docker

reference:
cheatsheet
Docker 学习笔记
什么是 Docker
Understanding the Docker Internals
Ideas for a cgroups UI
Configure Liveness, Readiness and Startup Probes
Docker for Windows: Deploying a docker-compose app to local Kubernetes
Windows for Linux Nerds
Running Docker on WSL2 without Docker Desktop
Copy Docker repositories
Docker storage drivers
About storage drivers
Docker In Docker
* ContainerSSH/ContainerSSH
WebAssembly: Docker without containers!

docker internals

cgoups

namespace

init

[!NOTE|label:references:]
Install Docker Engine on CentOS
Linux post-installation steps for Docker Engine

install

[!NOTE|label:references:]
Install Docker Engine on Debian
Install Docker Engine on CentOS

environment cleanup

$ sudo dnf remove docker \
                  docker-client \
                  docker-client-latest \
                  docker-common \
                  docker-latest \
                  docker-latest-logrotate \
                  docker-logrotate \
                  docker-engine

repo setup

$ sudo dnf install -y yum-utils
$ sudo yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
$ sudo dnf makecache

install

$ sudo dnf install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
# or
$ sudo dnf install -y docker-ce docker-ce-cli containerd.io

# or
$ sudo dnf install -y docker-ce-19.03.15-3.el8 docker-ce-cli-19.03.15-3.el8 containerd.io

# or
$ sudo dnf install -y docker-ce-19.03.15-3.el8 \
                      docker-ce-cli-19.03.15-3.el8 \
                      containerd.io \
                      docker-compose-plugin-2.16.0-1.el8 \
                      docker-scan-plugin-0.23.0-3.el8 \
                      docker-buildx-plugin-0.10.2-1.el8

to get available version:

$ sudo dnf list docker-ce --showduplicates | grep 19\.03
docker-ce.x86_64               3:19.03.15-3.el8                @docker-ce-stable
docker-ce.x86_64               3:19.03.13-3.el8                docker-ce-stable
docker-ce.x86_64               3:19.03.14-3.el8                docker-ce-stable
docker-ce.x86_64               3:19.03.15-3.el8                docker-ce-stable

enable service

$ sudo systemctl enable --now docker
Created symlink /etc/systemd/system/multi-user.target.wants/docker.service → /usr/local/lib/systemd/system/docker.service.

account settings
```
$ sudo usermod -aG docker $(whoami)
```

teardown

$ sudo dnf remove -y docker-ce docker-ce-cli containerd.io docker-compose-plugin docker-scan-plugin docker-buildx-plugin

troubleshooting

problem with installed package podman

issue

$ sudo yum install docker-ce-19.03.15-3.el8 \
                   docker-ce-cli-19.03.15-3.el8 \
                   containerd.io \
                   docker-buildx-plugin \
                   docker-compose-plugin
Docker CE Stable - x86_64                                                              272 kB/s |  43 kB     00:00
Error:
 Problem 1: problem with installed package podman-1.6.4-10.module_el8.2.0+305+5e198a41.x86_64
  - package podman-1.6.4-10.module_el8.2.0+305+5e198a41.x86_64 requires runc >= 1.0.0-57, but none of the providers can be installed
  - package podman-3.3.1-9.module_el8.5.0+988+b1f0b741.x86_64 requires runc >= 1.0.0-57, but none of the providers can be installed
  - package containerd.io-1.6.21-3.1.el8.x86_64 conflicts with runc provided by runc-1.0.0-65.rc10.module_el8.2.0+305+5e198a41.x86_64
  - package containerd.io-1.6.21-3.1.el8.x86_64 obsoletes runc provided by runc-1.0.0-65.rc10.module_el8.2.0+305+5e198a41.x86_64
  - package containerd.io-1.6.21-3.1.el8.x86_64 conflicts with runc provided by runc-1.0.2-1.module_el8.5.0+911+f19012f9.x86_64
  - package containerd.io-1.6.21-3.1.el8.x86_64 obsoletes runc provided by runc-1.0.2-1.module_el8.5.0+911+f19012f9.x86_64
  - cannot install the best candidate for the job
  - package runc-1.0.0-66.rc10.module_el8.5.0+1004+c00a74f5.x86_64 is filtered out by modular filtering
  - package runc-1.0.0-72.rc92.module_el8.5.0+1006+8d0e68a2.x86_64 is filtered out by modular filtering
 Problem 2: problem with installed package buildah-1.11.6-7.module_el8.2.0+305+5e198a41.x86_64
  - package buildah-1.11.6-7.module_el8.2.0+305+5e198a41.x86_64 requires runc >= 1.0.0-26, but none of the providers can be installed
  ...
  - package buildah-1.11.6-7.module_el8.2.0+305+5e198a41.x86_64 requires runc >= 1.0.0-26, but none of the providers can be installed
  - package buildah-1.22.3-2.module_el8.5.0+911+f19012f9.x86_64 requires runc >= 1.0.0-26, but none of the providers can be installed
  - package containerd.io-1.3.7-3.1.el8.x86_64 conflicts with runc provided by runc-1.0.0-65.rc10.module_el8.2.0+305+5e198a41.x86_64
  ...

