https://jinnchang.github.io/categories/%E4%BA%91%E5%8E%9F%E7%94%9F%E4%B8%8E%E8%BF%90%E7%BB%B4/Recent content in 云原生与运维 on JinnchangHugoenSun, 19 Apr 2026 22:15:28 +0800https://jinnchang.github.io/posts/docker/Sun, 25 Jan 2026 11:00:00 +0800https://jinnchang.github.io/posts/docker/<blockquote> <p>容器化技术的标准工具，将应用及其依赖打包为可移植的镜像，实现&quot;一次构建，到处运行&quot;。</p> </blockquote> <h2 id="核心概念"> 核心概念 <a class="heading-link" href="#%e6%a0%b8%e5%bf%83%e6%a6%82%e5%bf%b5"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h2> <table> <thead> <tr> <th>概念</th> <th>说明</th> </tr> </thead> <tbody> <tr> <td>镜像（Image）</td> <td>只读模板，包含运行应用所需的代码、库和配置</td> </tr> <tr> <td>容器（Container）</td> <td>镜像的运行实例，隔离的进程空间</td> </tr> <tr> <td>Dockerfile</td> <td>构建镜像的指令文件，定义镜像的每一层</td> </tr> <tr> <td>仓库（Registry）</td> <td>镜像存储和分发的服务，如 Docker Hub</td> </tr> </tbody> </table> <p>关键原理：Docker 基于 Linux 的 <strong>namespace</strong>（进程/网络/文件系统隔离）和 <strong>cgroup</strong>（资源限制）实现轻量级虚拟化，相比虚拟机无需独立内核，启动在秒级。</p> <h2 id="安装配置"> 安装配置 <a class="heading-link" href="#%e5%ae%89%e8%a3%85%e9%85%8d%e7%bd%ae"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h2> <p>以 Ubuntu 为例，使用官方脚本一键安装：</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">curl -fsSL https://get.docker.com <span class="p">|</span> sudo sh </span></span></code></pre></div><p>其他平台见<a href="https://docs.docker.com/engine/install/" class="external-link" target="_blank" rel="noopener">官方安装指南</a>。安装完成后验证：</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">docker --version </span></span><span class="line"><span class="cl">docker run hello-world </span></span></code></pre></div><h2 id="实际使用"> 实际使用 <a class="heading-link" href="#%e5%ae%9e%e9%99%85%e4%bd%bf%e7%94%a8"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h2> <h3 id="场景一从-dockerfile-构建并运行"> 场景一：从 Dockerfile 构建并运行 <a class="heading-link" href="#%e5%9c%ba%e6%99%af%e4%b8%80%e4%bb%8e-dockerfile-%e6%9e%84%e5%bb%ba%e5%b9%b6%e8%bf%90%e8%a1%8c"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h3> <p>创建一个最简单的 Node.js 应用容器：</p>