# 查看本地已有的鏡像
docker images

REPOSITORY          TAG       IMAGE ID       CREATED        SIZE
nginx               latest    abc123def456   2 weeks ago    142MB
hello-world         latest    def789ghi012   3 months ago   13.3kB

docker pull nginx:latest

docker pull openjdk:17-jdk-slim

docker pull registry.cn-hangzhou.aliyuncs.com/library/nginx:1.21

docker login myregistry.example.com
docker pull myregistry.example.com/myapp:1.0.0

{
  "registry-mirrors": [
    "https://docker.mirrors.ustc.edu.cn",
    "https://hub-mirror.c.163.com",
    "https://mirror.baidubce.com"
  ]
}

sudo systemctl daemon-reload
sudo systemctl restart docker

docker info | grep -A 3 "Registry Mirrors"

docker pull eclipse-temurin:17-jre-alpine

// HelloWorld.java
public class HelloWorld {
    public static void main(String[] args) {
        System.out.println("Hello, Dockerized Java World! ??");
        System.out.println("Current time: " + java.time.LocalDateTime.now());
    }
}

javac HelloWorld.java

# 使用官方 OpenJDK 17 JRE 鏡像作為基礎(chǔ)鏡像
FROM eclipse-temurin:17-jre-alpine

# 設(shè)置工作目錄
WORKDIR /app

# 將編譯好的 class 文件復(fù)制進(jìn)鏡像
COPY HelloWorld.class .

# 設(shè)置容器啟動(dòng)時(shí)執(zhí)行的命令
CMD ["java", "HelloWorld"]

docker build -t my-java-app:1.0 .

docker images | grep my-java-app

docker run --rm my-java-app:1.0

Hello, Dockerized Java World! ??
Current time: 2025-04-05T10:30:45.123

my-spring-app/
├── src/
│   └── main/
│       └── java/
│           └── com/example/DemoApplication.java
├── pom.xml
└── Dockerfile

package com.example;

import org.springframework.boot.SpringApplication;
import org.springframework.boot.autoconfigure.SpringBootApplication;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RestController;

@SpringBootApplication
@RestController
public class DemoApplication {

    public static void main(String[] args) {
        SpringApplication.run(DemoApplication.class, args);
    }

    @GetMapping("/hello")
    public String hello() {
        return "Hello from Dockerized Spring Boot! ??";
    }
}

mvn clean package

# 第一階段：構(gòu)建階段
FROM maven:3.8.6-eclipse-temurin-17 AS builder

WORKDIR /app

# 復(fù)制 pom.xml 并下載依賴（利用緩存）
COPY pom.xml .
RUN mvn dependency:go-offline -B

# 復(fù)制源碼并打包
COPY src ./src
RUN mvn package -DskipTests

# 第二階段：運(yùn)行階段
FROM eclipse-temurin:17-jre-alpine

# 安裝時(shí)區(qū)數(shù)據(jù)（可選但推薦）
RUN apk add --no-cache tzdata

# 創(chuàng)建非 root 用戶提高安全性
RUN addgroup -g 1001 -S appgroup && \
    adduser -u 1001 -S appuser -G appgroup

WORKDIR /app

# 從構(gòu)建階段復(fù)制 jar 包
COPY --from=builder /app/target/demo-app*.jar app.jar

# 更改文件所有者
RUN chown appuser:appgroup app.jar

# 切換到非 root 用戶
USER appuser

# 暴露端口
EXPOSE 8080

# 啟動(dòng)應(yīng)用
ENTRYPOINT ["java", "-jar", "app.jar"]

# 構(gòu)建鏡像
docker build -t spring-demo:1.0 .

# 運(yùn)行容器，映射端口
docker run -d -p 8080:8080 --name myapp spring-demo:1.0

# 查看日志
docker logs -f myapp

# 測試接口
curl http://localhost:8080/hello

Hello from Dockerized Spring Boot! ??

# 刪除停止的容器
docker container prune

# 刪除未被使用的鏡像
docker image prune -a

# 刪除所有未使用的資源（謹(jǐn)慎?。?
docker system prune -a

docker login

docker login myregistry.corp.com

# 格式：[倉庫地址/]用戶名/鏡像名:標(biāo)簽
docker tag spring-demo:1.0 yourusername/spring-demo:1.0

# 如果是私有倉庫：
docker tag spring-demo:1.0 myregistry.corp.com/yourteam/spring-demo:1.0

docker push yourusername/spring-demo:1.0

RUN adduser -u 1001 -S appuser
USER appuser

# ? 不推薦
FROM eclipse-temurin:latest

# ? 推薦
FROM eclipse-temurin:17.0.8_7-jre-alpine

docker scan yourusername/spring-demo:1.0

trivy image yourusername/spring-demo:1.0

export DOCKER_BUILDKIT=1
docker build -t myapp .

