centos7下Docker安装及配置（docker代理及加速）

 

虽然本例的安装版本是19的老版本，但大同小异，安装最新的版本方法也是如此。本文最适合网络受限制，存在代理等环境的网络。

一、   环境介绍

Docker版本：19.03.1

系统环境：CentOS Linux release 7.7.1908

二、   安装docker前

在新主机上首次安装Docker引擎之前，需要设置Docker储存库。然后可以从存储库安装和更新Docker，否则直接通过yum install  decker安装的是老版本，老版本的名字叫“docker”或者“docker-engine”。

如果已经安装了老版本的，请先卸载，并删除docker工作目录/var/lib/docker/：

[root@localhost ~]# yum remove docker \

                  docker-client \

                  docker-client-latest \

                  docker-common \

                  docker-latest \

                  docker-latest-logrotate \

                  docker-logrotate \

                  docker-engine

三、   配置软件包源

 在安装docker前，需要在系统上配置docker的软件包安装源，否则默认使用yum install docker 安装的是老版本的docker。

• 安装yum-utils

[root@localhost ~]# getenforce

Disabled

[root@localhost ~]# systemctl stop firewalld

[root@localhost ~]# systemctl disable firewalld

Removed symlink /etc/systemd/system/multi-user.target.wants/firewalld.service.

Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.

[root@localhost ~]# yum install -y yum-utils   device-mapper-persistent-data   lvm2  （19.03版本安装可以没有这步）

• 查看软件包是否安装成功

rpm -qa | grep yum-utils

rpm -qa | grep device-mapper-persistent-data

rpm -qa | grep lvm2

[root@localhost ~]# rpm -qa | grep yum-utils

yum-utils-4.0.18-4.el8.noarch

[root@localhost ~]# rpm -qa | grep device-mapper-persistent-data

device-mapper-persistent-data-0.8.5-4.el8.x86_64

[root@localhost ~]# rpm -qa | grep lvm2

lvm2-libs-2.03.11-5.el8.x86_64

lvm2-2.03.11-5.el8.x86_64

• 配置软件库（源）

[root@localhost ~]# yum-config-manager   --add-repo   

https://download.docker.com/linux/centos/docker-ce.repo

Loaded plugins: fastestmirror

adding repo from: https://download.docker.com/linux/centos/docker-ce.repo

grabbing file https://download.docker.com/linux/centos/docker-ce.repo to /etc/yum.repos.d/docker-ce.repo

repo saved to /etc/yum.repos.d/docker-ce.repo

[root@localhost yum.repos.d]# ls

CentOS-Base.repo  CentOS-CR.repo  CentOS-Debuginfo.repo  CentOS-fasttrack.repo  CentOS-Media.repo  CentOS-Sources.repo  CentOS-Vault.repo  docker-ce.repo

由于网络限制，单位内网有可能docke官方的源无法使用，也可以更换为阿里的镜像源

[root@localhost yum.repos.d]# yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

Loaded plugins: fastestmirror

adding repo from: http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

grabbing file http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo to /etc/yum.repos.d/docker-ce.repo

repo saved to /etc/yum.repos.d/docker-ce.repo

• 查看可以安装的docker版本

[root@localhost yum.repos.d]# yum list docker-ce --showduplicates | sort -r

 

Last metadata expiration check: 0:00:53 ago on Sun 06 Jun 2021 05:37:15 PM CST.

docker-ce.x86_64                3:20.10.7-3.el8                 docker-ce-stable

docker-ce.x86_64                3:20.10.6-3.el8                 docker-ce-stable

docker-ce.x86_64                3:20.10.5-3.el8                 docker-ce-stable

docker-ce.x86_64                3:20.10.4-3.el8                 docker-ce-stable

docker-ce.x86_64                3:20.10.3-3.el8                 docker-ce-stable

docker-ce.x86_64                3:20.10.2-3.el8                 docker-ce-stable

docker-ce.x86_64                3:20.10.1-3.el8                 docker-ce-stable

docker-ce.x86_64                3:20.10.0-3.el8                 docker-ce-stable

docker-ce.x86_64                3:19.03.15-3.el8                docker-ce-stable

docker-ce.x86_64                3:19.03.14-3.el8                docker-ce-stable

docker-ce.x86_64                3:19.03.13-3.el8                docker-ce-stable

四、   安装docker

安装指定版本的docker，如果不指定版本（docker-ce）则默认安装的是最新版，本例指定的版本是19.0.3。

[root@localhost yum.repos.d]# yum install docker-ce-19.03.1.ce

Installed:

  docker-ce.x86_64 0:18.03.1.ce-1.el7.centos                                                                                                                   

Dependency Installed:

  audit-libs-python.x86_64 0:2.8.5-4.el7          checkpolicy.x86_64 0:2.5-8.el7                        container-selinux.noarch 2:2.119.1-1.c57a6f9.el7        

  libcgroup.x86_64 0:0.41-21.el7                  libseccomp.x86_64 0:2.3.1-4.el7                       libsemanage-python.x86_64 0:2.5-14.el7                  

  pigz.x86_64 0:2.3.3-1.el7.centos                policycoreutils-python.x86_64 0:2.5-34.el7           python-IPy.noarch 0:0.75-6.el7                          

  setools-libs.x86_64 0:3.3.8-4.el7             

Dependency Updated:

  policycoreutils.x86_64 0:2.5-34.el7                                                                                                                          

Complete!

