Docker架构
Docker安装配置
docker官方文档说要求Linux kernel至少3.8以上,一般为Centos7或者Ubuntu系统,
官方文档https://docs.docker.com/engine/installation/linux/docker-ce/centos/
#卸载旧docker
yum remove docker docker-common docker-selinux docker-engine
#关闭安全机制firewalld
systemctl stop firewalld.service
#关闭firewalld开机启动
systemctl disable firewalld.service
#查看firewalld状态
firewall-cmd --state
#开机启动docker
systemctl enable docker
#安装docker依赖
yum install -y yum-utils device-mapper-persistent-data lvm2 ntp bridge-utils net-tools openssl openssl-devel
#创建yum源yum-config-manager
yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
#同步系统时间
ntpdate pool.ntp.org
#开机启动时间同步
systemctl enable ntpd.service
#启用和关闭docker存储库
yum-config-manager --enable docker-ce-edge
yum-config-manager --enable docker-ce-test
yum-config-manager --disable docker-ce-edge
#安装docker
yum -y install docker-ce
#启动docker服务
systemctl start docker
#更改内核参数
vim /etc/sysctl.conf
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
net.bridge.bridge-nf-call-arptables = 1
sysctl -p
#添加加速器
vim /etc/docker/daemon.json
{
"registry-mirrors": [
"https://2wg1slse.mirror.aliyuncs.com",
"http://4fe32ada.m.daocloud.io"
]
}
注：Docker的镜像以及一些数据都是在/var/lib/docker目录下
Docker daemon运行在Docker host上,负责创建、运行、监控容器、构建、存储镜像
默认Docker daemon只能响应来自本地Host的客户端请求;如果要允许远程客户端请求,需要在配置文件中打开TCP监听
编辑/etc/systemd/system/multi-user.target.wants/docker.service,在环境变量ExecStart后面添加-H tcp://0.0.0.0允许来自任意IP的客户端连接
systemctl daemon-reload
systemctl restart docker.service