{
  "features": {
    "buildkit": true
  }
}

#!/bin/bash

set -e  # 遇錯(cuò)即停

APP_NAME="spring-demo"
VERSION="1.0.0"
IMAGE_TAG="$APP_NAME:$VERSION"
REGISTRY_USER="your_dockerhub_username"

echo "?? 正在打包 Maven 項(xiàng)目..."
./mvnw clean package -DskipTests

echo "??? 正在構(gòu)建 Docker 鏡像..."
DOCKER_BUILDKIT=1 docker build -t $IMAGE_TAG .

echo "?? 正在本地測試鏡像..."
CONTAINER_ID=$(docker run -d -p 8080:8080 $IMAGE_TAG)
sleep 10  # 等待應(yīng)用啟動(dòng)

if curl -s http://localhost:8080/actuator/health | grep -q "UP"; then
    echo "? 應(yīng)用健康檢查通過"
else
    echo "? 應(yīng)用啟動(dòng)失敗"
    docker logs $CONTAINER_ID
    docker stop $CONTAINER_ID
    exit 1
fi

docker stop $CONTAINER_ID

echo "??? 正在標(biāo)記鏡像..."
docker tag $IMAGE_TAG $REGISTRY_USER/$IMAGE_TAG

echo "?? 正在登錄 Docker Hub..."
echo "$DOCKER_PASSWORD" | docker login -u "$REGISTRY_USER" --password-stdin

echo "?? 正在推送鏡像..."
docker push $REGISTRY_USER/$IMAGE_TAG

echo "?? 鏡像發(fā)布完成！"

.git
.gitignore
README.md
*.md
target/
!target/*.jar
logs/
*.log
.env
.DS_Store

docker history myimage:tag

# 啟動(dòng)臨時(shí)容器并進(jìn)入 shell
docker run -it --rm myimage:tag sh

# 或者針對(duì)已運(yùn)行的容器
docker exec -it container_name sh

docker inspect myimage:tag

ARG APP_PORT=8080
ENV PORT=$APP_PORT
EXPOSE $APP_PORT

docker build --build-arg APP_PORT=9000 -t myapp .

# ?? 好的順序
FROM ...
RUN apt-get update && apt-get install -y some-package
COPY pom.xml .
RUN mvn dependency:go-offline
COPY src ./src    # ← 經(jīng)常變動(dòng)放最后

<plugin>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-maven-plugin</artifactId>
    <configuration>
        <layers>
            <enabled>true</enabled>
        </layers>
    </configuration>
</plugin>

FROM eclipse-temurin:17-jre-alpine as builder
WORKDIR application
COPY target/demo-app.jar app.jar
RUN java -Djarmode=layertools -jar app.jar extract
FROM eclipse-temurin:17-jre-alpine
WORKDIR application
COPY --from=builder application/dependencies/ ./
COPY --from=builder application/snapshot-dependencies/ ./
COPY --from=builder application/resources/ ./
COPY --from=builder application/application/ ./
ENTRYPOINT ["java", "org.springframework.boot.loader.JarLauncher"]

# 刪除 30 天前未使用的鏡像
docker image prune -a --filter "until=720h"

# docker-compose.yml 片段
version: '2.3'
services:
  harbor-core:
    image: goharbor/harbor-core:v2.7.0
    # ... 其他配置

HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 \
  CMD curl -f http://localhost:8080/actuator/health || exit 1

docker ps --format "table {{.Names}}\t{{.Status}}"

#!/bin/bash
IMAGE=$1
CONTAINER=test-container

docker run -d --name $CONTAINER -p 8080:8080 $IMAGE
sleep 15

if ! curl -s http://localhost:8080/hello | grep -q "Dockerized"; then
    echo "? 測試失敗"
    docker logs $CONTAINER
    exit 1
fi

echo "? 所有測試通過"
docker rm -f $CONTAINER

<plugin>
    <groupId>com.google.cloud.tools</groupId>
    <artifactId>jib-maven-plugin</artifactId>
    <version>3.3.1</version>
    <configuration>
        <from>
            <image>eclipse-temurin:17-jre-alpine</image>
        </from>
        <to>
            <image>your-dockerhub-username/spring-app</image>
            <tags>
                <tag>latest</tag>
                <tag>${project.version}</tag>
            </tags>
        </to>
        <container>
            <mainClass>com.example.DemoApplication</mainClass>
            <ports>
                <port>8080</port>
            </ports>
        </container>
    </configuration>
</plugin>

./mvnw compile jib:build