学习Docker的网络教程

141 阅读15分钟

Docker使得在本地环境中设置虚拟网络变得相当容易。事实上,在使用Docker到现在为止,我们还没有必要对任何网络设置进行修补,因为通常Docker的网络部分 "只是工作"。换句话说,所提供的默认值是通用的,但你可以在引擎盖下改变任何有关网络的默认选项。Docker中的大部分网络都是围绕着使用中的端口以及如何为容器中的各种服务暴露这些端口。大多数时候,使用的是桥接的默认虚拟网络,但我们将看到如何根据需要创建、连接和断开其他网络的连接。


Docker网络默认值

使用Docker网络时的一些默认值如下。

  • 每个容器都被连接到一个名为bridge的私有虚拟网络。
  • 每个虚拟网络都通过主机IP的NAT进行路由。
  • 同一虚拟网络中的所有容器都可以互相交谈,不需要暴露端口(-p)。
  • 这些默认值在大多数情况下工作得很好,但如果需要,也可以进行定制。
  • 你可以根据需要创建网络,或者使用主机IP(-net=host)。
  • 你可以将容器连接到任何数量的网络,如果你不需要任何网络,也可以不连接。

Docker网络端口

在用Docker联网时,我们首先要看的是**-p选项。这个选项标志是-publish**的简称,它创建了一个防火墙规则,将容器上的一个端口映射到主机上的一个端口,以便向外界开放。在下面的例子中,一个Nginx容器被启动,名字是webhost。粗体字的标志-p 80:80,指定将容器中的TCP 80端口映射到主机上的80端口。发布端口的格式是HOST:CONTAINER。

> docker container run -p 80:80 --name webhost -d nginx
c4198f018c0b90df3b5958bb892f015bc5afdeb8efba863a1439e8ad6c32ccfd

docker容器端口命令以一种很好的格式向我们显示了哪些端口正在从主机转发流量到容器上。

> docker container port webhost
80/tcp -> 0.0.0.0:80

Docker IP地址

要找到一个容器的IP地址,我们可以使用docker container inspect命令。在这里的例子中,我们使用了-format选项,以用户友好的方式格式化我们命令的结果。我们的webhost容器的IP地址是172.17.0.2,我们可以看到。

> docker container inspect --format '{{ .NetworkSettings.IPAddress }}' webhost
172.17.0.2

列出Docker网络

docker network ls命令显示了所有已经创建的网络。桥接网络是默认的docker虚拟网络,它位于主机IP地址后面的NAT。由于性能原因,主机网络完全跳过了虚拟网络,但其安全性较低。无网络可以被认为是一个被拔掉的网络端口。

> docker network ls
NETWORK ID          NAME                DRIVER              SCOPE
313d57da9944        bridge              bridge              local
4c835cce5ea0        host                host                local
085638da5c3d        none                null                local

检查Docker网络

我们可以使用docker network inspect命令来了解哪些容器连接到了哪些网络。下面的输出显示,webhost容器的IP地址为172.17.0.2,子网掩码为16位,它被连接到了桥接网络。Docker网络会自动分配IP地址,这方面的配置在IPAM部分处理。

> docker network inspect bridge
[
    {
        "Name": "bridge",
        "Id": "313d57da9944030d011fc7f86938007a67aa2c201f3642db3ad4b86f1560cf2e",
        "Created": "2020-10-05T12:54:39.6042375Z",
        "Scope": "local",
        "Driver": "bridge",
        "EnableIPv6": false,
        "IPAM": {
            "Driver": "default",
            "Options": null,
            "Config": [
                {
                    "Subnet": "172.17.0.0/16",
                    "Gateway": "172.17.0.1"
                }
        },
        "Attachable": false,
        "Ingress": false,
        "ConfigFrom": {
            "Network": ""
        },
        "Containers": {
            "c4198f018c0b90df3b5958bb892f015bc5afdeb8efba863a1439e8ad6c32ccfd": {
                "Name": "webhost",
                "EndpointID": "2e6f46886aae647928688b3ca8b3cf9894a2cf40e99cf0bc92dec05a2e3399a7",
                "MacAddress": "02:42:ac:11:00:02",
                "IPv4Address": "172.17.0.2/16",
                "IPv6Address": ""
            }
        },
        "Options": {
            "com.docker.network.bridge.default_bridge": "true",
            "com.docker.network.bridge.enable_icc": "true",
            "com.docker.network.bridge.enable_ip_masquerade": "true",
            "com.docker.network.bridge.host_binding_ipv4": "0.0.0.0",
            "com.docker.network.bridge.name": "docker0",
            "com.docker.network.driver.mtu": "1500"
        },
        "Labels": {}
    }
]

