In docker, RunC is a CLI tool that creates and runs containers according to OCI standards. It is a command line tool that follows OCI standards for running containers. runC is the core part of docker. The creation, running, destruction and other operations of the container will eventually be completed by calling runc.
The operating environment of this tutorial: linux5.9.8 system, docker-1.13.1 version, Dell G3 computer.
OCI defines the container runtime standard, and runC is a specific implementation formulated by Docker in accordance with the open container format standard Open Container Format, OCF.
This project is migrated from Docker's libcontainer and implements functions such as container start and stop, resource isolation, etc. Therefore, the container can be run directly through this tool.
Introduction
The so-called container runtime (Container Runtime) includes container management and container imaging. Open Container Initiative, OCI is the industry standard for container runtime, including:
A) Runtime standard runtime-spec;
B) Container image standard image-spec.
Simply put, the container image standard defines the packaging form of the container image, and the runtime standard defines how to run a container.
RunC is a CLI tool that creates and runs containers according to OCI standards. It is a command line tool for running containers that follows OCI standards. It is also a Runtime implementation.
Docker
In the old version, you need to call docker-runc
, but in the latest CE version, directly Modified to runc
command.
#RunC is the bottom-level running environment of the container, and its upper layer is managed through Docker.
runC is the core part of docker. The creation, running, destruction and other operations of the container will eventually be completed by calling runc.
Independent operation
RunC is the running state of the container and does not include image management. If you use it directly, you need to prepare the image first. Here, you can directly use the already built BusyBox template.
OCI Bundle
OCI Bundle refers to a series of files that meet OCI standards. These files contain all the data needed to run the container. They are stored in a common directory, which contains the following two items:
-
config.json
Contains the configuration data of the container running; - The root filesystem of the container .
If Docker is installed on the host, you can use the docker export
command to export the existing image into OCI Bundle format.
Generate rootfs
Use the BusyBox template in Docker directly.
----- 下载最新的版本
$ docker pull busybox
----- 创建rootfs
$ mkdir rootfs
$ docker export $(docker create busybox) | tar -C rootfs -xvf -
Configuration file
In the rootfs
directory, it contains common binary files , in addition to the root directory, a config.json
configuration file is also required, and the configuration template can be generated through the runc spec
command.
For detailed configuration, please refer to https://github.com/opencontainers/runtime-spec/blob/master/spec.md
Change "terminal" in the configuration file: true
is changed to false
, otherwise cannot allocate tty if runc will detach without setting console socket
will be reported when creating.
In addition, because the terminal is closed, the command is modified to "args": [ "sleep", "10000" ],
parameters.
Start
----- 创建容器并查看状态
# runc create mybusybox
# runc list
----- 启动容器,并查看状态
# runc start mybusybox
----- 删除容器
# runc delete mybusybox
After starting, you can passps aux | grep sleep
See specific commands.
Common commands
----- 查看容器状态
# runc state mybusybox
----- 容器内运行进程
# runc ps mybusybox
----- 在容器中执行命令
# runc exec mybusybox ls
----- 停止容器内的任务
# runc kill mybusybox
----- 暂停容器内的所有进程
# runc pause mybusybox
----- 恢复容器内进程的执行
# runc resume mybusybox
----- 获取容器的资源使用情况
# runc events mybusybox
Hot migration
is to perform a CheckPoint operation on a container and obtain a series of files, and then start it on other machines .
Recommended learning: "docker video tutorial"
The above is the detailed content of What is runc in docker. For more information, please follow other related articles on the PHP Chinese website!

Docker simplifies application deployment and management on Linux. 1) Docker is a containerized platform that packages applications and their dependencies into lightweight and portable containers. 2) On Linux, Docker uses cgroups and namespaces to implement container isolation and resource management. 3) Basic usages include pulling images and running containers. Advanced usages such as DockerCompose can define multi-container applications. 4) Debug commonly used dockerlogs and dockerexec commands. 5) Performance optimization can reduce the image size through multi-stage construction, and keeping the Dockerfile simple is the best practice.

Docker is a Linux container technology-based tool used to package, distribute and run applications to improve application portability and scalability. 1) Dockerbuild and dockerrun commands can be used to build and run Docker containers. 2) DockerCompose is used to define and run multi-container Docker applications to simplify microservice management. 3) Using multi-stage construction can optimize the image size and improve the application startup speed. 4) Viewing container logs is an effective way to debug container problems.

Docker container startup steps: Pull the container image: Run "docker pull [mirror name]". Create a container: Use "docker create [options] [mirror name] [commands and parameters]". Start the container: Execute "docker start [Container name or ID]". Check container status: Verify that the container is running with "docker ps".

The methods to view Docker logs include: using the docker logs command, for example: docker logs CONTAINER_NAME Use the docker exec command to run /bin/sh and view the log file, for example: docker exec -it CONTAINER_NAME /bin/sh ; cat /var/log/CONTAINER_NAME.log Use the docker-compose logs command of Docker Compose, for example: docker-compose -f docker-com

You can query the Docker container name by following the steps: List all containers (docker ps). Filter the container list (using the grep command). Gets the container name (located in the "NAMES" column).

Create a container in Docker: 1. Pull the image: docker pull [mirror name] 2. Create a container: docker run [Options] [mirror name] [Command] 3. Start the container: docker start [Container name]

Four ways to exit Docker container: Use Ctrl D in the container terminal Enter exit command in the container terminal Use docker stop <container_name> Command Use docker kill <container_name> command in the host terminal (force exit)

Methods for copying files to external hosts in Docker: Use the docker cp command: Execute docker cp [Options] <Container Path> <Host Path>. Using data volumes: Create a directory on the host, and use the -v parameter to mount the directory into the container when creating the container to achieve bidirectional file synchronization.


Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

AI Hentai Generator
Generate AI Hentai for free.

Hot Article

Hot Tools

ZendStudio 13.5.1 Mac
Powerful PHP integrated development environment

DVWA
Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is very vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, to help web developers better understand the process of securing web applications, and to help teachers/students teach/learn in a classroom environment Web application security. The goal of DVWA is to practice some of the most common web vulnerabilities through a simple and straightforward interface, with varying degrees of difficulty. Please note that this software

SublimeText3 English version
Recommended: Win version, supports code prompts!

WebStorm Mac version
Useful JavaScript development tools

SublimeText3 Linux new version
SublimeText3 Linux latest version