【DockerCE】执行docker info出现两条告警信息问题解决

安装完docker-ce 20.10.12版本后，执行docker info的时候出现下面的警告信息。

WARNING: bridge-nf-call-iptables is disabled
WARNING: bridge-nf-call-ip6tables is disabled

[root@node-1 docker-ce]# systemctl start docker.service
[root@node-1 docker-ce]# systemctl status docker.service
● docker.service - Docker Application Container Engine
   Loaded: loaded (/usr/lib/systemd/system/docker.service; disabled; vendor preset: disabled)
   Active: active (running) since 四 2021-12-16 07:13:27 CST; 1s ago
     Docs: https://docs.docker.com
 Main PID: 96606 (dockerd)
    Tasks: 8
   Memory: 27.5M
   CGroup: /system.slice/docker.service
           └─96606 /usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock

12月 16 07:13:27 node-1 dockerd[96606]: time="2021-12-16T07:13:27.284939882+08:00" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc
12月 16 07:13:27 node-1 dockerd[96606]: time="2021-12-16T07:13:27.284958321+08:00" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///run/containerd/containerd.sock  <nil> 0 <nil>}] <nil> <nil>}" module=grpc
12月 16 07:13:27 node-1 dockerd[96606]: time="2021-12-16T07:13:27.284970554+08:00" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc
12月 16 07:13:27 node-1 dockerd[96606]: time="2021-12-16T07:13:27.347482341+08:00" level=info msg="Loading containers: start."
12月 16 07:13:27 node-1 dockerd[96606]: time="2021-12-16T07:13:27.733612330+08:00" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address"
12月 16 07:13:27 node-1 dockerd[96606]: time="2021-12-16T07:13:27.820102802+08:00" level=info msg="Loading containers: done."
12月 16 07:13:27 node-1 dockerd[96606]: time="2021-12-16T07:13:27.867156288+08:00" level=info msg="Docker daemon" commit=459d0df graphdriver(s)=overlay2 version=20.10.12
12月 16 07:13:27 node-1 dockerd[96606]: time="2021-12-16T07:13:27.867280919+08:00" level=info msg="Daemon has completed initialization"
12月 16 07:13:27 node-1 systemd[1]: Started Docker Application Container Engine.
12月 16 07:13:27 node-1 dockerd[96606]: time="2021-12-16T07:13:27.928730639+08:00" level=info msg="API listen on /var/run/docker.sock"
[root@node-1 docker-ce]# docker info
Client:
 Debug Mode: false
 Plugins:
  scan: Docker Scan (Docker Inc., v0.9.0)

Server:
 Containers: 0
  Running: 0
  Paused: 0
  Stopped: 0
 Images: 0
 Server Version: 20.10.12
 Storage Driver: overlay2
  Backing Filesystem: xfs
  Supports d_type: true
  Native Overlay Diff: true
  userxattr: false
 Logging Driver: json-file
 Cgroup Driver: cgroupfs
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslog
 Swarm: inactive
 Runtimes: io.containerd.runc.v2 io.containerd.runtime.v1.linux runc
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: 7b11cfaabd73bb80907dd23182b9347b4245eb5d
 runc version: v1.0.2-0-g52b36a2
 init version: de40ad0
 Security Options:
  seccomp
   Profile: default
 Kernel Version: 3.10.0-1160.el7.x86_64
 Operating System: CentOS Linux 7 (Core)
 OSType: linux
 Architecture: x86_64
 CPUs: 2
 Total Memory: 7.777GiB
 Name: node-1
 ID: D4T7:EWDQ:JKDN:REHH:ODYZ:LPEV:YQU4:FWAE:FSKF:ATUQ:5IV6:GAFL
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 Registry: https://index.docker.io/v1/
 Labels:
 Experimental: false
 Insecure Registries:
  127.0.0.0/8
 Live Restore Enabled: false

WARNING: bridge-nf-call-iptables is disabled
WARNING: bridge-nf-call-ip6tables is disabled

解决：在/etc/sysctl.info文件中增加下面两行配置，保存后执行sysctl -p即可。

net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1

[root@node-1 docker-ce]# vi /etc/sysctl.conf 
# sysctl settings are defined through files in
# /usr/lib/sysctl.d/, /run/sysctl.d/, and /etc/sysctl.d/.
#
# Vendors settings live in /usr/lib/sysctl.d/.
# To override a whole file, create a new file with the same in
# /etc/sysctl.d/ and put new settings there. To override
# only specific settings, add a file with a lexically later
# name in /etc/sysctl.d/ and put new settings there.
#
# For more information, see sysctl.conf(5) and sysctl.d(5).

vm.max_map_count=262145
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1

[root@node-1 docker-ce]# sysctl -p
vm.max_map_count = 262145
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1

[root@node-1 docker-ce]# docker info
Client:
 Debug Mode: false
 Plugins:
  scan: Docker Scan (Docker Inc., v0.9.0)

Server:
 Containers: 0
  Running: 0
  Paused: 0
  Stopped: 0
 Images: 0
 Server Version: 20.10.12
 Storage Driver: overlay2
  Backing Filesystem: xfs
  Supports d_type: true
  Native Overlay Diff: true
  userxattr: false
 Logging Driver: json-file
 Cgroup Driver: cgroupfs
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslog
 Swarm: inactive
 Runtimes: io.containerd.runc.v2 io.containerd.runtime.v1.linux runc
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: 7b11cfaabd73bb80907dd23182b9347b4245eb5d
 runc version: v1.0.2-0-g52b36a2
 init version: de40ad0
 Security Options:
  seccomp
   Profile: default
 Kernel Version: 3.10.0-1160.el7.x86_64
 Operating System: CentOS Linux 7 (Core)
 OSType: linux
 Architecture: x86_64
 CPUs: 2
 Total Memory: 7.777GiB
 Name: node-1
 ID: D4T7:EWDQ:JKDN:REHH:ODYZ:LPEV:YQU4:FWAE:FSKF:ATUQ:5IV6:GAFL
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 Registry: https://index.docker.io/v1/
 Labels:
 Experimental: false
 Insecure Registries:
  127.0.0.0/8
 Live Restore Enabled: false

[root@node-1 docker-ce]#