技术交流QQ群:①185473046   ②190706903   ③203744115   网站地图
登录

下次自动登录
现在的位置: 首页Docker>正文
CentOS 7.x 安装Docker-ce社区版本
2021年07月30日 Docker 暂无评论 ⁄ 被围观 5,074次+

Docker是一个开源的应用容器引擎,目前分为社区版本(CE)和企业版本(EE),一般使用社区版本。

CentOS系统下Docker目前支持CentOS 7.x 8.x 版本,系统内核版本为Linux 3.10及其以上版本。

一、安装前准备工作

1、CentOS 升级系统内核到最新版

https://www.osyunwei.com/archives/11582.html

2、CentOS系统关闭selinux

#执行以下命令

setenforce 0

sed -i 's/^SELINUX=.*/SELINUX=disabled/' /etc/selinux/config

reboot #重启系统

/usr/sbin/sestatus -v #查看selinux状态,disabled表示关闭

[root@master01 ~]# /usr/sbin/sestatus -v

SELinux status: disabled

3、防火墙设置

一般情况下访问Docker容器内部的应用需要设置宿主机端口映射功能,测试环境下可以开启iptables防火墙并清空防火墙规则,

正式生产环境建议开启防火墙,再按需开启相应端口号。

3.1关闭firewall:

systemctl stop firewalld.service #停止firewall

systemctl disable firewalld.service #禁止firewall开机启动

systemctl mask firewalld

systemctl stop firewalld

yum remove firewalld

3.2安装iptables防火墙

yum install iptables-services #安装

systemctl enable iptables.service #设置防火墙开机启动

iptables -F #清空规则

service iptables save #保存配置规则

systemctl restart iptables.service #启动防火墙使配置生效

[root@master01 ~]# cat /etc/sysconfig/iptables #查看防火墙配置文件

# Generated by iptables-save v1.4.21 on Mon Jul 19 04:03:09 2021

*filter

:INPUT ACCEPT [19:1192]

:FORWARD ACCEPT [0:0]

:OUTPUT ACCEPT [19:2344]

COMMIT

# Completed on Mon Jul 19 04:03:09 2021

4、关闭交换分区

#执行以下命令

swapoff -a

sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab

[root@master01 ~]# free -m #查看swap已经关闭

total used free shared buff/cache available

Mem: 1955 131 1729 8 94 1698

Swap:

5、调整内核参数

5.1

#执行以下命令

modprobe br_netfilter

modprobe ip_vs

modprobe ip_conntrack

cat >> /etc/rc.d/rc.local << EOF

modprobe br_netfilter

modprobe ip_vs

modprobe ip_conntrack

EOF

chmod +x /etc/rc.d/rc.local

5.2

vi /etc/security/limits.conf #在最后一行添加以下代码

* hard nofile 65535

* soft nofile 65535

* hard nproc 65535

* soft nproc 65535

:wq! #保存退出

#查看hard和soft限制数

ulimit -Hn

ulimit -Sn

5.3

vi /etc/sysctl.d/docker.conf

net.bridge.bridge-nf-call-iptables = 1

net.bridge.bridge-nf-call-ip6tables = 1

net.bridge.bridge-nf-call-arptables=1

net.ipv4.ip_forward = 1

vm.swappiness = 0

vm.overcommit_memory = 1

vm.panic_on_oom = 0

fs.inotify.max_user_instances = 8192

fs.inotify.max_user_watches = 1048576

fs.file-max = 52706963

fs.nr_open = 52706963

net.ipv6.conf.all.disable_ipv6 = 1

net.netfilter.nf_conntrack_max = 2310720

:wq! #保存退出

sysctl --system

sysctl -p /etc/sysctl.d/docker.conf

5.4开启IPVS支持

vi /etc/sysconfig/modules/ipvs.modules

#!/bin/bash

ipvs_modules="ip_vs ip_vs_lc ip_vs_wlc ip_vs_rr ip_vs_wrr ip_vs_lblc ip_vs_lblcr ip_vs_dh ip_vs_sh ip_vs_fo ip_vs_nq ip_vs_sed ip_vs_ftp nf_conntrack"

for kernel_module in ${ipvs_modules}; do

/sbin/modinfo -F filename ${kernel_module} > /dev/null 2>&1

if [ $? -eq 0 ]; then

/sbin/modprobe ${kernel_module}

fi

done

:wq! #保存退出

#执行以下命令使配置生效

chmod 755 /etc/sysconfig/modules/ipvs.modules

sh /etc/sysconfig/modules/ipvs.modules

lsmod | grep ip_vs

二、CentOS 7.9安装Docker-ce社区版本

1、卸载旧版本(如果没有安装就不需要执行)

