![\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/09\/20260918202106-6aad9d32969d2.gif\")
<\/p>\n🔥 \u672c\u6587\u4e13\u680f：Docker 🌸\u4f5c\u8005\u4e3b\u9875：\u52aa\u529b\u52aa\u529b\u518d\u52aa\u529bwz<\/p>\n
<\/p>\n
![\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/09\/20260918202106-6aad9d32abc16.png\")
<\/p>\n
![\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/09\/20260918202108-6aad9d34712db.gif\")
<\/p>\n
💪 \u4eca\u65e5\u535a\u5ba2\u52b1\u5fd7\u8bed\u5f55：\u6709\u65f6\u5019\u575a\u6301\u5e76\u4e0d\u662f\u76f8\u4fe1\u81ea\u5df1\u4e00\u5b9a\u4f1a\u8d62，\u800c\u662f\u4e0d\u613f\u610f\u8ba9\u73b0\u5728\u7684\u81ea\u5df1，\u66ff\u672a\u6765\u7684\u81ea\u5df1\u8ba4\u8f93<\/p>\n
Docker \u4e3a\u4ec0\u4e48\u80fd\u591f\u521b\u5efa\u5bb9\u5668？
\n \u2193
\nDocker \u672c\u8eab\u5e76\u6ca1\u6709\u91cd\u65b0\u5b9e\u73b0\u4e00\u5957\u64cd\u4f5c\u7cfb\u7edf
\n \u2193
\n\u771f\u6b63\u7684\u9694\u79bb\u4e0e\u8d44\u6e90\u63a7\u5236\u80fd\u529b\u6765\u81ea Linux Kernel
\n \u2193
\nNamespace：\u9694\u79bb\u201c\u80fd\u770b\u5230\u4ec0\u4e48\u201d
\nCgroup：\u9650\u5236\u201c\u80fd\u4f7f\u7528\u591a\u5c11\u201d
\nMount \/ rootfs：\u6784\u9020\u5bb9\u5668\u6587\u4ef6\u7cfb\u7edf\u89c6\u56fe
\n \u2193
\n\u65e9\u671f：Docker \u501f\u52a9 LXC \u7ec4\u7ec7\u8fd9\u4e9b Linux \u80fd\u529b
\n \u2193
\nLXC \u5bf9\u5916\u63d0\u4f9b create \/ start \/ stop \/ destroy \u7b49\u5bb9\u5668\u8bed\u4e49
\n \u2193
\nDocker \u9010\u6e10\u5e0c\u671b\u81ea\u5df1\u638c\u63e1\u5e95\u5c42\u5bb9\u5668\u5b9e\u73b0
\n \u2193
\nlibcontainer
\n \u2193
\n\u76f4\u63a5\u5c01\u88c5 Linux namespace \/ cgroup \/ mount \u7b49\u80fd\u529b
\n \u2193
\nrunc
\n \u2193
\n\u5c06\u5e95\u5c42\u5bb9\u5668\u80fd\u529b\u505a\u6210\u72ec\u7acb\u3001\u4e00\u6b21\u6027\u7684\u52a8\u4f5c\u6267\u884c\u5668
\n \u2193
\n\u4f46\u662f runc \u5e72\u5b8c\u52a8\u4f5c\u5c31\u9000\u51fa，\u4e0d\u80fd\u627f\u62c5\u957f\u671f\u7ba1\u7406
\n \u2193
\ncontainerd + shim
\n \u2193
\ncontainerd：\u957f\u671f\u7ba1\u7406\u5bb9\u5668\u751f\u547d\u5468\u671f
\nshim：\u957f\u671f\u627f\u63a5\u5177\u4f53\u5bb9\u5668\/task \u7684\u8fd0\u884c\u72b6\u6001
\nrunc：\u9700\u8981\u52a8\u4f5c\u65f6\u4e34\u65f6\u542f\u52a8，\u6267\u884c\u5b8c\u6210\u540e\u9000\u51fa
\n \u2193
\nDocker \u6574\u4f53\u8fdb\u4e00\u6b65\u5f62\u6210 Client \/ Server \u67b6\u6784
\n \u2193
\nDocker CLI
\n \u2193
\nDocker Engine API + HTTP
\n \u2193
\nUnix Domain Socket \/ TCP
\n \u2193
\ndockerd
\n \u2193
\ncontainerd \u2192 shim \u2192 runc \u2192 libcontainer \u2192 Linux Kernel
\n \u2193
\n\u771f\u6b63\u7684\u5bb9\u5668\u8fdb\u7a0b\u8fd0\u884c\u5728 Docker Host
\n \u2193<\/p>\n
\u4e0e\u6b64\u540c\u65f6：
\n\u5e94\u7528\u7a0b\u5e8f + \u4f9d\u8d56\u5e93 + \u914d\u7f6e + \u7528\u6237\u6001 rootfs
\n \u2193
\nDocker Image
\n \u2193
\nRegistry \u8d1f\u8d23\u955c\u50cf\u5b58\u50a8\u4e0e\u5206\u53d1
\n \u2193
\n\u76ee\u6807 Docker Host \u62c9\u53d6\u955c\u50cf\u5e76\u521b\u5efa\u5bb9\u5668
\n \u2193
\n\u591a\u670d\u52a1 \/ \u591a\u8282\u70b9 \/ \u4e91\u8ba1\u7b97 \/ \u5927\u6570\u636e \/ \u5fae\u670d\u52a1\u573a\u666f
\n \u2193
\nDocker \u7684\u4ef7\u503c\u88ab\u8fdb\u4e00\u6b65\u653e\u5927<\/p>\n
\u5728\u521a\u5f00\u59cb\u63a5\u89e6 Docker \u65f6，\u5f88\u5bb9\u6613\u76f4\u63a5\u770b\u5230：<\/p>\n
docker run
\ndocker ps
\ndocker pull
\nDockerfile
\nImage
\nContainer<\/p>\n
\u7136\u540e\u628a Docker \u7406\u89e3\u6210\u4e00\u4e2a\u80fd\u591f\u201c\u542f\u52a8\u5bb9\u5668\u201d\u7684\u547d\u4ee4\u884c\u5de5\u5177\u3002<\/p>\n
\u4f46\u662f\u5982\u679c\u53ea\u4ece\u547d\u4ee4\u5f00\u59cb\u5b66，\u4f1a\u51fa\u73b0\u4e00\u4e2a\u6bd4\u8f83\u660e\u663e\u7684\u95ee\u9898：<\/p>\n
\u547d\u4ee4\u4f1a\u7528\u4e86，\u4f46\u662f\u4e0d\u77e5\u9053 Docker \u4e3a\u4ec0\u4e48\u8981\u8bbe\u8ba1\u51fa runc\u3001containerd\u3001shim\u3001Image\u3001Registry \u8fd9\u4e9b\u4e1c\u897f，\u66f4\u4e0d\u77e5\u9053\u8fd9\u4e9b\u7ec4\u4ef6\u4e4b\u95f4\u7a76\u7adf\u662f\u4ec0\u4e48\u5173\u7cfb\u3002<\/p>\n
\u56e0\u6b64，\u8fd9\u91cc\u4ecd\u7136\u6cbf\u7528\u6b64\u524d\u5b66\u4e60 Docker \u65f6\u5efa\u7acb\u7684\u5fc3\u667a\u6a21\u578b：<\/p>\n
\u4e0d\u4ece\u201c\u5b83\u6709\u4ec0\u4e48\u201d\u5f00\u59cb，\u800c\u4ece\u201c\u5b83\u4e3a\u4ec0\u4e48\u4f1a\u4e00\u6b65\u4e00\u6b65\u53d8\u6210\u73b0\u5728\u8fd9\u6837\u201d\u5f00\u59cb\u3002<\/p>\n
\u9996\u5148\u8981\u660e\u786e\u4e00\u4e2a\u6700\u5e95\u5c42\u7684\u8ba4\u77e5：<\/p>\n
Docker \u5e76\u6ca1\u6709\u51ed\u7a7a\u521b\u9020\u5bb9\u5668\u3002\u5bb9\u5668\u771f\u6b63\u4f9d\u8d56\u7684\u662f Linux \u5185\u6838\u5df2\u7ecf\u63d0\u4f9b\u7684 namespace\u3001cgroup\u3001mount \u7b49\u80fd\u529b\u3002Docker \u505a\u7684\u4e8b\u60c5，\u662f\u628a\u8fd9\u4e9b\u5e95\u5c42\u80fd\u529b\u8fdb\u4e00\u6b65\u7ec4\u7ec7\u3001\u5c01\u88c5\u548c\u4ea7\u54c1\u5316\u3002<\/p>\n
\u6b64\u524d\u5df2\u7ecf\u5b66\u4e60\u8fc7，\u6240\u8c13\u5bb9\u5668\u672c\u8d28\u4e0a\u4ecd\u7136\u662f Linux \u4e2d\u7684\u666e\u901a\u8fdb\u7a0b\u3002<\/p>\n
\u5047\u8bbe\u5bbf\u4e3b\u673a\u4e2d\u8fd0\u884c：<\/p>\n
Host Linux
\n\u251c\u2500\u2500 process A
\n\u251c\u2500\u2500 process B
\n\u2514\u2500\u2500 container process<\/p>\n
\u5bb9\u5668\u8fdb\u7a0b\u5e76\u6ca1\u6709\u81ea\u5df1\u7684 CPU，\u4e5f\u6ca1\u6709\u81ea\u5df1\u7684\u7269\u7406\u5185\u5b58，\u66f4\u6ca1\u6709\u81ea\u5df1\u7684 Linux \u5185\u6838\u3002<\/p>\n
\u5b83\u548c\u5176\u4ed6\u8fdb\u7a0b\u4e00\u6837，\u6700\u7ec8\u90fd\u9700\u8981\u7ecf\u8fc7\u5bbf\u4e3b\u673a Linux Kernel：<\/p>\n
\u5bb9\u5668\u8fdb\u7a0b
\n \u2193
\nLinux Kernel
\n \u2193
\nCPU \/ Memory \/ Disk \/ Network<\/p>\n
\u53ea\u4e0d\u8fc7 Linux \u5185\u6838\u80fd\u591f\u7ed9\u8fd9\u4e2a\u8fdb\u7a0b\u6784\u9020\u4e00\u4e2a\u88ab\u9694\u79bb\u540e\u7684\u8d44\u6e90\u89c6\u56fe\u3002<\/p>\n
\u4f8b\u5982：<\/p>\n
PID Namespace
\n\u2192 \u8ba9\u8fdb\u7a0b\u770b\u5230\u72ec\u7acb\u7684\u8fdb\u7a0b\u7f16\u53f7\u7a7a\u95f4<\/p>\n
Mount Namespace
\n\u2192 \u8ba9\u8fdb\u7a0b\u770b\u5230\u72ec\u7acb\u7684\u6302\u8f7d\u89c6\u56fe<\/p>\n
Network Namespace
\n\u2192 \u8ba9\u8fdb\u7a0b\u770b\u5230\u72ec\u7acb\u7684\u7f51\u7edc\u534f\u8bae\u6808\u89c6\u56fe<\/p>\n
UTS Namespace
\n\u2192 \u8ba9\u8fdb\u7a0b\u770b\u5230\u72ec\u7acb\u7684 hostname \u7b49\u4fe1\u606f<\/p>\n
\u6240\u4ee5 Namespace \u89e3\u51b3\u7684\u662f：<\/p>\n
\u8fd9\u4e2a\u8fdb\u7a0b\u201c\u80fd\u591f\u770b\u5230\u4ec0\u4e48\u201d\u3002<\/p>\n
\u800c Cgroup \u89e3\u51b3\u7684\u662f\u53e6\u5916\u4e00\u4e2a\u95ee\u9898：<\/p>\n
\u8fd9\u4e2a\u8fdb\u7a0b\u7ec4\u6700\u591a\u4f7f\u7528\u591a\u5c11 CPU？
\n\u6700\u591a\u4f7f\u7528\u591a\u5c11\u5185\u5b58？
\n\u80fd\u591f\u4ea7\u751f\u591a\u5c11 I\/O？<\/p>\n
\u4e5f\u5c31\u662f\u8bf4：<\/p>\n
Cgroup \u89e3\u51b3\u7684\u662f\u8fd9\u4e2a\u8fdb\u7a0b\u201c\u80fd\u591f\u4f7f\u7528\u591a\u5c11\u8d44\u6e90\u201d\u3002<\/p>\n
\u56e0\u6b64，\u6700\u5e95\u5c42\u7684\u5bb9\u5668\u6a21\u578b\u5176\u5b9e\u4e00\u76f4\u6ca1\u6709\u53d8\u5316：<\/p>\n
Linux Kernel
\n\u251c\u2500\u2500 Namespace：\u8d44\u6e90\u89c6\u56fe\u9694\u79bb
\n\u251c\u2500\u2500 Cgroup：\u8d44\u6e90\u4f7f\u7528\u9650\u5236
\n\u251c\u2500\u2500 Mount：\u6587\u4ef6\u7cfb\u7edf\u89c6\u56fe
\n\u251c\u2500\u2500 Capability：\u6743\u9650\u62c6\u5206
\n\u2514\u2500\u2500 Seccomp：\u7cfb\u7edf\u8c03\u7528\u9650\u5236<\/p>\n
Docker\u3001LXC\u3001runc \u7b49\u90fd\u4f4d\u4e8e\u8fd9\u4e9b Linux \u80fd\u529b\u7684\u4e0a\u5c42\u3002<\/p>\n
Linux Kernel \u5e76\u4e0d\u5b58\u5728：<\/p>\n
