云南过桥米线 發表於 2021-10-16 14:03:00

华为鲲鹏+麒麟系统安装docker

<h1 id="华为鲲鹏麒麟安装docker">华为鲲鹏麒麟安装docker</h1>
<h2 id="安装-docker-ce">安装 Docker-ce</h2>
<p>下载二进制docker</p>
<p>官网下载地址:https://download.docker.com/linux/static/stable/aarch64/</p>
<p>解压下载好的压缩包</p>
<pre><code class="language-sh">tar -zxvf docker-20.10.9.tgz
</code></pre>
<p>移动解压出来的二进制文件到 <code>/usr/bin</code> 目录中</p>
<pre><code class="language-sh">mv docker/* /usr/bin/
</code></pre>
<p>测试启动</p>
<pre><code class="language-sh">dockerd
</code></pre>
<h2 id="添加-systemd">添加 systemd</h2>
<p>添加 docker 的 <code>systemd</code> 服务脚本至 <code>/usr/lib/systemd/system/</code></p>
<p>脚本参考自 https://github.com/docker/docker-ce</p>
<pre><code class="language-sh"># 使用这个才能启动成功
cat &gt; /usr/lib/systemd/system/docker.service &lt;&lt;'EOF'

Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network-online.target firewalld.service
Wants=network-online.target


Type=notify
EnvironmentFile=-/etc/sysconfig/docker
EnvironmentFile=-/etc/sysconfig/docker-storage
EnvironmentFile=-/etc/sysconfig/docker-network
Environment=GOTRACEBACK=crash

ExecStart=/usr/bin/dockerd $OPTIONS \
                           $DOCKER_STORAGE_OPTIONS \
                           $DOCKER_NETWORK_OPTIONS \
                           $INSECURE_REGISTRY
ExecReload=/bin/kill -s HUP $MAINPID
LimitNOFILE=1048576
LimitNPROC=1048576
LimitCORE=infinity
# set delegate yes so that systemd does not reset the cgroups of docker containers
Delegate=yes
# kill only the docker process, not all processes in the cgroup
KillMode=process


WantedBy=multi-user.target
EOF
#============================================
cat &gt; /etc/sysconfig/docker &lt;&lt;'EOF'
# /etc/sysconfig/docker

# Modify these options if you want to change the way the docker daemon runs
OPTIONS='--live-restore'

DOCKER_CERT_PATH=/etc/docker

# If you have a registry secured with https but do not have proper certs
# distributed, you can tell docker to not look for full authorization by
# adding the registry to the INSECURE_REGISTRY line and uncommenting it.
# INSECURE_REGISTRY='--insecure-registry'

# Location used for temporary files, such as those created by
# docker load and build operations. Default is /var/lib/docker/tmp
# Can be overridden by setting the following environment variable.
# DOCKER_TMPDIR=/var/tmp
EOF
#========================================================

cat &gt; /etc/sysconfig/docker-storage &lt;&lt;'EOF'
# This file may be automatically generated by an installation program.

# By default, Docker uses a loopback-mounted sparse file in
# /var/lib/docker.The loopback makes it slower, and there are some
# restrictive defaults, such as 100GB max storage.

# If your installation did not set a custom storage for Docker, you
# may do it below.

# Example: Use a custom pair of raw logical volumes (one for metadata,
# one for data).
# DOCKER_STORAGE_OPTIONS = --storage-opt dm.metadatadev=/dev/mylogvol/my-docker-metadata --storage-opt dm.datadev=/dev/mylogvol/my-docker-data

DOCKER_STORAGE_OPTIONS=
EOF
#======================================================

cat &gt; /etc/sysconfig/docker-network &lt;&lt;'EOF'
# /etc/sysconfig/docker-network
DOCKER_NETWORK_OPTIONS=
EOF
</code></pre>
<p>重载 <code>systemd</code> 配置文件</p>
<pre><code class="language-sh">systemctl daemon-reload
</code></pre>
<p>创建 docker 组</p>
<pre><code class="language-sh">groupadd docker
</code></pre>
<p>如不创建 docker 组在通过 <code>systemctl</code> 启动时会报错如下</p>
<pre><code class="language-sh">Dependency failed for Docker Application Container Engine.
Job docker.service/start failed with result 'dependency'.
</code></pre>
<p>启动 <code>docker</code> 服务</p>
<pre><code class="language-sh">systemctl start docker
systemctl enable docker
</code></pre>
<p>修改 docker 配置文件并查看安装好的 docker 基本信息</p>
<pre><code class="language-sh">mkdir -p /etc/docker/
cat &gt; /etc/docker/daemon.json &lt;&lt;'EOF'
{
"registry-mirrors": ["https://xxxxxxxxxxxxxxxxxxxxxx.mirror.swr.myhuaweicloud.com"]
}
EOF
</code></pre>
<p>重启 docker 服务</p>
<pre><code class="language-sh">systemctl restart docker
</code></pre>
<p>查看 docker info</p>
<pre><code class="language-sh">docker info
</code></pre>
<p>参考:https://kev1nchan.vercel.app/posts/6da98871/</p><br><br>
来源:https://www.cnblogs.com/yzgblogs/p/15414068.html
頁: [1]
查看完整版本: 华为鲲鹏+麒麟系统安装docker