1
2
3
4
5
6

# 添加 NVIDIA Container Toolkit 的 GPG 密钥
curl -s -L <https://nvidia.github.io/nvidia-docker/gpgkey> | sudo apt-key add -

# 添加仓库源（适用于 Ubuntu 22.04 "jammy"）
distribution=$(. /etc/os-release;echo $ID$VERSION_ID)
curl -s -L <https://nvidia.github.io/nvidia-docker/$distribution/nvidia-docker.list> | sudo tee /etc/apt/sources.list.d/nvidia-docker.list

1

sudo apt-get update

1
2

# 安装 nvidia-container-runtime 及相关工具
sudo apt-get install -y nvidia-container-runtime

1

sudo nano /etc/docker/daemon.json

1
2
3
4
5
6
7
8
9

{
  "runtimes": {
    "nvidia": {
      "path": "/usr/bin/nvidia-container-runtime",
      "runtimeArgs": []
    }
  },
  "default-runtime": "nvidia"  # 可选：设为默认运行时
}

1

sudo systemctl restart docker

1

docker run --rm --gpus all nvidia/cuda:11.8.0-base-ubuntu22.04 nvidia-smi

1
2
3
4
5

# 仅允许使用 GPU 0
docker run --rm --gpus '"device=0"' nvidia/cuda:11.8.0-base-ubuntu22.04 nvidia-smi

# 指定计算能力（如 CUDA 12.0+）
docker run --rm --gpus all --env NVIDIA_DRIVER_CAPABILITIES=compute,utility nvidia/cuda:12.0.0-base-ubuntu22.04 nvidia-smi

1
2

sudo apt-get install -y nvidia-docker2
sudo systemctl restart docker

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

curl -v https://registry-1.docker.io/v2/

# 可以通过修改daemon配置文件/etc/docker/daemon.json来使用加速器
sudo mkdir -p /etc/docker
sudo tee /etc/docker/daemon.json <<-'EOF'
{
  "registry-mirrors": ["https://fevvz971.mirror.aliyuncs.com"]
  # "registry-mirrors": ["https://registry.docker-cn.com", "https://mirror.ccs.tencentyun.com", "https://docker.mirrors.ustc.edu.cn"]
}
EOF

sudo systemctl daemon-reload
sudo systemctl restart docker

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

{
  "registry-mirrors": [
    "https://docker.hpcloud.cloud",
    "https://docker.m.daocloud.io",
    "https://docker.unsee.tech",
    "https://docker.1panel.live",
    "http://mirrors.ustc.edu.cn",
    "https://docker.chenby.cn",
    "http://mirror.azure.cn",
    "https://dockerpull.org",
    "https://dockerhub.icu",
    "https://hub.rat.dev"
  ]
}

{
  "registry-mirrors": [
  "https://docker.registry.cyou",
  "https://docker-cf.registry.cyou",
  "https://dockercf.jsdelivr.fyi",
  "https://docker.jsdelivr.fyi",
  "https://dockertest.jsdelivr.fyi",
  "https://mirror.aliyuncs.com",
  "https://dockerproxy.com",
  "https://mirror.baidubce.com",
  "https://docker.m.daocloud.io",
  "https://docker.nju.edu.cn",
  "https://docker.mirrors.sjtug.sjtu.edu.cn",
  "https://docker.mirrors.ustc.edu.cn",
  "https://mirror.iscas.ac.cn",
  "https://docker.rainbond.cc"
    ]
  }

1
2
3
4
5
6

docker run -d \
  -v /host/path1:/container/path1 \
  -v /host/path2:/container/path2 \
  -v /host/path3:/container/path3 \
  --name my_container \
  my_image

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

cp /etc/apt/sources.list /etc/apt/sources.list.bak
echo "" > /etc/apt/sources.list

echo "deb http://mirrors.aliyun.com/ubuntu/ jammy main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-updates main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-security main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-backports main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-proposed main restricted universe multiverse" > /etc/apt/sources.list

apt update

Ubuntu 版本代号：
版本	代号
Ubuntu 24.04	noble
Ubuntu 22.04	jammy
Ubuntu 20.04	focal
Ubuntu 18.04	bionic
Ubuntu 16.04	xenial

如果你的 Ubuntu 版本不同，修改 sources.list 里的 jammy 为对应的代号。
# Ubuntu 20.04	focal
deb http://mirrors.aliyun.com/ubuntu/ focal main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ focal-security main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ focal-updates main restricted universe multiverse

1
2
3
4

# 镜像迁移
docker save 镜像名:标签 > 镜像.tar
scp 镜像.tar newserver:/tmp/
docker load < /tmp/镜像.tar

1
2

sudo mkdir -p /etc/systemd/system/docker.service.d
sudo vim /etc/systemd/system/docker.service.d/http-proxy.conf

1
2

sudo systemctl daemon-reload
sudo systemctl restart docker

1
2
3
4

docker run -e HTTP_PROXY=http://your-proxy-server:your-proxy-port \\
           -e HTTPS_PROXY=http://your-proxy-server:your-proxy-port \\
           -e NO_PROXY=localhost,127.0.0.1,.example.com \\
           your-image

1
2
3
4

docker run -it --rm \
  -v /etc/ssh:/mnt/ssh \
  --privileged \
  ubuntu bash

1
2
3

cd /mnt/ssh
chmod 777 sshd_config
echo "# hacked!" >> sshd_config

1
2
3
4
5

docker run -it --rm \
  -v /opt/data:/mnt/data \
  --entrypoint bash \
  --user root \
  ubuntu

1
2

chmod -R 777 /mnt/data
chown -R someuser:somegroup /mnt/data

1
2
3

docker run -it --rm \
  -v /data/projects:/mnt/projects \
  ubuntu bash

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21

#!/bin/bash

# 要挂载并修改权限的宿主机目录
HOST_DIR="/data/myproject"

# 容器中映射路径
CONTAINER_DIR="/mnt/target"

# 目标权限
PERM_MODE="755"

# 目标用户和用户组（可选）
OWNER="root:root"

# 使用 Ubuntu 镜像，容器自动退出
docker run --rm \
  -v "${HOST_DIR}:${CONTAINER_DIR}" \
  --user root \
  --entrypoint bash \
  ubuntu \
  -c "chown -R ${OWNER} ${CONTAINER_DIR} && chmod -R ${PERM_MODE} ${CONTAINER_DIR}"