solution : remove podman

$ sudo dnf remove buildah skopeo podman containers-common atomic-registries docker container-tools
$ sudo rm -rf /etc/containers/* /var/lib/containers/* /etc/docker /etc/subuid* /etc/subgid*
$ cd ~ && rm -rf /.local/share/containers/

Error: Transaction test error

issue

$ sudo dnf install -y docker-ce-19.03.15-3.el8 docker-ce-cli-19.03.15-3.el8 containerd.io docker-compose-plugin-2.16.0-1.el8 docker-scan-plugin-0.23.0-3.el8 docker-buildx-plugin-0.10.2-1.el8
Error: Transaction test error:
  file /usr/libexec/docker/cli-plugins/docker-buildx from install of docker-buildx-plugin-0:0.10.2-1.el8.x86_64 conflicts with file from package docker-ce-cli-1:19.03.15-3.el8.x86_64

solution: using latest docker-ce-cli

$ sudo dnf install -y docker-ce-19.03.15-3.el8 docker-ce-cli containerd.io docker-compose-plugin docker-scan-plugin docker-buildx-plugin
CentOS Stream 8 - AppStream                                              14 MB/s |  34 MB     00:02
CentOS Stream 8 - BaseOS                                                6.4 MB/s |  53 MB     00:08
CentOS Stream 8 - Extras                                                 31 kB/s |  18 kB     00:00
CentOS Stream 8 - Extras common packages                                9.6 kB/s | 6.9 kB     00:00
Docker CE Stable - x86_64                                               289 kB/s |  51 kB     00:00
Dependencies resolved.
========================================================================================================
 Package                  Arch      Version                                   Repository           Size
========================================================================================================
Installing:
 containerd.io            x86_64    1.6.24-3.1.el8                            docker-ce-stable     34 M
 docker-buildx-plugin     x86_64    0.11.2-1.el8                              docker-ce-stable     13 M
 docker-ce                x86_64    3:19.03.15-3.el8                          docker-ce-stable     24 M
 docker-ce-cli            x86_64    1:24.0.7-1.el8                            docker-ce-stable    7.2 M
 docker-compose-plugin    x86_64    2.21.0-1.el8                              docker-ce-stable     13 M
 docker-scan-plugin       x86_64    0.23.0-3.el8                              docker-ce-stable    3.8 M
Installing dependencies:
 container-selinux        noarch    2:2.224.0-1.module_el8+712+4cd1bd69       appstream            70 k
 libcgroup                x86_64    0.41-19.el8                               baseos               70 k

Transaction Summary
========================================================================================================
Install  8 Packages