yum remove docker docker-common docker-selinux docker-engine

2、安装docker-ce依赖包

yum install yum-utils device-mapper-persistent-data lvm2

3、设置docker-ce源 #docker-ce是社区版本

yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo

[root@master01 ~]# yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo

Loaded plugins: fastestmirror

adding repo from: https://download.docker.com/linux/centos/docker-ce.repo

grabbing file https://download.docker.com/linux/centos/docker-ce.repo to /etc/yum.repos.d/docker-ce.repo

repo saved to /etc/yum.repos.d/docker-ce.repo

#可以使用国内阿里云的docker源

yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

4、重新建立缓存

yum makecache fast

5、列出可安装的docker版本

yum list docker-ce --showduplicates | sort -r

[root@master01 yum.repos.d]# yum list docker-ce --showduplicates | sort -r

* updates: mirrors.cn99.com

Loading mirror speeds from cached hostfile

Loaded plugins: fastestmirror

* extras: mirrors.163.com

* epel: mirrors.bfsu.edu.cn

* elrepo: mirror-hk.koddos.net

docker-ce.x86_64 3:20.10.7-3.el7 docker-ce-stable

docker-ce.x86_64 3:20.10.6-3.el7 docker-ce-stable

docker-ce.x86_64 3:20.10.5-3.el7 docker-ce-stable

docker-ce.x86_64 3:20.10.4-3.el7 docker-ce-stable

docker-ce.x86_64 3:20.10.3-3.el7 docker-ce-stable

docker-ce.x86_64 3:20.10.2-3.el7 docker-ce-stable

docker-ce.x86_64 3:20.10.1-3.el7 docker-ce-stable

docker-ce.x86_64 3:20.10.0-3.el7 docker-ce-stable

docker-ce.x86_64 3:19.03.9-3.el7 docker-ce-stable

docker-ce.x86_64 3:19.03.8-3.el7 docker-ce-stable

docker-ce.x86_64 3:19.03.7-3.el7 docker-ce-stable

docker-ce.x86_64 3:19.03.6-3.el7 docker-ce-stable

docker-ce.x86_64 3:19.03.5-3.el7 docker-ce-stable

docker-ce.x86_64 3:19.03.4-3.el7 docker-ce-stable

docker-ce.x86_64 3:19.03.3-3.el7 docker-ce-stable

docker-ce.x86_64 3:19.03.2-3.el7 docker-ce-stable

docker-ce.x86_64 3:19.03.15-3.el7 docker-ce-stable

docker-ce.x86_64 3:19.03.14-3.el7 docker-ce-stable

docker-ce.x86_64 3:19.03.1-3.el7 docker-ce-stable

docker-ce.x86_64 3:19.03.13-3.el7 docker-ce-stable

docker-ce.x86_64 3:19.03.12-3.el7 docker-ce-stable

docker-ce.x86_64 3:19.03.11-3.el7 docker-ce-stable

docker-ce.x86_64 3:19.03.10-3.el7 docker-ce-stable

docker-ce.x86_64 3:19.03.0-3.el7 docker-ce-stable

docker-ce.x86_64 3:18.09.9-3.el7 docker-ce-stable

docker-ce.x86_64 3:18.09.8-3.el7 docker-ce-stable

docker-ce.x86_64 3:18.09.7-3.el7 docker-ce-stable

docker-ce.x86_64 3:18.09.6-3.el7 docker-ce-stable

docker-ce.x86_64 3:18.09.5-3.el7 docker-ce-stable

docker-ce.x86_64 3:18.09.4-3.el7 docker-ce-stable

docker-ce.x86_64 3:18.09.3-3.el7 docker-ce-stable

docker-ce.x86_64 3:18.09.2-3.el7 docker-ce-stable

docker-ce.x86_64 3:18.09.1-3.el7 docker-ce-stable

docker-ce.x86_64 3:18.09.0-3.el7 docker-ce-stable

docker-ce.x86_64 18.06.3.ce-3.el7 docker-ce-stable

docker-ce.x86_64 18.06.2.ce-3.el7 docker-ce-stable

docker-ce.x86_64 18.06.1.ce-3.el7 docker-ce-stable

docker-ce.x86_64 18.06.0.ce-3.el7 docker-ce-stable

docker-ce.x86_64 18.03.1.ce-1.el7.centos docker-ce-stable

docker-ce.x86_64 18.03.0.ce-1.el7.centos docker-ce-stable

docker-ce.x86_64 17.12.1.ce-1.el7.centos docker-ce-stable

docker-ce.x86_64 17.12.0.ce-1.el7.centos docker-ce-stable

docker-ce.x86_64 17.09.1.ce-1.el7.centos docker-ce-stable

docker-ce.x86_64 17.09.0.ce-1.el7.centos docker-ce-stable

docker-ce.x86_64 17.06.2.ce-1.el7.centos docker-ce-stable

docker-ce.x86_64 17.06.1.ce-1.el7.centos docker-ce-stable

docker-ce.x86_64 17.06.0.ce-1.el7.centos docker-ce-stable

