Docker - the open-source application container engine
Перейти к файлу
Sebastiaan van Stijn 1921559798
add d_type warning to docker info, and optimize output
The overlay(2) drivers were moved up in the list of storage drivers,
and are known to have problems if the backing filesystem does not
support d_type.

Commit 2e20e63da2 added a warning,
which is logged in the daemon logs, however, many users do not
check those logs, and may overlook this warning.

This patch adds the same warning to the output of `docker info`
so that the warning is more easily found.

In addition, the output of warnings printed by `docker info` is
optimized, by;

- moving all warnings to the _end_ of the output, instead of
  mixing them with the regular output
- wrapping the storage-driver warnings, so that they are more
  easily readable

Example output with this patch applied
============================================

devicemapper using loopback devices:

    ...
    Insecure Registries:
     127.0.0.0/8
    Live Restore Enabled: false

    WARNING: devicemapper: usage of loopback devices is strongly discouraged for production use.
             Use `--storage-opt dm.thinpooldev` to specify a custom block storage device.
    WARNING: bridge-nf-call-iptables is disabled
    WARNING: bridge-nf-call-ip6tables is disabled

overlay2 on xfs without d_type support;

    ...
    Insecure Registries:
     127.0.0.0/8
    Live Restore Enabled: false

    WARNING: overlay2: the backing xfs filesystem is formatted without d_type support, which leads to incorrect behavior.
             Reformat the filesystem with ftype=1 to enable d_type support.
             Running without d_type support will not be supported in future releases.
    WARNING: bridge-nf-call-iptables is disabled

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2017-02-23 13:36:57 +01:00
.github Update ISSUE_TEMPLATE.md 2016-10-17 11:43:25 +00:00
api Merge pull request #31203 from yongtang/02202017-Swagger-ContainerSpec 2017-02-22 15:54:23 -08:00
builder fix wrong print format 2017-02-21 10:26:06 +08:00
cli add d_type warning to docker info, and optimize output 2017-02-23 13:36:57 +01:00
client add missing API changes 2017-02-19 01:33:43 -08:00
cmd Merge pull request #31054 from darrenstahlmsft/WaitOOBE 2017-02-16 11:18:25 -05:00
container Merge pull request #30654 from Microsoft/jjh/unifyworkdir 2017-02-03 00:37:54 -08:00
contrib Merge pull request #30946 from sdurrheimer/zsh-completion-log-opts 2017-02-16 20:51:31 -05:00
daemon Merge pull request #31279 from aaronlehmann/shutdown-error-leakage 2017-02-22 23:47:39 -08:00
distribution Merge pull request #29001 from darrenstahlmsft/WindowsOnLinux 2017-02-16 19:57:54 +01:00
dockerversion Move UAStringKey to dockerversion pkg 2016-12-26 18:53:22 -08:00
docs Merge pull request #31031 from WeiZhang555/stats-all-docs 2017-02-22 11:14:15 +01:00
experimental Update docker stack experimental notes 2017-02-07 15:17:47 +01:00
hack Bump runc to version a01dafd48bc1c7cc12bdb01206f9fea7dd6feb70 2017-02-22 14:10:33 -08:00
image image/cache: fix isValidParent logic 2017-02-21 19:32:04 +01:00
integration-cli rectify the function name used by note 2017-02-22 16:13:45 +08:00
keys Do not use keyservers to fetch GPG keys for apt 2017-01-07 12:06:52 +00:00
layer Windows: Remove redundant 'GraphDriver() func 2017-01-12 15:32:46 -08:00
libcontainerd Windows: Remove unused commandLine 2017-02-02 11:16:11 -08:00
man Merge pull request #31031 from WeiZhang555/stats-all-docs 2017-02-22 11:14:15 +01:00
migrate/v1 Use distribution reference 2017-02-07 11:08:37 -08:00
oci oci/namespace: remove unnecessary variable idx 2016-12-22 09:08:43 +08:00
opts Make sure we validate simple syntax on service commands 2017-02-07 12:45:47 +01:00
pkg Merge pull request #30416 from stevenh/linux-mount-fixes 2017-02-15 14:10:54 -08:00
plugin Merge pull request #29742 from miaoyq/rewrite-validate-privileges 2017-02-17 10:24:11 +01:00
profiles Allow sync_file_range2 on supported architectures. 2017-02-14 21:29:33 +01:00
project Merge pull request #29697 from yuexiao-wang/fix-docker-daemon 2017-01-04 11:55:38 +01:00
reference reference: handle combination of tag and digest in ImageDelete 2017-02-16 10:48:40 +01:00
registry Validate insecure registry (`--insecure-registry`) values 2017-02-14 13:13:23 -08:00
restartmanager Adding support for docker max restart time 2017-02-04 03:54:47 +00:00
runconfig Fix some data races 2017-02-01 14:43:58 -05:00
vendor Bump runc to version a01dafd48bc1c7cc12bdb01206f9fea7dd6feb70 2017-02-22 14:10:33 -08:00
volume sort volume drivers and auth plugins in info response 2017-02-01 12:01:49 +08:00
.dockerignore Bind mount `.git` 👼 2017-02-03 21:00:32 +01:00
.gitignore Gitignore dockerversion\version_autogen_unix.go 2016-11-14 15:18:23 -08:00
.mailmap Update authors 2017-02-23 02:17:51 +01:00
AUTHORS Update authors 2017-02-23 02:17:51 +01:00
CHANGELOG.md add 1.13.x CHANGELOG to master 2017-02-09 15:11:06 -08:00
CONTRIBUTING.md CONTRIBUTING: add tips for succesful changes 2017-01-17 13:15:26 -08:00
Dockerfile Dockerfile*: bump Go to 1.7.5 2017-01-27 02:14:36 +02:00
Dockerfile.aarch64 Dockerfile*: bump Go to 1.7.5 2017-01-27 02:14:36 +02:00
Dockerfile.armhf Dockerfile*: bump Go to 1.7.5 2017-01-27 02:14:36 +02:00
Dockerfile.ppc64le [ppc64le/s390x] add p/z to release-deb 2017-01-30 17:44:33 -05:00
Dockerfile.s390x [ppc64le/s390x] add p/z to release-deb 2017-01-30 17:44:33 -05:00
Dockerfile.simple Dockerfile*: bump Go to 1.7.5 2017-01-27 02:14:36 +02:00
Dockerfile.solaris Add functional support for Docker sub commands on Solaris 2016-11-07 09:06:34 -08:00
Dockerfile.windows update git, hoist powershell setttings to top and use simpler way to get git 2017-02-12 19:27:05 -08:00
LICENSE Update LICENSE date 2015-12-31 13:07:35 +00:00
MAINTAINERS move James to alumni 2017-02-21 18:20:49 +01:00
Makefile Bind mount `.git` 👼 2017-02-03 21:00:32 +01:00
NOTICE Update LICENSE date 2017-02-15 17:34:33 +01:00
README.md Remove old documentation, add README.md with pointer 2016-10-12 16:23:33 -07:00
ROADMAP.md Header has incorrect punctuation. 2016-12-19 21:38:59 +08:00
VENDORING.md fix the bare url and the Summary of http://semver.org 2017-01-17 16:20:11 +08:00
VERSION Switch to new versioning scheme 2017-02-15 23:22:50 -08:00
poule.yml Fix poule configuration 2017-02-09 01:37:53 -08:00
vendor.conf Bump runc to version a01dafd48bc1c7cc12bdb01206f9fea7dd6feb70 2017-02-22 14:10:33 -08:00

