sed -i '/aaa/ { s/bbb/ccc/g;  s/ddd/eee/g; }'  filename

grep "string" . -R --exclude-dir=./dir #目录
grep "http" . -R --exclude-dir={.git,res,bin} #目录
grep "http" . -R --exclude=*.{java,js} #文件

find . -name "*.[ch]" |xargs cat|grep -v ^$|wc -l

#!/bin/bash
set -x
ls

#!/bin/bash
set -xv
ls

```bash
sh -x yourscript.sh

# li @ evpower in ~ [14:48:20]
$ find /usr/ -name hdv_720_24p
/usr/lib/python3/dist-packages/openshot_qt/profiles/hdv_720_24p

# li @ evpower in ~ [14:48:24]
$ cd /usr/lib/python3/dist-packages/openshot_qt/profiles

# li @ evpower in /usr/lib/python3/dist-packages/openshot_qt/profiles [14:48:54]
$ sudo cp hdv_720_24p hdv_480_24p

# li @ evpower in /usr/lib/python3/dist-packages/openshot_qt/profiles [14:48:57]
$ sudo vi hdv_480_24p

# li @ evpower in /usr/lib/python3/dist-packages/openshot_qt/profiles [14:49:05]
$ cat hdv_480_24p
description=HDV 480 24p
frame_rate_num=24
frame_rate_den=1
width=540
height=960
progressive=1
sample_aspect_num=1
sample_aspect_den=1
display_aspect_num=9
display_aspect_den=16

mkdir -p ~/li && git clone https://gitee.com/humble-zh/zhbox-blog.git ~/li/.zbb;
bash -x ~/li/.zbb/source/_posts/TODO_after_manjaro_installed/manjaro_config.sh
bash -x ~/li/.zbb/source/_posts/TODO_after_manjaro_installed/manjaro_config.sh vim
bash -x ~/li/.zbb/source/_posts/TODO_after_manjaro_installed/manjaro_config.sh ohmyzsh

sudo pacman-mirrors -i -c China -m rank

sudo pacman -Syyu

[archlinuxcn]
SigLevel = Optional TrustedOnly
Server = http://mirrors.tuna.tsinghua.edu.cn/archlinuxcn/$arch

sudo pacman -Syyu
sudo pacman -S archlinuxcn-keyring

sudo pacman -S wqy-microhei
cd $(当前仓库)
sudo cp -r ./source/_posts/TODO_after_manjaro_installed/fonts/zhfonts /usr/share/fonts
cd /usr/share/fonts/zhfonts
sudo mkfontscale
sudo mkfontdir
sudo fc-cache -fv

cd $(当前仓库)
mv ~/.i3/config ~/.i3/config.bak
ln -s $(pwd)/source/_posts/TODO_after_manjaro_installed/i3/config ~/.i3/config

exec_always --no-startup-id setxkbmap -option caps:swapescape &

export EDITOR=/usr/bin/vim

sudo pacman -S ntp
#sudo timedatectl set-ntp true
sudo timedatectl set-local-rtc true

sudo cp /usr/share/conky/conky_maia /usr/share/conky/conky_maia.bak
sudo vim /usr/share/conky/conky_maia
:%s/Bitstream Vera/anti/g

cd $(当前仓库)
ln -s $(pwd)/source/_posts/TODO_after_manjaro_installed/i3status.conf ~/.i3status.conf

order += "battery all"

tztime local {
        format = "%Y-%m-%d %H:%M:%S"
        # format = " %d.%m. %H:%M "
}

sudo pacman -S sshpass mosquitto scrot inkscape the_silver_searcher fzf base-devel cmake unrar unzip yay netcat cloc smplayer you-get albert

#echo '. /usr/share/autojump/autojump.bash' >> ~/.bashrc
#echo '. /usr/share/fzf/key-bindings.bash' >> ~/.bashrc
#echo '. /usr/share/fzf/completion.bash' >> ~/.bashrc
#source ~/.bashrc

sudo pacman -Rns $(pacman -Qdtq)

sh -c "$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)"

sh -c "$(wget -O- https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)"

curl -Lo install.sh https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh
sh install.sh

199.232.28.133 raw.githubusercontent.com

cd $(当前仓库)
mv ~/.zshrc ~/.zshrc.bak
ln -s $(pwd)/source/_posts/TODO_after_manjaro_installed/zshrc ~/.zshrc

git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting
git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions

cat ~/.oh-my-zsh/plugins/git/git.plugin.zsh

git config --global core.quotepath false

sudo cp /etc/X11/xorg.conf.d/30-touchpad.conf /etc/X11/xorg.conf.d/30-touchpad.conf.bak

exec_always --no-startup-id xmodmap -e "clear lock"
exec_always --no-startup-id xmodmap -e "keycode 9 = Caps_Lock NoSymbol Caps_Lock"
exec_always --no-startup-id xmodmap -e "keycode 66 = Escape NoSymbol Escape"

sudo systemctl enable sshd.service #开机启动
sudo systemctl start sshd.service #立即启动
sudo systemctl restart sshd.service #立即重启

sudo pacman -S xf86-video-amdgpu

sudo pacman -S obs-studio

sudo pacman -S visual-studio-code-bin

powercfg /h off

yay -S mqttfx-bin

sudo pacman -S mailx

set from=humble.li@evpowergroup.com smtp="smtp.mxhichina.com"
set smtp-auth-user="humble.li@evpowergroup.com" smtp-auth-password="123456"
set smtp-auth=login

sudo pacman -S wps-office ttf-wps-fonts

yay -S typora-free

sudo pacman -S --needed bash bc bin86 binutils bzip2 cdrkit core/which \
    diffutils fastjar findutils flex gawk gcc gettext git intltool \
    libusb libxslt make ncurses openssl patch perl-extutils-makemaker \
    pkgconf python3 rsync sharutils time unzip util-linux wget zlib

sudo pacman -S shadowsocks-libev shadowsocks-v2ray-plugin proxychains
v2ray-plugin --help
nohup ss-local -c ~/v2ray.conf &

yay -S todesk
sudo systemctl start todeskd.service
sudo systemctl is-enabled todeskd.service
sudo systemctl enabled todeskd.service
# 如果开机没有自启动就
# sudo chmod 744 ~/.config/autostart/todesk.desktop

yay -S sunloginclient

systemctl start runsunloginclient.service

#inactive-opacity = 0.93;
#active-opacity = 1;
#取消这两行的注释

pkill comton #关闭compton
compton -b #运行compton

[ 01/09/2020 18:38:49.762 parse_config_libconfig WARN ] Option `no-dock-shadow` is deprecated, and will be removed. Please use the wintype option `shadow` of `dock` instead.
[ 01/09/2020 18:38:49.762 parse_config_libconfig WARN ] Option `menu-opacity` is deprecated, and will be removed.Please use the wintype option `opacity` of `popup_menu` and `dropdown_menu` instead.
[ 01/09/2020 18:38:49.762 parse_config_libconfig WARN ] vsync option will take a boolean from now on. "none" is interpreted as "false" for compatibility, but this will stop working soon
[ 01/09/2020 18:38:49.763 parse_config_libconfig WARN ] glx-swap-method has been deprecated since v6, your setting "undefined" should be removed.
[ 01/09/2020 18:38:49.763 parse_config_libconfig WARN ] "clear-shadow" is removed as an option, and is always enabled now. Consider removing it from your config file
[ 01/09/2020 18:38:49.763 parse_config_libconfig WARN ] "paint-on-overlay" has been removed as an option, and is enabled whenever possible

cd $(当前仓库)
sed -i 's/compton/picom/g' ~/.i3/config #将.i3/config中的compton 替换为picom
mv ~/.config/compton.conf ~/.config/compton.conf.old #删除原有.config/compton.conf
vim ~/.config/picom.conf #新建picom.conf文件，输入内容
cp ${pwd}/source/_posts/TODO_after_manjaro_installed/picom.conf ~/.config/picom.conf
reboot #重启系统

# ~/.config/picom.conf
# Shadow
shadow = true;
# no-dnd-shadow = true;
#no-dock-shadow = true;
#clear-shadow = true;
detect-rounded-corners = true;
shadow-radius = 5;
shadow-offset-x = 1;
shadow-offset-y = 1;
