FROM node:20-alpine
WORKDIR /app
COPY package*.json ./
RUN npm install --production
COPY . .
EXPOSE 3000
CMD ["node", "server.js"]

docker --version
docker run hello-world

# 卸载旧版本（如有）
sudo apt-get remove docker docker-engine docker.io containerd runc

# 安装依赖
sudo apt-get update
sudo apt-get install ca-certificates curl gnupg

# 添加 Docker 官方 GPG key
sudo install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
sudo chmod a+r /etc/apt/keyrings/docker.gpg

# 添加仓库
echo \
  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu \
  $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | \
  sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

# 安装
sudo apt-get update
sudo apt-get install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

# 验证
sudo docker run hello-world

{
  "registry-mirrors": [
    "https://docker.mirrors.ustc.edu.cn",
    "https://hub-mirror.c.163.com",
    "https://mirror.baidubce.com"
  ]
}

sudo systemctl daemon-reload
sudo systemctl restart docker

docker search nginx

docker pull nginx                    # 默认 latest 标签
docker pull nginx:1.27               # 指定版本
docker pull ubuntu:22.04

docker images

docker inspect nginx

docker rmi nginx:1.27                # 按名字:标签
docker rmi 4f0fcc4e60a4              # 按镜像 ID
docker image prune                   # 清理悬空镜像（无标签的）
docker image prune -a                # 清理所有未被使用的镜像

docker tag nginx:latest mynginx:v1

docker run -d -p 8080:80 --name mynginx nginx

docker ps

docker ps -a

docker stop mynginx          # 优雅停止（发送 SIGTERM，10s 后 SIGKILL）
docker start mynginx         # 启动已存在的容器
docker restart mynginx       # 重启
docker rm mynginx            # 删除已停止的容器
docker rm -f mynginx         # 强制删除运行中的容器
docker container prune       # 删除所有已停止的容器

docker exec -it mynginx bash

docker exec -it mynginx sh

docker exec mynginx ls /etc/nginx

docker logs mynginx                  # 全部日志
docker logs -f mynginx               # 跟踪输出（类似 tail -f）
docker logs --tail 100 mynginx      # 最后 100 行
docker logs -t mynginx              # 显示时间戳

docker stats                        # 所有运行中容器的实时资源
docker stats mynginx                # 指定容器

# 容器 -> 宿主机
docker cp mynginx:/etc/nginx/nginx.conf ./nginx.conf

# 宿主机 -> 容器
docker cp ./index.html mynginx:/usr/share/nginx/html/

docker top mynginx

# 创建具名卷
docker volume create mydata

# 启动容器并挂载
docker run -d -p 8080:80 \
  -v mydata:/usr/share/nginx/html \
  --name web \
  nginx

# 查看卷
docker volume ls
docker volume inspect mydata

# 删除卷（需先删除使用它的容器）
docker volume rm mydata
docker volume prune          # 清理所有未被使用的卷

docker run -d -p 8080:80 \
  -v /home/user/code:/usr/share/nginx/html:ro \
  --name web \
  nginx

docker run --tmpfs /tmp alpine

docker network ls

docker run -p 8080:80 nginx        # 映射到 0.0.0.0:8080
docker run -p 127.0.0.1:8080:80 nginx   # 只本机访问
docker run -p 8080:80 nginx        # 同上，最常用

# 创建网络
docker network create mynet

# 启动两个容器加入同一网络
docker run -d --name db --network mynet \
  -e POSTGRES_PASSWORD=123456 \
  postgres:16

docker run -d --name app --network mynet \
  -e DATABASE_URL=postgres://postgres:123456@db:5432/postgres \
  myapp:latest

docker network ls                  # 列出所有网络
docker network inspect mynet     # 查看网络详情
docker network connect mynet web # 把运行中容器加入网络
docker network disconnect mynet web
docker network rm mynet

# 基础镜像
FROM node:20-alpine

# 设置工作目录
WORKDIR /app

# 先拷贝依赖文件（利用缓存）
COPY package*.json ./

# 安装依赖
RUN npm install --production

# 拷贝源代码
COPY . .

# 暴露端口（仅声明，不会真正发布）
EXPOSE 3000

# 容器启动命令
CMD ["node", "server.js"]

docker build -t myapp:v1 .

# 阶段 1：编译
FROM golang:1.22 AS builder
WORKDIR /src
COPY . .
RUN go build -o app

# 阶段 2：运行时
FROM alpine:3.20
COPY --from=builder /src/app /app
CMD ["/app"]

FROM node:20-alpine
WORKDIR /app
COPY package*.json ./
RUN npm ci --only=production
COPY . .
EXPOSE 3000
USER node
CMD ["node", "server.js"]

const http = require('http');
http.createServer((req, res) => {
  res.end('Hello from Docker!');
}).listen(3000);

docker build -t myapp:v1 .
docker run -d -p 3000:3000 --name myapp myapp:v1
curl http://localhost:3000

docker build -t myapp:v1 .                          # 打标签
docker build -t myapp:v1 -f Dockerfile.dev .        # 指定 Dockerfile
docker build --build-arg VERSION=1.2 .              # 传入构建参数
docker build --no-cache .                           # 不使用缓存
docker build --progress=plain .                     # 显示完整构建日志

version: '3.8'

services:
  db:
    image: mysql:8.0
    restart: always
    volumes:
      - dbdata:/var/lib/mysql
    environment:
      MYSQL_ROOT_PASSWORD: examplepass
      MYSQL_DATABASE: wordpress
      MYSQL_USER: wordpress
      MYSQL_PASSWORD: wordpress
    networks:
      - wpnet

