1-肖德时-的深入浅出Docker.pdf

深⼊浅出Docker 肖德时@DataMan-Inc Docker contributor InfoQ Docker专栏作者 xds2000@weibo coderxiao@weixin Docker是什么 今天只讲Docker Image Source: /images 容器的历史 Rocket Virtuozzo VServer OpenVZ LXC Linux-utils systemd Libcontainer 2001 2005 2008 2009 2014 Parallels Virtuozzo Containers(睿拓) Linux-VServer OpenVZ LXC Linux-utils(unshare, nsenter) SystemD(systemd-nspawn) Libcontainer (Docker) Rocket (CoreOS) Docker是什么- v1 Docker 是Docker.Inc 公司开源的⼀个基于Linux Kernel Namespace/CGroups技术之上构建的 Container容器引擎, 源代码托管在GitHub 上, 基 于Go语⾔开发并遵从Apache2.0协议开源。 Docker是什么- v2 Image Source: Container Engine是什么 LXC/Libcontainer Libcontainer provides a native Go implementation for creating containers with namespaces, cgroups, capabilities, and filesystem access controls. It allows you to manage the lifecycle of the container performing additional operations after the container is created. 让我们启动⼀个Container Linux Containers CGroups 限制资源 -Cpu -Memory -Blkio -Freezer Namespaces 隔离环境 -MNT、PID、NET、IPC、USER、UTS 困惑：容器如何启动的 export GOPATH=$GOPATH:/your/path/to/libcontainer/vendor cd libcontainer/nsinit go get make mkdir /busybox curl -sSL /jpetazzo/docker-busybox/raw/buildroot- 2014.11/rootfs.tar | tar -xC /busybox cp libcontainer/sample_configs/minimal.json /busybox/container.json cd /busybox nsinit exec --tty --config container.json /bin/bash /var/lib/docker探底 aufs graph repositories-aufs 注意：如果是devicemapper ，则是devicemapper ⺫录和repositories-devicemapper⽂件， graph为共⽤的⺫录。如果是overlayfs, 则是overlay ⺫录和repositories-overlay⽂件 /var/lib/docker探底-Cont. RootFS /var/lib/docker探底-Cont. graph /var/lib/docker探底 repositories-* Bonus Tips Mac Docker Source Build to Bundle folder: -make BIND_DIR=bundles binary -wget https://ge