创建一个Docker网络

要在Docker中创建一个虚拟网络,请使用docker network create命令,并将你想要的网络名称传给它。这将创建一个新的虚拟网络,你可以将容器附加到上面。

> docker network create my_network
66e9d0a4537bf8a8b6771720f5226ce809ca8ac7ecb1e5ba66a36df6068c7194

现在,当我们再次列出网络时,有一个新的条目,名字是my_network,驱动是bridge。bridge驱动是默认的驱动,它为你创建一个虚拟网络,合理的默认值从172.17开始。

> docker network ls
NETWORK ID          NAME                DRIVER              SCOPE
313d57da9944        bridge              bridge              local
4c835cce5ea0        host                host                local
66e9d0a4537b        my_network          bridge              local
085638da5c3d        none                null                local

如果你需要为你的虚拟网络定制设置,-help菜单为你提供了可以配置的概述。

> docker network create --help

Usage:  docker network create [OPTIONS] NETWORK

Create a network

Options:
      --attachable           Enable manual container attachment
      --aux-address map      Auxiliary IPv4 or IPv6 addresses used by
                             Network driver (default map[])
      --config-from string   The network from which copying the configuration
      --config-only          Create a configuration only network
  -d, --driver string        Driver to manage the Network (default "bridge")
      --gateway strings      IPv4 or IPv6 Gateway for the master subnet
      --ingress              Create swarm routing-mesh network
      --internal             Restrict external access to the network
      --ip-range strings     Allocate container ip from a sub-range
      --ipam-driver string   IP Address Management Driver (default "default")
      --ipam-opt map         Set IPAM driver specific options (default map[])
      --ipv6                 Enable IPv6 networking
      --label list           Set metadata on a network
  -o, --opt map              Set driver specific options (default map[])
      --scope string         Control the network's scope
      --subnet strings       Subnet in CIDR format that represents a
                             network segment

将容器连接到网络

当你启动一个容器时,如果你愿意,你可以指定它将连接的网络。下面我们正在启动第二个名为webhost2的网络主机,并将其分配给我们刚刚创建的名为my_network的新网络。

> docker container run -d --name webhost2 --network my_network nginx
40c5fe69890498159920ec5a775eb3583289253372bfdf5c63f4e32a3db5ab31

当检查my_network网络时,我们看到容器成功地连接到了该网络。

> docker network inspect my_network
[
    {
        "Name": "my_network",
        "Id": "66e9d0a4537bf8a8b6771720f5226ce809ca8ac7ecb1e5ba66a36df6068c7194",
        "Created": "2020-10-05T15:10:43.1263348Z",
        "Scope": "local",
        "Driver": "bridge",
        "EnableIPv6": false,
        "IPAM": {
            "Config": [
                {
                    "Subnet": "172.18.0.0/16",
                    "Gateway": "172.18.0.1"
                }
            ]
        },
        "Internal": false,
        "Attachable": false,
        "Ingress": false,
        "ConfigFrom": {
            "Network": ""
        },
        "ConfigOnly": false,
        "Containers": {
            "40c5fe69890498159920ec5a775eb3583289253372bfdf5c63f4e32a3db5ab31": {
                "Name": "webhost2",
                "EndpointID": "265a958fff7085094f4497c7cc34d933685708f5ea434700f28e981dcd475257",
                "MacAddress": "02:42:ac:12:00:02",
                "IPv4Address": "172.18.0.2/16",
                "IPv6Address": ""
            }
        },
        "Options": {},
        "Labels": {}
    }
]

