深入浅出Docker（异步图书） (Nigel Poulton(奈吉尔·波尔顿))（Z-Library）

【One-Line Pitch】 A practical, hands-on Docker guide that walks beginners from container history and installation through images, containers, networking, Swarm, and enterprise security, with clear commands and examples for real-world use. Ideal for developers, ops engineers, and anyone preparing for the Docker Certified Associate (DCA) exam. 【Book Arc】 - **Opening (~0%–10%)**: Introduces the container revolution—why VMs fell short, how Linux containers emerged, and Docker’s role in making containers accessible. Sets the stage for the technology’s value and ecosystem. - **Early (~10%–23%)**: Covers Docker fundamentals—company background, the Moby open-source project, the Open Container Initiative (OCI) standards, and the "batteries included but removable" philosophy. Explains the engine’s architecture and versioning. - **Early–Middle (~23%–42%)**: Walks through installation across Windows, Mac, Linux, and Windows Server 2016, plus engine upgrade procedures. Includes storage driver selection (e.g., Device Mapper, Overlay2) with production-focused configuration tips. - **Middle (~42%–60%)**: Dives into core Docker technology—images (layers, tagging, registries), containers (lifecycle, restart policies), and application containerization with multi-stage builds. Emphasizes practical command usage. - **Late (~60%–85%)**: Explores orchestration and networking—Docker Compose for multi-container apps, Swarm for clustering, overlay networks, and volumes for persistent data. Covers Stack deployment for production-grade apps. - **Ending (~85%–100%)**: Addresses security (Linux security tech, Docker platform security), enterprise tools (EE engine, UCP, DTR), and advanced features like RBAC, AD integration, and content trust. Includes DCA exam mapping and TLS setup appendix. 【Key Takeaways】 - **Containers solve VM inefficiencies** (Early): Unlike VMs, containers share the host OS, saving CPU, RAM, and licensing costs while starting faster and migrating easily. This is the core rationale for Docker’s adoption. - **Docker’s architecture is modular and open** (Early): The engine, Moby project, and OCI standards (runtime and image specs) enable interoperability and third-party innovation. Understanding this helps you navigate the ecosystem. - **Installation is platform-specific but straightforward** (Early–Middle): Docker for Windows/Mac runs a Linux VM for Linux containers, while Windows Server supports native Windows containers. Verify with `docker version` and `docker system info`. - **Storage driver choice impacts performance** (Middle): Overlay2 is recommended for modern Linux kernels, while Device Mapper needs direct-lvm configuration for production. Always check Docker docs for compatibility. - **Images are layered and shareable** (Middle): Docker images use union file systems, enabling small sizes and efficient sharing. Tagging, digest-based pulls, and multi-arch images are key for managing deployments. - **Containers have a lifecycle and self-healing options** (Middle): Start, stop, and restart policies (e.g., `--restart`) enable resilience. Web server examples show how to run and inspect containers in practice. - **Orchestration scales apps beyond single containers** (Late): Docker Compose simplifies multi-container apps, while Swarm and Stack provide clustering and production deployment. Networking (overlay, ingress) and volumes ensure connectivity and persistence. - **Security and enterprise features are critical for production** (Ending): Linux security tech, RBAC, AD integration, and Docker Content Trust (DCT) protect deployments. The DCA exam appendix maps these topics to certification domains. 【Reading Tips】 - **Skim the overview chapters (1–2)** if you’re already familiar with container basics; focus on the OCI and Moby sections for ecosystem context. - **Deep-read installation (Chapter 3)** only for your specific platform—skip others unless you’re troubleshooting. Pay attention to storage driver recommendations for production. - **Practice commands in Chapters 6–9** (images, containers, Compose) as you read; the "命令" sections are ideal for quick reference and hands-on learning. - **Treat Chapters 10–14 (Swarm, networking, volumes, Stack)** as a unit—they build on each other for orchestration. Use the troubleshooting tips in Swarm for real-world issues. - **Use the DCA appendix (Appendix B)** as a study checklist if you’re exam-bound; it maps chapters to exam weightings, helping you prioritize. 【Coverage Limits】 This guide synthesizes the book’s structure and key concepts from the provided excerpts; detailed command outputs and step-by-step examples are not fully reproduced here. The excerpts do not cover the complete content of later chapters (e.g., full security and enterprise tool details), so refer to the book for exhaustive instructions.