README.md

Docker: the container engine Release

Docker is an open source project to pack, ship and run any application as a lightweight container.

Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest cloud compute instance and everything in between - and they don't require you to use a particular language, framework or packaging system. That makes them great building blocks for deploying and scaling web apps, databases, and backend services without depending on a particular stack or provider.

Docker began as an open-source implementation of the deployment engine which powered dotCloud, a popular Platform-as-a-Service. It benefits directly from the experience accumulated over several years of large-scale operation and support of hundreds of thousands of applications and databases.

Docker logo

Security Disclosure

Security is very important to us. If you have any issue regarding security, please disclose the information responsibly by sending an email to security@docker.com and not by creating a GitHub issue.

Better than VMs

A common method for distributing applications and sandboxing their execution is to use virtual machines, or VMs. Typical VM formats are VMware's vmdk, Oracle VirtualBox's vdi, and Amazon EC2's ami. In theory these formats should allow every developer to automatically package their application into a "machine" for easy distribution and deployment. In practice, that almost never happens, for a few reasons:

  • Size: VMs are very large which makes them impractical to store and transfer.
  • Performance: running VMs consumes significant CPU and memory, which makes them impractical in many scenarios, for example local development of multi-tier applications, and large-scale deployment of cpu and memory-intensive applications on large numbers of machines.
  • Portability: competing VM environments don't play well with each other. Although conversion tools do exist, they are limited and add even more overhead.
  • Hardware-centric: VMs were designed with machine operators in mind, not software developers. As a result, they offer very limited tooling for what developers need most: building, testing and running their software. For example, VMs offer no facilities for application versioning, monitoring, configuration, logging or service discovery.

By contrast, Docker relies on a different sandboxing method known as containerization. Unlike traditional virtualization, containerization takes place at the kernel level. Most modern operating system kernels now support the primitives necessary for containerization, including Linux with openvz, vserver and more recently lxc, Solaris with zones, and FreeBSD with Jails.

Docker builds on top of these low-level primitives to offer developers a portable format and runtime environment that solves all four problems. Docker containers are small (and their transfer can be optimized with layers), they have basically zero memory and cpu overhead, they are completely portable, and are designed from the ground up with an application-centric design.

Perhaps best of all, because Docker operates at the OS level, it can still be run inside a VM!

Plays well with others

Docker does not require you to buy into a particular programming language, framework, packaging system, or configuration language.