现在,让我们也把原来运行的容器连接到这个新网络上。这可以通过docker network connect命令来完成。

> docker network connect my_network webhost

现在,当我们检查这个容器时,它显示它已经连接到了2个网络。它连接到了bridge,以及my_network。

> docker container inspect webhost
[
    {
        "Id": "c4198f018c0b90df3b5958bb892f015bc5afdeb8efba863a1439e8ad6c32ccfd",
        "Created": "2020-10-05T14:54:15.1858603Z",
        "Path": "/docker-entrypoint.sh",
        "Args": [
            "nginx",
            "-g",
            "daemon off;"
        ],
        "State": {
            "Status": "running",
            "Running": true,
            "Paused": false,
            "Restarting": false,
            "OOMKilled": false,
            "Dead": false,
            "Pid": 816,
            "ExitCode": 0,
            "Error": "",
            "StartedAt": "2020-10-05T14:54:16.1634567Z",
            "FinishedAt": "0001-01-01T00:00:00Z"
        },
        "Image": "sha256:7e4d58f0e5f3b60077e9a5d96b4be1b974b5a484f54f9393000a99f3b6816e3d",
        "ResolvConfPath": "/var/lib/docker/containers/c4198f018c0b90df3b5958bb892f015bc5afdeb8efba863a1439e8ad6c32ccfd/resolv.conf",
        "HostnamePath": "/var/lib/docker/containers/c4198f018c0b90df3b5958bb892f015bc5afdeb8efba863a1439e8ad6c32ccfd/hostname",
        "HostsPath": "/var/lib/docker/containers/c4198f018c0b90df3b5958bb892f015bc5afdeb8efba863a1439e8ad6c32ccfd/hosts",
        "LogPath": "/var/lib/docker/containers/c4198f018c0b90df3b5958bb892f015bc5afdeb8efba863a1439e8ad6c32ccfd/c4198f018c0b90df3b5958bb892f015bc5afdeb8efba863a1439e8ad6c32ccfd-json.log",
        "Name": "/webhost",
        "RestartCount": 0,
        "Driver": "overlay2",
        "Platform": "linux",
        "MountLabel": "",
        "ProcessLabel": "",
        "AppArmorProfile": "",
        "ExecIDs": null,
        "HostConfig": {
            "Binds": null,
            "ContainerIDFile": "",
            "LogConfig": {
                "Type": "json-file",
                "Config": {}
            },
            "NetworkMode": "default",
            "PortBindings": {
                "80/tcp": [
                    {
                        "HostIp": "",
                        "HostPort": "80"
                    }
                ]
            },
            "RestartPolicy": {
                "Name": "no",
                "MaximumRetryCount": 0
            },
            "AutoRemove": false,
            "VolumeDriver": "",
            "VolumesFrom": null,
            "CapAdd": null,
            "CapDrop": null,
            "Capabilities": null,
            "Dns": [],
            "DnsOptions": [],
            "DnsSearch": [],
            "ExtraHosts": null,
            "GroupAdd": null,
            "IpcMode": "private",
            "Cgroup": "",
            "Links": null,
            "OomScoreAdj": 0,
            "PidMode": "",
            "Privileged": false,
            "PublishAllPorts": false,
            "ReadonlyRootfs": false,
            "SecurityOpt": null,
            "UTSMode": "",
            "UsernsMode": "",
            "ShmSize": 67108864,
            "Runtime": "runc",
            "ConsoleSize": [
                30,
                120
            ],