shadow-opacity = .3;
shadow-ignore-shaped = false;
shadow-exclude = [
    "name = 'Notification'",
# workaround for conky until it provides window properties:
    "override_redirect = 1 && !WM_CLASS@:s",
    "class_g ?= 'Dmenu'",
#    "class_g ?= 'Dunst'",
# disable shadows for hidden windows:
    "_NET_WM_STATE@:32a *= '_NET_WM_STATE_HIDDEN'",
    "_GTK_FRAME_EXTENTS@:c",
# disables shadows on sticky windows:
#    "_NET_WM_STATE@:32a *= '_NET_WM_STATE_STICKY'",
# disables shadows on i3 frames
    "class_g ?= 'i3-frame'"
];

# shadow-exclude-reg = "x10+0+0";
# xinerama-shadow-crop = true;

#menu-opacity = 0.95;
#inactive-opacity = 0.93;
#active-opacity = 1;
#alpha-step = 0.01;
#inactive-dim = 0.0;
#blur-background = false;
#blur-kern = "3x3box";

fading = false;
fade-delta = 1;
fade-in-step = 0.03;
fade-out-step = 0.03;
fade-exclude = [ ];

backend = "xrender";
mark-wmwin-focused = true;
mark-ovredir-focused = true;
detect-client-opacity = true;
unredir-if-possible = true;
refresh-rate = 0;
vsync = false;
dbe = false;
#paint-on-overlay = true;
focus-exclude = [ "class_g = 'Cairo-clock'" ];
detect-transient = true;
detect-client-leader = true;
invert-color-include = [ ];
glx-copy-from-front = false;
#glx-swap-method = "undefined";

#opacity-rule = [
#"99:name *?= 'Call'",
#"99:class_g = 'Chromium'",
#"99:name *?= 'Conky'",
#"99:class_g = 'Darktable'",
#"50:class_g = 'Dmenu'",
#"99:name *?= 'Event'",
#"99:class_g = 'Firefox'",
#"99:class_g = 'GIMP'",
#"99:name *?= 'Image'",
#"99:class_g = 'Lazpaint'",
#"99:class_g = 'Midori'",
#"99:name *?= 'Minitube'",
#"99:class_g = 'Mousepad'",
#"99:name *?= 'MuseScore'",
#"90:name *?= 'Page Info'",
#"99:name *?= 'Pale Moon'",
#"90:name *?= 'Panel'",
#"99:class_g = 'Pinta'",
#"90:name *?= 'Restart'",
#"99:name *?= 'sudo'",
#"99:name *?= 'Screenshot'",
#"99:class_g = 'Viewnior'",
#"99:class_g = 'VirtualBox'",
#"99:name *?= 'VLC'",
#"99:name *?= 'Write'",
#"93:class_g = 'URxvt' && !_NET_WM_STATE@:32a",
#"0:_NET_WM_STATE@:32a *= '_NET_WM_STATE_HIDDEN'",
#"96:_NET_WM_STATE@:32a *= '_NET_WM_STATE_STICKY'"
#];

wintypes :
{
  tooltip :
  {
    fade = true;
    shadow = false;
    opacity = 0.85;
    focus = true;
  };
  fullscreen :
  {
    fade = true;
    shadow = false;
    opacity = 1;
    focus = true;
  };
};

````

### [安装vnc](http://blog.lujun9972.win/blog/2018/09/20/%E5%9C%A8archlinux%E5%AE%89%E8%A3%85%E9%85%8D%E7%BD%AEvnc-server/index.html)

```bash
sudo pacman -S tigervnc
vncpasswd
#Would you like to enter a view-only password (y/n)? n
sudo cp /lib/systemd/system/vncserver@.service /etc/systemd/system/vncserver@\:1.service
sudo vim /etc/systemd/system/vncserver@:1.service
sudo systemctl daemon-reload
sudo systemctl start vncserver@:1.service
sudo systemctl enable vncserver@:1.service
ls ~/.vnc
vncserver :1
netstat -pantu|grep 5901
# 客户端开始连接  vncviewer 192.168.1.3:5901

# /etc/systemd/system/vncserver@:1.service
[Unit]
Description=Remote desktop service (VNC)
After=syslog.target network.target

[Service]
Type=simple
ExecStartPre=/bin/sh -c '/usr/bin/vncserver -kill %i > /dev/null 2>&1 || :'
ExecStart=/usr/bin/vncserver_wrapper zh %i
ExecStop=/bin/sh -c '/usr/bin/vncserver -kill %i > /dev/null 2>&1 || :'

[Install]
WantedBy=multi-user.target