Total download size: 95 M
Installed size: 376 M
Downloading Packages:
(1/8): containerd.io-1.6.24-3.1.el8.x86_64.rpm                           24 MB/s |  34 MB     00:01
(2/8): container-selinux-2.224.0-1.module_el8+712+4cd1bd69.noarch.rpm    49 kB/s |  70 kB     00:01
(3/8): libcgroup-0.41-19.el8.x86_64.rpm                                  48 kB/s |  70 kB     00:01
(4/8): docker-buildx-plugin-0.11.2-1.el8.x86_64.rpm                      30 MB/s |  13 MB     00:00
(5/8): docker-compose-plugin-2.21.0-1.el8.x86_64.rpm                     31 MB/s |  13 MB     00:00
(6/8): docker-ce-cli-24.0.7-1.el8.x86_64.rpm                            7.2 MB/s | 7.2 MB     00:00
(7/8): docker-scan-plugin-0.23.0-3.el8.x86_64.rpm                        12 MB/s | 3.8 MB     00:00
(8/8): docker-ce-19.03.15-3.el8.x86_64.rpm                               14 MB/s |  24 MB     00:01
--------------------------------------------------------------------------------------------------------
Total                                                                    26 MB/s |  95 MB     00:03
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                1/1
  Installing       : docker-compose-plugin-2.21.0-1.el8.x86_64                                      1/8
  Running scriptlet: docker-compose-plugin-2.21.0-1.el8.x86_64                                      1/8
  Running scriptlet: container-selinux-2:2.224.0-1.module_el8+712+4cd1bd69.noarch                   2/8
  Installing       : container-selinux-2:2.224.0-1.module_el8+712+4cd1bd69.noarch                   2/8
  Running scriptlet: container-selinux-2:2.224.0-1.module_el8+712+4cd1bd69.noarch                   2/8
  Installing       : containerd.io-1.6.24-3.1.el8.x86_64                                            3/8
  Running scriptlet: containerd.io-1.6.24-3.1.el8.x86_64                                            3/8
  Installing       : docker-scan-plugin-0.23.0-3.el8.x86_64                                         4/8
  Running scriptlet: docker-scan-plugin-0.23.0-3.el8.x86_64                                         4/8
  Installing       : docker-buildx-plugin-0.11.2-1.el8.x86_64                                       5/8
  Running scriptlet: docker-buildx-plugin-0.11.2-1.el8.x86_64                                       5/8
  Installing       : docker-ce-cli-1:24.0.7-1.el8.x86_64                                            6/8
  Running scriptlet: docker-ce-cli-1:24.0.7-1.el8.x86_64                                            6/8
  Running scriptlet: libcgroup-0.41-19.el8.x86_64                                                   7/8
  Installing       : libcgroup-0.41-19.el8.x86_64                                                   7/8
  Running scriptlet: libcgroup-0.41-19.el8.x86_64                                                   7/8
/sbin/ldconfig: /usr/lib64/llvm15/lib/libclang.so.15 is not a symbolic link

  Installing       : docker-ce-3:19.03.15-3.el8.x86_64                                              8/8
  Running scriptlet: docker-ce-3:19.03.15-3.el8.x86_64                                              8/8
  Running scriptlet: container-selinux-2:2.224.0-1.module_el8+712+4cd1bd69.noarch                   8/8
  Running scriptlet: docker-ce-3:19.03.15-3.el8.x86_64                                              8/8
/sbin/ldconfig: /usr/lib64/llvm15/lib/libclang.so.15 is not a symbolic link

  Verifying        : container-selinux-2:2.224.0-1.module_el8+712+4cd1bd69.noarch                   1/8
  Verifying        : libcgroup-0.41-19.el8.x86_64                                                   2/8
  Verifying        : containerd.io-1.6.24-3.1.el8.x86_64                                            3/8
  Verifying        : docker-buildx-plugin-0.11.2-1.el8.x86_64                                       4/8
  Verifying        : docker-ce-3:19.03.15-3.el8.x86_64                                              5/8
  Verifying        : docker-ce-cli-1:24.0.7-1.el8.x86_64                                            6/8
  Verifying        : docker-compose-plugin-2.21.0-1.el8.x86_64                                      7/8
  Verifying        : docker-scan-plugin-0.23.0-3.el8.x86_64                                         8/8