create_container<\/span>(<\/span>)<\/span>;<\/span><\/p>\n \u8fd9\u6837\u4e00\u4e2a\u9ad8\u7ea7\u63a5\u53e3\u3002<\/p>\n \u771f\u6b63\u521b\u5efa\u4e00\u4e2a\u5bb9\u5668\u73af\u5883，\u9700\u8981\u7ec4\u5408\u5927\u91cf\u64cd\u4f5c，\u4f8b\u5982：<\/p>\n \u521b\u5efa Namespace \u56e0\u6b64，Linux \u63d0\u4f9b\u7684\u662f\u4e00\u7ec4\u6bd4\u8f83\u5e95\u5c42\u7684\u201c\u79ef\u6728\u201d\u3002<\/p>\n \u800c\u771f\u6b63\u7684\u5bb9\u5668\u5de5\u5177\u9700\u8981\u5b8c\u6210\u7684\u662f：<\/p>\n \u5c06\u8fd9\u4e9b\u79ef\u6728\u7ec4\u5408\u8d77\u6765，\u5f62\u6210\u201c\u521b\u5efa\u5bb9\u5668\u3001\u542f\u52a8\u5bb9\u5668\u3001\u505c\u6b62\u5bb9\u5668\u3001\u9500\u6bc1\u5bb9\u5668\u201d\u8fd9\u6837\u7684\u9ad8\u7ea7\u8bed\u4e49\u3002<\/p>\n LXC \u53ef\u4ee5\u5148\u7b80\u5355\u7406\u89e3\u6210：<\/p>\n Linux Kernel \u4e5f\u5c31\u662f\u8bf4，LXC \u5c06：<\/p>\n namespace \u8fd9\u4e9b\u5e95\u5c42\u52a8\u4f5c\u7ec4\u7ec7\u8d77\u6765，\u7136\u540e\u5411\u4e0a\u5c42\u66b4\u9732\u66f4\u5bb9\u6613\u4f7f\u7528\u7684\u5bb9\u5668\u751f\u547d\u5468\u671f\u63a5\u53e3\u3002<\/p>\n \u8fd9\u548c\u6211\u4eec\u5b66\u4e60 C++ \u65f6\u7684\u201c\u5c01\u88c5\u201d\u601d\u60f3\u662f\u4e00\u81f4\u7684\u3002<\/p>\n \u4e0d\u8fc7\u8fd9\u91cc\u9700\u8981\u6ce8\u610f：LXC \u7684\u5c01\u88c5\u5e76\u4e0d\u662f\u6b64\u524d\u6211\u4eec\u5b9e\u73b0 Socket \u7c7b\u65f6\u90a3\u79cd\u7279\u522b\u8584\u7684\u4e00\u5c42\u5c01\u88c5\u3002<\/p>\n \u4f8b\u5982\u6211\u4eec\u4ee5\u524d\u53ef\u80fd\u5199：<\/p>\n int<\/span> Socket<\/span>::<\/span>Bind<\/span>(<\/span>.<\/span>.<\/span>.<\/span>)<\/span> {<\/span> \u8fd9\u79cd\u5c01\u88c5\u57fa\u672c\u662f：<\/p>\n \u4e00\u4e2a\u6210\u5458\u51fd\u6570 \u4f46\u662f\u5bb9\u5668\u8fd0\u884c\u65f6\u7684\u5c01\u88c5\u8981\u539a\u5f97\u591a\u3002<\/p>\n \u4e00\u4e2a\u903b\u8f91\u4e0a\u7684：<\/p>\n CreateContainer<\/p>\n \u5185\u90e8\u53ef\u80fd\u5bf9\u5e94：<\/p>\n namespace \u521b\u5efa \u6240\u4ee5\u66f4\u51c6\u786e\u5730\u8bf4：<\/p>\n LXC \u628a Linux \u63d0\u4f9b\u7684\u4e00\u7cfb\u5217\u539f\u5b50\u80fd\u529b\u7ec4\u5408\u6210\u4e86\u4e00\u5957\u771f\u6b63\u5177\u6709\u201c\u5bb9\u5668\u8bed\u4e49\u201d\u7684\u9ad8\u5c42\u63a5\u53e3\u3002<\/p>\n \u65e9\u671f\u53ef\u4ee5\u5148\u62bd\u8c61\u6210：<\/p>\n Docker Docker \u4e0d\u9700\u8981\u81ea\u5df1\u76f4\u63a5\u9762\u5bf9\u5e95\u5c42\u590d\u6742\u7684 namespace\u3001cgroup\u3001mount \u7b49\u7ec6\u8282\u3002<\/p>\n \u5b83\u53ea\u9700\u8981\u544a\u8bc9 LXC：<\/p>\n \u521b\u5efa\u4e00\u4e2a\u5bb9\u5668 \u7136\u540e\u7531 LXC \u5b8c\u6210\u771f\u6b63\u7684\u5e95\u5c42\u5de5\u4f5c\u3002<\/p>\n \u8fd9\u4e2a\u8bbe\u8ba1\u5728\u65e9\u671f\u975e\u5e38\u5408\u7406，\u56e0\u4e3a Docker \u53ef\u4ee5\u5feb\u901f\u5229\u7528 Linux \u5df2\u7ecf\u6210\u719f\u7684\u5bb9\u5668\u6280\u672f\u3002<\/p>\n \u968f\u7740 Docker \u81ea\u8eab\u4e0d\u65ad\u53d1\u5c55，\u5b83\u4f1a\u9010\u6e10\u5e0c\u671b\u66f4\u52a0\u7cbe\u786e\u5730\u63a7\u5236\u5bb9\u5668\u521b\u5efa\u6d41\u7a0b\u3002<\/p>\n \u4f8b\u5982 Docker \u53ef\u80fd\u5e0c\u671b\u81ea\u5df1\u51b3\u5b9a：<\/p>\n Namespace \u5e94\u8be5\u600e\u6837\u7ec4\u5408 \u5982\u679c\u6240\u6709\u4e8b\u60c5\u90fd\u5fc5\u987b\u7ecf\u8fc7 LXC：<\/p>\n Docker \u90a3\u4e48 Docker \u7684\u5e95\u5c42\u5b9e\u73b0\u4f1a\u53d7\u5230 LXC \u62bd\u8c61\u8fb9\u754c\u7684\u9650\u5236\u3002<\/p>\n \u5982\u679c Docker \u60f3\u589e\u52a0\u67d0\u4e9b\u66f4\u6df1\u5c42\u7684\u63a7\u5236\u80fd\u529b，\u5c31\u53ef\u80fd\u9700\u8981：<\/p>\n \u4fee\u6539 LXC \u540c\u65f6，\u4f9d\u8d56\u5916\u90e8 LXC \u8fd8\u610f\u5473\u7740\u8fd0\u884c\u73af\u5883\u4e2d\u9700\u8981\u4fdd\u8bc1：<\/p>\n LXC \u5df2\u7ecf\u5b89\u88c5 \u8fd9\u548c Docker \u81ea\u5df1\u5e0c\u671b\u89e3\u51b3\u7684\u201c\u51cf\u5c11\u73af\u5883\u4f9d\u8d56\u201d\u5728\u4e00\u5b9a\u7a0b\u5ea6\u4e0a\u4e5f\u662f\u51b2\u7a81\u7684\u3002<\/p>\n \u56e0\u6b64 Docker \u540e\u6765\u9010\u6e10\u628a\u8fd9\u90e8\u5206\u80fd\u529b\u638c\u63e1\u5230\u81ea\u5df1\u624b\u4e2d\u3002<\/p>\n \u4e8e\u662f\u51fa\u73b0\u4e86：<\/p>\n libcontainer<\/p>\n \u53ef\u4ee5\u5148\u7406\u89e3\u6210：<\/p>\n Docker \u81ea\u5df1\u5b9e\u73b0\u7684\u4e00\u5957 Linux \u5bb9\u5668\u5e95\u5c42\u5e93\u3002<\/p>\n \u5b83\u540c\u6837\u4e0d\u4f1a\u521b\u9020\u65b0\u7684\u5185\u6838\u673a\u5236，\u800c\u662f\u76f4\u63a5\u7ec4\u7ec7：<\/p>\n namespace \u8fd9\u4e9b Linux Kernel \u5df2\u7ecf\u63d0\u4f9b\u7684\u80fd\u529b\u3002<\/p>\n \u4e8e\u662f\u67b6\u6784\u9010\u6e10\u53d8\u6210：<\/p>\n \u539f\u6765： \u540e\u6765： \u8fd9\u91cc\u6700\u91cd\u8981\u7684\u53d8\u5316\u5e76\u4e0d\u662f\u201c\u5e95\u5c42\u5bb9\u5668\u539f\u7406\u53d1\u751f\u4e86\u53d8\u5316\u201d，\u800c\u662f：<\/p>\n Docker \u5c06\u5e95\u5c42\u5bb9\u5668\u521b\u5efa\u903b\u8f91\u7684\u63a7\u5236\u6743\u4ece LXC \u8f6c\u79fb\u5230\u4e86\u81ea\u5df1\u624b\u4e2d\u3002<\/p>\n libcontainer \u672c\u8d28\u4e0a\u4ecd\u7136\u662f\u7a0b\u5e8f\u5185\u90e8\u8c03\u7528\u7684\u4ee3\u7801\u5e93\u3002<\/p>\n \u5b83\u4e0d\u662f\u4e00\u4e2a\u957f\u671f\u8fd0\u884c\u7684\u5bb9\u5668\u7ba1\u7406\u8fdb\u7a0b\u3002<\/p>\n \u4e5f\u5c31\u662f\u8bf4，\u4e0d\u80fd\u7b80\u5355\u7406\u89e3\u6210：<\/p>\n libcontainer start xxx<\/p>\n \u771f\u6b63\u9700\u8981\u6709\u4e00\u4e2a\u53ef\u6267\u884c\u7a0b\u5e8f，\u5c06\u8fd9\u4e9b\u5e95\u5c42\u80fd\u529b\u7ec4\u7ec7\u6210\u53ef\u4ee5\u88ab\u4e0a\u5c42\u8c03\u7528\u7684\u5bb9\u5668\u52a8\u4f5c\u3002<\/p>\n \u4e8e\u662f\u5f15\u51fa\u4e86：<\/p>\n runc<\/p>\n runc \u5185\u90e8\u96c6\u6210\u4e86 libcontainer \u7684\u80fd\u529b\u3002<\/p>\n \u5f53\u4e0a\u5c42\u9700\u8981\u5b8c\u6210\u67d0\u4e2a\u5177\u4f53\u52a8\u4f5c\u65f6，\u53ef\u4ee5\u542f\u52a8\u4e00\u4e2a runc \u8fdb\u7a0b，\u4f8b\u5982\u6982\u5ff5\u4e0a：<\/p>\n runc create \u7136\u540e：<\/p>\n runc \u6700\u7ec8\u5b8c\u6210\u771f\u6b63\u7684\u5bb9\u5668\u64cd\u4f5c\u3002<\/p>\n \u8fd9\u91cc\u9700\u8981\u5efa\u7acb\u4e00\u4e2a\u975e\u5e38\u91cd\u8981\u7684\u8ba4\u77e5：<\/p>\n runc \u4e0d\u662f\u4e00\u4e2a\u4e00\u76f4\u8fd0\u884c\u5728\u540e\u53f0\u7684\u5bb9\u5668\u7ba1\u7406\u5b88\u62a4\u8fdb\u7a0b，\u800c\u662f\u4e00\u4e2a\u201c\u9700\u8981\u505a\u52a8\u4f5c\u65f6\u542f\u52a8，\u52a8\u4f5c\u5b8c\u6210\u540e\u9000\u51fa\u201d\u7684\u4e00\u6b21\u6027\u6267\u884c\u5668\u3002<\/p>\n \u53ef\u4ee5\u62bd\u8c61\u6210：<\/p>\n \u4e0a\u5c42\u53d1\u51fa\u4e00\u4e2a\u52a8\u4f5c \u6240\u4ee5runc \u5219\u662f：<\/p>\n \u4e3a\u4e86\u5b8c\u6210\u67d0\u4e00\u6b21\u5177\u4f53\u4efb\u52a1\u800c\u4e34\u65f6\u62c9\u8d77\u7684\u6267\u884c\u7a0b\u5e8f\u3002<\/p>\n \u8fd9\u5c31\u7ee7\u7eed\u5f15\u51fa\u4e86：<\/p>\n containerd runc \u505a\u5b8c\u52a8\u4f5c\u5c31\u9000\u51fa，\u56e0\u6b64\u5b83\u5e76\u4e0d\u9002\u5408\u957f\u671f\u7ef4\u62a4：<\/p>\n \u6709\u54ea\u4e9b\u5bb9\u5668 \u4e8e\u662f\u9700\u8981\u4e00\u4e2a\u957f\u671f\u5b58\u5728\u7684\u540e\u53f0\u8fdb\u7a0b\u6765\u5b8c\u6210\u7ba1\u7406\u5de5\u4f5c\u3002<\/p>\n \u8fd9\u91cc\u5c31\u662f：<\/p>\n containerd<\/p>\n \u53ef\u4ee5\u5148\u5f62\u6210\u4e00\u4e2a\u975e\u5e38\u7b80\u5355\u7684\u8ba4\u77e5：<\/p>\n containerd \u800c：<\/p>\n runc \u6240\u4ee5\u6b64\u524d\u6700\u521d\u5efa\u7acb\u7684\u7b80\u5316\u6a21\u578b：<\/p>\n containerd \u5728\u5b66\u4e60\u65e9\u671f\u5e76\u6ca1\u6709\u95ee\u9898\u3002<\/p>\n \u53ea\u662f\u968f\u7740\u7ee7\u7eed\u6df1\u5165，\u4f1a\u53d1\u73b0\u4e2d\u95f4\u8fd8\u5b58\u5728 shim\u3002<\/p>\n \u8fdb\u4e00\u6b65\u5c55\u5f00\u4ee5\u540e：<\/p>\n containerd \u8fd9\u91cc\u53ef\u4ee5\u5148\u4f7f\u7528\u4e00\u4e2a\u7b80\u5316\u6a21\u578b：<\/p>\n \u6bcf\u4e00\u4e2a\u5bb9\u5668\u65c1\u8fb9\u6709\u4e00\u4e2a\u957f\u671f\u5b58\u5728\u7684 shim，\u8d1f\u8d23\u627f\u63a5\u8fd9\u4e2a\u5bb9\u5668\u8fd0\u884c\u671f\u95f4\u7684\u5177\u4f53\u4e8b\u52a1\u3002<\/p>\n \u4e25\u683c\u6765\u8bf4，\u73b0\u4ee3 containerd \u7684 Runtime V2 \u53ef\u4ee5\u8ba9\u4e00\u4e2a shim \u7ba1\u7406\u4e00\u7ec4 task \/ container，\u6240\u4ee5\u201c\u4e00\u5bb9\u5668\u4e00\u4e2a shim\u201d\u4e0d\u662f\u7edd\u5bf9\u89c4\u5219\u3002<\/p>\n \u4f46\u662f\u5728 Docker \u5165\u95e8\u9636\u6bb5，\u7528：<\/p>\n \u4e00\u4e2a\u5bb9\u5668 \u6765\u5efa\u7acb\u5fc3\u667a\u6a21\u578b\u975e\u5e38\u76f4\u89c2\u3002<\/p>\n \u5047\u8bbe\u73b0\u5728\u5df2\u7ecf\u5b58\u5728\u5bb9\u5668 A，\u9700\u8981\u6267\u884c\u4e00\u6b21 exec\u3002<\/p>\n \u53ef\u4ee5\u62bd\u8c61\u6210：<\/p>\n containerd \u5982\u679c\u4ee5\u540e\u53c8\u6267\u884c\u53e6\u5916\u4e00\u4e2a\u52a8\u4f5c：<\/p>\n kill \/ delete \/ exec …<\/p>\n \u5219\u53ef\u4ee5\u518d\u6b21\u4e34\u65f6\u542f\u52a8 runc\u3002<\/p>\n \u6240\u4ee5\u771f\u6b63\u5e94\u8be5\u5f62\u6210\u7684\u751f\u547d\u5468\u671f\u6a21\u578b\u662f：<\/p>\n containerd shim runc \u5bb9\u5668\u8fdb\u7a0b \u56e0\u6b64\u53ef\u4ee5\u628a\u804c\u8d23\u538b\u7f29\u6210：<\/p>\n containerd shim runc libcontainer Linux Kernel \u8fd9\u4e00\u90e8\u5206\u4e0d\u5c5e\u4e8e Docker \u6838\u5fc3\u8fd0\u884c\u539f\u7406，\u4f46\u5b66\u4e60\u65f6\u7ecf\u5e38\u4f1a\u9047\u5230，\u56e0\u6b64\u7b80\u5355\u5efa\u7acb\u8ba4\u77e5\u5373\u53ef\u3002<\/p>\n \u4e00\u4e2a\u5bb9\u6613\u8bb0\u6df7\u7684\u5730\u65b9\u662f：<\/p>\n Docker \u5e76\u4e0d\u662f Google \u540e\u6765\u7528 Go \u91cd\u5199\u51fa\u6765\u7684\u3002<\/p>\n Docker \u81ea\u8eab\u4ece\u65e9\u671f\u5c31\u662f Go \u6280\u672f\u6808\u4e2d\u7684\u91cd\u8981\u9879\u76ee\u3002<\/p>\n Google \u5f53\u65f6\u540c\u6837\u6709\u81ea\u5df1\u7684\u5bb9\u5668\u6280\u672f\u79ef\u7d2f，\u4e5f\u66fe\u5f00\u6e90：<\/p>\n lmctfy \u5b83\u53ef\u4ee5\u7406\u89e3\u6210 Google \u81ea\u5df1\u7684\u4e00\u5957 Linux \u5bb9\u5668\u7ba1\u7406\u65b9\u6848\u3002<\/p>\n \u4f46\u662f\u5b83\u5e76\u4e0d\u662f\u201cGoogle \u7528 Go \u91cd\u5199\u7684 Docker\u201d，\u5176\u6838\u5fc3\u5b9e\u73b0\u4e3b\u8981\u662f C++\u3002<\/p>\n \u8fd9\u91cc\u771f\u6b63\u5e94\u8be5\u5efa\u7acb\u7684\u662f：<\/p>\n LXC \u867d\u7136\u5b9e\u73b0\u65b9\u6848\u4e0d\u540c，\u4f46\u6700\u7ec8\u4ecd\u7136\u90fd\u9700\u8981\u5efa\u7acb\u5728：<\/p>\n Linux Kernel \u8fd9\u4e9b\u80fd\u529b\u4e4b\u4e0a\u3002<\/p>\n \u4e5f\u5c31\u662f\u8bf4：<\/p>\n \u5927\u5bb6\u4e0d\u662f\u5404\u81ea\u53d1\u660e\u4e86\u4e00\u5957\u65b0\u7684\u201c\u5bb9\u5668\u5185\u6838\u201d，\u800c\u662f\u5728\u7528\u6237\u6001\u7528\u4e0d\u540c\u65b9\u5f0f\u7ec4\u7ec7 Linux \u5df2\u7ecf\u63d0\u4f9b\u7684\u5bb9\u5668\u80fd\u529b\u3002<\/p>\n Docker \u540e\u7eed\u9010\u6e10\u5546\u4e1a\u5316\u4ee5\u540e，\u5386\u53f2\u4e0a\u66fe\u7ecf\u4f7f\u7528：<\/p>\n Docker CE Docker EE \u6765\u533a\u5206\u793e\u533a\u65b9\u5411\u548c\u4f01\u4e1a\u5546\u4e1a\u65b9\u5411\u3002<\/p>\n \u5bf9\u4e8e\u5f53\u524d\u5b66\u4e60 Docker \u539f\u7406\u6765\u8bf4，\u6ca1\u6709\u5fc5\u8981\u8fc7\u5ea6\u7ea0\u7ed3\u5546\u4e1a\u7248\u672c\u5386\u53f2\u3002<\/p>\n \u771f\u6b63\u9700\u8981\u5173\u5fc3\u7684\u662f：<\/p>\n \u6211\u4eec\u5b66\u4e60\u7684\u6838\u5fc3\u4ecd\u7136\u662f Docker Engine\u3001\u5bb9\u5668\u8fd0\u884c\u65f6\u3001\u955c\u50cf\u3001\u7f51\u7edc\u3001\u5b58\u50a8\u7b49\u6280\u672f\u672c\u8eab\u3002<\/p>\n \u5728\u5b66\u4e60 Redis\u3001MySQL \u65f6，\u6211\u4eec\u5df2\u7ecf\u975e\u5e38\u719f\u6089 Client \/ Server \u6a21\u578b\u3002<\/p>\n \u4f8b\u5982 Redis：<\/p>\n redis-cli MySQL：<\/p>\n mysql client \u5ba2\u6237\u7aef\u8d1f\u8d23：<\/p>\n \u63a5\u6536\u7528\u6237\u8f93\u5165 \u800c\u771f\u6b63\u7684\u6570\u636e\u5904\u7406\u3001\u8d44\u6e90\u7ba1\u7406\u90fd\u53d1\u751f\u5728\u670d\u52a1\u7aef\u3002<\/p>\n Docker \u4e5f\u662f\u540c\u6837\u7684\u601d\u60f3\u3002<\/p>\n \u53ef\u4ee5\u5148\u62bd\u8c61\u6210：<\/p>\n Docker CLI \u5176\u4e2d：<\/p>\n Docker CLI dockerd \u8fd9\u91cc\u9700\u8981\u5efa\u7acb\u4e00\u4e2a\u975e\u5e38\u5173\u952e\u7684\u8ba4\u77e5：<\/p>\n Docker CLI \u53ea\u662f\u63a7\u5236\u5165\u53e3，\u771f\u6b63\u521b\u5efa\u5bb9\u5668\u3001\u7ba1\u7406\u955c\u50cf\u3001\u914d\u7f6e\u7f51\u7edc\u3001\u8c03\u7528 containerd \/ runc \u7684\u80fd\u529b\u90fd\u4f4d\u4e8e Docker Host，\u4e5f\u5c31\u662f\u670d\u52a1\u7aef\u4e00\u4fa7\u3002<\/p>\n \u8fd9\u4e00\u70b9\u548c MySQL\u3001Redis \u5b8c\u5168\u4e00\u81f4\u3002<\/p>\n \u4f8b\u5982 MySQL \u5ba2\u6237\u7aef\u53d1\u9001：<\/p>\n SELECT<\/span> *<\/span> FROM<\/span> user<\/span>;<\/span><\/p>\n \u771f\u6b63\u67e5\u8be2\u6570\u636e\u7684\u662f：<\/p>\n mysqld<\/p>\n \u56e0\u4e3a：<\/p>\n \u6570\u636e\u5728\u670d\u52a1\u7aef Docker \u540c\u7406\u3002<\/p>\n \u5ba2\u6237\u7aef\u53d1\u9001：<\/p>\n \u201c\u6211\u8981\u542f\u52a8\u4e00\u4e2a\u5bb9\u5668\u201d<\/p>\n \u771f\u6b63\u7684：<\/p>\n namespace \u521b\u5efa \u5168\u90e8\u53d1\u751f\u5728 Docker Host \u4e0a\u3002<\/p>\n \u5047\u8bbe\u7528\u6237\u5728 Shell \u4e2d\u8f93\u5165：<\/p>\n docker<\/span> run nginx<\/p>\n \u4ece\u7528\u6237\u89c6\u89d2\u6765\u770b\u8fd9\u662f\u4e00\u6761\u5b57\u7b26\u4e32\u547d\u4ee4\u3002<\/p>\n \u4f46\u662f\u7a0b\u5e8f\u771f\u6b63\u6267\u884c\u65f6，\u4e00\u822c\u4f1a\u5148\u7531 Shell \u5b8c\u6210\u547d\u4ee4\u884c\u89e3\u6790，\u7136\u540e Docker CLI \u83b7\u5f97\u5bf9\u5e94\u7684\u53c2\u6570，\u4f8b\u5982\u6982\u5ff5\u4e0a：<\/p>\n argv[0] = docker Docker CLI \u518d\u6839\u636e\u8fd9\u4e9b\u53c2\u6570\u7406\u89e3\u7528\u6237\u771f\u6b63\u60f3\u505a\u7684\u4e8b\u60c5\u3002<\/p>\n \u6240\u4ee5\u8fd9\u91cc\u4e0d\u662f：<\/p>\n "docker run nginx" \u800c\u662f：<\/p>\n Docker CLI \u89e3\u6790\u547d\u4ee4\u53c2\u6570 \u8fd9\u91cc\u9700\u8981\u989d\u5916\u6ce8\u610f\u4e00\u70b9：Docker CLI \u672c\u8eab\u5e76\u4e0d\u662f\u4e00\u4e2a\u957f\u671f\u8fd0\u884c\u3001\u6301\u7eed\u7b49\u5f85\u7528\u6237\u8f93\u5165\u7684\u5ba2\u6237\u7aef\u8fdb\u7a0b\u3002\u5b83\u548c\u6211\u4eec\u4e4b\u524d\u63a5\u89e6\u5230\u7684 LXC \u547d\u4ee4\u884c\u5de5\u5177\u6bd4\u8f83\u7c7b\u4f3c，\u901a\u5e38\u662f\u201c\u6267\u884c\u4e00\u6b21\u547d\u4ee4，\u5c31\u542f\u52a8\u4e00\u6b21\u8fdb\u7a0b\u201d\u3002<\/p>\n \u4f8b\u5982\u5f53\u6211\u4eec\u5728 Shell \u4e2d\u6267\u884c：<\/p>\n docker<\/span> run nginx<\/p>\n \u6b64\u65f6 Shell \u4f1a\u542f\u52a8\u4e00\u4e2a docker CLI \u8fdb\u7a0b，\u5e76\u5c06 run\u3001nginx \u7b49\u53c2\u6570\u4f20\u9012\u7ed9\u5b83\u3002Docker CLI \u518d\u89e3\u6790\u8fd9\u4e9b\u53c2\u6570，\u7406\u89e3\u5f53\u524d\u9700\u8981\u6267\u884c\u7684 Docker \u64cd\u4f5c，\u5e76\u6309\u7167 Docker Engine API \u7684\u89c4\u8303\u6784\u9020\u76f8\u5e94\u7684 HTTP \u8bf7\u6c42，\u901a\u8fc7 Unix Domain Socket \u6216 TCP \u53d1\u9001\u7ed9\u540e\u53f0\u957f\u671f\u8fd0\u884c\u7684 dockerd\u3002\u5f53\u672c\u6b21\u8bf7\u6c42\u5904\u7406\u5b8c\u6210\u3001\u7ed3\u679c\u8f93\u51fa\u4e4b\u540e，\u8fd9\u4e2a Docker CLI \u8fdb\u7a0b\u4e5f\u5c31\u968f\u4e4b\u9000\u51fa\u3002<\/p>\n \u6574\u4e2a\u8fc7\u7a0b\u53ef\u4ee5\u7b80\u5355\u7406\u89e3\u4e3a：<\/p>\n \u7528\u6237\u8f93\u5165 docker run nginx \u4e0b\u4e00\u6b21\u518d\u6267\u884c：<\/p>\n docker<\/span> ps<\/span><\/p>\n \u5219\u4f1a\u91cd\u65b0\u542f\u52a8\u4e00\u4e2a\u65b0\u7684 Docker CLI \u8fdb\u7a0b，\u5b8c\u6210\u8fd9\u4e00\u6b21\u8bf7\u6c42\u540e\u518d\u6b21\u9000\u51fa\u3002\u56e0\u6b64，Docker \u67b6\u6784\u4e2d\u771f\u6b63\u957f\u671f\u8fd0\u884c\u7684\u662f\u670d\u52a1\u7aef\u7684 dockerd\u3001containerd \u7b49\u540e\u53f0\u8fdb\u7a0b，\u800c Docker CLI \u53ea\u662f\u4e00\u6b21\u6027\u5b8c\u6210\u67d0\u6b21\u63a7\u5236\u8bf7\u6c42\u7684\u547d\u4ee4\u884c\u5ba2\u6237\u7aef\u3002<\/p>\n \u8fd9\u4e00\u70b9\u548c redis-cli \u7684\u4ea4\u4e92\u6a21\u5f0f\u6709\u6240\u533a\u522b\u3002redis-cli \u53ef\u4ee5\u8fdb\u5165\u4e00\u4e2a\u6301\u7eed\u8fd0\u884c\u7684\u4ea4\u4e92\u73af\u5883，\u4e0d\u65ad\u63a5\u6536 SET\u3001GET \u7b49\u547d\u4ee4；\u800c Docker CLI \u5e38\u89c1\u7684\u4f7f\u7528\u65b9\u5f0f\u5219\u66f4\u63a5\u8fd1：<\/p>\n \u4e00\u6b21 docker \u547d\u4ee4 \u56e0\u6b64，\u540e\u9762\u5206\u6790 Docker \u6574\u4f53\u67b6\u6784\u65f6，\u53ef\u4ee5\u628a Docker CLI \u770b\u6210\u4e00\u4e2a\u77ed\u751f\u547d\u5468\u671f\u7684\u63a7\u5236\u7aef\u5de5\u5177，\u800c\u628a\u771f\u6b63\u957f\u671f\u5b58\u5728\u3001\u8d1f\u8d23\u5bb9\u5668\u7ba1\u7406\u4e0e\u8fd0\u884c\u7684\u4e3b\u4f53\u653e\u5728 Docker \u670d\u52a1\u7aef\u8fd9\u4e00\u4fa7\u3002<\/p>\n \u6b64\u524d\u5b66\u4e60 Redis \u65f6，\u6211\u4eec\u77e5\u9053\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u7aef\u4e4b\u95f4\u4f7f\u7528 RESP\u3002<\/p>\n \u4f8b\u5982：<\/p>\n SET name wang<\/p>\n redis-cli \u4f1a\u5c06：<\/p>\n SET \u8fd9\u4e9b\u547d\u4ee4\u53c2\u6570\u6309\u7167 RESP \u683c\u5f0f\u7ec4\u7ec7，\u7136\u540e\u53d1\u9001\u7ed9 redis-server\u3002<\/p>\n redis-server \u89e3\u6790 RESP \u540e，\u5f97\u5230 Redis \u547d\u4ee4\u548c\u53c2\u6570，\u518d\u6267\u884c\u5bf9\u5e94\u64cd\u4f5c\u3002<\/p>\n Docker \u7684\u601d\u60f3\u7c7b\u4f3c，\u4f46\u5b83\u6ca1\u6709\u4e3a CLI \u548c dockerd \u518d\u8bbe\u8ba1\u4e00\u5957\u7c7b\u4f3c RESP \u7684\u547d\u4ee4\u534f\u8bae，\u800c\u662f\u76f4\u63a5\u5927\u91cf\u5229\u7528 HTTP\u3002<\/p>\n \u56e0\u6b64\u53ef\u4ee5\u5bf9\u6bd4：<\/p>\n Redis：<\/p>\n \u7528\u6237\u547d\u4ee4 Docker：<\/p>\n \u7528\u6237\u547d\u4ee4 \u8fd9\u91cc\u6700\u5bb9\u6613\u8bef\u89e3\u6210：<\/p>\n \u5148\u6784\u9020\u4e00\u79cd Docker \u81ea\u5df1\u7684 API \u62a5\u6587 \u5b9e\u9645\u4e0a\u6ca1\u6709\u5fc5\u8981\u8fd9\u6837\u7406\u89e3\u3002<\/p>\n Docker Engine API \u66f4\u50cf\u4e00\u5957：<\/p>\n \u63a5\u53e3\u89c4\u8303\u3002<\/p>\n \u5b83\u89c4\u5b9a：<\/p>\n \u54ea\u4e2a\u64cd\u4f5c\u5e94\u8be5\u4f7f\u7528\u4ec0\u4e48 HTTP Method \u4f8b\u5982\u6982\u5ff5\u4e0a：<\/p>\n POST \/containers\/create<\/p>\n \u8868\u793a\u521b\u5efa\u5bb9\u5668\u3002<\/p>\n Body \u4e2d\u53ef\u80fd\u643a\u5e26：<\/p>\n {<\/span> \u56e0\u6b64\u6700\u76f4\u63a5\u7684\u6a21\u578b\u5c31\u662f：<\/p>\n Docker CLI \u89e3\u6790\u53c2\u6570 \u8fd9\u91cc\u6ca1\u6709\u5fc5\u8981\u989d\u5916\u63d2\u5165\u4e00\u5c42\u201cDocker \u79c1\u6709\u62a5\u6587\u683c\u5f0f\u201d\u3002<\/p>\n REST API \u4e0d\u662f\u4e00\u79cd\u65b0\u7684\u4f20\u8f93\u534f\u8bae\u3002<\/p>\n \u53ef\u4ee5\u5148\u7b80\u5355\u7406\u89e3\u6210：<\/p>\n \u5229\u7528 HTTP \u5df2\u7ecf\u63d0\u4f9b\u7684 Method\u3001URL\u3001Header\u3001Body \u7b49\u673a\u5236\u6765\u8bbe\u8ba1\u7a0b\u5e8f\u63a5\u53e3\u7684\u4e00\u79cd\u98ce\u683c\u3002<\/p>\n \u4f8b\u5982：<\/p>\n GET \/users\/100 POST \/users DELETE \/users\/100 REST \u5e76\u4e0d\u662f\u5b8c\u5168\u5ffd\u7565 HTTP \u539f\u672c\u7684\u8bed\u4e49，\u53ea\u501f\u4e00\u4e2a HTTP \u5916\u58f3\u3002<\/p>\n \u76f8\u53cd，\u5b83\u901a\u5e38\u4f1a\u5c3d\u91cf\u5229\u7528 HTTP \u5df2\u7ecf\u5b58\u5728\u7684\u8bed\u4e49：<\/p>\n GET DELETE POST \u7136\u540e\u518d\u7531\u5177\u4f53\u4e1a\u52a1\u5b9a\u4e49：<\/p>\n \/users \u8fd9\u4e9b\u8d44\u6e90\u5230\u5e95\u4ee3\u8868\u4ec0\u4e48\u3002<\/p>\n Docker Engine API \u53ef\u4ee5\u7b80\u5355\u7406\u89e3\u6210：<\/p>\n \u4e00\u7ec4\u57fa\u4e8e HTTP \u66b4\u9732\u7684 Docker \u63a7\u5236\u63a5\u53e3，\u5176\u4e2d\u5f88\u591a\u8bbe\u8ba1\u5e26\u6709 REST \u98ce\u683c\u3002<\/p>\n \u6ca1\u6709\u5fc5\u8981\u5728\u5165\u95e8\u9636\u6bb5\u6b7b\u62a0\u5b83\u662f\u5426\u5b8c\u5168\u6ee1\u8db3\u201c\u7eaf REST\u201d\u3002<\/p>\n HTTP \u53ea\u662f\u5e94\u7528\u5c42\u8bf7\u6c42\u683c\u5f0f\u3002<\/p>\n \u771f\u6b63\u628a\u8bf7\u6c42\u5b57\u8282\u4ece Docker CLI \u9001\u5230 dockerd，\u8fd8\u9700\u8981\u5e95\u5c42\u901a\u4fe1\u901a\u9053\u3002<\/p>\n \u5982\u679c Docker CLI \u548c dockerd \u4f4d\u4e8e\u540c\u4e00\u53f0 Linux \u4e3b\u673a，\u9ed8\u8ba4\u5e38\u89c1\u65b9\u5f0f\u662f：<\/p>\n Docker CLI \u8fd9\u91cc\u4f7f\u7528\u7684\u662f：<\/p>\n Unix Domain Socket<\/p>\n \u672c\u8d28\u4e0a\u5c5e\u4e8e\u672c\u673a\u8fdb\u7a0b\u95f4\u901a\u4fe1，\u4e0d\u9700\u8981\u7ecf\u8fc7\u5b8c\u6574\u7684 IP + TCP \u7f51\u7edc\u8def\u5f84\u3002<\/p>\n \u5982\u679c：<\/p>\n Docker CLI \u5728\u673a\u5668 A<\/p>\n dockerd \u5728\u673a\u5668 B<\/p>\n \u90a3\u4e48\u5c31\u53ef\u4ee5\u901a\u8fc7\u7f51\u7edc\u4f7f\u7528 TCP：<\/p>\n \u673a\u5668 A \u6240\u4ee5\u8fd9\u91cc\u53ef\u4ee5\u603b\u7ed3\u4e3a：<\/p>\n Docker Engine API \/ HTTP Unix Domain Socket \/ TCP \u672c\u673a\u5e38\u7528 Unix Domain Socket，\u8de8\u4e3b\u673a\u5219\u9700\u8981 TCP \u7b49\u7f51\u7edc\u901a\u4fe1\u65b9\u5f0f\u3002<\/p>\n \u8fd9\u4e00\u70b9\u975e\u5e38\u91cd\u8981，\u56e0\u4e3a\u540e\u9762\u8ba8\u8bba Docker \u90e8\u7f72\u65f6，\u5f88\u5bb9\u6613\u4e0d\u81ea\u89c9\u5730\u628a\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u7aef\u6df7\u5728\u4e00\u8d77\u3002<\/p>\n \u5047\u8bbe：<\/p>\n \u673a\u5668 A \u673a\u5668 B \u6b64\u65f6 A \u53d1\u9001：<\/p>\n \u542f\u52a8\u5bb9\u5668<\/p>\n \u771f\u6b63\u6267\u884c：<\/p>\n containerd \u7684\u662f\u673a\u5668 B\u3002<\/p>\n \u56e0\u4e3a：<\/p>\n runc \u5728\u670d\u52a1\u7aef \u6240\u4ee5\u771f\u6b63\u7684\u5bb9\u5668\u8fdb\u7a0b\u81ea\u7136\u4e5f\u8fd0\u884c\u5728\u673a\u5668 B\u3002<\/p>\n \u5b8c\u6574\u94fe\u6761\u662f：<\/p>\n \u673a\u5668 A：Docker CLI \u56e0\u6b64\u540e\u7eed\u5b66\u4e60 Docker \u539f\u7406\u65f6，\u5ba2\u6237\u7aef\u8fd9\u4e00\u4fa7\u5176\u5b9e\u53ef\u4ee5\u9010\u6e10\u6298\u53e0\u6389\u3002<\/p>\n \u771f\u6b63\u9700\u8981\u91cd\u70b9\u5173\u5fc3\u7684\u662f：<\/p>\n Docker Host \u4e5f\u5c31\u662f\u8bf4：<\/p>\n \u5ba2\u6237\u7aef\u53ea\u662f\u63a7\u5236\u7aef；\u5bb9\u5668\u771f\u6b63\u7684\u8fd0\u884c\u3001\u8d44\u6e90\u9694\u79bb\u3001\u955c\u50cf\u4f7f\u7528\u4ee5\u53ca\u751f\u547d\u5468\u671f\u7ba1\u7406，\u5168\u90fd\u53d1\u751f\u5728 Docker \u670d\u52a1\u7aef\u6240\u5728\u7684\u8282\u70b9\u3002<\/p>\n Docker \u6700\u5f00\u59cb\u60f3\u89e3\u51b3\u7684\u95ee\u9898\u4e4b\u4e00，\u5c31\u662f：<\/p>\n \u7a0b\u5e8f\u6362\u4e00\u53f0\u673a\u5668\u4ee5\u540e\u8fd8\u80fd\u4e0d\u80fd\u76f4\u63a5\u8fd0\u884c？<\/p>\n \u4e00\u4e2a C++ \u670d\u52a1\u5e76\u4e0d\u662f\u53ea\u6709\u4e00\u4e2a\u53ef\u6267\u884c\u6587\u4ef6\u3002<\/p>\n \u5b83\u53ef\u80fd\u8fd8\u4f9d\u8d56：<\/p>\n server \u5982\u679c\u6bcf\u90e8\u7f72\u5230\u4e00\u53f0\u65b0\u673a\u5668\u90fd\u91cd\u65b0：<\/p>\n \u5b89\u88c5\u4f9d\u8d56 \u90a3\u4e48\u8282\u70b9\u8d8a\u591a，\u90e8\u7f72\u6210\u672c\u8d8a\u9ad8，\u4e5f\u8d8a\u5bb9\u6613\u51fa\u73b0\u73af\u5883\u4e0d\u4e00\u81f4\u3002<\/p>\n \u56e0\u6b64 Docker \u5e0c\u671b\u628a：<\/p>\n \u53ef\u6267\u884c\u7a0b\u5e8f \u63d0\u524d\u51c6\u5907\u597d\u3002<\/p>\n \u8fd9\u5c31\u5f15\u51fa\u4e86：<\/p>\n Docker Image<\/p>\n \u8fd9\u91cc\u9700\u8981\u975e\u5e38\u6ce8\u610f：<\/p>\n \u955c\u50cf\u4e0d\u4f1a\u5305\u542b\u4e00\u5957\u72ec\u7acb\u7684 Linux Kernel\u3002<\/p>\n \u4f46\u662f\u5b83\u53ef\u4ee5\u5305\u542b\u4e00\u5957\u770b\u8d77\u6765\u5f88\u50cf\u67d0\u4e2a Linux \u53d1\u884c\u7248\u7684\u7528\u6237\u6001\u6587\u4ef6\u7cfb\u7edf，\u4f8b\u5982：<\/p>\n \/ \u6bd4\u5982\u4e00\u4e2a Ubuntu \u955c\u50cf\u4e2d\u53ef\u80fd\u5305\u542b：<\/p>\n \/bin\/bash \u8fd9\u4e9b\u5c5e\u4e8e：<\/p>\n \u7528\u6237\u6001 rootfs<\/p>\n \u4f46\u662f\u4e0d\u4f1a\u5305\u542b\u4e00\u4e2a\u72ec\u7acb\u5185\u6838\u3002<\/p>\n \u771f\u6b63\u8fd0\u884c\u65f6\u4ecd\u7136\u662f：<\/p>\n \u955c\u50cf\u63d0\u4f9b： \u6b64\u524d\u5df2\u7ecf\u5b66\u4e60\u8fc7：<\/p>\n \u5bb9\u5668\u8fdb\u7a0b\u9700\u8981\u770b\u5230\u4e00\u5957\u72ec\u7acb\u7684\u6587\u4ef6\u7cfb\u7edf\u89c6\u56fe<\/p>\n \u90a3\u4e48\u8fd9\u5957\u6587\u4ef6\u4ece\u54ea\u91cc\u6765？<\/p>\n \u5176\u4e2d\u5f88\u91cd\u8981\u7684\u4e00\u90e8\u5206\u5c31\u662f\u955c\u50cf\u63d0\u4f9b\u7684 rootfs\u3002<\/p>\n \u53ef\u4ee5\u62bd\u8c61\u6210：<\/p>\n Docker Image \u56e0\u6b64：<\/p>\n Image Namespace Cgroup \u4e09\u8005\u662f\u4e0d\u540c\u5c42\u6b21\u7684\u95ee\u9898\u3002<\/p>\n \u955c\u50cf\u672c\u8eab\u53ea\u662f\u9759\u6001\u6570\u636e\u3002<\/p>\n \u4f8b\u5982：<\/p>\n nginx image<\/p>\n \u653e\u5728\u78c1\u76d8\u4e2d，\u5b83\u5e76\u4e0d\u4f1a\u81ea\u5df1\u6267\u884c\u3002<\/p>\n \u53ea\u6709 Docker \u6839\u636e\u8fd9\u4e2a\u955c\u50cf\u521b\u5efa\u771f\u6b63\u7684\u8fdb\u7a0b\u4ee5\u540e，\u624d\u5f62\u6210\u8fd0\u884c\u4e2d\u7684\u5bb9\u5668\u3002<\/p>\n \u6240\u4ee5\u53ef\u4ee5\u5148\u7c7b\u6bd4：<\/p>\n Image Container \u4e00\u4e2a\u955c\u50cf\u5b8c\u5168\u53ef\u4ee5\u521b\u5efa\u591a\u4e2a\u5bb9\u5668：<\/p>\n nginx image \u8fd9\u4e9b\u5bb9\u5668：<\/p>\n \u8fdb\u7a0b\u4e0d\u540c \u4f46\u662f\u90fd\u53ef\u4ee5\u5171\u4eab\u540c\u4e00\u4e2a\u955c\u50cf\u4f5c\u4e3a\u57fa\u7840\u3002<\/p>\n \u56e0\u6b64，\u5f53\u524d\u9636\u6bb5\u6700\u91cd\u8981\u7684\u955c\u50cf\u8ba4\u77e5\u53ef\u4ee5\u538b\u7f29\u6210\u4e00\u53e5：<\/p>\n Docker Image \u662f\u4e00\u4efd\u9759\u6001\u3001\u53ea\u8bfb\u7684\u5bb9\u5668\u8fd0\u884c\u6a21\u677f，\u5305\u542b\u5e94\u7528\u7a0b\u5e8f\u3001\u4f9d\u8d56\u5e93\u3001\u914d\u7f6e\u4ee5\u53ca\u7528\u6237\u6001 rootfs；\u771f\u6b63\u521b\u5efa\u5bb9\u5668\u65f6，\u518d\u7ed3\u5408\u5bbf\u4e3b\u673a Linux Kernel \u63d0\u4f9b\u7684 Namespace\u3001Cgroup \u7b49\u80fd\u529b\u542f\u52a8\u4e1a\u52a1\u8fdb\u7a0b\u3002<\/p>\n \u7406\u89e3\u955c\u50cf\u4ee5\u540e，Registry \u5c31\u975e\u5e38\u81ea\u7136\u4e86\u3002<\/p>\n \u5047\u8bbe\u5f00\u53d1\u673a A \u5df2\u7ecf\u5236\u4f5c\u51fa\u4e86：<\/p>\n myapp:v1<\/p>\n \u5982\u679c\u9700\u8981\u5c06\u5b83\u90e8\u7f72\u5230：<\/p>\n Node-B \u90a3\u4e48\u8fd9\u4e9b\u8282\u70b9\u90fd\u9700\u8981\u5148\u83b7\u5f97\u540c\u4e00\u4efd\u955c\u50cf\u3002<\/p>\n \u5f53\u7136\u53ef\u4ee5\u624b\u52a8\u590d\u5236，\u4f46\u662f\u968f\u7740\u8282\u70b9\u6570\u91cf\u589e\u52a0，\u8fd9\u79cd\u65b9\u5f0f\u5f88\u5feb\u5c31\u4f1a\u53d8\u5f97\u4e0d\u53ef\u7ef4\u62a4\u3002<\/p>\n \u56e0\u6b64\u9700\u8981\u4e00\u4e2a\u4e13\u95e8\u8d1f\u8d23：<\/p>\n \u5b58\u50a8\u955c\u50cf \u7684\u8fdc\u7a0b\u670d\u52a1\u3002<\/p>\n \u8fd9\u5c31\u662f：<\/p>\n Registry<\/p>\n \u53ef\u4ee5\u5148\u7c7b\u6bd4：<\/p>\n GitHub \u767e\u5ea6\u7f51\u76d8 Docker Registry Registry \u5f53\u524d\u9636\u6bb5\u6700\u6838\u5fc3\u7684\u4e24\u4e2a\u52a8\u4f5c\u5c31\u662f：<\/p>\n push pull \u4e8e\u662f\u90e8\u7f72\u6d41\u7a0b\u53d8\u6210：<\/p>\n \u5f00\u53d1 \/ \u6784\u5efa\u8282\u70b9 \u6240\u4ee5：<\/p>\n Registry \u4e0d\u8d1f\u8d23\u8fd0\u884c\u5bb9\u5668\u3002\u5b83\u53ea\u662f\u955c\u50cf\u7684\u5b58\u50a8\u548c\u5206\u53d1\u4e2d\u5fc3\u3002<\/p>\n \u771f\u6b63\u7684\u5bb9\u5668\u4ecd\u7136\u7531\u76ee\u6807 Docker Host \u81ea\u5df1\u521b\u5efa\u3002<\/p>\n Registry \u4e0d\u53c2\u4e0e：<\/p>\n namespace \u8fd9\u4e9b\u8fd0\u884c\u65f6\u52a8\u4f5c\u3002<\/p>\n \u5b66\u4e60\u521d\u671f\u53ef\u4ee5\u770b\u5230\u5178\u578b\u573a\u666f：<\/p>\n \u5f00\u53d1\u673a \u4f46\u662f\u4ece\u672c\u8d28\u4e0a\u8bf4，\u53ea\u8981\u62e5\u6709\u6743\u9650，\u4efb\u4f55 Docker Host \u90fd\u53ef\u4ee5：<\/p>\n push \u6240\u4ee5\u66f4\u51c6\u786e\u7684\u5173\u7cfb\u662f：<\/p>\n Docker Host \u2194 Registry<\/p>\n \u800c\u4e0d\u662f Registry \u5929\u7136\u7ed1\u5b9a\u201c\u5ba2\u6237\u7aef\u201d\u6216\u8005\u201c\u670d\u52a1\u7aef\u201d\u89d2\u8272\u3002<\/p>\n \u5f53\u524d\u9636\u6bb5\u8ba4\u8bc6\u5230\u8fd9\u91cc\u5c31\u8db3\u591f\u4e86，\u540e\u9762\u518d\u7ee7\u7eed\u6df1\u5165：<\/p>\n Repository \u8fd9\u4e9b\u955c\u50cf\u4f53\u7cfb\u4e2d\u7684\u6982\u5ff5\u3002<\/p>\n \u7ecf\u8fc7\u524d\u9762\u7684\u94fa\u57ab，\u73b0\u5728\u518d\u770b Docker \u67b6\u6784\u5c31\u4e0d\u4f1a\u53ea\u770b\u5230\u4e00\u5806\u540d\u8bcd\u3002<\/p>\n \u8bf4\u660e： \u4e0a\u56fe\u7528\u4e8e\u8868\u8fbe\u6574\u4f53\u5fc3\u667a\u6a21\u578b，\u91cd\u70b9\u662f\u201c\u63a7\u5236\u94fe\u8def\u3001\u8fd0\u884c\u65f6\u94fe\u8def\u548c\u955c\u50cf\u5206\u53d1\u94fe\u8def\u201d\u7684\u804c\u8d23\u5212\u5206\u3002\u5b9e\u9645\u5b9e\u73b0\u4e2d，Docker CLI \u7684 push \/ pull \u4ecd\u7136\u9996\u5148\u662f\u5bf9 Docker Engine \u53d1\u8d77\u63a7\u5236\u8bf7\u6c42，\u771f\u6b63\u548c Registry \u8fdb\u884c\u955c\u50cf\u6570\u636e\u4ea4\u4e92\u7684\u662f Docker Engine \u4e00\u4fa7；\u56e0\u6b64\u56fe\u4e2d\u7684 Registry \u7bad\u5934\u53ef\u4ee5\u7406\u89e3\u4e3a\u201c\u955c\u50cf\u4ece\u6784\u5efa\u4fa7\u8fdb\u5165 Registry，\u518d\u7531\u76ee\u6807 Docker Host \u83b7\u53d6\u201d\u7684\u7b80\u5316\u6570\u636e\u6d41，\u800c\u4e0d\u662f\u5f3a\u8c03\u7cbe\u786e\u7684\u8fdb\u7a0b\u8c03\u7528\u8def\u5f84\u3002<\/p>\n \u6574\u5f20\u56fe\u53ef\u4ee5\u62c6\u6210\u4e09\u6761\u94fe\u8def\u3002<\/p>\n \u7528\u6237 \u8fd9\u4e00\u6761\u94fe\u8def\u89e3\u51b3：<\/p>\n \u7528\u6237\u5982\u4f55\u544a\u8bc9 Docker \u670d\u52a1\u7aef\u201c\u6211\u8981\u505a\u4ec0\u4e48\u201d\u3002<\/p>\n dockerd \u8fd9\u4e00\u6761\u94fe\u8def\u89e3\u51b3：<\/p>\n \u670d\u52a1\u7aef\u771f\u6b63\u600e\u6837\u628a\u201c\u521b\u5efa \/ \u542f\u52a8 \/ exec \/ stop\u201d\u7b49\u64cd\u4f5c\u843d\u5b9e\u5230 Linux Kernel\u3002<\/p>\n Docker Host \/ \u6784\u5efa\u8282\u70b9 \u8fd9\u4e00\u6761\u94fe\u8def\u89e3\u51b3：<\/p>\n \u7a0b\u5e8f\u53ca\u5176\u8fd0\u884c\u73af\u5883\u600e\u6837\u5728\u4e0d\u540c\u8282\u70b9\u4e4b\u95f4\u6807\u51c6\u5316\u5730\u5206\u53d1\u3002<\/p>\n \u56e0\u6b64\u6574\u4e2a Docker \u67b6\u6784\u53ef\u4ee5\u8fdb\u4e00\u6b65\u538b\u7f29\u6210\u56db\u5757：<\/p>\n Docker CLI dockerd + containerd + shim + runc Linux Kernel Registry \u7406\u89e3\u524d\u9762\u7684\u67b6\u6784\u4ee5\u540e，\u518d\u770b\u6240\u8c13\u201cDocker \u751f\u6001\u201d\u5c31\u4e0d\u4f1a\u89c9\u5f97\u5b83\u662f\u4e00\u4e9b\u5b8c\u5168\u65e0\u5173\u7684\u540d\u8bcd\u5806\u79ef\u3002<\/p>\n Docker \u6700\u5f00\u59cb\u89e3\u51b3\u7684\u4e00\u4e2a\u6838\u5fc3\u95ee\u9898\u5c31\u662f：<\/p>\n \u7a0b\u5e8f\u90e8\u7f72\u5230\u4e0d\u540c\u673a\u5668 Docker \u5c06：<\/p>\n \u7a0b\u5e8f \u7edf\u4e00\u505a\u6210 Image \u540e，\u90e8\u7f72\u6d41\u7a0b\u53ef\u4ee5\u9010\u6e10\u53d8\u6210：<\/p>\n Node-A \u2192 pull image \u2192 run container \u8282\u70b9\u8d8a\u591a，\u8fd9\u79cd\u6807\u51c6\u5316\u4ea4\u4ed8\u7684\u4ef7\u503c\u8d8a\u660e\u663e\u3002<\/p>\n \u5047\u8bbe\u7cfb\u7edf\u53ea\u6709\u4e00\u53f0\u673a\u5668\u3001\u4e00\u4e2a\u670d\u52a1，\u624b\u52a8\u5b89\u88c5\u73af\u5883\u53ef\u80fd\u6682\u65f6\u8fd8\u80fd\u63a5\u53d7\u3002<\/p>\n \u4f46\u662f\u5982\u679c\u53d8\u6210：<\/p>\n 100 \u53f0\u673a\u5668 \u90a3\u4e48\u4f20\u7edf\u65b9\u5f0f\u53ef\u80fd\u53d8\u6210：<\/p>\n Node-1：\u5b89\u88c5\u4f9d\u8d56\u3001\u914d\u73af\u5883\u3001\u90e8\u7f72\u670d\u52a1 \u5f88\u5bb9\u6613\u51fa\u73b0：<\/p>\n Node-A：\u8fd0\u884c\u6b63\u5e38 \u800c Docker \u53ef\u4ee5\u5c06\u90e8\u7f72\u5355\u4f4d\u7edf\u4e00\u6210 Image：<\/p>\n \u540c\u4e00\u4e2a Image \u6240\u4ee5\u591a\u8282\u70b9\u3001\u591a\u670d\u52a1\u3001\u9891\u7e41\u90e8\u7f72\u7684\u573a\u666f\u4f1a\u5929\u7136\u653e\u5927 Docker \u7684\u4ef7\u503c\u3002<\/p>\n \u9700\u8981\u6ce8\u610f\u7684\u662f：<\/p>\n Docker \u5e76\u4e0d\u662f\u53ea\u6709\u591a\u8282\u70b9\u573a\u666f\u624d\u6709\u4ef7\u503c\u3002<\/p>\n \u5373\u4f7f\u5355\u673a\u73af\u5883，\u5b83\u4e5f\u80fd\u591f\u89e3\u51b3：<\/p>\n \u670d\u52a1\u4e4b\u95f4\u4f9d\u8d56\u51b2\u7a81 \u53ea\u662f\u5f53\u7cfb\u7edf\u89c4\u6a21\u6269\u5927\u4ee5\u540e，\u8fd9\u4e9b\u4f18\u52bf\u4f1a\u66f4\u52a0\u660e\u663e\u3002<\/p>\n \u50cf\u5927\u578b\u4e91\u5e73\u53f0，\u5e95\u5c42\u901a\u5e38\u7531\u5927\u91cf\u7269\u7406\u4e3b\u673a\u548c\u865a\u62df\u5316\u8d44\u6e90\u7ec4\u6210\u3002<\/p>\n \u53ef\u4ee5\u5148\u5efa\u7acb\u4e00\u4e2a\u7b80\u5316\u6a21\u578b：<\/p>\n \u5927\u91cf Physical Host \u4e00\u53f0\u7269\u7406\u4e3b\u673a\u4e0a\u53ef\u80fd\u8fdb\u4e00\u6b65\u8fd0\u884c：<\/p>\n Physical Host \u8fd9\u91cc\u9700\u8981\u6ce8\u610f，\u201c\u4e3b\u673a\u201d\u201c\u8282\u70b9\u201d\u201c\u670d\u52a1\u5668\u201d\u51e0\u4e2a\u8bcd\u5728\u4e0d\u540c\u8bed\u5883\u4e2d\u5bb9\u6613\u6df7\u7528\u3002<\/p>\n \u66f4\u51c6\u786e\u5730\u8bf4：<\/p>\n \u4e00\u4e2a\u7269\u7406\u6216\u865a\u62df\u8282\u70b9\u4e0a，\u53ef\u4ee5\u90e8\u7f72\u548c\u8fd0\u884c\u591a\u4e2a\u670d\u52a1\u5b9e\u4f8b，\u800c\u670d\u52a1\u5b9e\u4f8b\u53c8\u53ef\u80fd\u76f4\u63a5\u8fd0\u884c\u5728\u5bbf\u4e3b\u673a\u3001\u865a\u62df\u673a\u6216\u8005\u5bb9\u5668\u5185\u90e8\u3002<\/p>\n \u5f53\u8282\u70b9\u89c4\u6a21\u975e\u5e38\u5927\u65f6，\u5982\u679c\u6bcf\u4e2a\u670d\u52a1\u90fd\u9700\u8981\u4eba\u5de5\u914d\u7f6e\u73af\u5883，\u7ef4\u62a4\u6210\u672c\u4f1a\u8fc5\u901f\u4e0a\u5347\u3002<\/p>\n Docker \u6b63\u597d\u53ef\u4ee5\u5c06：<\/p>\n \u5e94\u7528 + \u7528\u6237\u6001\u8fd0\u884c\u73af\u5883<\/p>\n \u6807\u51c6\u5316\u6210 Image，\u518d\u7edf\u4e00\u5206\u53d1\u5230\u4e0d\u540c\u8282\u70b9\u3002<\/p>\n \u6240\u4ee5 Docker \u548c\u4e91\u8ba1\u7b97\u5929\u7136\u5177\u6709\u5f88\u5f3a\u7684\u7ed3\u5408\u5173\u7cfb\u3002<\/p>\n \u5927\u6570\u636e\u7cfb\u7edf\u4e2d\u7ecf\u5e38\u4f1a\u51fa\u73b0：<\/p>\n \u591a\u4e2a\u8ba1\u7b97\u8282\u70b9 \u4f8b\u5982\u4e00\u4e9b\u5206\u5e03\u5f0f\u8ba1\u7b97\u3001\u5b58\u50a8\u3001\u6d88\u606f\u7cfb\u7edf，\u5f80\u5f80\u5e76\u4e0d\u662f\u53ea\u90e8\u7f72\u4e00\u4e2a\u8fdb\u7a0b\u5c31\u7ed3\u675f，\u800c\u662f\u9700\u8981\u5728\u591a\u4e2a\u8282\u70b9\u4e0a\u7ef4\u62a4\u4e00\u7ec4\u670d\u52a1\u3002<\/p>\n \u8282\u70b9\u6570\u91cf\u589e\u52a0\u540e，\u540c\u6837\u4f1a\u9047\u5230：<\/p>\n \u73af\u5883\u4e00\u81f4\u6027 \u8fd9\u4e9b\u95ee\u9898\u3002<\/p>\n Docker \u5e76\u4e0d\u662f\u7528\u6765\u201c\u5904\u7406\u5927\u6570\u636e\u201d\u7684\u8ba1\u7b97\u6846\u67b6\u3002<\/p>\n \u66f4\u51c6\u786e\u7684\u5173\u7cfb\u662f：<\/p>\n \u5927\u6570\u636e\u7cfb\u7edf\u672c\u8eab\u5177\u6709\u591a\u8282\u70b9\u3001\u591a\u7ec4\u4ef6\u3001\u90e8\u7f72\u590d\u6742\u7684\u7279\u70b9，\u800c Docker \u53ef\u4ee5\u5e2e\u52a9\u5b83\u4eec\u6807\u51c6\u5316\u90e8\u7f72\u73af\u5883\u3002<\/p>\n \u5fae\u670d\u52a1\u4f1a\u5c06\u539f\u6765\u5355\u4f53\u5e94\u7528\u4e2d\u7684\u6a21\u5757\u62c6\u5206\u4e3a：<\/p>\n LoginService \u6bcf\u4e00\u4e2a\u670d\u52a1\u90fd\u9700\u8981：<\/p>\n \u72ec\u7acb\u90e8\u7f72 \u670d\u52a1\u6570\u91cf\u4e00\u591a，\u5982\u679c\u6bcf\u4e2a\u670d\u52a1\u90fd\u4f9d\u8d56\u5bbf\u4e3b\u673a\u624b\u52a8\u914d\u7f6e，\u5c31\u4f1a\u975e\u5e38\u9ebb\u70e6\u3002<\/p>\n \u56e0\u6b64\u5fae\u670d\u52a1\u548c Docker \u540c\u6837\u5929\u7136\u5951\u5408\u3002<\/p>\n \u53ef\u4ee5\u5148\u5f62\u6210：<\/p>\n \u5fae\u670d\u52a1 \u5f53 Docker \u89e3\u51b3\u4e86：<\/p>\n \u4e00\u4e2a\u5e94\u7528\u600e\u6837\u6807\u51c6\u5316\u6253\u5305 \u4ee5\u540e，\u89c4\u6a21\u7ee7\u7eed\u6269\u5927\u5c31\u4f1a\u51fa\u73b0\u53e6\u4e00\u4e2a\u95ee\u9898\u3002<\/p>\n \u5047\u8bbe\u73b0\u5728\u6709：<\/p>\n 100 \u53f0\u670d\u52a1\u5668 \u8fd9\u65f6\u5373\u4f7f\u6bcf\u4e00\u4e2a\u5bb9\u5668\u90fd\u5df2\u7ecf\u80fd\u591f\u901a\u8fc7 Docker \u5f88\u65b9\u4fbf\u5730\u542f\u52a8，\u4e5f\u4e0d\u53ef\u80fd\u7ee7\u7eed\u9760\u4eba\u5de5\u51b3\u5b9a：<\/p>\n \u8fd9\u4e2a\u5bb9\u5668\u90e8\u7f72\u5728\u54ea\u53f0\u673a\u5668？ \u4e8e\u662f\u8fdb\u4e00\u6b65\u5f15\u51fa\u4e86：<\/p>\n \u5bb9\u5668\u7f16\u6392<\/p>\n \u5176\u4e2d\u6700\u5178\u578b\u7684\u5c31\u662f：<\/p>\n Kubernetes<\/p>\n \u6240\u4ee5\u53ef\u4ee5\u8fdb\u4e00\u6b65\u5efa\u7acb\u8fd9\u6761\u751f\u6001\u94fe：<\/p>\n \u5e94\u7528 \u56e0\u6b64\u6240\u8c13 Docker \u751f\u6001，\u5e76\u4e0d\u662f\u8bf4\u201c\u5927\u6570\u636e\u3001\u4e91\u8ba1\u7b97\u3001\u5fae\u670d\u52a1\u672c\u8eab\u5c31\u662f Docker\u201d\u3002<\/p>\n \u66f4\u51c6\u786e\u5730\u8bf4：<\/p>\n \u8fd9\u4e9b\u573a\u666f\u666e\u904d\u5177\u6709\u591a\u8282\u70b9\u3001\u591a\u670d\u52a1\u3001\u90e8\u7f72\u9891\u7e41\u3001\u73af\u5883\u590d\u6742\u7b49\u7279\u70b9，\u800c Docker \u6070\u597d\u89e3\u51b3\u4e86\u5e94\u7528\u73af\u5883\u6807\u51c6\u5316\u548c\u5bb9\u5668\u5316\u8fd0\u884c\u95ee\u9898，\u56e0\u6b64 Docker \u5728\u8fd9\u4e9b\u573a\u666f\u4e2d\u88ab\u5927\u91cf\u91c7\u7528，\u5e76\u8fdb\u4e00\u6b65\u5f62\u6210\u4e86\u4e91\u539f\u751f\u3001\u5bb9\u5668\u7f16\u6392\u7b49\u5468\u8fb9\u751f\u6001\u3002<\/p>\n \u5b66\u4e60\u5230\u8fd9\u91cc，\u53ef\u4ee5\u628a\u672c\u8f6e\u6240\u6709\u77e5\u8bc6\u91cd\u65b0\u538b\u7f29\u6210\u4e00\u6761\u903b\u8f91\u94fe\u3002<\/p>\n Linux Kernel \u7528\u6237 \u8fd9\u91cc\u6700\u5173\u952e\u7684\u8ba4\u77e5\u662f：<\/p>\n \u5ba2\u6237\u7aef\u53ea\u8d1f\u8d23\u63a7\u5236，\u771f\u6b63\u7684\u5bb9\u5668\u4e00\u5b9a\u8fd0\u884c\u5728 Docker Host\u3002<\/p>\n \u53ef\u6267\u884c\u7a0b\u5e8f \u56e0\u6b64：<\/p>\n Image Container Image Registry \u7684\u6838\u5fc3\u804c\u8d23\u5c31\u662f：<\/p>\n \u955c\u50cf\u5b58\u50a8 \u8282\u70b9\u8d8a\u6765\u8d8a\u591a \u672c\u8f6e\u5b66\u4e60\u7684\u91cd\u70b9\u5e76\u4e0d\u662f\u8bb0\u4f4f Docker \u6709\u591a\u5c11\u7ec4\u4ef6，\u800c\u662f\u5c06\u5b83\u4eec\u6309\u7167\u201c\u4e3a\u4ec0\u4e48\u51fa\u73b0\u201d\u7684\u903b\u8f91\u8fde\u63a5\u8d77\u6765\u3002<\/p>\n \u6700\u5e95\u5c42，Docker \u5e76\u6ca1\u6709\u521b\u9020\u5bb9\u5668\u3002\u771f\u6b63\u63d0\u4f9b\u8d44\u6e90\u9694\u79bb\u548c\u9650\u5236\u80fd\u529b\u7684\u662f Linux Kernel：<\/p>\n Namespace LXC \u9996\u5148\u5c06\u8fd9\u4e9b\u5e95\u5c42\u80fd\u529b\u7ec4\u5408\u6210\u66f4\u9ad8\u7ea7\u7684\u5bb9\u5668\u8bed\u4e49\u3002Docker \u65e9\u671f\u53ef\u4ee5\u4f9d\u8d56 LXC，\u4f46\u662f\u968f\u7740\u81ea\u8eab\u53d1\u5c55，\u4e3a\u4e86\u83b7\u5f97\u66f4\u5f3a\u7684\u5e95\u5c42\u63a7\u5236\u80fd\u529b，\u9010\u6e10\u4f7f\u7528\u81ea\u5df1\u7684 libcontainer\u3002<\/p>\n \u968f\u540e libcontainer \u53c8\u8fdb\u4e00\u6b65\u88ab\u7ec4\u7ec7\u5230 runc \u4e2d，\u4f7f runc \u6210\u4e3a\u771f\u6b63\u6267\u884c\u5bb9\u5668\u5e95\u5c42\u52a8\u4f5c\u7684\u4f4e\u7ea7\u8fd0\u884c\u65f6\u3002<\/p>\n \u4f46\u662f runc \u662f\u4e00\u6b21\u6027\u7684\u52a8\u4f5c\u6267\u884c\u5668，\u6267\u884c\u7ed3\u675f\u4ee5\u540e\u5c31\u4f1a\u9000\u51fa，\u56e0\u6b64\u53c8\u9700\u8981 containerd \u8fd9\u6837\u7684\u957f\u671f\u7ba1\u7406\u8fdb\u7a0b，\u4ee5\u53ca shim \u8fd9\u6837\u7684\u957f\u671f\u8fd0\u884c\u65f6\u4ee3\u7406\u6765\u627f\u63a5\u5177\u4f53\u5bb9\u5668\u7684\u751f\u547d\u5468\u671f\u3002<\/p>\n \u5728\u66f4\u4e0a\u5c42，Docker \u53c8\u91c7\u7528 Client \/ Server \u67b6\u6784：<\/p>\n Docker CLI \u5ba2\u6237\u7aef\u53ea\u662f\u63a7\u5236\u7aef，\u771f\u6b63\u7684\u5bb9\u5668\u6267\u884c\u80fd\u529b\u59cb\u7ec8\u4f4d\u4e8e Docker Host\u3002<\/p>\n \u4e0e\u6b64\u540c\u65f6，Docker \u8fd8\u9700\u8981\u89e3\u51b3\u201c\u7a0b\u5e8f\u53ca\u5176\u8fd0\u884c\u73af\u5883\u5982\u4f55\u4ea4\u4ed8\u201d\u7684\u95ee\u9898，\u4e8e\u662f\u51fa\u73b0 Image：<\/p>\n \u7a0b\u5e8f \u955c\u50cf\u672c\u8eab\u5e76\u4e0d\u662f\u6b63\u5728\u8fd0\u884c\u7684\u5bb9\u5668，\u5b83\u53ea\u662f\u4e00\u4e2a\u9759\u6001\u8fd0\u884c\u6a21\u677f\u3002\u771f\u6b63\u521b\u5efa\u5bb9\u5668\u65f6，\u518d\u5229\u7528\u5bbf\u4e3b\u673a Linux Kernel \u7684 namespace\u3001cgroup \u7b49\u80fd\u529b\u542f\u52a8\u8fdb\u7a0b\u3002<\/p>\n \u5f53\u955c\u50cf\u9700\u8981\u5728\u4e0d\u540c\u8282\u70b9\u4e4b\u95f4\u4f20\u64ad\u65f6，\u53c8\u81ea\u7136\u5f15\u51fa\u4e86 Registry：<\/p>\n \u6784\u5efa\u8282\u70b9 \u6700\u7ec8，\u5f53\u7cfb\u7edf\u4ece\u5355\u8282\u70b9\u9010\u6e10\u6269\u5927\u5230\u591a\u8282\u70b9\u3001\u591a\u670d\u52a1\u3001\u5927\u89c4\u6a21\u96c6\u7fa4\u65f6，Docker \u5bf9\u73af\u5883\u4e00\u81f4\u6027\u3001\u955c\u50cf\u5206\u53d1\u548c\u6807\u51c6\u5316\u90e8\u7f72\u7684\u4ef7\u503c\u4f1a\u8d8a\u6765\u8d8a\u660e\u663e，\u4e5f\u5c31\u81ea\u7136\u8fdb\u5165\u4e86\u5fae\u670d\u52a1\u3001\u4e91\u8ba1\u7b97\u3001\u5927\u6570\u636e\u4ee5\u53ca\u540e\u7eed Kubernetes \/ \u4e91\u539f\u751f\u751f\u6001\u3002<\/p>\n \u56e0\u6b64，\u5982\u679c\u53ea\u7528\u4e00\u53e5\u8bdd\u603b\u7ed3\u8fd9\u4e00\u6574\u8f6e\u77e5\u8bc6，\u53ef\u4ee5\u662f：<\/p>\n Docker \u7684\u6838\u5fc3\u4e0d\u662f\u201c\u53d1\u660e\u4e86\u5bb9\u5668\u201d，\u800c\u662f\u4ee5 Linux Kernel \u7684\u5bb9\u5668\u80fd\u529b\u4e3a\u57fa\u7840，\u901a\u8fc7\u8fd0\u884c\u65f6\u4f53\u7cfb\u5b8c\u6210\u5bb9\u5668\u751f\u547d\u5468\u671f\u7ba1\u7406，\u518d\u901a\u8fc7 Image + Registry \u5b8c\u6210\u5e94\u7528\u8fd0\u884c\u73af\u5883\u7684\u6807\u51c6\u5316\u5c01\u88c5\u4e0e\u5206\u53d1，\u6700\u7ec8\u8ba9\u5e94\u7528\u80fd\u591f\u66f4\u7a33\u5b9a\u3001\u66f4\u4e00\u81f4\u5730\u90e8\u7f72\u5230\u4e0d\u540c\u8282\u70b9\u3002<\/p>\n 🔥 \u672c\u6587\u4e13\u680f：Docker 🌸\u4f5c\u8005\u4e3b\u9875：\u52aa\u529b\u52aa\u529b\u518d\u52aa\u529bwz 💪 \u4eca\u65e5\u535a\u5ba2\u52b1\u5fd7\u8bed\u5f55：\u6709\u65f6\u5019\u575a\u6301\u5e76\u4e0d\u662f\u76f8\u4fe1\u81ea\u5df1\u4e00\u5b9a\u4f1a\u8d62，\u800c\u662f\u4e0d\u613f\u610f\u8ba9\u73b0\u5728\u7684\u81ea\u5df1，\u66ff\u672a\u6765\u7684\u81ea\u5df1\u8ba4\u8f93 \u601d\u7ef4\u5bfc\u56fe
\n \u2193
\n\u521b\u5efa \/ \u542f\u52a8\u76ee\u6807\u8fdb\u7a0b
\n \u2193
\n\u914d\u7f6e Cgroup
\n \u2193
\n\u51c6\u5907 rootfs
\n \u2193
\n\u914d\u7f6e Mount Namespace
\n \u2193
\n\u914d\u7f6e UID \/ GID
\n \u2193
\n\u914d\u7f6e Capability
\n \u2193
\n\u914d\u7f6e Seccomp
\n \u2193
\n\u6700\u7ec8 exec \u7528\u6237\u7a0b\u5e8f<\/p>\n2. LXC \u505a\u7684\u4e8b\u60c5\u5c31\u662f\u5c01\u88c5\u8fd9\u4e00\u7ec4 Linux \u80fd\u529b<\/h3>\n
\n \u2191
\n LXC
\n \u2191
\ncreate \/ start \/ stop \/ destroy …<\/p>\n
\ncgroup
\nmount
\n\u8fdb\u7a0b\u521b\u5efa
\n\u6743\u9650\u914d\u7f6e
\n\u6587\u4ef6\u7cfb\u7edf\u51c6\u5907<\/p>\n
\n int<\/span> ret =<\/span> bind<\/span>(<\/span>.<\/span>.<\/span>.<\/span>)<\/span>;<\/span>
\n if<\/span> (<\/span>ret <<\/span> 0<\/span>)<\/span> {<\/span>
\n \/\/ error<\/span>
\n }<\/span>
\n return<\/span> ret;<\/span>
\n}<\/span><\/p>\n
\n\u2248
\n\u4e00\u4e2a\u7cfb\u7edf\u8c03\u7528<\/p>\n
\n+
\ncgroup \u914d\u7f6e
\n+
\nmount rootfs
\n+
\n\u6743\u9650\u8bbe\u7f6e
\n+
\n\u7236\u5b50\u8fdb\u7a0b\u540c\u6b65
\n+
\nexec
\n+
\n\u4e00\u7cfb\u5217\u9519\u8bef\u5904\u7406<\/p>\n
\n\u4e09\u3001Docker \u4e3a\u4ec0\u4e48\u9010\u6e10\u4ece LXC \u8f6c\u5411 libcontainer<\/h2>\n
1. Docker \u65e9\u671f\u53ef\u4ee5\u501f\u52a9 LXC \u521b\u5efa\u5bb9\u5668<\/h3>\n
\n \u2193
\nLXC
\n \u2193
\nLinux Kernel<\/p>\n
\n\u542f\u52a8\u4e00\u4e2a\u5bb9\u5668
\n\u505c\u6b62\u4e00\u4e2a\u5bb9\u5668<\/p>\n2. \u4f46\u662f\u957f\u671f\u4f9d\u8d56 LXC \u4f1a\u5e26\u6765\u63a7\u5236\u6743\u95ee\u9898<\/h3>\n
\nCgroup \u5e94\u8be5\u5982\u4f55\u7ec4\u7ec7
\nrootfs \u5e94\u8be5\u600e\u6837\u51c6\u5907
\nCapability \u5e94\u8be5\u5982\u4f55\u914d\u7f6e
\n\u5bb9\u5668\u751f\u547d\u5468\u671f\u5e94\u8be5\u600e\u6837\u63a7\u5236<\/p>\n
\n \u2193
\nLXC \u5bf9\u5916\u63d0\u4f9b\u4ec0\u4e48\u80fd\u529b
\n \u2193
\nDocker \u624d\u80fd\u4f7f\u7528\u4ec0\u4e48\u80fd\u529b<\/p>\n
\n\u6216\u8005
\n\u7b49\u5f85 LXC \u63d0\u4f9b\u65b0\u7684\u80fd\u529b<\/p>\n
\n+
\nLXC \u7248\u672c\u6b63\u786e
\n+
\n\u4e0d\u540c\u7248\u672c\u884c\u4e3a\u80fd\u591f\u517c\u5bb9<\/p>\n3. libcontainer：Docker \u81ea\u5df1\u63a7\u5236\u5e95\u5c42\u5bb9\u5668\u5b9e\u73b0<\/h3>\n
\ncgroup
\nmount
\ncapability
\nseccomp
\n\u8fdb\u7a0b\u7ba1\u7406<\/p>\n
\nDocker
\n \u2193
\nLXC
\n \u2193
\nLinux Kernel<\/p>\n
\nDocker
\n \u2193
\nlibcontainer
\n \u2193
\nLinux Kernel<\/p>\n
\n\u56db\u3001\u4ece libcontainer \u5230 runc：\u628a\u201c\u5e93\u201d\u53d8\u6210\u771f\u6b63\u7684\u52a8\u4f5c\u6267\u884c\u5668<\/h2>\n
1. libcontainer \u53ea\u662f\u4e00\u4e2a\u5e93<\/h3>\n
2. runc \u53ef\u4ee5\u7406\u89e3\u6210\u4f4e\u7ea7\u5bb9\u5668\u52a8\u4f5c\u6267\u884c\u5668<\/h3>\n
\nrunc start
\nrunc exec
\nrunc kill
\nrunc delete<\/p>\n
\n \u2193
\nlibcontainer
\n \u2193
\nLinux Kernel \u63a5\u53e3
\n \u2193
\nnamespace \/ cgroup \/ mount …<\/p>\n
\n \u2193
\n\u542f\u52a8 runc \u8fdb\u7a0b
\n \u2193
\nrunc \u8c03\u7528 libcontainer
\n \u2193
\n\u5b8c\u6210 Linux \u5e95\u5c42\u64cd\u4f5c
\n \u2193
\nrunc \u9000\u51fa<\/p>\n
\n\u4e94\u3001\u65e2\u7136 runc \u4f1a\u9000\u51fa，\u8c01\u8d1f\u8d23\u957f\u671f\u7ba1\u7406\u5bb9\u5668？<\/h2>\n
\n+
\ncontainerd-shim<\/p>\n1. containerd：\u957f\u671f\u5b58\u5728\u7684\u5bb9\u5668\u751f\u547d\u5468\u671f\u7ba1\u7406\u8005<\/h3>\n
\n\u5bb9\u5668\u73b0\u5728\u662f\u4ec0\u4e48\u72b6\u6001
\n\u4ec0\u4e48\u65f6\u5019\u9700\u8981 exec
\n\u4ec0\u4e48\u65f6\u5019\u9700\u8981 stop
\n\u4ec0\u4e48\u65f6\u5019\u9700\u8981 delete<\/p>\n
\n= \u957f\u671f\u8fd0\u884c\u7684\u5bb9\u5668\u751f\u547d\u5468\u671f\u7ba1\u7406\u8fdb\u7a0b<\/p>\n
\n= \u67d0\u4e00\u6b21\u5177\u4f53\u5bb9\u5668\u52a8\u4f5c\u7684\u6267\u884c\u5668<\/p>\n
\n \u2193
\n runc
\n \u2193
\n\u5bb9\u5668\u8fdb\u7a0b<\/p>\n2. shim：\u968f\u7740\u5bb9\u5668\/task \u751f\u547d\u5468\u671f\u957f\u671f\u5b58\u5728\u7684\u8fd0\u884c\u65f6\u4ee3\u7406<\/h3>\n
\n \u2193
\n shim
\n \u2193
\n runc
\n \u2193
\n\u5bb9\u5668\u8fdb\u7a0b<\/p>\n
\n\u2194
\n\u4e00\u4e2a\u957f\u671f\u5b58\u5728\u7684 shim<\/p>\n3. containerd\u3001shim\u3001runc \u7684\u5173\u7cfb<\/h3>\n
\n：\u201c\u6211\u8981\u64cd\u4f5c\u5bb9\u5668 A\u201d
\n \u2193
\n\u5b9a\u4f4d\u5bb9\u5668 A \u5bf9\u5e94\u7684 shim
\n \u2193
\nshim \u63a5\u6536\u8fd9\u6b21\u64cd\u4f5c