Is your application a Unix process? Does it use files, tcp connections, environment variables, standard Unix streams and command-line arguments as inputs and outputs? Then Docker can run it.

Can your application's build be expressed as a sequence of such commands? Then Docker can build it.

Escape dependency hell

A common problem for developers is the difficulty of managing all their application's dependencies in a simple and automated way.

This is usually difficult for several reasons:

  • Cross-platform dependencies. Modern applications often depend on a combination of system libraries and binaries, language-specific packages, framework-specific modules, internal components developed for another project, etc. These dependencies live in different "worlds" and require different tools - these tools typically don't work well with each other, requiring awkward custom integrations.

  • Conflicting dependencies. Different applications may depend on different versions of the same dependency. Packaging tools handle these situations with various degrees of ease - but they all handle them in different and incompatible ways, which again forces the developer to do extra work.

  • Custom dependencies. A developer may need to prepare a custom version of their application's dependency. Some packaging systems can handle custom versions of a dependency, others can't - and all of them handle it differently.

Docker solves the problem of dependency hell by giving the developer a simple way to express all their application's dependencies in one place, while streamlining the process of assembling them. If this makes you think of XKCD 927, don't worry. Docker doesn't replace your favorite packaging systems. It simply orchestrates their use in a simple and repeatable way. How does it do that? With layers.

Docker defines a build as running a sequence of Unix commands, one after the other, in the same container. Build commands modify the contents of the container (usually by installing new files on the filesystem), the next command modifies it some more, etc. Since each build command inherits the result of the previous commands, the order in which the commands are executed expresses dependencies.

Here's a typical Docker build process:

FROM ubuntu:12.04
RUN apt-get update && apt-get install -y python python-pip curl
RUN curl -sSL https://github.com/shykes/helloflask/archive/master.tar.gz | tar -xzv
RUN cd helloflask-master && pip install -r requirements.txt

Note that Docker doesn't care how dependencies are built - as long as they can be built by running a Unix command in a container.

Getting started

Docker can be installed either on your computer for building applications or on servers for running them. To get started, check out the installation instructions in the documentation.

Usage examples

Docker can be used to run short-lived commands, long-running daemons (app servers, databases, etc.), interactive shell sessions, etc.

You can find a list of real-world examples in the documentation.

Under the hood

Under the hood, Docker is built on the following components:

Contributing to Docker GoDoc

Master (Linux) Experimental (Linux) Windows FreeBSD
Jenkins Build Status Jenkins Build Status Build Status Build Status

Want to hack on Docker? Awesome! We have instructions to help you get started contributing code or documentation.

These instructions are probably not perfect, please let us know if anything feels wrong or incomplete. Better yet, submit a PR and improve them yourself.

Getting the development builds

Want to run Docker from a master build? You can download master builds at master.dockerproject.org. They are updated with each commit merged into the master branch.

Don't know how to use that super cool new feature in the master build? Check out the master docs at docs.master.dockerproject.org.

How the project is run

Docker is a very, very active project. If you want to learn more about how it is run, or want to get more involved, the best place to start is the project directory.

We are always open to suggestions on process improvements, and are always looking for more maintainers.

Talking to other Docker users and contributors

Internet Relay Chat (IRC)

IRC is a direct line to our most knowledgeable Docker users; we have both the #docker and #docker-dev group on irc.freenode.net. IRC is a rich chat protocol but it can overwhelm new users. You can search our chat archives.

Read our IRC quickstart guide for an easy way to get started.
Docker Community Forums The Docker Engine group is for users of the Docker Engine project.
Google Groups The docker-dev group is for contributors and other people contributing to the Docker project. You can join this group without a Google account by sending an email to docker-dev+subscribe@googlegroups.com. You'll receive a join-request message; simply reply to the message to confirm your subscription.
Twitter You can follow Docker's Twitter feed to get updates on our products. You can also tweet us questions or just share blogs or stories.
Stack Overflow Stack Overflow has over 7000 Docker questions listed. We regularly monitor Docker questions and so do many other knowledgeable Docker users.

Brought to you courtesy of our legal counsel. For more context, please see the NOTICE document in this repo.

Use and transfer of Docker may be subject to certain restrictions by the United States and other governments.

It is your responsibility to ensure that your use and/or transfer does not violate applicable laws.

For more information, please see https://www.bis.doc.gov

Licensing

Docker is licensed under the Apache License, Version 2.0. See LICENSE for the full license text.

Other Docker Related Projects

There are a number of projects under development that are based on Docker's core technology. These projects expand the tooling built around the Docker platform to broaden its application and utility.

  • Docker Registry: Registry server for Docker (hosting/delivery of repositories and images)
  • Docker Machine: Machine management for a container-centric world
  • Docker Swarm: A Docker-native clustering system
  • Docker Compose (formerly Fig): Define and run multi-container apps
  • Kitematic: The easiest way to use Docker on Mac and Windows

If you know of another project underway that should be listed here, please help us keep this list up-to-date by submitting a PR.

Awesome-Docker

You can find more projects, tools and articles related to Docker on the awesome-docker list. Add your project there.