Installed:
  container-selinux-2:2.224.0-1.module_el8+712+4cd1bd69.noarch
  containerd.io-1.6.24-3.1.el8.x86_64
  docker-buildx-plugin-0.11.2-1.el8.x86_64
  docker-ce-3:19.03.15-3.el8.x86_64
  docker-ce-cli-1:24.0.7-1.el8.x86_64
  docker-compose-plugin-2.21.0-1.el8.x86_64
  docker-scan-plugin-0.23.0-3.el8.x86_64
  libcgroup-0.41-19.el8.x86_64
Complete!

$ sudo dnf list --installed | grep -E 'docker|container'
container-selinux.noarch                           2:2.224.0-1.module_el8+712+4cd1bd69                   @appstream
containerd.io.x86_64                               1.6.24-3.1.el8                                        @docker-ce-stable
containernetworking-plugins.x86_64                 1:1.3.0-2.module_el8+461+0c6b54ea                     @AppStream
docker-buildx-plugin.x86_64                        0.11.2-1.el8                                          @docker-ce-stable
docker-ce.x86_64                                   3:19.03.15-3.el8                                      @docker-ce-stable
docker-ce-cli.x86_64                               1:24.0.7-1.el8                                        @docker-ce-stable
docker-compose-plugin.x86_64                       2.21.0-1.el8                                          @docker-ce-stable
docker-scan-plugin.x86_64                          0.23.0-3.el8                                          @docker-ce-stable
systemd-container.x86_64                           239-76.el8                                            @anaconda

upgrade

Upgrade to Docker Desktop version 4.37.2 (recommended)

$ sudo launchctl bootout system/com.docker.vmnetd 2>/dev/null || true
$ sudo launchctl bootout system/com.docker.socket 2>/dev/null || true

$ sudo rm /Library/PrivilegedHelperTools/com.docker.vmnetd || true
$ sudo rm /Library/PrivilegedHelperTools/com.docker.socket || true

$ ps aux | grep -i docker | awk '{print $2}' | sudo xargs kill -9 2>/dev/null

Install a patch if you have version 4.32 - 4.36

$ sudo launchctl bootout system/com.docker.vmnetd 2>/dev/null || true
$ sudo launchctl bootout system/com.docker.socket 2>/dev/null || true

$ sudo rm /Library/PrivilegedHelperTools/com.docker.vmnetd || true
$ sudo rm /Library/PrivilegedHelperTools/com.docker.socket || true

$ ps aux | grep docker | awk '{print $2}' | sudo xargs kill -9 2>/dev/null

MDM script

#!/bin/bash

# Stop the docker services
echo "Stopping Docker..."
sudo pkill -i docker

# Stop the vmnetd service
echo "Stopping com.docker.vmnetd service..."
sudo launchctl bootout system /Library/LaunchDaemons/com.docker.vmnetd.plist

# Stop the socket service
echo "Stopping com.docker.socket service..."
sudo launchctl bootout system /Library/LaunchDaemons/com.docker.socket.plist

# Remove vmnetd binary
echo "Removing com.docker.vmnetd binary..."
sudo rm -f /Library/PrivilegedHelperTools/com.docker.vmnetd

# Remove socket binary
echo "Removing com.docker.socket binary..."
sudo rm -f /Library/PrivilegedHelperTools/com.docker.socket

# Install new binaries
echo "Install new binaries..."
sudo cp /Applications/Docker.app/Contents/Library/LaunchServices/com.docker.vmnetd /Library/PrivilegedHelperTools/
sudo cp /Applications/Docker.app/Contents/MacOS/com.docker.socket /Library/PrivilegedHelperTools/

auto-completion

references:
* contrib/completion/bash/docker
command-line completion
Enable Docker command-line auto completion in bash on Centos/Ubuntu
archived: contrib/completion/bash/docker

docker completion : _start_docker

[!NOTE|label:references:]
details: docker completion <x> --help. i.e.: docker completion bash --help
more info:
#3689 Docker completion missing in 4.9.1?
$ ls -1 /Applications/Docker.app/Contents/Resources/etc
docker-compose.bash-completion
docker-compose.fish-completion
docker-compose.zsh-completion
docker.bash-completion
docker.fish-completion
docker.zsh-completion