            "Isolation": "",
            "CpuShares": 0,
            "Memory": 0,
            "NanoCpus": 0,
            "CgroupParent": "",
            "BlkioWeight": 0,
            "BlkioWeightDevice": [],
            "BlkioDeviceReadBps": null,
            "BlkioDeviceWriteBps": null,
            "BlkioDeviceReadIOps": null,
            "BlkioDeviceWriteIOps": null,
            "CpuPeriod": 0,
            "CpuQuota": 0,
            "CpuRealtimePeriod": 0,
            "CpuRealtimeRuntime": 0,
            "CpusetCpus": "",
            "CpusetMems": "",
            "Devices": [],
            "DeviceCgroupRules": null,
            "DeviceRequests": null,
            "KernelMemory": 0,
            "KernelMemoryTCP": 0,
            "MemoryReservation": 0,
            "MemorySwap": 0,
            "MemorySwappiness": null,
            "OomKillDisable": false,
            "PidsLimit": null,
            "Ulimits": null,
            "CpuCount": 0,
            "CpuPercent": 0,
            "IOMaximumIOps": 0,
            "IOMaximumBandwidth": 0,
            "MaskedPaths": [
                "/proc/asound",
                "/proc/acpi",
                "/proc/kcore",
                "/proc/keys",
                "/proc/latency_stats",
                "/proc/timer_list",
                "/proc/timer_stats",
                "/proc/sched_debug",
                "/proc/scsi",
                "/sys/firmware"
            ],
            "ReadonlyPaths": [
                "/proc/bus",
                "/proc/fs",
                "/proc/irq",
                "/proc/sys",
                "/proc/sysrq-trigger"
            ]
        },
        "GraphDriver": {
            "Data": {
                "LowerDir": "/var/lib/docker/overlay2/c443ff100dfbc9cb2f5b0618b35d4f8f6db3bbc06afb1889a3ba7f80f778ee97-init/diff:/var/lib/docker/overlay2/b873da3ee35fed4ed5b663d42705f29857e467ef7fc70d4f01b34e8593c90a2d/diff:/var/lib/docker/overlay2/c37b3ca864167a02502bc473d368823bdf2fdddf7ef3ff0fda126aae98ccf5c3/diff:/var/lib/docker/overlay2/d0b819fd09a7a62a2fc9858b4a015cd5594a240caefce77cad9a6b0f596f0dca/diff:/var/lib/docker/overlay2/5d3260b5420b271959560369b58594ca2be7fd8ae7bd74822c24c765c8ebeafc/diff:/var/lib/docker/overlay2/d874cfda684973a0d7f77e451987cd726723eab53aabf2ef285000ff32101e3d/diff",
                "MergedDir": "/var/lib/docker/overlay2/c443ff100dfbc9cb2f5b0618b35d4f8f6db3bbc06afb1889a3ba7f80f778ee97/merged",
                "UpperDir": "/var/lib/docker/overlay2/c443ff100dfbc9cb2f5b0618b35d4f8f6db3bbc06afb1889a3ba7f80f778ee97/diff",
                "WorkDir": "/var/lib/docker/overlay2/c443ff100dfbc9cb2f5b0618b35d4f8f6db3bbc06afb1889a3ba7f80f778ee97/work"
            },
            "Name": "overlay2"
        },
        "Mounts": [],
        "Config": {
            "Hostname": "c4198f018c0b",
            "Domainname": "",
            "User": "",
            "AttachStdin": false,
            "AttachStdout": false,
            "AttachStderr": false,
            "ExposedPorts": {
                "80/tcp": {}
            },
            "Tty": false,
            "OpenStdin": false,
            "StdinOnce": false,