docker-ce.x86_64 17.03.3.ce-1.el7 docker-ce-stable

docker-ce.x86_64 17.03.2.ce-1.el7.centos docker-ce-stable

docker-ce.x86_64 17.03.1.ce-1.el7.centos docker-ce-stable

docker-ce.x86_64 17.03.0.ce-1.el7.centos docker-ce-stable

* base: mirrors.cn99.com

Available Packages

6、安装指定版本docker-ce

#yum install docker-ce-<VERSION_STRING> docker-ce-cli-<VERSION_STRING> containerd.io

yum install docker-ce-19.03.9 docker-ce-cli-19.03.9 containerd.io

[root@master01 yum.repos.d]# yum install docker-ce-19.03.9 docker-ce-cli-19.03.9 containerd.io

Loaded plugins: fastestmirror

Loading mirror speeds from cached hostfile

* base: mirrors.cn99.com

* elrepo: mirror-hk.koddos.net

* epel: mirrors.nju.edu.cn

* extras: mirrors.163.com

* updates: mirrors.cn99.com

Resolving Dependencies

--> Running transaction check

---> Package containerd.io.x86_64 0:1.4.8-3.1.el7 will be installed

--> Processing Dependency: container-selinux >= 2:2.74 for package: containerd.io-1.4.8-3.1.el7.x86_64

---> Package docker-ce.x86_64 3:19.03.9-3.el7 will be installed

--> Processing Dependency: libcgroup for package: 3:docker-ce-19.03.9-3.el7.x86_64

---> Package docker-ce-cli.x86_64 1:19.03.9-3.el7 will be installed

--> Running transaction check

---> Package container-selinux.noarch 2:2.119.2-1.911c772.el7_8 will be installed

--> Processing Dependency: policycoreutils-python for package: 2:container-selinux-2.119.2-1.911c772.el7_8.noarch

---> Package libcgroup.x86_64 0:0.41-21.el7 will be installed

--> Running transaction check

---> Package policycoreutils-python.x86_64 0:2.5-34.el7 will be installed

--> Processing Dependency: setools-libs >= 3.3.8-4 for package: policycoreutils-python-2.5-34.el7.x86_64

--> Processing Dependency: libsemanage-python >= 2.5-14 for package: policycoreutils-python-2.5-34.el7.x86_64

--> Processing Dependency: audit-libs-python >= 2.1.3-4 for package: policycoreutils-python-2.5-34.el7.x86_64

--> Processing Dependency: python-IPy for package: policycoreutils-python-2.5-34.el7.x86_64

--> Processing Dependency: libqpol.so.1(VERS_1.4)(64bit) for package: policycoreutils-python-2.5-34.el7.x86_64

--> Processing Dependency: libqpol.so.1(VERS_1.2)(64bit) for package: policycoreutils-python-2.5-34.el7.x86_64

--> Processing Dependency: libapol.so.4(VERS_4.0)(64bit) for package: policycoreutils-python-2.5-34.el7.x86_64

--> Processing Dependency: checkpolicy for package: policycoreutils-python-2.5-34.el7.x86_64

--> Processing Dependency: libqpol.so.1()(64bit) for package: policycoreutils-python-2.5-34.el7.x86_64

--> Processing Dependency: libapol.so.4()(64bit) for package: policycoreutils-python-2.5-34.el7.x86_64

--> Running transaction check

---> Package audit-libs-python.x86_64 0:2.8.5-4.el7 will be installed

---> Package checkpolicy.x86_64 0:2.5-8.el7 will be installed

---> Package libsemanage-python.x86_64 0:2.5-14.el7 will be installed

---> Package python-IPy.noarch 0:0.75-6.el7 will be installed

---> Package setools-libs.x86_64 0:3.3.8-4.el7 will be installed

--> Finished Dependency Resolution

Dependencies Resolved

=====================================================================================================================================================================================================

Package Arch Version Repository Size

=====================================================================================================================================================================================================