# linux
$ docker completion bash > /etc/bash_completion.d/docker
$ complete -F _start_docker -o nosort -o bashdefault -o default docker

# osx
$ docker completion bash > /usr/local/etc/bash_completion.d/docker
# or
$ docker completion bash > $(brew --prefix)/etc/bash_completion.d/docker
$ complete -F _start_docker -o nosort -o bashdefault -o default docker

universal solution : _docker

# linux
$ curl -fsSL -o /etc/bash_completion.d/docker \
             https://github.com/docker/cli/raw/master/contrib/completion/bash/docker
# osx
$ curl -fsSL -o $(brew --prefix)/etc/bash_completion.d/docker \
             https://github.com/docker/cli/raw/master/contrib/completion/bash/docker
$ complete -F _docker -o nosort -o bashdefault -o default docker

# @deprecated
$ curl -o /etc/bash_completion.d/docker \
       -fsSL https://github.com/docker/docker-ce/raw/master/components/cli/contrib/completion/bash/docker
$ complete -F _docker -o nosort -o bashdefault -o default docker

ubuntu

# check completion file location
$ dpkg -L docker-ce-cli | grep completion
/usr/share/bash-completion
/usr/share/bash-completion/completions
/usr/share/bash-completion/completions/docker
/usr/share/fish/vendor_completions.d
/usr/share/fish/vendor_completions.d/docker.fish
/usr/share/zsh/vendor-completions
/usr/share/zsh/vendor-completions/_docker

# link file to `/etc/bash_completion.d`
$ ln -sf /usr/share/bash-completion/completions/docker /etc/bash_completion.d/docker

complete alias

docker/tricky

Linux

$ curl -fsSL https://raw.githubusercontent.com/docker/cli/master/contrib/completion/bash/docker \
       -o /etc/bash_completion.d/docker

load completion

$ grep 'bash_completion' /etc/bashrc
if [ -f /usr/share/bash-completion/bash_completion ]; then
  source /usr/share/bash-completion/bash_completion
fi

$ cat /usr/share/bash-completion/bash_completion
...
2070 # source compat completion directory definitions
2071 compat_dir=${BASH_COMPLETION_COMPAT_DIR:-/etc/bash_completion.d}
2072 if [[ -d $compat_dir && -r $compat_dir && -x $compat_dir ]]; then
2073     for i in "$compat_dir"/*; do
2074         [[ ${i##*/} != @($_backup_glob|Makefile*|$_blacklist_glob) \
2075             && -f $i && -r $i ]] && . "$i"
2076     done
2077 fi
2078 unset compat_dir i _blacklist_glob
2079
2080 # source user completion file
2081 user_completion=${BASH_COMPLETION_USER_FILE:-~/.bash_completion}
2082 [[ ${BASH_SOURCE[0]} != $user_completion && -r $user_completion ]] \
2083     && . $user_completion
2084 unset user_completion
...

osx

bashComp="$(brew --prefix)/etc/bash_completion.d"
bashComp2="$(brew --prefix)/etc/profile.d/bash_completion.sh"
dApp="/Applications/Docker.app"
dmver='0.16.2'
gitcontent='https://raw.githubusercontent.com'
dm="${gitcontent}/docker/machine/v${dmver}/contrib/completion/bash/docker-machine.bash"
curlOpt='-x 127.0.0.1:1087 -fsSL'

brew install bash-completion@2
sudo curl ${curlOpt} ${dm} --output ${bashComp}/docker-machine.bash
for _i in docker.bash-completion docker-compose.bash-completion; do
  ln -s ${dApp}/Contents/Resources/etc/${_i} ${bashComp}/${_i}
done

cat > ~/.bash_profile << EOF
if command -v brew > /dev/null; then
  # bash-completion
  [ -f "${bashComp}" ] && export BASH_COMPLETION_COMPAT_DIR="${bashComp}" && source "${bashComp}";
  # bash-completion@2
  [ -f "${bashComp2}" ] && source "${bashComp2}";
fi
EOF

result

$ complete -p d
complete -F _complete_alias d
$ complete -p dls
complete -F _complete_alias dls