 在centos8中安装可能会有类似的报错：

[root@k8s-master ~]# yum install docker-ce

上次元数据过期检查：0:00:59 前，执行于 2021年08月11日 星期三 21时13分55秒。

错误：

 问题: problem with installed package buildah-1.19.7-1.module_el8.4.0+781+acf4c33b.x86_64

………

解决方法：

dnf remove podman删除软件再重新安装yum install docker-ce下载即可

或者根据提示—allowerasing安装即可。

[root@k8s-master ~]# yum install docker-ce –allowerasing

• 启动docker

[root@localhost yum.repos.d]# systemctl start docker

[root@localhost yum.repos.d]# systemctl enable docker  #开机启动

Created symlink from /etc/systemd/system/multi-user.target.wants/docker.service to /usr/lib/systemd/system/docker.service.

• 查看docker版本

[root@localhost yum.repos.d]# docker version

Client:

 Version:      18.03.1-ce

 API version:  1.37

 Go version:   go1.9.5

 Git commit:   9ee9f40

 Built:        Thu Apr 26 07:20:16 2018

 OS/Arch:      linux/amd64

 Experimental: false

 Orchestrator: swarm

 

Server:

 Engine:

  Version:      18.03.1-ce

  API version:  1.37 (minimum version 1.12)

  Go version:   go1.9.5

  Git commit:   9ee9f40

  Built:        Thu Apr 26 07:23:58 2018

  OS/Arch:      linux/amd64

  Experimental: false

五、   配置代理

由于单位是内网环境，所以需要对docker配置必要的代理，负责下载镜像会失败：

[root@localhost ~]# docker run hello-world

Unable to find image 'hello-world:latest' locally

docker: Error response from daemon: Get https://registry-1.docker.io/v2/: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers).

See 'docker run --help'.

• 建立相应的文件夹和文件，填写相应的代理地址

[root@localhost ~]# mkdir -p /etc/systemd/system/docker.service.d

[root@localhost ~]# vi /etc/systemd/system/docker.service.d/http-proxy.conf

 [Service]

Environment="HTTP_PROXY=http://10.22.16.29:8080"

如果有https的代理，方法类似：

[root@localhost ~]# vim /etc/systemd/system/docker.service.d/https-proxy.conf

Environment="HTTPS_PROXY=https://10.22.16.29:8080"

• 重启docker

[root@localhost ~]# systemctl daemon-reload

[root@localhost ~]# systemctl restart docker

• 查看配置结果

[root@localhost ~]# systemctl show --property=Environment docker

[Service]

Environment="HTTP_PROXY=http://10.22.16.29:8080" "no_proxy=localhost,127.0.0.1,,10.*"

• 查看docker信息

[root@localhost yum.repos.d]# docker info

…………..

Docker Root Dir: /var/lib/docker

Debug Mode (client): false

Debug Mode (server): false

HTTP Proxy: http://10.22.16.29:8080

No Proxy: localhost,127.0.0.1 ,10.*

Registry: https://index.docker.io/v1/

Labels:

Experimental: false

Insecure Registries:

 127.0.0.0/8

Registry Mirrors:

 http://f1361db2.m.daocloud.io/

Live Restore Enabled: false

六、   配置docker加速器

Docker Hub是由Docker公司负责维护的公共注册中心，包含了大量的容器镜像，Docker工具默认从这个公共镜像库下载镜像https://index.docker.io/search?q=&type=image

由于是国外网站，常常访问较慢，所以一般是配置镜像加速器替换成国内的地址。新增/etc/docker/daemon.json，将配置的网站写入配置文件即可：

[root@localhost docker]# pwd

/etc/docker

[root@localhost docker]# cat daemon.json    #新增配置文件

{

  "registry-mirrors": ["https://docker.mirrors.ustc.edu.cn"]  #可以配置成其他的加速器

}

[root@localhost ~]# systemctl restart docker   #配置完成，重启服务

 

或者命令行输入

curl -sSL https://get.daocloud.io/daotools/set_mirror.sh | sh -s https://pee6w651.mirror.aliyuncs.com

七、   验证docker

通过运行hello-world映像，验证docker已正确安装。

[root@localhost ~]# docker run hello-world

Hello from Docker!

This message shows that your installation appears to be working correctly.

To generate this message, Docker took the following steps:

1. The Docker client contacted the Docker daemon.
2. The Docker daemon pulled the "hello-world" image from the Docker Hub.

    (amd64)

3. The Docker daemon created a new container from that image which runs the

    executable that produces the output you are currently reading.

4. The Docker daemon streamed that output to the Docker client, which sent it

    to your terminal.

 

To try something more ambitious, you can run an Ubuntu container with:

 $ docker run -it ubuntu bash

Share images, automate workflows, and more with a free Docker ID:

 https://hub.docker.com/

For more examples and ideas, visit:

 https://docs.docker.com/get-started/

Docker镜像默认的存储位置在/var/lib/docker/下的存储驱动文件夹中，默认是overlay2下，不同的存储驱动，文件名字是不一样的

[root@localhost docker]# pwd

/var/lib/docker

[root@localhost docker]# ls

builder  containerd  containers  image  network  overlay2  plugins  runtimes  swarm  tmp  trust  volumes

[root@localhost docker]# docker info | grep "Storage Driver"

Storage Driver: overlay2

 

[root@localhost overlay2]# ls

8e841529b1b13e1a12dd10c851c6c6399e1374f2e816408706d5d35cdf079108       a0285664363ce73028a94d8c3af7e77894fd5f3b8033f387ab34ac6777520c89-init  l

8e841529b1b13e1a12dd10c851c6c6399e1374f2e816408706d5d35cdf079108-init  ae3dddc023cb68d3d5dc990d625186be0c899f88adc5fdc6fa85d19be52872ce

a0285664363ce73028a94d8c3af7e77894fd5f3b8033f387ab34ac6777520c89       backingFsBlockDev

八、   安装docker命令补全功能

安装成功后可以通过Tab补全docker命令参数。

yum -y install bash-completion

source /usr/share/bash-completion/bash_completion

九、   查看docker运行状态