            "Env": [
                "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
                "NGINX_VERSION=1.19.2",
                "NJS_VERSION=0.4.3",
                "PKG_RELEASE=1~buster"
            ],
            "Cmd": [
                "nginx",
                "-g",
                "daemon off;"
            ],
            "Image": "nginx",
            "Volumes": null,
            "WorkingDir": "",
            "Entrypoint": [
                "/docker-entrypoint.sh"
            ],
            "OnBuild": null,
            "Labels": {
                "maintainer": "NGINX Docker Maintainers <docker-maint@nginx.com>"
            },
            "StopSignal": "SIGTERM"
        },
        "NetworkSettings": {
            "Bridge": "",
            "SandboxID": "753e34a80acb2c9bcbb47344ef1a9ad7815d59e8151bfc61d84f1ee5d8f390d6",
            "HairpinMode": false,
            "LinkLocalIPv6Address": "",
            "LinkLocalIPv6PrefixLen": 0,
            "Ports": {
                "80/tcp": [
                    {
                        "HostIp": "0.0.0.0",
                        "HostPort": "80"
                    }
                ]
            },
            "SandboxKey": "/var/run/docker/netns/753e34a80acb",
            "SecondaryIPAddresses": null,
            "SecondaryIPv6Addresses": null,
            "EndpointID": "2e6f46886aae647928688b3ca8b3cf9894a2cf40e99cf0bc92dec05a2e3399a7",
            "Gateway": "172.17.0.1",
            "GlobalIPv6Address": "",
            "GlobalIPv6PrefixLen": 0,
            "IPAddress": "172.17.0.2",
            "IPPrefixLen": 16,
            "IPv6Gateway": "",
            "MacAddress": "02:42:ac:11:00:02",
            "Networks": {
                "bridge": {
                    "IPAMConfig": null,
                    "Links": null,
                    "Aliases": null,
                    "NetworkID": "313d57da9944030d011fc7f86938007a67aa2c201f3642db3ad4b86f1560cf2e",
                    "EndpointID": "2e6f46886aae647928688b3ca8b3cf9894a2cf40e99cf0bc92dec05a2e3399a7",
                    "Gateway": "172.17.0.1",
                    "IPv6Gateway": "",
                    "GlobalIPv6Address": "",
                    "GlobalIPv6PrefixLen": 0,
                    "MacAddress": "02:42:ac:11:00:02",
                    "DriverOpts": null
                },
                "my_network": {
                    "IPAMConfig": {},
                    "Links": null,
                    "Aliases": [
                        "c4198f018c0b"
                    ],
                    "NetworkID": "66e9d0a4537bf8a8b6771720f5226ce809ca8ac7ecb1e5ba66a36df6068c7194",
                    "EndpointID": "117ac3c34ccf85838684684b61b93848455c4be8b6685833f15b81b88d09813d",
                    "Gateway": "172.18.0.1",
                    "IPAddress": "172.18.0.3",
                    "IPPrefixLen": 16,
                    "IPv6Gateway": "",
                    "GlobalIPv6Address": "",
                    "GlobalIPv6PrefixLen": 0,
                    "MacAddress": "02:42:ac:12:00:03",
                    "DriverOpts": {}
                }
            }
        }
    }
]