# others:
$ complete -p k
complete -F _complete_alias k
$ complete -p git
complete -o bashdefault -o default -o nospace -F __git_wrap__git_main git

docker build

Best practices for writing Dockerfiles Create a base image Dockerfile reference

$ docker build \
         --no-cache \
         --build-arg REPO=<private.registry.com> \
         --build-arg TAG=1.4-bionic \
         -t <private.registry.com>/devops/jnlp.bionic \
         -f devops-jnlp .

docker ps

references:
docker ps

list without wrap

$ docker ps -a --no-trunc

$ curl --unix-socket /var/run/docker.sock 'http://localhost/containers/json'

i.e.:

$ docker ps -a --no-trunc --filter name=marslo*

list full container id

$ docker ps -aq --no-trunc

$ docker inspect --format="{{.Id}}" d40df87b2f87
d40df87b2f87261152d2541b870c6b801c031f8df969e4bd3e9b3c607e6c1698

filter

[!NOTE|label:references:]
Filtering

FILTER

DESCRIPTION

id

container's id

name

container's name

label

an arbitrary string representing either a key or a key-value pair. Expressed as <key> or <key>=<value>

exited

an integer representing the container's exit code. Only useful with --all.

status

one of created, restarting, running, removing, paused, exited, or dead

ancestor

filters containers which share a given image as an ancestor. Expressed as <image-name>[:<tag>], <image id>, or <image@digest>

before or since

filters containers created before or after a given container ID or name

volume

filters running containers which have mounted a given volume or bind mount.

network

filters running containers connected to a given network.

publish or expose

filters containers which publish or expose a given port. Expressed as <port>[/<proto>] or <startport-endport>/[<proto>]

health

filters containers based on their healthcheck status. One of starting, healthy, unhealthy or none.

isolation

windows daemon only. One of default, process, or hyperv.

is-task

filters containers that are a "task" for a service. Boolean option (true or false)

via name

$ docker ps -aqf "name=mycontainer"
77745046363d

filter with image

$ docker ps -a --no-trunc --filter ancestor='busybox:latest'

# for jenkins/jenkins
$ docker ps -a --filter ancestor=jenkins/jenkins:2.401.2-lts-jdk11 --format "{{.ID}}"

filter with exit code
```
$ docker ps -a --filter 'exited=0'
```
filter with status
```
$ docker ps --filter status=running
```

filter with tag

$ docker images --filter "reference=*/*/*/*:1.4-bionic-dind"