[archlinuxcn]
SigLevel = Never
Server = http://mirrors.tuna.tsinghua.edu.cn/archlinuxcn/$arch

sudo pacman -Sy

sudo pacman -S deepin.com.qq.office
nohup /opt/deepinwine/apps/Deepin-WeChat/run.sh > /dev/null 2>&1 &

X Error of failed request: BadWindow (invalid Window parameter)
Major opcode of failed request: 20 (X_GetProperty)
Resource id in failed request:
0x0 Serial number of failed request:
10 Current serial number in output stream: 10

yaourt -S gnome-settings-daemon
nohup /usr/lib/gsd-xsettings > /dev/null 2>&1 &
nohup /opt/deepinwine/apps/Deepin-WeChat/run.sh > /dev/null 2>&1 &

exec_always --no-startup-id nohup /usr/lib/gsd-xsettings > /dev/null 2>&1 &

WINE_CMD="LC_ALL=zh_CN.UTF-8 deepin-wine"

yay -S deepin-wine-wechat
/opt/deepinwine/apps/Deepin-WeChat/run.sh

pip3 install when-changed

pip3 install ipdb

iab xtime <c-r>=strftime("%Y-%m-%d %H:%M:%S")<cr>

sudo apt-get install s-nail

sudo pacman -S s-nail

set from=humble.li@evpowergroup.com smtp="smtp.mxhichina.com"
set smtp-auth-user="humble.li@evpowergroup.com" smtp-auth-password="123456"
set smtp-auth=login

mail -s "测试主题" humble.li@evpowergroup.com

mail -s "测试主题" humble.li@evpowergroup.com < 正文文件.txt
echo "正文内容" | mail -s "测试主题" humble.li@evpowergroup.com
cat 正文文件.txt | mail -s "测试主题" humble.li@evpowergroup.com

uuencode a.txt a.txt | mail -s "测试主题" humble.li@evpowergroup.com < 正文文件.txt

docker run IMAGE [COMMAND] [ARG…]
    run 在新容器中执行命令

docker run -i -t IMAGE /bin/bash
    -i  --interactive=true|false 默认为false
    -t  --tty=true|false 默认为false

docker ps [-a] [-l]
# docker inspect 容器名/id

docker run --name=自定义名 -i -t /bin/bash

docker start [-i] 容器名/id

docker rm 容器名/id

docker run -i -t IMAGE /bin/bash
Ctrl+P Ctrl+Q

docker attach 容器名/id

docker run -d 镜像名 [COMMAND] [ARG…]
    -d  以后台运行方式启动

docker logs [-f] [-t] [--tail] 容器名/id
    -f --follows=true|false 默认为false
        一直跟踪日志变化并返回结果，Ctrl+C停止
    -t --timestamps=true|false 默认为false
        附加时间戳
    --tail ="all"
        返回结尾处日志，未指定则返回所有日志

docker top 容器名/id

docker exec [-d][-i][-t] 容器名/id [COMMAND] [ARG…]

docker stop 容器名/id     发送信号后等待服务器停止
# docker kill 容器名/id     直接终止

man docker-run

run [-P] [-p]
    -P --publish-all=true | false 默认为false
        # docker run -P -i -t ubuntu /bin/bash
        映射所有端口
    -p --publish=[]     指定映射端口
        containerPort
            # docker run -p 80 -i -t ubuntu /bin/bash
        hostPort:containerPort
            # docker run -p 8080:80 -i -t ubuntu /bin/bash
        ip:containerPort
            # docker run -p 0.0.0.0:80 -i -t ubuntu /bin/bash
        ip:hostPort:containerPort
            # docker run -p 0.0.0.0:8080:80 -i -t ubuntu /bin/bash

- 创建映射80端口的交互式容器
- 安装Nginx
- 安装文本编辑器vim
- 创建静态页面
- 修改Nginx配置文件
- 运行Nginx
- 验证网站访问

docker run -p 80 --name web -i -t ubuntu /bin/bash
apt-get update
apt-get install -y nginx
apt-get install -y vim

mkdir -p /var/www/html
cd /var/www/html
vim index.html

whereis nginx
vim /etc/nginx/sites-enabled/default   # 修改 root 的值为 /var/www/html

cd /
nginx
ps -ef
Ctrl+P Ctrl+Q 退出，后台运行

# docker ps     查看运行的容器
# docker port web       查看端口映射情况
# docker top web        查看容器进程情况

curl http://127.0.0.1:32768     以映射的端口为准

# docekr inspect web        查看容器对应的IPAddress
curl 172.17.0.2