从网络中移除容器

要从网络中移除一个容器,可以使用docker container disconnect命令。这里的例子是将webhost容器从my_network网络上断开连接。

> docker network disconnect my_network webhost

检查证实,这个容器不再连接到两个网络。它现在只有与原来的桥接网络的连接。

> docker container inspect webhost
[
    {
        "Id": "c4198f018c0b90df3b5958bb892f015bc5afdeb8efba863a1439e8ad6c32ccfd",
        "Created": "2020-10-05T14:54:15.1858603Z",
        "Path": "/docker-entrypoint.sh",
        "Args": [
            "nginx",
            "-g",
            "daemon off;"
        ],
        "State": {
            "Status": "running",
            "Running": true,
            "Paused": false,
            "Restarting": false,
            "OOMKilled": false,
            "Dead": false,
            "Pid": 816,
            "ExitCode": 0,
            "Error": "",
            "StartedAt": "2020-10-05T14:54:16.1634567Z",
            "FinishedAt": "0001-01-01T00:00:00Z"
        },
        "Image": "sha256:7e4d58f0e5f3b60077e9a5d96b4be1b974b5a484f54f9393000a99f3b6816e3d",
        "ResolvConfPath": "/var/lib/docker/containers/c4198f018c0b90df3b5958bb892f015bc5afdeb8efba863a1439e8ad6c32ccfd/resolv.conf",
        "HostnamePath": "/var/lib/docker/containers/c4198f018c0b90df3b5958bb892f015bc5afdeb8efba863a1439e8ad6c32ccfd/hostname",
        "HostsPath": "/var/lib/docker/containers/c4198f018c0b90df3b5958bb892f015bc5afdeb8efba863a1439e8ad6c32ccfd/hosts",
        "LogPath": "/var/lib/docker/containers/c4198f018c0b90df3b5958bb892f015bc5afdeb8efba863a1439e8ad6c32ccfd/c4198f018c0b90df3b5958bb892f015bc5afdeb8efba863a1439e8ad6c32ccfd-json.log",
        "Name": "/webhost",
        "RestartCount": 0,
        "Driver": "overlay2",
        "Platform": "linux",
        "MountLabel": "",
        "ProcessLabel": "",
        "AppArmorProfile": "",
        "ExecIDs": null,
        "HostConfig": {
            "Binds": null,
            "ContainerIDFile": "",
            "LogConfig": {
                "Type": "json-file",
                "Config": {}
            },
            "NetworkMode": "default",
            "PortBindings": {
                "80/tcp": [
                    {
                        "HostIp": "",
                        "HostPort": "80"
                    }
                ]
            },
            "RestartPolicy": {
                "Name": "no",
                "MaximumRetryCount": 0
            },
            "AutoRemove": false,
            "VolumeDriver": "",
            "VolumesFrom": null,
            "CapAdd": null,
            "CapDrop": null,
            "Capabilities": null,
            "Dns": [],
            "DnsOptions": [],
            "DnsSearch": [],
            "ExtraHosts": null,
            "GroupAdd": null,
            "IpcMode": "private",
            "Cgroup": "",
            "Links": null,
            "OomScoreAdj": 0,
            "PidMode": "",
            "Privileged": false,
            "PublishAllPorts": false,
            "ReadonlyRootfs": false,
            "SecurityOpt": null,
            "UTSMode": "",
            "UsernsMode": "",
            "ShmSize": 67108864,
            "Runtime": "runc",
            "ConsoleSize": [
                30,
                120
            ],
            "Isolation": "",
            "CpuShares": 0,
            "Memory": 0,
            "NanoCpus": 0,
            "CgroupParent": "",
            "BlkioWeight": 0,
            "BlkioWeightDevice": [],
            "BlkioDeviceReadBps": null,
            "BlkioDeviceWriteBps": null,
            "BlkioDeviceReadIOps": null,
            "BlkioDeviceWriteIOps": null,
            "CpuPeriod": 0,
            "CpuQuota": 0,
            "CpuRealtimePeriod": 0,
            "CpuRealtimeRuntime": 0,
            "CpusetCpus": "",
            "CpusetMems": "",
            "Devices": [],
            "DeviceCgroupRules": null,
            "DeviceRequests": null,
            "KernelMemory": 0,
            "KernelMemoryTCP": 0,
            "MemoryReservation": 0,
            "MemorySwap": 0,
            "MemorySwappiness": null,
            "OomKillDisable": false,
            "PidsLimit": null,
            "Ulimits": null,
            "CpuCount": 0,
            "CpuPercent": 0,
            "IOMaximumIOps": 0,
            "IOMaximumBandwidth": 0,
            "MaskedPaths": [
                "/proc/asound",
                "/proc/acpi",
                "/proc/kcore",
                "/proc/keys",