  wordpress:
    image: wordpress:latest
    restart: always
    depends_on:
      - db
    ports:
      - "8080:80"
    environment:
      WORDPRESS_DB_HOST: db:3306
      WORDPRESS_DB_USER: wordpress
      WORDPRESS_DB_PASSWORD: wordpress
      WORDPRESS_DB_NAME: wordpress
    networks:
      - wpnet

volumes:
  dbdata:

networks:
  wpnet:

docker compose up -d

docker compose ps

docker compose logs -f

docker compose down            # 停止并删除容器
docker compose down -v         # 同时删除卷

docker compose up -d              # 后台启动所有服务
docker compose down               # 停止并删除
docker compose ps                 # 查看服务状态
docker compose logs -f            # 跟踪日志
docker compose exec web bash      # 进入某个服务容器
docker compose restart web        # 重启某个服务
docker compose pull               # 拉取最新镜像
docker compose build              # 重新构建
docker compose config             # 验证并打印最终配置

services:
  app:
    build: .
    ports:
      - "3000:3000"
    environment:
      - NODE_ENV=production
    depends_on:
      - redis

docker compose -f docker-compose.yml -f docker-compose.dev.yml up

# 登录
docker login

# 打标签（必须包含用户名）
docker tag myapp:v1 yourusername/myapp:v1

# 推送
docker push yourusername/myapp:v1

# 登录（用户名是阿里云账号全名）
docker login registry.cn-hangzhou.aliyuncs.com

# 打标签
docker tag myapp:v1 registry.cn-hangzhou.aliyuncs.com/yourteam/myapp:v1

# 推送
docker push registry.cn-hangzhou.aliyuncs.com/yourteam/myapp:v1

# .github/workflows/docker.yml 简化示例
name: Docker
on:
  push:
    branches: [main]
jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: 登录 Docker Hub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      - name: 构建并推送
        uses: docker/build-push-action@v5
        with:
          push: true
          tags: yourusername/myapp:latest

docker system df                # 查看占用
docker system prune             # 清理所有停止容器、无用网络、悬空镜像
docker system prune -a          # 包括所有未被使用的镜像（慎用）
docker volume prune             # 清理多余卷
docker container prune          # 清理停止的容器
docker image prune -a           # 清理镜像

docker logs container_name
docker ps -a           # 看 STATUS 列，常见 Exited (1) xxx ago

ENV TZ=Asia/Shanghai
RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone

docker run -v /etc/localtime:/etc/localtime:ro ...

# Windows
netstat -ano | findstr :8080

# Linux / macOS
lsof -i :8080

docker network inspect bridge      # 看配置
docker run --network host ...      # 临时用 host 网络排查

{
  "dns": ["8.8.8.8", "1.1.1.1"]
}

COPY package*.json ./
RUN npm install
COPY . .           # 这一层每次都会变，但 npm install 不会重跑

{
  "name": "hello-app",
  "version": "1.0.0",
  "main": "server.js",
  "scripts": {
    "start": "node server.js"
  },
  "dependencies": {
    "express": "^4.19.0"
  }
}

const express = require('express');
const app = express();
const PORT = process.env.PORT || 3000;

app.use(express.static('public'));

app.get('/api/hello', (req, res) => {
  res.json({
    message: 'Hello from Docker!',
    time: new Date().toISOString(),
    hostname: require('os').hostname()
  });
});

app.listen(PORT, () => {
  console.log(`Server running on http://localhost:${PORT}`);
});

<!DOCTYPE html>
<html>
<head><meta charset="utf-8"><title>Hello Docker</title></head>
<body>
  <h1>Hello Docker!</h1>
  <button onclick="fetch('/api/hello').then(r=>r.json()).then(d=>alert(JSON.stringify(d)))">
    调用 API
  </button>
</body>
</html>

# 多阶段示例：本例单阶段即可，留作对比参考
FROM node:20-alpine

# 安装 curl 用于健康检查
RUN apk add --no-cache curl

WORKDIR /app

# 先装依赖
COPY package*.json ./
RUN npm ci --only=production && npm cache clean --force

# 拷贝源码
COPY . .

# 用非 root 用户运行
USER node

EXPOSE 3000

# 健康检查
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
  CMD curl -f http://localhost:3000/api/hello || exit 1

CMD ["node", "server.js"]

docker build -t hello-app:v1 .
docker run -d -p 3000:3000 --name hello hello-app:v1
curl http://localhost:3000/api/hello

services:
  app:
    build: .
    ports:
      - "3000:3000"
    environment:
      - NODE_ENV=production
      - PORT=3000
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:3000/api/hello"]
      interval: 30s
      timeout: 3s
      retries: 3

docker compose up -d
docker compose logs -f
docker compose down

docker images                # 列出镜像
docker pull nginx            # 拉取
docker rmi nginx             # 删除
docker tag a b               # 打标签
docker inspect nginx         # 详情
docker history nginx         # 看各层
docker save -o a.tar nginx   # 导出
docker load -i a.tar         # 导入

docker run -d -p 8080:80 nginx   # 启动
docker ps / docker ps -a          # 查看
docker stop / start / restart
docker rm / docker rm -f
docker logs -f
docker exec -it name bash
docker stats
docker top
docker cp

docker network ls
docker network create mynet
docker network connect mynet web
docker network inspect mynet

docker volume ls
docker volume create mydata
docker volume rm mydata
docker volume inspect mydata

docker system df
docker system prune
docker system info

docker compose up -d
docker compose down
docker compose ps
docker compose logs -f
docker compose exec app bash
docker compose build
docker compose pull