# 关闭容器
# docker stop web
# docker start -i web
# ps -ef
# nignx并未启动

# docker exec web nginx
# 重新启动Nginx
# 映射的端口和IP地址均已改变

容器的基石
层叠的只读文件系统
联合加载（union mount）

# docker info
查看docker配置的相关信息

docker images [OPTIONS] [REPOSITORY]
    -a  --all=False 显示所有镜像
    -f  --filter=[] 显示时的过滤条件
    --no-trunc=false    不使用截断的形式显示命令
    -q  --quiet=false   只显示镜像的v-id

docker inspect [OPTIONS] CONTAINER|IMAGE[CONTAINER|IMAGE……]

docker rmi [OPTIONS] IMAGE [IMAGE…]
-f  --force=false   强制删除镜像
--no-prune=false    保留删除镜像中未打标签的父镜像

Docker Hub  https://hub.docker.com/
# docker search [OPTIONS] TERM
    --automated=false   只显示自动化构建的选项
    --no-trunc=false    以截断方式显示image id
    -s  --stars=0   设置显示结果的最低星级
    一次最多返回25个结果

docker pull [OPTIONS] NAME[:TAG]
    -a  --all-tags=false    下载仓库中所有标签镜像

提速
    使用--registry-mirror选项
        1.修改：vim /etc/default/docker
        2.添加：DOCKER_OPTS = "--registry-mirror=http://MIRROR-ADDR"
            https://www.daocloud.io

docker push NAME[:TAG]

保存对容器的修改，并再次使用
自定义镜像的能力
以软件的形式打包并分发服务及其运行环境

1.使用commit构建镜像
    # docker commit [OPTIONS] CONTAINER [REPOSITORY[:TAG]]
    -a  --author="" 指定镜像作者，一般：name@email
    -m  --message=""    提交信息
    -p  --pause=true    在commit过程中不暂停容器

    ********************demo***************
    # docker run -it -p 80 --name commit_test ubuntu /bin/bash
    # apt-get update
    # apt-get install -y nginx
    # exit
    # docker ps -l
    生成镜像
    # docker commit -a "summer" -m "nginx" commit_test summer258/commit_test1
    # docker images
    # docker run -d --name nginx_web -p 80 summer258/commit_test1 nginx -g "daemon off;"
    # docker ps
    # curl http://127.0.0.1:32770
    ***************************************

2.使用dockerfile构建镜像

    # docker build [OPTIONS] PATH | URL | -
        --force-rm=false
        --no-cache=false
        --pull=false
        -q  --quiet=false
        --rm=true
        -t  --tag=""

    创建一个Dockerfile
        # first dockerfile
        FROM ubuntu:14.04
        MAINTAINER  name "name@email"
        RUN apt-get update
        RUN apt-get install -y nginx
        EXPOSE 80

    ********************demo***************
    # mkdir -p dockerfile/df_test1
    # cd dockerfile/df_test1
    # vim Dockerfile
        # first dockerfile
        FROM ubuntu:14.04
        MAINTAINER  name "name@email"
        RUN apt-get update
        RUN apt-get install -y nginx
        EXPOSE 80
    # docker build -t='summer258/df_test1' .
    # docker run -d --name nginx_web2 -p 80 summer258/df_test1 nginx -g "daemon off;"
    # docker ps
    # curl http://127.0.0.1:32770
    ***************************************

ps -ef | grep docker
# docker version
# nc -U /var/run/docker.sock
GET /info HTTP/1.1

ps -ef | grep docker
# status docker

service docker start|stop|restart

docker -d [OPTIONS]
    -d 表示以守护进程形式运行

    运行相关：
    -D  --debug=false
    -e  --exec-drive="native"
    -g  --graph="/var/lib/docker"
    --icc=true
    -l  --log-level="info"
    --label=[]
    =p  --pidfile="/var/run/docker.pid"

    Docker服务器连接相关：
    -G,--group="docker"
    -H,--host=[]
    --tls=false
    --tlscacert="/home/sven/.docker/ca.pem"
    --tlscert="/home/sven/.docker/cert.pem"
    --tlskey="/home/sven/.docker/key.pem"
    --tlsverify=false

    RemoteAPI相关：
    --api-enable-cors=false

