docker-in-docker 演示例子

启用docker-in-docker 后台服务进程

$ docker network create some-network
72e1b7416243e166699b0dc22a5f1e951f71e5db746eea0ebf32ab895bba6aae
$ docker volume create some-docker-certs-ca
some-docker-certs-ca
$ docker volume create some-docker-certs-client
some-docker-certs-client
$ docker run --privileged --name some-docker -d --network some-network --network-alias docker -e DOCKER_TLS_CERTDIR=/certs -v some-docker-certs-ca:/certs/ca -v some-docker-certs-client:/certs/client docker:25.0.5-dind
Unable to find image 'docker:25.0.5-dind' locally
25.0.5-dind: Pulling from docker
c6a83fedfae6: Pull complete
e0158a87ebdc: Pull complete
4f4fb700ef54: Pull complete
a825e19b335d: Pull complete
23be5e15f001: Pull complete
907169124fbf: Pull complete
ed592c581d16: Pull complete
bc241abf1dfc: Pull complete
6ede4c61237b: Pull complete
f276b8afc9f2: Pull complete
193ad264ac34: Pull complete
c15d034458b6: Pull complete
27f34c7d7b7f: Pull complete
e41e65bec024: Pull complete
22ba624b3312: Pull complete
35fda91970bb: Pull complete
Digest: sha256:b41d0183012e2334aacd4e0b8e339b89246c4fdb7eada6cc86b0355f41328549
Status: Downloaded newer image for docker:25.0.5-dind
cbcb2d5af6e9871442ab5cb37c1597d027053fd583a87317558c8e43a7bd51c3
$ docker ps -a|grep dind
cbcb2d5af6e9   docker:25.0.5-dind      "dockerd-entrypoint.…"   6 minutes ago   Up 6 minutes              2375-2376/tcp   some-docker
$ docker run --rm --network some-network -e DOCKER_TLS_CERTDIR=/certs -v some-docker-certs-client:/certs/client:ro docker:25.0.5 info
Unable to find image 'docker:25.0.5' locally
25.0.5: Pulling from docker
Digest: sha256:b41d0183012e2334aacd4e0b8e339b89246c4fdb7eada6cc86b0355f41328549
Status: Downloaded newer image for docker:25.0.5
Client:
 Version:    25.0.5
 Context:    default
 Debug Mode: false
 Plugins:
  buildx: Docker Buildx (Docker Inc.)
    Version:  v0.16.2
    Path:     /usr/local/libexec/docker/cli-plugins/docker-buildx
  compose: Docker Compose (Docker Inc.)
    Version:  v2.29.1
    Path:     /usr/local/libexec/docker/cli-plugins/docker-compose

Server:
 Containers: 0
  Running: 0
  Paused: 0
  Stopped: 0
 Images: 0
 Server Version: 25.0.5
 Storage Driver: overlay2
  Backing Filesystem: extfs
  Supports d_type: true
  Using metacopy: false
  Native Overlay Diff: true
  userxattr: false
 Logging Driver: json-file
 Cgroup Driver: cgroupfs
 Cgroup Version: 2
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
 Swarm: inactive
 Runtimes: io.containerd.runc.v2 runc
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: 7c3aca7a610df76212171d200ca3811ff6096eb8
 runc version: v1.1.12-0-g51d5e94
 init version: de40ad0
 Security Options:
  apparmor
  seccomp
   Profile: builtin
  cgroupns
 Kernel Version: 6.8.0-55-generic
 Operating System: Alpine Linux v3.20 (containerized)
 OSType: linux
 Architecture: x86_64
 CPUs: 8
 Total Memory: 7.753GiB
 Name: cbcb2d5af6e9
 ID: 0b6ddce2-ab03-4094-b8ac-8c76100afe0c
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 Experimental: false
 Insecure Registries:
  127.0.0.0/8
 Live Restore Enabled: false
 Product License: Community Engine
$ docker run -it -d --entrypoint /bin/sh --network some-network -e DOCKER_TLS_CERTDIR=/certs -v some-docker-certs-client:/certs/client:ro --name some-docker-in-docker docker:25.0.5
c17605065a33fb0cc0f4ce44dece318117d2ec990d6de62bf1c7d81483c41058
$ docker ps -a|grep docker
c17605065a33   docker:25.0.5           "/bin/sh"                7 seconds ago    Up 5 seconds              2375-2376/tcp   some-docker-in-docker
cbcb2d5af6e9   docker:25.0.5-dind      "dockerd-entrypoint.…"   22 minutes ago   Up 22 minutes             2375-2376/tcp   some-docker
$ docker exec -it some-docker-in-docker sh
/ # docker version
Client:
 Version:           25.0.5
 API version:       1.44
 Go version:        go1.21.8
 Git commit:        5dc9bcc
 Built:             Tue Mar 19 15:04:17 2024
 OS/Arch:           linux/amd64
 Context:           default
Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?