ps format

see iMarslo : docker/show

docker stats

see docker/show

docker inspect

see docker/show

docker proxy

see
docker/tricky
dockerd

check docker layer

references:
docker history

$ docker history [--no-trunc=true] <image>:<tag>
IMAGE               CREATED             CREATED BY                                      SIZE                COMMENT
af73a9899a8f        6 months ago        /bin/sh -c #(nop) WORKDIR /home/devops          0B
e96534e326ed        6 months ago        /bin/sh -c #(nop)  VOLUME [/home/devops/.ssh]   0B
4d3392929105        6 months ago        |5 VERSION=1.6 gid=1000 group=devops uid=100…   884B
8abbc25a66a4        6 months ago        |5 VERSION=1.6 gid=1000 group=devops uid=100…   812B
4cf413ae805e        6 months ago        /bin/sh -c #(nop)  USER devops                  0B
d1d88d88e61b        6 months ago        |5 VERSION=1.6 gid=1000 group=devops uid=100…   1.45GB
4b305ec8942c        6 months ago        /bin/sh -c #(nop) COPY file:c19a45386e5be7e4…   411B
a36e97b18597        6 months ago        |5 VERSION=1.6 gid=1000 group=devops uid=100…   398kB
7abf758ac126        6 months ago        /bin/sh -c #(nop)  USER root                    0B
b7cc7e6545cf        6 months ago        /bin/sh -c #(nop)  ENV DEBIAN_FRONTEND=nonin…   0B
4aa2bff1261d        6 months ago        /bin/sh -c #(nop)  ENV HOME=/home/devops        0B
97c1260a833a        6 months ago        /bin/sh -c #(nop)  ARG gid=1000                 0B
1641eb4e6b1a        6 months ago        /bin/sh -c #(nop)  ARG uid=1000                 0B
f550761577d3        6 months ago        /bin/sh -c #(nop)  ARG group=devops             0B
25f225d7fdaa        6 months ago        /bin/sh -c #(nop)  ARG user=devops              0B
ea3b83e6ee69        6 months ago        /bin/sh -c #(nop)  ARG VERSION=1.6              0B
cf8ee6149a83        6 months ago        /bin/sh -c #(nop)  LABEL description=specifi…   0B
3c8433a403ad        6 months ago        /bin/sh -c #(nop)  LABEL maintainer=marslo@x…   0B
e7d65936ff5d        6 months ago        /bin/sh -c #(nop)  LABEL version=1.6            0B
ac9cd6bdb0cf        6 months ago        /bin/sh -c #(nop)  MAINTAINER marslo <marslo…   0B
ad080923604a        7 months ago        /bin/sh -c #(nop)  CMD ["bash"]                 0B
<missing>           7 months ago        /bin/sh -c #(nop) ADD file:40290d9a94ae76c35…   63.1MB

media type

[!TIP] references:
image manifest version 2, schema 1
image manifest version 2, schema 2
update deprecated schema image manifest version 2, v1 images
docker engine 19.03 release notes
what is a docker image manifest?

`manifest.v2+json`

[!NOTE] mediaType in manifest should be 'application/vnd.docker.distribution.manifest.v2+json' not 'application/vnd.oci.image.manifest.v1+json'

docker version

$ docker -v
Docker version 19.03.2, build 6a30dfc

solution
[!TIP] One way to upgrade an image from image manifest version 2, schema 1 to schema 2 is to docker pull the image and then docker push the image with a current version of Docker. Doing so will automatically convert the image to use the latest image manifest specification. Converting an image to image manifest version 2, schema 2 converts the manifest format, but does not update the contents within the image. Images using manifest version 2, schema 1 may contain unpatched vulnerabilities. We recommend looking for an alternative image or rebuilding it.