    存储相关：
    -s,--storage-drive=""
    --selinux-enabled=false
    --storage-opt=[]

    Registry相关：
    --insecure-registry=[]
    --registry-mirror=[]

    网络设置相关：
    -b,--bridge=""
    --bip=""
    --fixed-cidr=""
    --fixed-cidr-v6=""
    --dns=[]
    --dns-search=[]
    --ip=0.0.0.0
    --ip-forward=true
    --ip-masq=true
    --iptables=true
    --ipv6=false
    --mtu=0

DOCKER_OPTS = "……"

第二台安装Docker的服务器
修改Docker守护进程启动选项，区别服务器
保证Client API和Server API版本一致

# docker version
    查看版本API是否一致

修改Docker守护进程启动项
-H  tcp://host:port
    unix:///path/to/socket
    fd://* or fd://socketfd
守护进程默认配置：
-H  unix:///var/run/docker.sock

vim /etc/default/docker
    DOCKER_OPTS = "-H tcp://0.0.0.0:2375"
    # 一般选择2375端口
重启服务 # service docker restart
ifconfig    获取本机IP地址

curl http://服务器IP：配置port/info

修改客户端配置
使用Docker客户端命令选项
-H  tcp://host:port
    unix:///path/to/socket
    fd://* or fd://socketfd
客户端默认配置：
-H  unix:///var/run/docker.sock

# docker -H tcp://ip:port info

使用环境变量简化操作DOCKER_HOST
export DOCKER_HOST="tcp://ip:port"

将环境变量置空则返回本机服务
export DOCKER_HOST=""

1.将本机作为远程客户端，通过DOCKER_HOST连接
2.修改本机配置，添加默认配置
vim /etc/default/docker
    DOCKER_OPTS = "-H tcp://0.0.0.0:2375 -H  unix:///var/run/docker.sock"

first dockerfile
FROM ubuntu:14.04
MAINTAINER  name "name@email"
RUN apt-get update
RUN apt-get install -y nginx
EXPOSE 80

Comment
INSTRUCTION argument

已经存在的镜像
基础镜像
必须是第一条非注释指令

指定镜像的作者信息，包含镜像的所有者和联系信息

指定当前镜像中运行的命令
shell模式
    RUN <command>
    默认shell   /bin/sh -c command
exec模式
    RUN [ "executable", "param1", "param2"]
    可以指定其他shell   RUN ["/bin/bash", "-c", "echo hello"]

指定运行该镜像的容器使用的端口
在使用时仍需指定    -p port

提供容器运行时的命令，作为默认设置，会被docker run中相同命令覆盖
CMD [ "executable", "param1", "param2"] (exec模式)
CMD command param1 param2   (shell模式)
CMD ["param1", "param2"]    (作为ENTRYPOINT指令的默认参数)

ENTRYPOINT [ "executable", "param1", "param2"] (exec模式)
ENTRYPOINT command param1 param2   (shell模式)
默认不会被docker run中命令覆盖
可以使用 docker run entrypoint 覆盖

将文件/目录复制到Dockerfile构建的文件中，源地址，目标地址
ADD <src>…<dest>
ADD ["<src>"…"<dest>"]  (使用于文件路径中有空格的情况)

COPY <src>…<dest>
COPY ["<src>"…"<dest>"]  (使用于文件路径中有空格的情况)

ADD vs COPY
    ADD包含类似tar的解压功能
    如果单纯复制文件，Docker推荐使用COPY

用于向基于镜像创建的容器添加数据卷，共享数据/数据持久化

在镜像创建新容器时，指定工作目录，一般使用绝对路径，相对路径会持续传递

用户设置环境变量

指定镜像运行的用户，默认为root

镜像触发器
当一个镜像被其他镜像作为基础镜像时执行
会在构建过程中插入指令

docker build --no-cache
或者
在Dockerfile中设置缓存刷新时间
ENV REFRESH_DATE 2019-8-2

docker history [image]

docker0——Linux虚拟网桥

    Linux虚拟网桥:
        可以设置IP地址
        相当于拥有一个隐藏的虚拟网卡

    docker0 地址划分
        IP:172.17.42.1  子网掩码：255.255.0.0
        MAC：02:42:ac:11:00:00到02:42:ac:11:ff:ff
        总共提供了65534个地址

    安装网桥管理程序
        yum -y install bridge-utils
    查看网桥设备
        # brctl show

自定义Docker0

    修改docker0地址
    $ sudo ifconfig docker0 192.168.200.1 netmask 255.255.255.0

自定义虚拟网桥

    添加虚拟网桥
        $ sudo brctl addbr br0
        $ sudo ifconfig br0 192.168.100.1 netmask 255.255.255.0
    更改docker守护进程的启动配置
        /etc/default/docker 中添加DOCKER_OPTS值
        -b=br0

用于测试的Docker镜像Dockerfile：
    # ./cct/Dockerfile
    # container connection test
    FROM ubuntu:14.04
    RUN apt-get install -y ping
    RUN apt-get update
    RUN apt-get install -y nginx
    RUN apt-get install -y curl
    EXPOSE 80
    CMD /bin/bash