\n \u2193
\n\u542f\u52a8\u4e00\u4e2a\u65b0\u7684 runc \u8fdb\u7a0b
\n \u2193
\nrunc exec …
\n \u2193
\nlibcontainer
\n \u2193
\nLinux Kernel
\n \u2193
\n\u52a8\u4f5c\u5b8c\u6210
\n \u2193
\nrunc \u9000\u51fa<\/p>\n
\n\u2192 \u957f\u671f\u8fd0\u884c<\/p>\n
\n\u2192 \u5bb9\u5668 \/ task \u8fd0\u884c\u671f\u95f4\u957f\u671f\u5b58\u5728<\/p>\n
\n\u2192 \u53ea\u6709\u771f\u6b63\u6267\u884c\u67d0\u4e2a\u5e95\u5c42\u52a8\u4f5c\u65f6\u624d\u77ed\u6682\u5b58\u5728<\/p>\n
\n\u2192 \u4e1a\u52a1\u771f\u6b63\u8fd0\u884c\u7684\u8fdb\u7a0b<\/p>\n
\n= \u603b\u7ba1\u7406\u8005<\/p>\n
\n= \u5177\u4f53\u5bb9\u5668\u8fd0\u884c\u671f\u95f4\u7684\u957f\u671f\u4ee3\u7406<\/p>\n
\n= \u4e34\u65f6\u52a8\u4f5c\u6267\u884c\u5668<\/p>\n
\n= Linux \u5bb9\u5668\u5e95\u5c42\u80fd\u529b\u5c01\u88c5\u5e93<\/p>\n
\n= \u771f\u6b63\u63d0\u4f9b Namespace \/ Cgroup \/ Mount \u7b49\u80fd\u529b<\/p>\n
\n\u516d\u3001Docker \u7248\u672c\u4e0e\u5386\u53f2\u65c1\u652f：\u51e0\u4e2a\u5bb9\u6613\u6df7\u6dc6\u7684\u70b9<\/h2>\n
1. Docker \u672c\u8eab\u4e3b\u8981\u4f7f\u7528 Go \u5b9e\u73b0<\/h3>\n
\nLet Me Contain That For You<\/p>\n
\nDocker \/ libcontainer
\nGoogle lmctfy<\/p>\n
\n\u2193
\nnamespace \/ cgroup \/ mount …<\/p>\n2. Docker \u66fe\u7ecf\u5b58\u5728 CE \/ EE \u7684\u7248\u672c\u5212\u5206<\/h3>\n
\nCommunity Edition
\n\u793e\u533a\u7248<\/p>\n
\nEnterprise Edition
\n\u4f01\u4e1a\u7248<\/p>\n
\n\u4e03\u3001Docker \u6574\u4f53\u4e3a\u4ec0\u4e48\u91c7\u7528 Client \/ Server \u67b6\u6784<\/h2>\n
\n \u2193
\nredis-server<\/p>\n
\n \u2193
\nmysqld<\/p>\n
\n\u6784\u9020\u8bf7\u6c42
\n\u53d1\u9001\u8bf7\u6c42
\n\u63a5\u6536\u54cd\u5e94<\/p>\n
\n \u2193
\ndockerd<\/p>\n
\n= \u5ba2\u6237\u7aef<\/p>\n
\n= Docker \u670d\u52a1\u7aef\u5b88\u62a4\u8fdb\u7a0b<\/p>\n
\n+
\n\u771f\u6b63\u5904\u7406 SQL \u7684\u80fd\u529b\u4e5f\u5728\u670d\u52a1\u7aef<\/p>\n
\ncgroup \u914d\u7f6e
\nrootfs \u6302\u8f7d
\n\u5bb9\u5668\u8fdb\u7a0b\u542f\u52a8<\/p>\n
\n\u516b\u3001Docker CLI \u5230 dockerd：\u8bf7\u6c42\u5230\u5e95\u600e\u4e48\u53d1\u9001？<\/h2>\n
1. Docker \u5e76\u4e0d\u662f\u76f4\u63a5\u628a docker run nginx \u539f\u5b57\u7b26\u4e32\u53d1\u9001\u8fc7\u53bb<\/h3>\n
\nargv[1] = run
\nargv[2] = nginx<\/p>\n
\n \u2193
\n\u539f\u6837\u7f16\u7801
\n \u2193
\n\u670d\u52a1\u7aef\u8fd8\u539f\u51fa "docker run nginx"<\/p>\n
\n \u2193
\n\u7406\u89e3\u4e1a\u52a1\u8bed\u4e49
\n \u2193
\n\u6309\u7167 Docker Engine API \u6784\u9020 HTTP \u8bf7\u6c42<\/p>\n
\n \u2193
\nShell \u542f\u52a8 Docker CLI \u8fdb\u7a0b
\n \u2193
\nDocker CLI \u89e3\u6790\u672c\u6b21\u547d\u4ee4\u53c2\u6570
\n \u2193
\n\u6784\u9020\u5e76\u53d1\u9001 HTTP \u8bf7\u6c42
\n \u2193
\ndockerd \u6267\u884c\u5bf9\u5e94\u64cd\u4f5c
\n \u2193
\nDocker CLI \u83b7\u53d6\u7ed3\u679c\u5e76\u8f93\u51fa
\n \u2193
\nDocker CLI \u8fdb\u7a0b\u9000\u51fa<\/p>\n
\n\u2192 \u4e00\u4e2a Docker CLI \u8fdb\u7a0b
\n\u2192 \u4e00\u6b21\u6216\u4e00\u7ec4 API \u8bf7\u6c42
\n\u2192 \u6267\u884c\u5b8c\u6210
\n\u2192 \u8fdb\u7a0b\u9000\u51fa<\/p>\n2. \u548c Redis RESP \u7684\u533a\u522b<\/h3>\n
\nname
\nwang<\/p>\n
\n\u2193
\nredis-cli \u89e3\u6790
\n\u2193
\nRESP \u5e8f\u5217\u5316
\n\u2193
\nTCP
\n\u2193
\nredis-server \u89e3\u6790 RESP
\n\u2193
\n\u6267\u884c\u547d\u4ee4<\/p>\n
\n\u2193
\nDocker CLI \u89e3\u6790
\n\u2193
\n\u6309\u7167 Docker Engine API \u6784\u9020 HTTP \u8bf7\u6c42
\n\u2193
\nHTTP \u5e8f\u5217\u5316
\n\u2193
\nUnix Domain Socket \/ TCP
\n\u2193
\ndockerd \u89e3\u6790 HTTP
\n\u2193
\n\u6267\u884c\u5bf9\u5e94\u4e1a\u52a1\u903b\u8f91<\/p>\n3. Docker Engine API \u5230\u5e95\u662f\u4ec0\u4e48<\/h3>\n
\n\u2193
\n\u518d\u8f6c\u6362\u6210 HTTP \u62a5\u6587<\/p>\n
\n\u8bbf\u95ee\u54ea\u4e2a URL
\n\u53c2\u6570\u653e\u5728\u54ea\u91cc
\nBody \u4f7f\u7528\u4ec0\u4e48\u683c\u5f0f
\n\u670d\u52a1\u7aef\u5e94\u8be5\u8fd4\u56de\u4ec0\u4e48\u7ed3\u679c<\/p>\n
\n "Image"<\/span>:<\/span> "nginx"<\/span>
\n}<\/span><\/p>\n
\n \u2193
\n\u6309\u7167 Docker Engine API \u7684\u89c4\u5219
\n\u76f4\u63a5\u6784\u9020 HTTP \u8bf7\u6c42
\n \u2193
\n\u5e8f\u5217\u5316\u4e3a HTTP \u5b57\u8282\u6d41
\n \u2193
\n\u53d1\u9001<\/p>\n4. REST API \u53c8\u662f\u4ec0\u4e48<\/h3>\n
\n\u2192 \u83b7\u53d6\u7528\u6237<\/p>\n
\n\u2192 \u521b\u5efa\u7528\u6237<\/p>\n
\n\u2192 \u5220\u9664\u7528\u6237<\/p>\n
\n\u2192 \u83b7\u53d6<\/p>\n
\n\u2192 \u5220\u9664<\/p>\n
\n\u2192 \u63d0\u4ea4 \/ \u521b\u5efa \/ \u89e6\u53d1\u64cd\u4f5c<\/p>\n
\n\/containers
\n\/images<\/p>\n
\n\u4e5d\u3001Unix Domain Socket \u4e0e TCP：HTTP \u8bf7\u6c42\u6700\u7ec8\u4ece\u54ea\u91cc\u53d1\u9001？<\/h2>\n
1. \u672c\u673a\u901a\u4fe1：Unix Domain Socket<\/h3>\n
\n \u2193
\n\/var\/run\/docker.sock
\n \u2193
\ndockerd<\/p>\n2. \u8fdc\u7a0b\u901a\u4fe1：TCP<\/h3>\n
\nDocker CLI
\n \u2193
\nHTTP
\n \u2193
\nTCP
\n \u2193
\n\u673a\u5668 B
\n dockerd<\/p>\n
\n= \u8bf7\u6c42\u8868\u8fbe\u65b9\u5f0f<\/p>\n
\n= \u8bf7\u6c42\u5b57\u8282\u7684\u4f20\u8f93\u901a\u9053<\/p>\n
\n\u5341\u3001\u6700\u5173\u952e\u7684 C\/S \u8ba4\u77e5：\u5bb9\u5668\u4e00\u5b9a\u8fd0\u884c\u5728 Docker Host \u4e0a<\/h2>\n
\n\u2192 Docker CLI<\/p>\n
\n\u2192 dockerd<\/p>\n
\nshim
\nrunc
\nlibcontainer
\nnamespace
\ncgroup<\/p>\n
\nlibcontainer \u5728\u670d\u52a1\u7aef
\nLinux Kernel \u4e5f\u5728\u670d\u52a1\u7aef<\/p>\n
\n \u2193
\n HTTP \/ TCP
\n \u2193
\n\u673a\u5668 B：dockerd
\n \u2193
\n containerd
\n \u2193
\n shim
\n \u2193
\n runc
\n \u2193
\n libcontainer
\n \u2193
\n\u673a\u5668 B \u7684 Linux Kernel
\n \u2193
\n\u673a\u5668 B \u4e0a\u7684\u5bb9\u5668\u8fdb\u7a0b<\/p>\n
\n\u2502
\n\u251c\u2500\u2500 dockerd
\n\u251c\u2500\u2500 containerd
\n\u251c\u2500\u2500 shim
\n\u251c\u2500\u2500 runc
\n\u251c\u2500\u2500 image
\n\u2514\u2500\u2500 Linux Kernel<\/p>\n
\n\u5341\u4e00\u3001\u5728\u7406\u89e3 Registry \u4e4b\u524d，\u5148\u5f04\u6e05\u695a Image \u5230\u5e95\u662f\u4ec0\u4e48<\/h2>\n
\n\u251c\u2500\u2500 libstdc++.so
\n\u251c\u2500\u2500 glibc
\n\u251c\u2500\u2500 libssl.so
\n\u251c\u2500\u2500 protobuf
\n\u251c\u2500\u2500 libmysqlclient.so
\n\u251c\u2500\u2500 \u914d\u7f6e\u6587\u4ef6
\n\u2514\u2500\u2500 \u5176\u4ed6\u7528\u6237\u6001\u5de5\u5177\u4e0e\u6587\u4ef6<\/p>\n
\n\u68c0\u67e5\u7248\u672c
\n\u914d\u7f6e\u73af\u5883
\n\u51c6\u5907\u76ee\u5f55
\n\u51c6\u5907\u914d\u7f6e\u6587\u4ef6<\/p>\n
\n+
\n\u4f9d\u8d56\u5e93
\n+
\n\u914d\u7f6e
\n+
\n\u5de5\u5177
\n+
\n\u7528\u6237\u6001\u6587\u4ef6\u7cfb\u7edf\u73af\u5883<\/p>\n1. \u955c\u50cf\u4e0d\u662f\u5b8c\u6574\u64cd\u4f5c\u7cfb\u7edf<\/h3>\n
\n\u251c\u2500\u2500 bin
\n\u251c\u2500\u2500 lib
\n\u251c\u2500\u2500 usr
\n\u251c\u2500\u2500 etc
\n\u2514\u2500\u2500 app<\/p>\n
\n\/bin\/ls
\n\/lib\/…
\n\/usr\/…
\n\/etc\/…<\/p>\n
\n\u7a0b\u5e8f + \u5e93 + rootfs
\n \u2193
\n\u5bb9\u5668\u8fdb\u7a0b
\n \u2193
\n\u5bbf\u4e3b\u673a Linux Kernel<\/p>\n2. rootfs \u548c\u6b64\u524d\u5b66\u4e60\u7684 mount namespace \u6b63\u597d\u63a5\u8d77\u6765<\/h3>\n
\n\u2193
\n\u63d0\u4f9b\u7528\u6237\u6001 rootfs
\n\u2193
\n\u51c6\u5907\u4e3a\u5bb9\u5668\u8fdb\u7a0b\u4f7f\u7528\u7684\u6839\u6587\u4ef6\u7cfb\u7edf
\n\u2193
\n\u7ed3\u5408 Mount Namespace
\n\u2193
\n\u5bb9\u5668\u8fdb\u7a0b\u770b\u5230：
\n\/
\n\u251c\u2500\u2500 bin
\n\u251c\u2500\u2500 lib
\n\u251c\u2500\u2500 usr
\n\u251c\u2500\u2500 etc
\n\u2514\u2500\u2500 app<\/p>\n
\n\u2192 \u89e3\u51b3\u201c\u5bb9\u5668\u91cc\u9762\u6709\u54ea\u4e9b\u6587\u4ef6\u201d<\/p>\n
\n\u2192 \u89e3\u51b3\u201c\u5bb9\u5668\u8fdb\u7a0b\u770b\u5230\u4ec0\u4e48\u8d44\u6e90\u89c6\u56fe\u201d<\/p>\n
\n\u2192 \u89e3\u51b3\u201c\u5bb9\u5668\u8fdb\u7a0b\u80fd\u591f\u4f7f\u7528\u591a\u5c11\u8d44\u6e90\u201d<\/p>\n3. Image \u4e0e Container \u4e0d\u662f\u4e00\u4e2a\u4e1c\u897f<\/h3>\n
\n\u2248 \u6a21\u677f<\/p>\n
\n\u2248 \u6839\u636e\u6a21\u677f\u521b\u5efa\u51fa\u6765\u7684\u8fd0\u884c\u5b9e\u4f8b<\/p>\n
\n \u2502
\n \u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u253c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510
\n \u2193 \u2193 \u2193
\n container1 container2 container3<\/p>\n
\nNamespace \u4e0d\u540c
\nCgroup \u4e0d\u540c
\n\u7f51\u7edc\u73af\u5883\u4e0d\u540c
\n\u8fd0\u884c\u72b6\u6001\u4e0d\u540c<\/p>\n
\n\u5341\u4e8c\u3001Registry：\u955c\u50cf\u5df2\u7ecf\u6709\u4e86，\u4e0b\u4e00\u6b65\u5c31\u662f\u201c\u955c\u50cf\u653e\u5728\u54ea\u91cc\u201d<\/h2>\n
\nNode-C
\nNode-D<\/p>\n
\n+
\n\u5206\u53d1\u955c\u50cf<\/p>\n
\n\u2192 \u5b58\u50a8\u548c\u5206\u53d1\u4ee3\u7801\u4ed3\u5e93<\/p>\n
\n\u2192 \u5b58\u50a8\u548c\u5206\u53d1\u666e\u901a\u6587\u4ef6<\/p>\n
\n\u2192 \u5b58\u50a8\u548c\u5206\u53d1 Docker \u955c\u50cf<\/p>\n1. push \u4e0e pull<\/h3>\n