                "/proc/latency_stats",
                "/proc/timer_list",
                "/proc/timer_stats",
                "/proc/sched_debug",
                "/proc/scsi",
                "/sys/firmware"
            ],
            "ReadonlyPaths": [
                "/proc/bus",
                "/proc/fs",
                "/proc/irq",
                "/proc/sys",
                "/proc/sysrq-trigger"
            ]
        },
        "GraphDriver": {
            "Data": {
                "LowerDir": "/var/lib/docker/overlay2/c443ff100dfbc9cb2f5b0618b35d4f8f6db3bbc06afb1889a3ba7f80f778ee97-init/diff:/var/lib/docker/overlay2/b873da3ee35fed4ed5b663d42705f29857e467ef7fc70d4f01b34e8593c90a2d/diff:/var/lib/docker/overlay2/c37b3ca864167a02502bc473d368823bdf2fdddf7ef3ff0fda126aae98ccf5c3/diff:/var/lib/docker/overlay2/d0b819fd09a7a62a2fc9858b4a015cd5594a240caefce77cad9a6b0f596f0dca/diff:/var/lib/docker/overlay2/5d3260b5420b271959560369b58594ca2be7fd8ae7bd74822c24c765c8ebeafc/diff:/var/lib/docker/overlay2/d874cfda684973a0d7f77e451987cd726723eab53aabf2ef285000ff32101e3d/diff",
                "MergedDir": "/var/lib/docker/overlay2/c443ff100dfbc9cb2f5b0618b35d4f8f6db3bbc06afb1889a3ba7f80f778ee97/merged",
                "UpperDir": "/var/lib/docker/overlay2/c443ff100dfbc9cb2f5b0618b35d4f8f6db3bbc06afb1889a3ba7f80f778ee97/diff",
                "WorkDir": "/var/lib/docker/overlay2/c443ff100dfbc9cb2f5b0618b35d4f8f6db3bbc06afb1889a3ba7f80f778ee97/work"
            },
            "Name": "overlay2"
        },
        "Mounts": [],
        "Config": {
            "Hostname": "c4198f018c0b",
            "Domainname": "",
            "User": "",
            "AttachStdin": false,
            "AttachStdout": false,
            "AttachStderr": false,
            "ExposedPorts": {
                "80/tcp": {}
            },
            "Tty": false,
            "OpenStdin": false,
            "StdinOnce": false,
            "Env": [
                "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
                "NGINX_VERSION=1.19.2",
                "NJS_VERSION=0.4.3",
                "PKG_RELEASE=1~buster"
            ],
            "Cmd": [
                "nginx",
                "-g",
                "daemon off;"
            ],
            "Image": "nginx",
            "Volumes": null,
            "WorkingDir": "",
            "Entrypoint": [
                "/docker-entrypoint.sh"
            ],
            "OnBuild": null,
            "Labels": {
                "maintainer": "NGINX Docker Maintainers <docker-maint@nginx.com>"
            },
            "StopSignal": "SIGTERM"
        },
        "NetworkSettings": {
            "Bridge": "",
            "SandboxID": "753e34a80acb2c9bcbb47344ef1a9ad7815d59e8151bfc61d84f1ee5d8f390d6",
            "HairpinMode": false,
            "LinkLocalIPv6Address": "",
            "LinkLocalIPv6PrefixLen": 0,
            "Ports": {
                "80/tcp": [
                    {
                        "HostIp": "0.0.0.0",
                        "HostPort": "80"
                    }
                ]
            },
            "SandboxKey": "/var/run/docker/netns/753e34a80acb",
            "SecondaryIPAddresses": null,
            "SecondaryIPv6Addresses": null,
            "EndpointID": "2e6f46886aae647928688b3ca8b3cf9894a2cf40e99cf0bc92dec05a2e3399a7",
            "Gateway": "172.17.0.1",
            "GlobalIPv6Address": "",
            "GlobalIPv6PrefixLen": 0,
            "IPAddress": "172.17.0.2",
            "IPPrefixLen": 16,
            "IPv6Gateway": "",
            "MacAddress": "02:42:ac:11:00:02",
            "Networks": {
                "bridge": {
                    "IPAMConfig": null,
                    "Links": null,
                    "Aliases": null,
                    "NetworkID": "313d57da9944030d011fc7f86938007a67aa2c201f3642db3ad4b86f1560cf2e",
                    "EndpointID": "2e6f46886aae647928688b3ca8b3cf9894a2cf40e99cf0bc92dec05a2e3399a7",
                    "Gateway": "172.17.0.1",
                    "IPAddress": "172.17.0.2",
                    "IPPrefixLen": 16,
                    "IPv6Gateway": "",
                    "GlobalIPv6Address": "",
                    "GlobalIPv6PrefixLen": 0,
                    "MacAddress": "02:42:ac:11:00:02",
                    "DriverOpts": null
                }
            }
        }
    }
]