    # docker build -t summer258/cct .

默认设置
--icc=true  默认

启动第一个容器
# docker run -it --name cct1 summer258/cct
/# nginx
Ctrl+P Ctrl+Q

启动第二个容器
# docker run -it --name cct2 summer258/cct
/# ifconfig
Ctrl+P Ctrl+Q

inet addr:172.17.0.3

连接到第一个容器cct1
# docker attach cct1
/# ifconfig

inet addr:172.17.0.2

测试连接：ping 172.0.3

连接到第一个容器cct2
# docker attach cct2
测试连接：curl http://172.17.0.2

--link
    # docker run --link=[CONTAINER_NAME]:[ALIAS] [IMAGE] [COMMAND]

启动第三个容器
# docker run -it --name cct3 --link=cct1:webtest summer258/cct
/# ping webtest

重启docker服务
    # systemctl restart docker
    # docker restart cct1 cct2 cct3
    /# ping webtest

Docker守护进程的启动选项
    DOCKER_OPTS= " --icc=false"

# ubuntu
$ sudo vim /etc/default/docker
    DOCKER_OPTS = "--icc=false"
# centos
$ sudo vim /etc/docker/daemon.json
    {
        …
        “icc”:false,
        …
    }

$ sudo systemctl restart docker
$ ps -ef | grep docker
$ sudo docker restart cct1 cct2 cct3
$ sudo docker attach cct3
/# ping webtest

Docker守护进程的启动选项
    --icc=false --iptables=true
    --link

$ sudo iptables -F
$ sudo iptables -L -n

--ip-forward=true
    决定系统是否会转发流量

$ sudo sysctl net.ipv4.conf.all.forwarding

iptables是与Linux内核集成的包过滤防火墙系统，
几乎所有的Linux发行版本都会包含iptables的功能

filter表中包含的链：
    INPUT
    FORWARD
    OUTPUT

$ sudo iptables -L -n

$ sudo iptables -I DOCKER -s 10.211.55.3 -d 127.17.0.7 -p TCP --dport 80 j DROP

$ sudo docker run -it -v ~/container_data:/data ubuntu /bin/bash
/# ls

$ sudo docker inspect 容器名/id
可以查看Volume目录信息

$ sudo docker run -it -v ~/datavolume:/data:ro ubuntu /bin/bash
ro：只读

Dockerfile指令：VOLUME["/data"]
不能映射到已经存在的文件目录，系统默认创建

$ sudo docker run --volumes-from [CONTAINER NAME]

$ sudo docker run --volumes-from [container name] -v $(pwd):/backup[:wr] ubuntu tar cvf /backup/backup.tar [container data volume]

$ sudo docker run --volumes-from [container name] -v $(pwd):/backup[:wr] ubuntu tar xvf /backup/backup.tar [container data volume]

Mac OS X + Parallels
两台Ubuntu 14.04 虚拟机
安装网桥管理工具：
    apt-get install bridge-utils
IP地址：Host1：10.211.55.3
        Host2：10.211.55.5

修改/etc/network/interfaces 文件
auto br0
iface br0 inet static
address 10.211.55.3
netmask 255.255.255.0
gateway 10.211.55.1
bridge_ports eth0

修改/etc/default/docker文件
-b 指定使用自定义网桥
    -b=br0
--fixed-cidr限制IP地址分配范围
    IP地址划分：
    Host1：10.211.55.64/26
        地址范围：10.211.555.65~10.211.55.126
    Host2:192.168.59.126/26
        地址范围：10.211.55.129~10.211.55.190

配置简单，不依赖第三方软件

与主机在同网段，需要小心划分IP地址
需要有网段控制权，在生产环境中不易实现
不容易管理
兼容性不佳

Mac OS X + Virtualbox
两台Ubuntu14.04虚拟机
双网卡，Host-Only&NAT
安装Open vSwitch：
    apt-get install openvswitch-switch
安装网桥管理工具：
    apt-get install bridge-utils
IP地址：Host1：192.168.59.103
        Host2：192.168.59.104

建立ovs网桥
添加gre连接
配置docker容器虚拟网桥
为虚拟网桥添加ovs接口
添加不同Docker容器网段路由

  主机：192.168.59.103
查看ovs状态
$ sudo ovs-vsctl show
建立ovs网桥
$ sudo ovs-vsctl add-br obr0
添加gre接口
$ sudo ovs-vsctl add-port obr0 gre0
$ sudo ovs-vsctl set interface gre0 type=gre options:remote_ip=192.168.59.104
$ sudo ovs-vsctl show

  建立本机docker需要使用的网桥
$ sudo brctl addbr br0
