# 使用 Homebrew
brew install --cask docker

# 启动 Docker Desktop
open /Applications/Docker.app

# 1. 卸载旧版本
sudo apt remove docker docker-engine docker.io containerd runc

# 2. 安装依赖
sudo apt update
sudo apt install ca-certificates curl gnupg lsb-release

# 3. 添加 Docker 官方 GPG 密钥
sudo mkdir -p /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | \
    sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg

# 4. 设置仓库
echo \
  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] \
  https://download.docker.com/linux/ubuntu \
  $(lsb_release -cs) stable" | \
  sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

# 5. 安装 Docker Engine
sudo apt update
sudo apt install docker-ce docker-ce-cli containerd.io docker-compose-plugin

# 6. 验证安装
sudo docker run hello-world

{
  "registry-mirrors": [
    "https://docker.mirrors.ustc.edu.cn",
    "https://hub-mirror.c.163.com",
    "https://mirror.baidubce.com"
  ],
  "log-driver": "json-file",
  "log-opts": {
    "max-size": "100m",
    "max-file": "3"
  }
}

sudo systemctl daemon-reload
sudo systemctl restart docker

# 搜索镜像
docker search nginx

# 拉取镜像
docker pull nginx:latest
docker pull nginx:1.24-alpine  # 指定版本和变体

# 查看本地镜像
docker images
docker image ls

# 删除镜像
docker rmi nginx:latest
docker image prune  # 清理悬空镜像
docker image prune -a  # 清理所有未使用的镜像

# 运行容器
docker run nginx                    # 前台运行
docker run -d nginx                 # 后台运行
docker run -d -p 8080:80 nginx      # 端口映射
docker run -d --name web nginx      # 指定名称
docker run -it ubuntu bash          # 交互式运行

# 常用参数组合
docker run -d \
    --name my-nginx \
    -p 80:80 \
    -v /host/path:/container/path \
    -e MY_VAR=value \
    --restart unless-stopped \
    nginx:alpine

# 查看容器
docker ps           # 运行中的容器
docker ps -a        # 所有容器

# 容器操作
docker start <container>
docker stop <container>
docker restart <container>
docker rm <container>
docker rm -f <container>  # 强制删除运行中的容器

# 进入容器
docker exec -it <container> bash
docker exec -it <container> sh  # Alpine 镜像

# 查看日志
docker logs <container>
docker logs -f <container>  # 实时跟踪
docker logs --tail 100 <container>  # 最后 100 行

# 创建数据卷
docker volume create my-volume

# 查看数据卷
docker volume ls
docker volume inspect my-volume

# 删除数据卷
docker volume rm my-volume
docker volume prune  # 清理未使用的卷

# 基础镜像
FROM node:18-alpine

# 元数据
LABEL maintainer="developer@example.com"
LABEL version="1.0"

# 设置工作目录
WORKDIR /app

# 复制依赖文件
COPY package*.json ./

# 安装依赖
RUN npm ci --only=production

# 复制源代码
COPY . .

# 构建应用
RUN npm run build

# 暴露端口
EXPOSE 3000

# 设置环境变量
ENV NODE_ENV=production

# 健康检查
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
    CMD curl -f http://localhost:3000/health || exit 1

# 启动命令
CMD ["node", "dist/main.js"]

# ============ 构建阶段 ============
FROM golang:1.21-alpine AS builder

WORKDIR /build

# 下载依赖
COPY go.mod go.sum ./
RUN go mod download

# 编译
COPY . .
RUN CGO_ENABLED=0 GOOS=linux go build -o app .

# ============ 运行阶段 ============
FROM alpine:3.18

# 安装 CA 证书（HTTPS 需要）
RUN apk --no-cache add ca-certificates

WORKDIR /app

# 从构建阶段复制二进制文件
COPY --from=builder /build/app .

# 使用非 root 用户
RUN adduser -D -g '' appuser
USER appuser

EXPOSE 8080

ENTRYPOINT ["./app"]

version: '3.8'

services:
  # Web 应用
  web:
    build: 
      context: .
      dockerfile: Dockerfile
    ports:
      - "3000:3000"
    environment:
      - NODE_ENV=production
      - DATABASE_URL=postgres://user:pass@db:5432/myapp
    depends_on:
      db:
        condition: service_healthy
    restart: unless-stopped
    networks:
      - app-network

  # 数据库
  db:
    image: postgres:15-alpine
    volumes:
      - postgres-data:/var/lib/postgresql/data
      - ./init.sql:/docker-entrypoint-initdb.d/init.sql
    environment:
      POSTGRES_USER: user
      POSTGRES_PASSWORD: pass
      POSTGRES_DB: myapp
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U user -d myapp"]
      interval: 5s
      timeout: 5s
      retries: 5
    networks:
      - app-network

  # Redis 缓存
  redis:
    image: redis:7-alpine
    command: redis-server --appendonly yes
    volumes:
      - redis-data:/data
    networks:
      - app-network

  # Nginx 反向代理
  nginx:
    image: nginx:alpine
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf:ro
      - ./certs:/etc/nginx/certs:ro
    depends_on:
      - web
    networks:
      - app-network

volumes:
  postgres-data:
  redis-data:

networks:
  app-network:
    driver: bridge

# 启动服务
docker compose up -d

# 查看状态
docker compose ps

# 查看日志
docker compose logs -f

# 停止服务
docker compose down

# 停止并删除卷
docker compose down -v

# 重新构建
docker compose build --no-cache
docker compose up -d --build

# 创建自定义网络
docker network create --driver bridge my-network

# 连接容器到网络
docker network connect my-network my-container

# 查看网络详情
docker network inspect my-network

# docker-compose.yml
services:
  app:
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

HEALTHCHECK --interval=30s --timeout=10s --retries=3 \
    CMD wget --quiet --tries=1 --spider http://localhost:8080/health || exit 1

# 查看容器日志
docker logs <container>

# 查看容器详情
docker inspect <container>

# 以交互模式调试
docker run -it --entrypoint sh <image>

# 查看 Docker 磁盘使用
docker system df

# 清理所有未使用的资源
docker system prune -a --volumes

# 测试容器间连通性
docker exec -it container1 ping container2

# 查看容器 IP
docker inspect -f '{{range.NetworkSettings.Networks}}{{.IPAddress}}{{end}}' <container>