\n\u2192 \u5c06\u955c\u50cf\u4e0a\u4f20\u5230 Registry<\/p>\n
\n\u2192 \u4ece Registry \u83b7\u53d6\u955c\u50cf<\/p>\n
\n \u2193
\n\u5236\u4f5c Image
\n \u2193
\n push
\n \u2193
\n Registry
\n \u2193
\n pull
\n \u2193
\n\u76ee\u6807 Docker Host
\n \u2193
\n\u672c\u5730\u83b7\u5f97 Image
\n \u2193
\n\u521b\u5efa Container<\/p>\n
\ncgroup
\nshim
\nrunc<\/p>\n2. \u4e0d\u8981\u6b7b\u8bb0\u6210\u201c\u5ba2\u6237\u7aef\u4e0a\u4f20\u3001\u670d\u52a1\u7aef\u4e0b\u8f7d\u201d<\/h3>\n
\n\u2192 push
\nRegistry
\n\u2192 pull
\n\u751f\u4ea7\u670d\u52a1\u5668<\/p>\n
\n\u6216\u8005
\npull<\/p>\n
\nTag
\nLayer
\nManifest<\/p>\n
\n\u5341\u4e09\u3001\u628a\u76ee\u524d\u6240\u6709\u7ec4\u4ef6\u653e\u56de\u4e00\u5f20 Docker \u6574\u4f53\u67b6\u6784\u56fe<\/h2>\n
![\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/09\/20260918202108-6aad9d3484d7c.png\")
<\/p>\n1. \u63a7\u5236\u94fe\u8def<\/h3>\n
\n \u2193
\nShell
\n \u2193
\nDocker CLI
\n \u2193
\nDocker Engine API
\n \u2193
\nHTTP
\n \u2193
\nUnix Domain Socket \/ TCP
\n \u2193
\ndockerd<\/p>\n2. \u5bb9\u5668\u8fd0\u884c\u65f6\u94fe\u8def<\/h3>\n
\n \u2193
\ncontainerd
\n \u2193
\nshim
\n \u2193
\nrunc
\n \u2193
\nlibcontainer
\n \u2193
\nLinux Kernel
\n \u2193
\nContainer Process<\/p>\n3. \u955c\u50cf\u5206\u53d1\u94fe\u8def<\/h3>\n
\n \u2193 push
\n Registry
\n \u2193 pull
\n\u76ee\u6807 Docker Host
\n \u2193
\n Image
\n \u2193
\n Container<\/p>\n
\n= \u63a7\u5236\u5ba2\u6237\u7aef<\/p>\n
\n= \u670d\u52a1\u7aef\u5bb9\u5668\u7ba1\u7406\u4e0e\u8fd0\u884c\u65f6\u4f53\u7cfb<\/p>\n
\n= \u771f\u6b63\u63d0\u4f9b\u5bb9\u5668\u9694\u79bb\u548c\u8d44\u6e90\u63a7\u5236\u80fd\u529b<\/p>\n
\n= \u955c\u50cf\u7684\u5b58\u50a8\u4e0e\u5206\u53d1\u4e2d\u5fc3<\/p>\n
\n\u5341\u56db\u3001\u4ece Docker \u6838\u5fc3\u80fd\u529b\u7ee7\u7eed\u8fc7\u6e21\u5230 Docker \u751f\u6001<\/h2>\n
\n \u2193
\n\u73af\u5883\u53ef\u80fd\u4e0d\u540c
\n \u2193
\n\u4f9d\u8d56\u5e93\u53ef\u80fd\u7f3a\u5931
\n \u2193
\n\u7248\u672c\u53ef\u80fd\u4e0d\u517c\u5bb9
\n \u2193
\n\u9700\u8981\u4eba\u5de5\u914d\u7f6e<\/p>\n
\n+
\n\u4f9d\u8d56
\n+
\n\u7528\u6237\u6001 rootfs<\/p>\n
\nNode-B \u2192 pull image \u2192 run container
\nNode-C \u2192 pull image \u2192 run container<\/p>\n1. \u4e3a\u4ec0\u4e48 Docker \u7279\u522b\u9002\u5408\u591a\u8282\u70b9\u3001\u591a\u670d\u52a1\u573a\u666f<\/h3>\n
\n\u00d7
\n\u6bcf\u53f0\u591a\u4e2a\u670d\u52a1<\/p>\n
\nNode-2：\u5b89\u88c5\u4f9d\u8d56\u3001\u914d\u73af\u5883\u3001\u90e8\u7f72\u670d\u52a1
\nNode-3：\u5b89\u88c5\u4f9d\u8d56\u3001\u914d\u73af\u5883\u3001\u90e8\u7f72\u670d\u52a1
\n…<\/p>\n
\nNode-B：\u7f3a\u5e93
\nNode-C：\u5e93\u7248\u672c\u4e0d\u5bf9
\nNode-D：\u914d\u7f6e\u6587\u4ef6\u4e0d\u540c<\/p>\n
\n \u2193
\nNode-A
\nNode-B
\nNode-C
\nNode-D<\/p>\n
\n\u5f00\u53d1 \/ \u6d4b\u8bd5 \/ \u751f\u4ea7\u73af\u5883\u4e00\u81f4\u6027
\n\u5feb\u901f\u521b\u5efa\u548c\u9500\u6bc1\u73af\u5883
\n\u73af\u5883\u590d\u73b0<\/p>\n
\n\u5341\u4e94\u3001Docker \u4e3a\u4ec0\u4e48\u4f1a\u548c\u4e91\u8ba1\u7b97\u3001\u5927\u6570\u636e\u3001\u5fae\u670d\u52a1\u8054\u7cfb\u8d77\u6765<\/h2>\n
1. \u4e91\u8ba1\u7b97：\u5e95\u5c42\u672c\u6765\u5c31\u662f\u5927\u89c4\u6a21\u8d44\u6e90\u6c60<\/h3>\n
\n \u2193
\n\u7ec4\u6210\u8d44\u6e90\u6c60
\n \u2193
\n\u4e0a\u9762\u8fd0\u884c VM \/ Container \/ Service<\/p>\n
\n\u251c\u2500\u2500 VM-1
\n\u2502 \u251c\u2500\u2500 Web Service
\n\u2502 \u2514\u2500\u2500 Redis
\n\u2502
\n\u251c\u2500\u2500 VM-2
\n\u2502 \u2514\u2500\u2500 MySQL
\n\u2502
\n\u2514\u2500\u2500 Containers
\n \u251c\u2500\u2500 Service-A
\n \u251c\u2500\u2500 Service-B
\n \u2514\u2500\u2500 Service-C<\/p>\n2. \u5927\u6570\u636e：\u7ecf\u5e38\u5929\u7136\u5c31\u662f\u591a\u7ec4\u4ef6\u3001\u591a\u8282\u70b9\u90e8\u7f72<\/h3>\n
\n\u591a\u4e2a\u5b58\u50a8\u8282\u70b9
\n\u591a\u4e2a\u6d88\u606f\u7ec4\u4ef6
\n\u591a\u4e2a\u534f\u8c03\u7ec4\u4ef6<\/p>\n
\n\u4f9d\u8d56\u7248\u672c
\n\u7ec4\u4ef6\u90e8\u7f72
\n\u5feb\u901f\u6269\u5bb9<\/p>\n3. \u5fae\u670d\u52a1：\u670d\u52a1\u6570\u91cf\u589e\u52a0\u4ee5\u540e，\u5bb9\u5668\u5316\u4ef7\u503c\u66f4\u660e\u663e<\/h3>\n
\nMessageService
\nFriendService
\nAdminService
\n…<\/p>\n
\n\u72ec\u7acb\u542f\u52a8
\n\u72ec\u7acb\u5347\u7ea7
\n\u72ec\u7acb\u6269\u5bb9<\/p>\n
\n\u2192 \u670d\u52a1\u5b9e\u4f8b\u6570\u91cf\u589e\u52a0
\n\u2192 \u90e8\u7f72\u9891\u7387\u589e\u52a0
\n\u2192 \u73af\u5883\u7ba1\u7406\u590d\u6742\u5ea6\u589e\u52a0
\n\u2192 Docker \u5c06\u6bcf\u4e2a\u670d\u52a1\u6807\u51c6\u5316\u6210 Image
\n\u2192 \u5bb9\u5668\u5316\u90e8\u7f72<\/p>\n
\n\u5341\u516d\u3001\u4e3a\u4ec0\u4e48\u540e\u9762\u53c8\u4f1a\u81ea\u7136\u51fa\u73b0 Kubernetes<\/h2>\n
\n\u4e00\u4e2a\u5bb9\u5668\u600e\u6837\u5728\u5355\u53f0\u4e3b\u673a\u4e0a\u8fd0\u884c<\/p>\n
\n10000 \u4e2a\u5bb9\u5668<\/p>\n
\n\u54ea\u4e2a\u8282\u70b9\u8fd8\u6709\u8d44\u6e90？
\n\u5bb9\u5668\u6302\u4e86\u4ee5\u540e\u8c01\u91cd\u542f？
\n\u538b\u529b\u53d8\u5927\u4ee5\u540e\u5e94\u8be5\u589e\u52a0\u591a\u5c11\u5b9e\u4f8b？
\n\u538b\u529b\u964d\u4f4e\u4ee5\u540e\u5e94\u8be5\u51cf\u5c11\u591a\u5c11\u5b9e\u4f8b？
\n\u670d\u52a1\u4e4b\u95f4\u600e\u6837\u53d1\u73b0？<\/p>\n
\n \u2193
\nDocker Image
\n \u2193
\nContainer
\n \u2193
\n\u5927\u91cf Container
\n \u2193
\n\u5bb9\u5668\u7f16\u6392
\n \u2193
\nKubernetes
\n \u2193
\n\u5927\u91cf\u670d\u52a1\u5668\u8282\u70b9
\n \u2193
\n\u4e91\u5e73\u53f0 \/ \u5927\u89c4\u6a21\u96c6\u7fa4<\/p>\n
\n\u5341\u4e03\u3001\u6700\u7ec8\u5efa\u7acb\u5b8c\u6574\u5fc3\u667a\u6a21\u578b<\/h2>\n
1. \u5bb9\u5668\u5b9e\u73b0\u5c42<\/h3>\n
\n\u2193
\nNamespace：\u9694\u79bb\u8d44\u6e90\u89c6\u56fe
\nCgroup：\u9650\u5236\u8d44\u6e90\u4f7f\u7528
\nMount \/ rootfs：\u6784\u9020\u6587\u4ef6\u7cfb\u7edf\u73af\u5883
\n\u2193
\nLXC \/ libcontainer
\n\u628a\u5e95\u5c42\u539f\u5b50\u80fd\u529b\u7ec4\u7ec7\u6210\u5bb9\u5668\u8bed\u4e49
\n\u2193
\nrunc
\n\u4e00\u6b21\u6027\u6267\u884c\u771f\u6b63\u7684\u5bb9\u5668\u52a8\u4f5c
\n\u2193
\nshim
\n\u957f\u671f\u627f\u63a5\u5177\u4f53\u5bb9\u5668 \/ task
\n\u2193
\ncontainerd
\n\u957f\u671f\u7ba1\u7406\u5bb9\u5668\u751f\u547d\u5468\u671f
\n\u2193
\ndockerd
\nDocker \u670d\u52a1\u7aef\u603b\u5165\u53e3<\/p>\n2. Docker Client \/ Server \u5c42<\/h3>\n
\n\u2193
\nDocker CLI
\n\u2193
\n\u6309\u7167 Docker Engine API \u6784\u9020 HTTP \u8bf7\u6c42
\n\u2193
\nUnix Domain Socket \/ TCP
\n\u2193
\ndockerd
\n\u2193
\n\u771f\u6b63\u6267\u884c Docker \u4e1a\u52a1\u903b\u8f91<\/p>\n3. \u955c\u50cf\u4e0e\u5bb9\u5668\u5c42<\/h3>\n
\n+
\n\u4f9d\u8d56\u5e93
\n+
\n\u914d\u7f6e
\n+
\n\u7528\u6237\u6001 rootfs
\n\u2193
\nDocker Image
\n\u2193
\n\u7ed3\u5408 Linux Kernel \u7684 Namespace \/ Cgroup \u7b49\u80fd\u529b
\n\u2193
\nContainer<\/p>\n
\n= \u9759\u6001\u8fd0\u884c\u6a21\u677f<\/p>\n
\n= \u771f\u6b63\u8fd0\u884c\u8d77\u6765\u7684\u5b9e\u4f8b<\/p>\n4. Registry \u5c42<\/h3>\n
\n\u2193 push
\nRegistry
\n\u2193 pull
\n\u76ee\u6807 Docker Host
\n\u2193
\nContainer<\/p>\n
\n+
\n\u955c\u50cf\u5206\u53d1<\/p>\n5. Docker \u751f\u6001\u5c42<\/h3>\n
\n+
\n\u670d\u52a1\u8d8a\u6765\u8d8a\u591a
\n+
\n\u90e8\u7f72\u8d8a\u6765\u8d8a\u9891\u7e41
\n\u2193
\n\u73af\u5883\u4e00\u81f4\u6027\u4e0e\u4ea4\u4ed8\u95ee\u9898\u8d8a\u6765\u8d8a\u7a81\u51fa
\n\u2193
\nDocker \u7684\u6807\u51c6\u5316\u955c\u50cf + \u5bb9\u5668\u5316\u90e8\u7f72\u4ef7\u503c\u88ab\u653e\u5927
\n\u2193
\n\u5fae\u670d\u52a1 \/ \u4e91\u8ba1\u7b97 \/ \u5927\u6570\u636e\u7b49\u5927\u91cf\u91c7\u7528
\n\u2193
\n\u5bb9\u5668\u89c4\u6a21\u7ee7\u7eed\u6269\u5927
\n\u2193
\nKubernetes \/ \u4e91\u539f\u751f\u751f\u6001<\/p>\n
\n\u603b\u7ed3<\/h2>\n
\n+
\nCgroup
\n+
\nMount
\n+
\n\u5176\u4ed6 Linux \u80fd\u529b<\/p>\n
\n\u2193
\nDocker Engine API + HTTP
\n\u2193
\nUnix Domain Socket \/ TCP
\n\u2193
\ndockerd<\/p>\n
\n+
\n\u4f9d\u8d56
\n+
\n\u914d\u7f6e
\n+
\n\u7528\u6237\u6001 rootfs
\n\u2193
\nImage<\/p>\n
\n\u2193 push
\nRegistry
\n\u2193 pull
\n\u90e8\u7f72\u8282\u70b9<\/p>\n![\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/09\/20260918202109-6aad9d35d26ab.gif\")
<\/p>\n","protected":false},"excerpt":{"rendered":"
\nDocker \u4e3a\u4ec0\u4e48\u80fd\u591f\u521b\u5efa\u5bb9\u5668？\u2193
\nDocker \u672c\u8eab\u5e76\u6ca1\u6709\u91cd\u65b0\u5b9e\u73b0\u4e00\u5957\u64cd\u4f5c\u7cfb\u7edf\u2193
\n\u771f\u6b63\u7684\u9694\u79bb\u4e0e\u8d44\u6e90\u63a7\u5236\u80fd\u529b\u6765\u81ea Linux Kernel\u2193
\nNamespace：<\/p>\n","protected":false},"author":2,"featured_media":107192,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[27,121,188],"topic":[],"class_list":["post-107197","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-docker","tag-121","tag-188"],"yoast_head":"\n