Docker

https://docs.docker.com/reference/cli/docker/ Docker ist ein Tool mit dem man Anwendungen in Containern laufen lassen kann.

Commands

Information

Command	Description
docker ps	List running containers
docker ps -a	List all containers
docker ps -s	List running containers (with CPU / memory)
docker images	List all images
docker inspect <container>	Inspecting Containers
docker events <container>	Containers Events
docker port <container>	Public Ports
docker top <container>	Running Processes
docker stats <container>	Container Resource Usage
docker diff <container>	Lists the changes made to a container.
docker logs <container>	Container Logs

Manipulate

Command	Description
docker exec -it <container-name-or-id> <shell-executable>	Shell des Dockers aufrufen. Shell Beispiel: /bin/bash
docker exec -it <container> bash	Connecting to container
docker stop <container>	Stop a container
docker restart <container>	Restart a container
docker rm <container>	Remove a container
docker port <container>	Shows container’s port mapping
docker top <container>	List processes
docker kill <container>	Kill a container
docker rename <oldName> <newName>	Renaming a Container

Create

docker create [options] IMAGE
  -a, --attach               # attach stdout/err
  -i, --interactive          # attach stdin (interactive)
  -t, --tty                  # pseudo-tty
      --name NAME            # name your image
  -p, --publish 5000:5000    # port map (host:container)
      --expose 5432          # expose a port to containers
  -P, --publish-all          # publish all ports
      --link container:alias # linking
  -v, --volume `pwd`:/app    # mount (absolute paths needed)
  -e, --env NAME=hello       # env vars

Networking

Command	Description
docker network rm MyOverlayNetwork	Removing a network
docker network ls	Listing networks
docker network inspect MyOverlayNetwork	Getting information about a network
docker network connect MyOverlayNetwork nginx	Connecting a running container to a network
docker run -it -d --network=MyOverlayNetwork nginx	Connecting a container to a network when it starts
docker network disconnect MyOverlayNetwork nginx	Disconnecting a container from a network

Clean

Command	Description
docker system prune	Cleans up dangling images, containers, volumes, and networks (ie, not associated with a container)
docker system prune -a	Additionally, remove any stopped containers and all unused images (not just dangling images)

Compose

Command	Description
docker compose up -d	Lädt die Konfiguration der docker-compose.yml aus dem aktuellen Directory und fährt den Container hoch. Durch -d wird der Container im Hintergrund ausgeführt, und die Konsole verlässt den Container nach dem starten wieder
docker compose down	Fährt den Container herunter
docker compose kill	Erzwingt das herunterfahren des Dockers
docker compose pull	Lädt die neueste Version des Docker Images

docker-compose.yml

Mit dieser Datei können Docker Container konfiguriert werden, und die Konfiguration gespeichert werden.

Eine Beispieldatei für eine docker-compose.yml.

version: "<3.9>" # Compose file format version
 
services:
  <service_name>:
    container_name: <container_name>
    image: <image_name>:<tag>
    build:
      context: <pfad/zum/context>
      dockerfile: <Dockerfile>
      args:
        <ARG_KEY>: <ARG_VALUE>
      cache_from:
        - <image:tag>
      cache_to:
        - <type=local,dest=path>
      target: <build_target>
      network: <build_network>
      shm_size: <size>
    pull_policy: <always|missing|never>
    restart: <no|always|on-failure|unless-stopped>
    hostname: <hostname>
    domainname: <domain>
    ipc: <shareable|container:<name>|host|none>
    privileged: <true|false>
    user: "<user>:<group>"
    group_add:
      - <group_id>
    working_dir: <arbeitsverzeichnis>
    entrypoint: ["<befehl>", "<arg1>", "<arg2>"]
    command: ["<befehl>", "<arg1>"]
    tty: <true|false>
    stdin_open: <true|false>
    shm_size: <bytes>
    stop_signal: <SIGTERM>
    stop_grace_period: <30s>
 
    ports:
      - "<host_port>:<container_port>/<tcp|udp|sctp>"
    expose:
      - "<port>"
 
    volumes:
      - "<host_path>:<container_path>:<rw|ro>"
    tmpfs:
      - <pfad>
    configs:
      - source: <config_name>
        target: <ziel_pfad>
        uid: "<uid>"
        gid: "<gid>"
        mode: <0444>
    secrets:
      - source: <secret_name>
        target: <ziel_pfad>
        uid: "<uid>"
        gid: "<gid>"
        mode: <0400>
 
    environment:
      <VAR_NAME>: <VAR_VALUE>
    env_file:
      - <pfad/zur/.env>
 
    networks:
      - <network_name>
 
    depends_on:
      <service_name>:
        condition: <service_started|service_healthy|service_completed_successfully>
        restart: <true|false>
        required: <true|false>
 
    healthcheck:
      test: ["CMD", "<befehl>", "<arg1>"]
      interval: <30s>
      timeout: <10s>
      retries: <3>
      start_period: <5s>
      start_interval: <5s>
      disable: <true|false>
 
    logging:
      driver: <json-file|syslog|journald|gelf|fluentd|awslogs|splunk|etwlogs|gcplogs>
      options:
        <key>: <value>
 
    ulimits:
      nproc: <65535>
      nofile:
        soft: <20000>
        hard: <40000>
 
    security_opt:
      - <label:user:USER>
      - <apparmor:PROFILE>
    cap_add:
      - <CAP_SYS_ADMIN>
    cap_drop:
      - <CAP_NET_RAW>
    sysctls:
      <net.core.somaxconn>: <1024>
 
    labels:
      - "com.example.description=<beschreibung>"
 
    extra_hosts:
      - "<hostname>:<ip>"
 
    dns:
      - <8.8.8.8>
    dns_search:
      - <example.com>
 
    devices:
      - "<host_device>:<container_device>:<rwm>"
    device_cgroup_rules:
      - "c <major>:<minor> <rwm>"
 
    isolation: <default|process|hyperv>
 
configs:
  <config_name>:
    file: <pfad/zur/datei>
 
secrets:
  <secret_name>:
    file: <pfad/zur/secret>
 
networks:
  <network_name>:
    driver: <bridge|overlay|host|none>
    driver_opts:
      <key>: <value>
    ipam:
      driver: <default>
      config:
        - subnet: <172.28.0.0/16>
          gateway: <172.28.5.254>
    external: <true|false>
    name: <netzwerk_name>
 
volumes:
  <volume_name>:
    driver: <local|nfs|...>
    driver_opts:
      <key>: <value>
    external: <true|false>
    name: <volumen_name>