo docker pull registry:latest

$ sudo docker run -d -p 5000:5000 --name s3-registry \
   -e REGISTRY_STORAGE=s3 \
   -e REGISTRY_STORAGE_S3_BUCKET=examplebucket10 \
   -e REGISTRY_STORAGE_S3_REGION=ap-northeast-2 \
   -e REGISTRY_STORAGE_S3_ACCESSKEY=AKIABCDEFGHIJKLMNOPQ \
   -e REGISTRY_STORAGE_S3_SECRETKEY=sF4321ABCDEFGHIJKLMNOPqrstuvwxyz21345Afc \
   registry

127.0.0.1 localhost
<레지스트리 서버 IP 주소> registry.example.com

# The following lines are desirable for IPv6 capable hosts
::1 ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts

$ mkdir certs
$ cd certs
~/certs$ openssl genrsa -out ca.key 2048
~/certs$ openssl req -new -x509 -days 365 -key ca.key \
    -subj "/C=CN/ST=GD/L=SZ/O=Acme, Inc./CN=Acme Root CA" \
    -out ca.crt
~/certs$ openssl req -newkey rsa:2048 \
    -nodes -keyout server.key \
    -subj "/C=CN/ST=GD/L=SZ/O=Acme, Inc./CN=registry.example.com" -out server.csr
~/certs$ openssl x509 -req \
    -extfile <(printf "subjectAltName=DNS:registry.example.com") \
    -days 365 -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt
$ cd ..

$ sudo mkdir -p /etc/docker/certs.d/registry.example.com
$ sudo cp certs/ca.crt /etc/docker/certs.d/registry.example.com/ca.crt

$ sudo systemctl restart docker

$ mkdir auth
$ sudo docker run --entrypoint htpasswd --rm httpd:2 -Bbn hellouser hellopassword > auth/htpasswd

$ sudo docker run -d \
  --name registry \
  -v "$(pwd)"/auth:/auth \
  -e REGISTRY_AUTH=htpasswd \
  -e REGISTRY_AUTH_HTPASSWD_REALM="Registry Realm" \
  -e REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd \
  -v "$(pwd)"/certs:/certs \
  -e REGISTRY_HTTP_ADDR=0.0.0.0:443 \
  -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/server.crt \
  -e REGISTRY_HTTP_TLS_KEY=/certs/server.key \
  -p 443:443 \
  registry:2

$ sudo docker login https://registry.example.com
Username: hellouser
Password: hellopassword
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded

$ sudo docker tag hello:0.1 registry.example.com/hello:0.1
$ sudo docker push registry.example.com/hello:0.1
The push refers to repository [registry.example.com/hello]
3fc4e1f2a517: Pushed
4d3d2ac7a313: Pushed
11fb43ff38a5: Pushed
7e6bc37fff8b: Pushed
7f5cbd8cc787: Pushed
0.1: digest: sha256:6b67420328f3527e518eccced8c24ac90e699b022545610f6e18bf873856eb8f size: 1367

$ sudo docker pull registry.example.com/hello:0.1