- \n
- download an image<\/li>\n
- run the image<\/li>\n
- remove the image<\/li>\n
- build a new image<\/li>\n
- monitoring images<\/li>\n<\/ul>\n<\/div>\n
Docker has a store that contains both their official containers as well as community supplied containers.\u00a0 The official containers contain a lot of very large well known software programs.<\/p>\n
\n- \n
- Microsoft SQL server<\/li>\n
- Oracle database<\/li>\n
- Oracle Java 8<\/li>\n
- WordPress<\/li>\n
- Tomcat<\/li>\n
- Owncloud<\/li>\n
- gcc<\/li>\n<\/ul>\n<\/div>\n
The store is important as it contains a list of the containers that are available and what their name is, however, there is one more really important thing in the store.\u00a0 Each of the containers that are listed have the name of the container to be downloaded but more importantly they contain helpful notes.<\/p>\n
![\"\"](\"https:\/\/blog.paranoidprofessor.com\/wp-content\/uploads\/2017\/10\/docker-busybox.jpg\")
<\/p>\nEach container shows the command necessary for pulling down the image to your machine.\u00a0 This is important but other details are listed that might be helpful when actually running the container.<\/p>\n
![\"\"](\"https:\/\/blog.paranoidprofessor.com\/wp-content\/uploads\/2017\/10\/docker-pull-busybox.png\")
<\/p>\nThis might be how to run the image, how to extend the existing container to make a new container, descriptions or perhaps the license for this software.<\/p>\n
The good news is that all of the entries in the store show the command for retrieving that specific image.<\/p>\n
The only inconvenience is that you need elevated privileges to run the docker commands.\u00a0 This is actually as easy as using sudo.\u00a0 Easy but still somewhat inconvenient.\u00a0 Yet this too can be overcome with the tiniest of changes. Quite some time back Docker was changed to have the group docker for the docker daemon.\u00a0 The daemon has ownership of the read\/writable for that socket.<\/p>\n
Thus the solution is to simply add your user to the docker group.\u00a0 This is either done when creating your user or if your user already exists simply use the usermod<\/a> command to add the user to the group.\u00a0 This is explained in a really good post at the howtogeek<\/a> website.<\/p>\n
General usage<\/h2>\n
One of the challenges for production environments as well development environments is to ensure that the exact identical setup exists.\u00a0 The neat thing about docker is that you can pull down all the specific tools by version. You simply provide a host and pull down your containers. If for any reason you need a different version or multiple versions you can run them on the same machine as a container regardless of if this would be possible as a simple install.<\/p>\n
Docker has a lot of different command options which can be used to monitor the containers but the most important one is actually running containers. Simply use the run parameter and then the container is run as a normal process.\u00a0 This actually isn’t very different from some installed program running but the containerization makes this a bit different.<\/p>\n
Containers are kept segregated from the host and from each other which means that they cannot actually do very much unless you allow the container to interact with system.\u00a0 Docker was not only done really well but also very granular.\u00a0 It is possible to allow the container to access a file, directory or even a port.<\/p>\n
The most simple container does not need any input to the outside world, but those types of jobs would be pretty rare.\u00a0 An example of this is the hello-world container provided by docker.<\/p>\n
![\"\"](\"https:\/\/blog.paranoidprofessor.com\/wp-content\/uploads\/2017\/10\/docker-helloworld.png\")
<\/p>\nThis example doesn’t save anything to the file system nor read any input from a port.<\/p>\n
A more common use case would be to either access a directory or to map a configuration file from the host into a container.\u00a0 This is done by passing in the mapping or mappings by using the -v argument.<\/p>\n
-v <host source directory>:<container dest directory><\/pre>\n
This can be done with either a directory or just a simple file – in either case the syntax is the same.\u00a0 The same format is used for mapping a port from the host machine to the container.<\/p>\n
-p <host port>:<container port><\/pre>\n
It is possible to also pass through environment variables to the container as well.<\/p>\n
-e <host variable>:<container variable><\/pre>\n
Interactive container<\/h2>\n
In my opinion one of the neatest uses of containers is to run a graphical program like Eclipse. However as the container itself is not persistent Eclipse in a container is not very useful unless it is exposed to the host.<\/p>\n
In this case a directory from the host is mapped to the container workspace directory. Simply by mapping the local directory to the container makes Eclipse behave exactly as if it was a normal install on the host machine.<\/p>\n
Below is a small script to run the container and map a few directories and an environment variable into the container.\u00a0 This script below is fairly similar to the one in the docker store<\/a> for this container.<\/p>\n
\r\ncd ~cdock\r\nmkdir `pwd`\/.eclipse-docker >\/dev\/null 2>&1\r\n\r\nmyip=`hostname -I | awk -e '{ print ($1)}'`\r\nxhost + $myip\r\n\r\nexport DISPLAY=$ip:0\r\n\r\nCMD="docker run -d --rm -e DISPLAY=$DISPLAY \\\r\n-v \/tmp\/.X11-unix:\/tmp\/.X11-unix \\\r\n-v `pwd`\/.eclipse-docker:\/home\/developer \\\r\n-v \/home\/cdock\/workspace:\/home\/developer\/workspace \\\r\nfgrehm\/eclipse:v4.4.1 "\r\n\r\n$CMD \r\n<\/pre>\nIt is not alwtays obvious what host resources need to be mapped into a container.\u00a0 This particular container is just another example why it is useful to look at the notes that are in the store.<\/p>\n
The eclipse container is a great example of an user interactive task but not all containers have a gui.\u00a0 It is possible to run a program interactively but that program could also be bash.<\/p>\n
docker run -i -t fgrehm\/eclipse:v4.4.1 \/bin\/bash<\/pre>\n
Monitoring Docker<\/h2>\n
There are two different tasks to monitor.\u00a0 The first is what containers are downloaded to your computer.<\/p>\n
![\"\"](\"https:\/\/blog.paranoidprofessor.com\/wp-content\/uploads\/2017\/10\/docker-images-ps.png\")
<\/p>\nThis will however only show the images not which containers are actually running.\u00a0 The “ps” argument, much like the Linux ps command, is used to see which containers are actually running.<\/p>\n
The tasks that are running are probably a daemon or other process that runs in the background.\u00a0 Stopping the process is actually as simple as starting it.\u00a0 Simply ask docker to stop the process for the container id.<\/p>\n
docker stop\u00a0ae527eb50499<\/pre>\n
After stopping a container it will no longer show up in the list of running tasks.\u00a0 However, if you ask right, you can see a list of the containers that have already been stopped.<\/p>\n
![\"\"](\"https:\/\/blog.paranoidprofessor.com\/wp-content\/uploads\/2017\/10\/docker-ps-all.png\")
<\/p>\nIt is possible to clean up this list by removing the stopped processes.<\/p>\n
![\"\"](\"https:\/\/blog.paranoidprofessor.com\/wp-content\/uploads\/2017\/10\/docker-ps-cleanup.png\")
<\/p>\nIf you were limited to pre-created docker containers from the docker store this would still be a very powerful tool, but it is actually possible to either create your own containers or even extend existing containers.<\/p>\n
I will talk about that in my next article on docker.<\/p>\n","protected":false},"excerpt":{"rendered":"
Although docker does have quite a few command options a small subset is all you need for general usage.\u00a0 The number of individual tasks you need is limited the following. download an image run the image remove the image build … Continue reading