Installing:

containerd.io x86_64 1.4.8-3.1.el7 docker-ce-stable 30 M

docker-ce x86_64 3:19.03.9-3.el7 docker-ce-stable 24 M

docker-ce-cli x86_64 1:19.03.9-3.el7 docker-ce-stable 38 M

Installing for dependencies:

audit-libs-python x86_64 2.8.5-4.el7 base 76 k

checkpolicy x86_64 2.5-8.el7 base 295 k

container-selinux noarch 2:2.119.2-1.911c772.el7_8 extras 40 k

libcgroup x86_64 0.41-21.el7 base 66 k

libsemanage-python x86_64 2.5-14.el7 base 113 k

policycoreutils-python x86_64 2.5-34.el7 base 457 k

python-IPy noarch 0.75-6.el7 base 32 k

setools-libs x86_64 3.3.8-4.el7 base 620 k

Transaction Summary

=====================================================================================================================================================================================================

Install 3 Packages (+8 Dependent packages)

Total download size: 94 M

Installed size: 380 M

Is this ok [y/d/N]: y

Downloading packages:

(1/11): container-selinux-2.119.2-1.911c772.el7_8.noarch.rpm | 40 kB 00:00:00

(2/11): checkpolicy-2.5-8.el7.x86_64.rpm | 295 kB 00:00:00

(3/11): audit-libs-python-2.8.5-4.el7.x86_64.rpm | 76 kB 00:00:05

warning: /var/cache/yum/x86_64/7/docker-ce-stable/packages/docker-ce-19.03.9-3.el7.x86_64.rpm: Header V4 RSA/SHA512 Signature, key ID 621e9f35: NOKEY ] 2.3 MB/s | 25 MB 00:00:29 ETA

Public key for docker-ce-19.03.9-3.el7.x86_64.rpm is not installed

(4/11): docker-ce-19.03.9-3.el7.x86_64.rpm | 24 MB 00:00:12

(5/11): libcgroup-0.41-21.el7.x86_64.rpm | 66 kB 00:00:00

(6/11): policycoreutils-python-2.5-34.el7.x86_64.rpm | 457 kB 00:00:00

(7/11): python-IPy-0.75-6.el7.noarch.rpm | 32 kB 00:00:00

(8/11): setools-libs-3.3.8-4.el7.x86_64.rpm | 620 kB 00:00:00

(9/11): libsemanage-python-2.5-14.el7.x86_64.rpm | 113 kB 00:00:00

(10/11): docker-ce-cli-19.03.9-3.el7.x86_64.rpm | 38 MB 00:00:12

(11/11): containerd.io-1.4.8-3.1.el7.x86_64.rpm | 30 MB 00:16:14

-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Total 99 kB/s | 94 MB 00:16:14

Retrieving key from https://download.docker.com/linux/centos/gpg

Importing GPG key 0x621E9F35:

Userid : "Docker Release (CE rpm) <docker@docker.com>"

Fingerprint: 060a 61c5 1b55 8a7f 742b 77aa c52f eb6b 621e 9f35

From : https://download.docker.com/linux/centos/gpg

Is this ok [y/N]: y

Running transaction check

Running transaction test

Transaction test succeeded

Running transaction

Installing : libcgroup-0.41-21.el7.x86_64 1/11

Installing : setools-libs-3.3.8-4.el7.x86_64 2/11

Installing : audit-libs-python-2.8.5-4.el7.x86_64 3/11

Installing : checkpolicy-2.5-8.el7.x86_64 4/11

Installing : python-IPy-0.75-6.el7.noarch 5/11

Installing : 1:docker-ce-cli-19.03.9-3.el7.x86_64 6/11

Installing : libsemanage-python-2.5-14.el7.x86_64 7/11

Installing : policycoreutils-python-2.5-34.el7.x86_64 8/11

Installing : 2:container-selinux-2.119.2-1.911c772.el7_8.noarch 9/11

setsebool: SELinux is disabled.

Installing : containerd.io-1.4.8-3.1.el7.x86_64 10/11

Installing : 3:docker-ce-19.03.9-3.el7.x86_64 11/11

Verifying : 3:docker-ce-19.03.9-3.el7.x86_64 1/11

Verifying : libsemanage-python-2.5-14.el7.x86_64 2/11

Verifying : containerd.io-1.4.8-3.1.el7.x86_64 3/11

Verifying : 2:container-selinux-2.119.2-1.911c772.el7_8.noarch 4/11

Verifying : 1:docker-ce-cli-19.03.9-3.el7.x86_64 5/11

Verifying : python-IPy-0.75-6.el7.noarch 6/11

Verifying : checkpolicy-2.5-8.el7.x86_64 7/11

Verifying : policycoreutils-python-2.5-34.el7.x86_64 8/11

Verifying : audit-libs-python-2.8.5-4.el7.x86_64 9/11

Verifying : setools-libs-3.3.8-4.el7.x86_64 10/11

Verifying : libcgroup-0.41-21.el7.x86_64 11/11

Installed:

containerd.io.x86_64 0:1.4.8-3.1.el7 docker-ce.x86_64 3:19.03.9-3.el7 docker-ce-cli.x86_64 1:19.03.9-3.el7