sample json

$ docker manifest inspect artifactory.domain.com/docker/devops/jenkins:2.387.1-lts
WARN[0000] Conmon at /usr/libexec/podman/conmon invalid: outdated conmon version
WARN[0000] Warning! The manifest type application/vnd.docker.distribution.manifest.v2+json is not a manifest list but a single image.
{
    "schemaVersion": 2,
    "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
    "config": {
        "mediaType": "application/vnd.docker.container.image.v1+json",
        "size": 13129,
        "digest": "sha256:d5ed2ceef0ec08e9044ebb39812f211d64dbcdfce775cc6b0460ca289193416f"
    },
    "layers": [
        {
            "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
            "size": 55045922,
            "digest": "sha256:32fb02163b6bb519a30f909008e852354dae10bdfd6b34190dbdfe8f15403ea0"
        },
        {
            "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
            "size": 51628196,
            "digest": "sha256:c09d5e9e1188f3fff7a4f8c3c7c330fde5184cba1c6f0c92526b8b7bd0ac7c26"
        },
        {
            "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
            "size": 8929986,
            "digest": "sha256:a56533012712c1db623da3e5e9c2d0276301c82db0a2e7a82debfb57e5d916f2"
        },
        {
            "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
            "size": 1244,
            "digest": "sha256:7936e107ffe73b406a0d02edf9bb02b983534d803bb06fd03dc38dac4b6cfe2a"
        },
        {
            "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
            "size": 189,
            "digest": "sha256:3ca683058265b99b65bbc69b9e8fa4c46e830db35aad614706200e6cf0c30d8a"
        },
        {
            "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
            "size": 98119982,
            "digest": "sha256:c2ecd304b4b84ef6154bd85e13360f0b015e39057a329698617ce0a53ed6cf32"
        },
        {
            "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
            "size": 202,
            "digest": "sha256:be3512d810d65f00f28af0885e2f30833263ee061528e20c7fee21664f1572b8"
        },
        {
            "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
            "size": 5841675,
            "digest": "sha256:56b37d7c2a7a3c93fd013cb1ad5652f8cea3910ecc0274d73064bba27ab57864"
        },
        {
            "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
            "size": 76925753,
            "digest": "sha256:99ed1e723e52507ce2d615e1682d673c3ffcec5f5b68c266db70d829ef4be208"
        },
        {
            "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
            "size": 1932,
            "digest": "sha256:256db5485b1399ecbd58c2558388fc9a4ff1caaaeacbdfe23127c7f13b1ee98b"
        },
        {
            "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
            "size": 1170,
            "digest": "sha256:ee8c7eaf5e6bd8c45e503756da48e80137def6765017148ce9f2af66ce97244b"
        },
        {
            "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
            "size": 374,
            "digest": "sha256:509f66c2f3174642f0eb3e3b2e8a70da698f613042ec65f525c476afe0b6b7d5"
        },
        {
            "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
            "size": 271,
            "digest": "sha256:820296a845d636be13276fdf3bdae7fdf2ac00d401182632d1ab450e26353674"
        }
    ]
}

$ docker manifest inspect docker.io/jenkins/jenkins:2.387.1-lts
WARN[0000] Conmon at /usr/libexec/podman/conmon invalid: outdated conmon version
{
    "schemaVersion": 2,
    "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json",
    "manifests": [
        {
            "mediaType": "application/vnd.oci.image.manifest.v1+json",
            "size": 2765,
            "digest": "sha256:005fcb5c3017ef120d0d9d8d8925e9248ff6e2cf2b5e18b527b01459c7b2b3f4",
            "platform": {
                "architecture": "amd64",
                "os": "linux"
            }
        },
        {
            "mediaType": "application/vnd.oci.image.manifest.v1+json",
            "size": 2765,
            "digest": "sha256:023fd7da56df685064940ff19c03c835e5fc3643ced00cc2bd792e2379cad2c3",
            "platform": {
                "architecture": "arm64",
                "os": "linux"
            }
        },
        {
            "mediaType": "application/vnd.oci.image.manifest.v1+json",
            "size": 2765,
            "digest": "sha256:4b5c14cabb880c1080ac6d07bcefb379fbf31f821556073205ac28f14ed55cf2",
            "platform": {
                "architecture": "s390x",
                "os": "linux"
            }
        },
        {
            "mediaType": "application/vnd.oci.image.manifest.v1+json",
            "size": 566,
            "digest": "sha256:797e205c02212b0ee424969f3441dd23fca9a1157add0211e5f63eab440254ea",
            "platform": {
                "architecture": "unknown",
                "os": "unknown"
            }
        },
        {
            "mediaType": "application/vnd.oci.image.manifest.v1+json",
            "size": 566,
            "digest": "sha256:150e17c6e040dcb86dbb29144a330a4c48be97949bc74ba270796b8bda419b49",
            "platform": {
                "architecture": "unknown",
                "os": "unknown"
            }
        },
        {
            "mediaType": "application/vnd.oci.image.manifest.v1+json",
            "size": 566,
            "digest": "sha256:d4dcd45f608ade71e0c6d4ac68ff8aa4f34826f8181d2e18797101c55eb6ea77",
            "platform": {
                "architecture": "unknown",
                "os": "unknown"
            }
        }
    ]
}

Previousminikube Nextrun & exec

Last updated 10 months ago

Was this helpful?