$ sudo ifconfig br0 192.168.1.1 netmask 255.255.255.0
$ sudo brctl addif br0 obr0
$ sudo brctl show

  配置docker，用新建的网桥代替docker0
$ sudo vim /etc/default/docker
  DOCKER_OPTS="obr0"
$ sudo service docker restart

  新建一个docker容器
$ sudo docker run -it ubuntu /bin/bash
/# ifconfig
  inet addr:192.168.1.2
/# ping 192.168.59.104

  切换主机：192.168.59.104
$ ifconfig
  inet addr:192.168.2.1
启动一个docker容器
$ sudo docker run -it ubuntu /bin/bash
/# ifconfig
  inet addr:192.168.2.4
/# ping 192.168.59.104

  切回主机：192.168.59.103
/# ping 192.168.2.4
  ping不通，因为不同网段需要查找路由表来确定不同网段的网络地址
$ route
$ sudo ip route add 192.168.2.0/24 via 192.168.59.104 dev eth0

  $ sudo docker run -it ubuntu /bin/bash
/# ping 192.168.2.4

语义：编织
建立一个虚拟的网络，用于将运行在不同主机的Docker容器连接起来
https://www.weave.works/
https://github.com/weaveworks/weave#readme

Mac OS X + Virtualbox
两台Ubuntu14.04虚拟机
双网卡，Host-Only&NAT
IP地址：Host1：192.168.59.103
        Host2:192.168.59.104

安装weave
启动weave
  $ weave launch
连接不同主机
通过weave启动容器

  主机：192.168.59.103
$ sudo wget -O /usr/bin/weave https://raw.githubusercontent.com/zettio/weave/master/weave
$ sudo chmod a+x /usr/bin/weave
$ weave launch
$ sudo docker ps -l

  切换主机：192.168.59.104
重复安装操作
$ sudo wget -O /usr/bin/weave https://raw.githubusercontent.com/zettio/weave/master/weave
$ sudo chmod a+x /usr/bin/weave
$ weave launch 192.168.59.103
启动容器，将ID赋值给c2
c2=$(weave run 192.168.1.2/24 -it ubuntu /bin/bash)
$ echo $c2
$ docker attach $ c2
/# ifconfig
多了一个网络设备ethwe，inet addr：192.168.1.2

  切换Host1:192.168.59.103
$ weave run 192.168.1.10/24 -it --name wc1 ubuntu /bin/bash
相同网段的IP地址
$ sudo docker aatach wc1
/# ifconfig
增加wthwe，inet addr:192.168.1.10
/# ping 192.168.1.2
能够ping通

git config --list

cat ~/.gitconfig
git config --global user.name  "username"
git config --global user.email  "email"

$ git clone https://github.com/username/repo.git
Username: your_username
Password: your_token

#如果没有~/.ssh 目录就执行下面，一直回车到结束即可
ssh-keygen -t rsa -C "your email"
#查看ssh key并且拷贝
cat ~/.ssh/id_rsa.pub

ssh -T git@github.com
#运行结果出现类似如下
Hi <username>! You've successfully authenticated, but GitHub does not provide shell access.

cd projectdir/
cat .git/config
git config user.name "username"
git config user.email "email"
cat .git/config

#设置记住密码（默认15分钟）：
git config credential.helper cache
#设置记住密码1小时
git config credential.helper 'cache --timeout=3600'
#长期存储密码：记住密码,以明文存在~/.git-credentials电脑送人后记得删掉该文件
git config credential.helper store
#重新指定.git-credentials文件路径
git config credential.helper 'store --file /data/git/.git-credentials'
cat .git/config

#记住密码记录
git config --set credential.helper 'cache --timeout=600'
git config --global --set credential.helper 'cache --timeout=600'
git config --system --set credential.helper 'cache --timeout=600'

#取消密码记录
git config --unset-all credential.helper
git config --global --unset-all credential.helper
git config --system --unset-all credential.helper

git remote show origin # 发现不是tracked的分支(远程已删，本地还有)
git remote prune origin # 删除远程没有本地还在的分支

git log --graph --decorate --oneline --simplify-by-decoration --all

git config --global core.quotepath false