Dependency Installed:

audit-libs-python.x86_64 0:2.8.5-4.el7 checkpolicy.x86_64 0:2.5-8.el7 container-selinux.noarch 2:2.119.2-1.911c772.el7_8 libcgroup.x86_64 0:0.41-21.el7 libsemanage-python.x86_64 0:2.5-14.el7

policycoreutils-python.x86_64 0:2.5-34.el7 python-IPy.noarch 0:0.75-6.el7 setools-libs.x86_64 0:3.3.8-4.el7

Complete!

[root@master01 yum.repos.d]#

7、查看docker版本

yum list installed | grep docker

docker --version

[root@master01 yum.repos.d]# yum list installed | grep docker

containerd.io.x86_64 1.4.8-3.1.el7 @docker-ce-stable

docker-ce.x86_64 3:19.03.9-3.el7 @docker-ce-stable

docker-ce-cli.x86_64 1:19.03.9-3.el7 @docker-ce-stable

[root@master01 yum.repos.d]# docker --version

Docker version 19.03.9, build 9d988398e7

8、添加docker开机启动

systemctl enable docker

[root@master01 yum.repos.d]# systemctl enable docker

Created symlink from /etc/systemd/system/multi-user.target.wants/docker.service to /usr/lib/systemd/system/docker.service.

systemctl start docker #启动docker

systemctl status docker #查看docker状态

[root@master01 yum.repos.d]# systemctl status docker

● docker.service - Docker Application Container Engine

Loaded: loaded (/usr/lib/systemd/system/docker.service; enabled; vendor preset: disabled)

Active: active (running) since Thu 2021-07-29 10:45:27 CST; 1min 3s ago

Docs: https://docs.docker.com

Main PID: 11224 (dockerd)

Tasks: 11

Memory: 36.8M

CGroup: /system.slice/docker.service

└─11224 /usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock

Jul 29 10:45:25 master01.k8s dockerd[11224]: time="2021-07-29T10:45:25.290799295+08:00" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc

Jul 29 10:45:25 master01.k8s dockerd[11224]: time="2021-07-29T10:45:25.419328622+08:00" level=warning msg="Your kernel does not support cgroup blkio weight"

Jul 29 10:45:25 master01.k8s dockerd[11224]: time="2021-07-29T10:45:25.419375062+08:00" level=warning msg="Your kernel does not support cgroup blkio weight_device"

Jul 29 10:45:25 master01.k8s dockerd[11224]: time="2021-07-29T10:45:25.419810835+08:00" level=info msg="Loading containers: start."

Jul 29 10:45:26 master01.k8s dockerd[11224]: time="2021-07-29T10:45:26.147897319+08:00" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon...d IP address"

Jul 29 10:45:26 master01.k8s dockerd[11224]: time="2021-07-29T10:45:26.805189506+08:00" level=info msg="Loading containers: done."

Jul 29 10:45:26 master01.k8s dockerd[11224]: time="2021-07-29T10:45:26.923720323+08:00" level=info msg="Docker daemon" commit=9d988398e7 graphdriver(s)=overlay2 version=19.03.9

Jul 29 10:45:26 master01.k8s dockerd[11224]: time="2021-07-29T10:45:26.923876965+08:00" level=info msg="Daemon has completed initialization"

Jul 29 10:45:27 master01.k8s systemd[1]: Started Docker Application Container Engine.

Jul 29 10:45:27 master01.k8s dockerd[11224]: time="2021-07-29T10:45:27.026242449+08:00" level=info msg="API listen on /var/run/docker.sock"

Hint: Some lines were ellipsized, use -l to show in full.

[root@master01 yum.repos.d]#

systemctl restart docker #重启docker

9、配置docker镜像加速

#查看是否在/usr/lib/systemd/system/docker.service文件中配置过镜像地址

systemctl cat docker | grep '\-\-registry\-mirror'

#如果执行该命令后有内容输出,请执行systemctl cat docker查看ExecStart=这行,然后编辑/usr/lib/systemd/system/docker.service文件

vi /usr/lib/systemd/system/docker.service #修改为以下内容

ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock

:wq! #保存退出

由于Docker Hub的服务器在国外,下载docker镜像比较慢,我们可以配置国内的镜像地址,这样下载docker镜像速度就会很快。

国内主要的镜像加速器有:

163:https://hub-mirror.c.163.com

百度:https://mirror.baidubce.com/

阿里云:https://<自己的id>.mirror.aliyuncs.com

#使用阿里云账号登录https://cr.console.aliyun.com/cn-hangzhou/instances/mirrors,登录成功后,左侧菜单-容器镜像服务-镜像工具-镜像加速器-加速器

#复制加速器地址:https://t1fyrekt.mirror.aliyuncs.com

#每个阿里云账号下面的加速器地址都不一样

#CentOS7.x已使用systemd进行服务管理,对于使用systemd的系统,在/etc/docker/daemon.json文件中进行添加

mkdir -p /etc/docker #创建目录,执行以下操作

tee /etc/docker/daemon.json <<-'EOF'

{

"registry-mirrors": ["https://t1fyrekt.mirror.aliyuncs.com"]

}

EOF

cat /etc/docker/daemon.json

[root@master01 yum.repos.d]# cat /etc/docker/daemon.json

{

"registry-mirrors": ["https://t1fyrekt.mirror.aliyuncs.com"]

}

vi /etc/docker/daemon.json #编辑配置文件,可以添加多个docker镜像地址

{

"registry-mirrors": ["https://t1fyrekt.mirror.aliyuncs.com","https://hub-mirror.c.163.com","https://mirror.baidubce.com/"]

}

:wq! #保存退出

systemctl daemon-reload

systemctl restart docker #重启docker

docker info #检查docker镜像加速器是否配置成功

[root@master01 yum.repos.d]# docker info

Client:

Debug Mode: false

Server:

Containers: 0

Running: 0

Paused: 0

Stopped: 0

Images: 0

Server Version: 19.03.9

Storage Driver: overlay2

Backing Filesystem: xfs

Supports d_type: true

Native Overlay Diff: true

Logging Driver: json-file

Cgroup Driver: cgroupfs

Plugins:

Volume: local

Network: bridge host ipvlan macvlan null overlay

Log: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslog

Swarm: inactive

Runtimes: runc

Default Runtime: runc

Init Binary: docker-init

containerd version: 7eba5930496d9bbe375fdf71603e610ad737d2b2

runc version: v1.0.0-0-g84113ee

init version: fec3683

Security Options:

seccomp

Profile: default

Kernel Version: 5.13.2-1.el7.elrepo.x86_64

Operating System: CentOS Linux 7 (Core)

OSType: linux

Architecture: x86_64

CPUs: 2

Total Memory: 1.91GiB

Name: master01.k8s

ID: TNGI:5QEO:BKT4:EVSG:5NNH:KLKQ:DUNT:GL5K:OCAO:BYC2:GFYC:WS7L

Docker Root Dir: /var/lib/docker

Debug Mode: false

Registry: https://index.docker.io/v1/

Labels:

Experimental: false

Insecure Registries:

127.0.0.0/8

Registry Mirrors:

https://t1fyrekt.mirror.aliyuncs.com/

https://hub-mirror.c.163.com/

https://mirror.baidubce.com/

Live Restore Enabled: false

#可以看到Registry Mirrors:下面有我们设置的镜像地址,说明配置成功

10、测试docker是否可用

docker pull hello-world #下载一个镜像实例

[root@master01 yum.repos.d]# docker pull hello-world

Using default tag: latest

latest: Pulling from library/hello-world

b8dfde127a29: Pull complete

Digest: sha256:df5f5184104426b65967e016ff2ac0bfcd44ad7899ca3bbcf8e44e4461491a9e

Status: Downloaded newer image for hello-world:latest

docker.io/library/hello-world:latest

docker run hello-world #运行一个镜像实例

[root@master01 yum.repos.d]# docker run hello-world

Hello from Docker!

This message shows that your installation appears to be working correctly.

To generate this message, Docker took the following steps:

1. The Docker client contacted the Docker daemon.

2. The Docker daemon pulled the "hello-world" image from the Docker Hub.

(amd64)

3. The Docker daemon created a new container from that image which runs the

executable that produces the output you are currently reading.

4. The Docker daemon streamed that output to the Docker client, which sent it

to your terminal.

