Install and Troubleshoot ping on Ubuntu (Including Docker)

当 Ubuntu 中缺少 ping 命令时，您输入的命令名称与所需的软件包名称并不相同。请安装 iputils-ping，而不是 ping：sudo apt update，然后执行 sudo apt install -y iputils-ping。如果您拥有 sudo 权限且软件包仓库运行正常，此方法适用于 Ubuntu Desktop 和 Server 版本。如果您已以 root 用户身份登录，则无需使用 sudo 即可运行 APT 命令。

Why apt install ping can fail ping 是可执行文件；iputils-ping 是提供该文件的 Ubuntu 软件包。在某些软件包元数据中，ping 被列为虚拟软件包，而非可独立安装的软件包。因此，sudo apt install ping 可能会报告没有可安装的候选版本，或者要求您选择一个提供程序。请直接使用提供程序软件包：sudo apt install iputils-ping。如果 APT 无法定位该软件包，请先刷新软件包列表。如果这没有帮助，请阅读 apt update 的输出以检查仓库或 DNS 错误。这份 Ubuntu 安装故障排除指南可以帮助您调查更广泛的 APT 和安装问题。

Minimal Ubuntu images may not include ping by default. That does not mean it is unavailable; it may simply have been left out to keep the image small. Check that the command is installed First confirm your shell can find the executable: command -v ping. After a successful installation, this commonly prints /usr/bin/ping. Then test the local loopback interface with a fixed number of packets: ping -c 3 127.0.0.1.

最小化的 Ubuntu 镜像默认可能不包含 ping。这并不意味着它不可用；它可能只是为了保持镜像精简而被省略了。检查命令是否已安装：首先确认您的 shell 能找到该可执行文件：command -v ping。安装成功后，通常会输出 /usr/bin/ping。然后使用固定数量的数据包测试本地回环接口：ping -c 3 127.0.0.1。

The -c 3 option sends three requests and exits. This checks that the command can send and receive local ICMP packets; it does not prove that a remote host is reachable. For a bounded test against a hostname, try: ping -c 4 example.com. Without -c, ping normally continues until you stop it with Ctrl+C. Separate installation problems from network problems A useful first distinction is whether the executable exists: command -v ping prints nothing: the package may be missing, or the shell cannot find the executable. Ping works to an IP address but not a hostname: investigate name resolution. The command runs, but requests time out: the destination, route, or a firewall may not be answering ICMP. The command exists but a container reports Operation not permitted: the container’s runtime security settings or capabilities may prevent sending ICMP packets. A timeout does not mean ping is uninstalled. And a successful ping does not prove that a website, SSH server, or application is healthy: it only shows that ICMP traffic succeeded to that destination at that time. Test the service you care about separately.

-c 3 选项会发送三个请求并退出。这可以检查命令是否能够发送和接收本地 ICMP 数据包；但这并不能证明远程主机是可达的。若要针对主机名进行有限次数的测试，请尝试：ping -c 4 example.com。如果不加 -c，ping 通常会持续运行，直到您使用 Ctrl+C 停止它。将安装问题与网络问题区分开来：一个有用的初步判断是检查可执行文件是否存在：如果 command -v ping 没有输出，说明软件包可能缺失，或者 shell 找不到该可执行文件。如果 Ping IP 地址有效但 Ping 主机名无效，请调查名称解析问题。如果命令运行但请求超时，说明目标地址、路由或防火墙可能未响应 ICMP。如果命令存在但容器报告“Operation not permitted”（操作不允许），则可能是容器的运行时安全设置或功能限制了 ICMP 数据包的发送。超时并不意味着 ping 已被卸载。此外，ping 成功并不证明网站、SSH 服务器或应用程序运行正常：它仅表明此时 ICMP 流量已成功到达该目的地。请单独测试您关注的服务。

Add ping to an Ubuntu Docker image If an application container needs ping, add the package to its Dockerfile and rebuild the image. Installing it manually in a running container does not make that change part of the image, so it may disappear when the container is replaced.

FROM ubuntu:24.04
RUN apt-get update \
 && apt-get install -y --no-install-recommends iputils-ping \
 && rm -rf /var/lib/apt/lists/*

Build the image from the directory containing the Dockerfile: docker build -t ubuntu-with-ping .. ubuntu:24.04 is an example base image; choose the version that fits your application. The package makes the command available in the image, but it does not guarantee that the container can send ICMP packets at runtime. Runtime permissions and network policy still matter. If you are setting up Docker on an Ubuntu host, see this guide to installing Docker Engine on Ubuntu.

将 ping 添加到 Ubuntu Docker 镜像中：如果应用程序容器需要 ping，请将该软件包添加到 Dockerfile 中并重新构建镜像。在运行中的容器中手动安装不会使该更改成为镜像的一部分，因此当容器被替换时，更改可能会消失。从包含 Dockerfile 的目录构建镜像：docker build -t ubuntu-with-ping .。ubuntu:24.04 是一个示例基础镜像；请选择适合您应用程序的版本。该软件包使命令在镜像中可用，但这并不保证容器在运行时能够发送 ICMP 数据包。运行时权限和网络策略仍然很重要。如果您正在 Ubuntu 主机上设置 Docker，请参阅此关于在 Ubuntu 上安装 Docker Engine 的指南。

A quick diagnostic sequence When a ping test fails, check the stages separately: Is the executable present? Run command -v ping. Can it reach loopback? Run ping -c 3 127.0.0.1. Does the hostname resolve? Compare a hostname test with a test to a known IP address. Is ICMP allowed along the path? A destination or firewall may block or ignore ping requests. Is this happening in a container? Check runtime permissions and policy if the error says Operation not permitted. This keeps package installation, DNS, network reachability, and container permissions from getting conflated. A successful check at one stage does not guarantee the next one will succeed.

快速诊断流程：当 ping 测试失败时，请分别检查以下阶段：可执行文件是否存在？运行 command -v ping。它能到达回环接口吗？运行 ping -c 3 127.0.0.1。主机名能解析吗？将主机名测试与已知 IP 地址的测试进行比较。路径上是否允许 ICMP？目标地址或防火墙可能会阻止或忽略 ping 请求。这发生在容器中吗？如果错误提示“Operation not permitted”，请检查运行时权限和策略。这可以避免将软件包安装、DNS、网络可达性和容器权限等问题混为一谈。一个阶段的检查成功并不能保证下一个阶段也会成功。