To try something more ambitious, you can run an Ubuntu container with:

$ docker run -it ubuntu bash

Share images, automate workflows, and more with a free Docker ID:

https://hub.docker.com/

For more examples and ideas, visit:

https://docs.docker.com/get-started

docker images hello-world #查看该镜像的信息

[root@master01 yum.repos.d]# docker images hello-world

REPOSITORY TAG IMAGE ID CREATED SIZE

hello-world latest d1165f221234 4 months ago 13.3kB

11、使用docker部署应用

#docker基本操作

docker ps #查询运行中的容器

docker ps -a #查询所有容器

docker image ls #查询本机镜像

11.1使用docker容器部署nginx

docker search nginx #查找Docker Hub上的nginx镜像

[root@master01 ~]# docker search nginx

NAME DESCRIPTION STARS OFFICIAL AUTOMATED

nginx Official build of Nginx. 15242 [OK]

jwilder/nginx-proxy Automated Nginx reverse proxy for docker con… 2053 [OK]

richarvey/nginx-php-fpm Container running Nginx + PHP-FPM capable of… 815 [OK]

jc21/nginx-proxy-manager Docker container for managing Nginx proxy ho… 225

linuxserver/nginx An Nginx container, brought to you by LinuxS… 150

tiangolo/nginx-rtmp Docker image with Nginx using the nginx-rtmp… 137 [OK]

jlesage/nginx-proxy-manager Docker container for Nginx Proxy Manager 127 [OK]

alfg/nginx-rtmp NGINX, nginx-rtmp-module and FFmpeg from sou… 102 [OK]

jasonrivers/nginx-rtmp Docker images to host RTMP streams using NGI… 92 [OK]

nginxdemos/hello NGINX webserver that serves a simple page co… 70 [OK]

privatebin/nginx-fpm-alpine PrivateBin running on an Nginx, php-fpm & Al… 56 [OK]

nginx/nginx-ingress NGINX and NGINX Plus Ingress Controllers fo… 55

nginxinc/nginx-unprivileged Unprivileged NGINX Dockerfiles 45

staticfloat/nginx-certbot Opinionated setup for automatic TLS certs lo… 24 [OK]

schmunk42/nginx-redirect A very simple container to redirect HTTP tra… 19 [OK]

nginx/nginx-prometheus-exporter NGINX Prometheus Exporter for NGINX and NGIN… 19

nginxproxy/nginx-proxy Automated Nginx reverse proxy for docker con… 16

centos/nginx-112-centos7 Platform for running nginx 1.12 or building … 15

raulr/nginx-wordpress Nginx front-end for the official wordpress:f… 13 [OK]

centos/nginx-18-centos7 Platform for running nginx 1.8 or building n… 13

bitwarden/nginx The Bitwarden nginx web server acting as a r… 11

mailu/nginx Mailu nginx frontend 9 [OK]

sophos/nginx-vts-exporter Simple server that scrapes Nginx vts stats a… 7 [OK]

ansibleplaybookbundle/nginx-apb An APB to deploy NGINX 2 [OK]

wodby/nginx Generic nginx 1 [OK]

docker pull nginx #拉取官方Nginx镜像

docker images nginx #查看镜像

[root@master01 ~]# docker images nginx

REPOSITORY TAG IMAGE ID CREATED SIZE

nginx latest 08b152afcfae 9 days ago 133MB

#使用NGINX默认的配置来启动一个Nginx容器实例

docker run --rm --name nginx-demo -p 8080:80 -d nginx

浏览器打开http://192.168.21.8:8080/可以看到web页面,说明部署成功。

参数说明:

--rm:容器终止运行后,自动删除容器文件

--name nginx-demo:容器名为nginx-demo,可以自定义设置

-p: 端口进行映射,将本地8080端口映射到容器内部的80端口

-d:容器启动后,在后台运行

docker container ps #查看启动的docker容器

docker stop nginx-demo #停止容器

docker run --restart=always --name nginx-demo -p 8080:80 -d nginx   #参数 --restart=always 表示宿主机重启后容器开机自启动

#nginx服务部署,映射本地目录到nginx容器

mkdir -p /data/nginx/www

mkdir -p /data/nginx/logs

mkdir -p /data/nginx/conf

#目录说明:

www: 目录将映射为 nginx 容器配置的虚拟目录。

logs: 目录将映射为 nginx 容器的日志目录。

conf: 目录里的配置文件将映射为 nginx 容器的配置文件。

#查看容器ID

[root@master01 ~]# docker ps

CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES

78d7a3bea10c nginx "/docker-entrypoint.…" 13 minutes ago Up 13 minutes 0.0.0.0:8080->80/tcp nginx-test

#拷贝容器内Nginx默认配置文件到本地当前目录下的conf目录

docker cp 78d7a3bea10c:/etc/nginx/nginx.conf /data/nginx/conf/

docker run --rm -d -p 8081:80 --name nginx-test-web -v /data/nginx/www:/usr/share/nginx/html -v /data/nginx/conf/nginx.conf:/etc/nginx/nginx.conf -v /data/nginx/logs:/var/log/nginx nginx

#参数 --restart=always 表示宿主机重启后容器开机自启动

docker run --restart=always -d -p 8081:80 --name nginx-test-web -v /data/nginx/www:/usr/share/nginx/html -v /data/nginx/conf/nginx.conf:/etc/nginx/nginx.conf -v /data/nginx/logs:/var/log/nginx nginx

说明:

-v 目录挂载,冒号前为外部目录,冒号后为容器内目录,相当于外部目录中的内容会映射同步到容器内

--rm:容器终止运行后,自动删除容器文件。

-p 8081:80: 将容器的80端口映射到主机的8081端口

--name nginx-test-web:将容器命名为 nginx-test-web

-v /data/nginx/www:/usr/share/nginx/html:将我们自己创建的www目录挂载到容器的/usr/share/nginx/html

-v /data/nginx/conf/nginx.conf:/etc/nginx/nginx.conf:将我们自己创建的nginx.conf挂载到容器的/etc/nginx/nginx.conf

-v /data/nginx/logs:/var/log/nginx:将我们自己创建的logs挂载到容器的/var/log/nginx

cd /data/nginx/www

vi /data/nginx/www/index.html #编辑

<!DOCTYPE html>

<html>

<head>

<meta charset="utf-8">

<title>Nginx</title>

</head>

<body>

<h1>我的第一个Docker Nginx应用</h1>

</body>

</html>

:wq! #保存退出

浏览器打开http://192.168.21.8:8081/

还可以绑定域名nginx,使用域名访问web

[root@master01 www]# docker ps

CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES

791eb8aa57b5 nginx "/docker-entrypoint.…" 4 seconds ago Up 3 seconds 0.0.0.0:8081->80/tcp nginx-test-web

78d7a3bea10c nginx "/docker-entrypoint.…" About an hour ago Up About an hour 0.0.0.0:8080->80/tcp nginx-test

#使用该命令进入一个已经在运行的容器

docker exec -it 791eb8aa57b5 /bin/bash

exit #退出容器

如果要正常退出不关闭容器,请按Ctrl+P+Q进行退出容器

如果使用exit退出,那么在退出之后会关闭容器,可以使用下面的流程进行恢复

使用docker restart命令重启容器

使用docker attach命令进入容器

#扩展阅读

#docker操作相关命令

docker ps -aq #列出所有的容器ID

docker stop $(docker ps -aq) #停止所有的容器

docker rm $(docker ps -aq) #删除所有的容器

docker rmi $(docker images -q) #删除所有的镜像

docker image prune --force --all #删除所有不使用的镜像

docker image prune -f -a #删除所有不使用的镜像

docker container prune -f #删除所有停止的容器

docker help #查看docker帮助

docker image --help #查看 docker中 镜像相关帮助

docker image ls    #查看当前所有镜像

docker images          #查看镜像

docker image inspect nginx #查看nginx镜像详细信息

docker pull nginx:1.20.1 #下载指定版本镜像 nginx

docker image rm nginx:1.20.1 #删除

docker rmi nginx:1.20.1 #删除镜像

docker image save nginx:1.20.1 > nginx.tar.gz #导出nginx镜像

docker load -i uptime-kuma.tar.gz   #导入镜像到docker

docker ps #仅列出当前运行的容器

docker ps -l #列出最新创建得容器

docker inspect nginx #列出指定容器的详细信息

docker ps -a #列出所有容器(包括未运行的)

docker start nginx #启动容器web

docker stop nginx #停止容器web

docker rm nginx #删除容器

docker port nginx #查看指定容器端口映射

docker top nginx #查看容器中有哪些进程

docker stats nginx #查看容器资源使用情况

docker cp web.tar.gz nginx:/data #将宿主机web.tar.gz拷贝到容器nginx的/data目录

docker exec -it nginx ls /data #查看容器目录

docker exec -it nginx /bin/bash #进入容器

docker commit web nginx:web #将修改后的web容器提交为一个新镜像nginx:web

docker run -d --name nginx --memory="1024m" nginx #允许容器最多使用1GB内存

docker run -d --name nginx --cpus="1.5" nginx #允许容器最多使用1.5核心cpu

docker run -d --name nginx --cpus=".5" nginx #允许容器最多使用50%的CPU

至此,CentOS 7.x 安装Docker-ce社区版本教程完成。

     

  系统运维技术交流QQ群:①185473046 系统运维技术交流□Ⅰ ②190706903 系统运维技术交流™Ⅱ ③203744115 系统运维技术交流™Ⅲ

给我留言

您必须 [ 登录 ] 才能发表留言!



Copyright© 2011-2024 系统运维 All rights reserved
版权声明:本站所有文章均为作者原创内容,如需转载,请注明出处及原文链接
陕ICP备11001040号-3