docker安装异常问题

docker安装步骤及启动问题

环境准备

[root@iz2zeak7sgj6i7hrb2g862z ~]# uname -r
3.10.0-514.26.2.el7.x86_64    # 要求3.0以上
[root@iz2zeak7sgj6i7hrb2g862z ~]# cat /etc/os-release 
NAME="CentOS Linux"
VERSION="7 (Core)"
ID="centos"
ID_LIKE="rhel fedora"
VERSION_ID="7"
PRETTY_NAME="CentOS Linux 7 (Core)"
ANSI_COLOR="0;31"
CPE_NAME="cpe:/o:centos:centos:7"
HOME_URL="https://www.centos.org/"
BUG_REPORT_URL="https://bugs.centos.org/"
CENTOS_MANTISBT_PROJECT="CentOS-7"
CENTOS_MANTISBT_PROJECT_VERSION="7"
REDHAT_SUPPORT_PRODUCT="centos"
REDHAT_SUPPORT_PRODUCT_VERSION="7"

安装步骤

#1.卸载旧版本
yum remove docker \
                  docker-client \
                  docker-client-latest \
                  docker-common \
                  docker-latest \
                  docker-latest-logrotate \
                  docker-logrotate \
                  docker-engine
#2.需要的安装包
yum install -y yum-utils
#3.设置镜像的仓库
yum-config-manager \
    --add-repo \
    https://download.docker.com/linux/centos/docker-ce.repo
#上述方法默认是从国外的，不推荐
#推荐使用国内的
yum-config-manager \
    --add-repo \
    https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
#更新yum软件包索引
yum makecache fast
#4.安装docker相关的 docker-ce 社区版 而ee是企业版
yum install docker-ce docker-ce-cli containerd.io # 这里我们使用社区版即可
#5.启动docker
systemctl start docker
#6. 使用docker version查看是否按照成功
docker version
#7. 测试
docker run hello-world

启动错误1：Error while creating filesystem xfs on device docker-8:3-102972296-base

mkfs.xfs版本太低，更新：
yum update xfsprogs

Mar 28 00:04:43 localhost.localdomain dockerd[15804]: time="2021-03-28T00:04:43.598408051+08:00" level=info msg="Starting up"
Mar 28 00:04:43 localhost.localdomain dockerd[15804]: time="2021-03-28T00:04:43.600650558+08:00" level=info msg="parsed scheme: \"unix\"" module=grpc
Mar 28 00:04:43 localhost.localdomain dockerd[15804]: time="2021-03-28T00:04:43.600665279+08:00" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc
Mar 28 00:04:43 localhost.localdomain dockerd[15804]: time="2021-03-28T00:04:43.600687607+08:00" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///run/containerd/containerd.sock  <nil> 0 <nil>}] <nil> <nil>}" module=
Mar 28 00:04:43 localhost.localdomain dockerd[15804]: time="2021-03-28T00:04:43.600697002+08:00" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc
Mar 28 00:04:43 localhost.localdomain dockerd[15804]: time="2021-03-28T00:04:43.605904749+08:00" level=info msg="parsed scheme: \"unix\"" module=grpc
Mar 28 00:04:43 localhost.localdomain dockerd[15804]: time="2021-03-28T00:04:43.605918992+08:00" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc
Mar 28 00:04:43 localhost.localdomain dockerd[15804]: time="2021-03-28T00:04:43.605931380+08:00" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///run/containerd/containerd.sock  <nil> 0 <nil>}] <nil> <nil>}" module=
Mar 28 00:04:43 localhost.localdomain dockerd[15804]: time="2021-03-28T00:04:43.605937417+08:00" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc
Mar 28 00:04:43 localhost.localdomain dockerd[15804]: time="2021-03-28T00:04:43.617199212+08:00" level=warning msg="Usage of loopback devices is strongly discouraged for production use. Please use `--storage-opt dm.thinpooldev` or use
Mar 28 00:04:44 localhost.localdomain dockerd[15804]: time="2021-03-28T00:04:44.026434810+08:00" level=info msg="Creating filesystem xfs on device docker-8:3-102972296-base, mkfs args: [-m crc=0,finobt=0 /dev/mapper/docker-8:3-1029722
Mar 28 00:04:44 localhost.localdomain dockerd[15804]: time="2021-03-28T00:04:44.028150070+08:00" level=info msg="Error while creating filesystem xfs on device docker-8:3-102972296-base: exit status 1" storage-driver=devicemapper
Mar 28 00:04:44 localhost.localdomain dockerd[15804]: time="2021-03-28T00:04:44.028169215+08:00" level=error msg="[graphdriver] prior storage driver devicemapper failed: exit status 1"
Mar 28 00:04:44 localhost.localdomain dockerd[15804]: failed to start daemon: error initializing graphdriver: exit status 1
Mar 28 00:04:44 localhost.localdomain systemd[1]: docker.service: main process exited, code=exited, status=1/FAILURE
Mar 28 00:04:44 localhost.localdomain systemd[1]: Failed to start Docker Application Container Engine.

启动错误2：关闭防火墙后，启动正常

Mar 28 00:11:21 localhost.localdomain dockerd[16827]: time="2021-03-28T00:11:21.353676471+08:00" level=info msg="Starting up"
Mar 28 00:11:21 localhost.localdomain dockerd[16827]: time="2021-03-28T00:11:21.356316209+08:00" level=info msg="parsed scheme: \"unix\"" module=grpc
Mar 28 00:11:21 localhost.localdomain dockerd[16827]: time="2021-03-28T00:11:21.356331851+08:00" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc
Mar 28 00:11:21 localhost.localdomain dockerd[16827]: time="2021-03-28T00:11:21.356355606+08:00" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///run/containerd/containerd.sock  <nil> 0 <nil>}] <nil> <nil>}" module=
Mar 28 00:11:21 localhost.localdomain dockerd[16827]: time="2021-03-28T00:11:21.356368901+08:00" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc
Mar 28 00:11:21 localhost.localdomain dockerd[16827]: time="2021-03-28T00:11:21.360890299+08:00" level=info msg="parsed scheme: \"unix\"" module=grpc
Mar 28 00:11:21 localhost.localdomain dockerd[16827]: time="2021-03-28T00:11:21.360910461+08:00" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc
Mar 28 00:11:21 localhost.localdomain dockerd[16827]: time="2021-03-28T00:11:21.360937384+08:00" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///run/containerd/containerd.sock  <nil> 0 <nil>}] <nil> <nil>}" module=
Mar 28 00:11:21 localhost.localdomain dockerd[16827]: time="2021-03-28T00:11:21.360950330+08:00" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc
Mar 28 00:11:21 localhost.localdomain dockerd[16827]: time="2021-03-28T00:11:21.438344454+08:00" level=warning msg="Usage of loopback devices is strongly discouraged for production use. Please use `--storage-opt dm.thinpooldev` or use
Mar 28 00:11:21 localhost.localdomain dockerd[16827]: time="2021-03-28T00:11:21.451448783+08:00" level=warning msg="Base device already exists and has filesystem xfs on it. User specified filesystem  will be ignored." storage-driver=d
Mar 28 00:11:21 localhost.localdomain dockerd[16827]: time="2021-03-28T00:11:21.457425106+08:00" level=info msg="[graphdriver] using prior storage driver: devicemapper"
Mar 28 00:11:21 localhost.localdomain dockerd[16827]: time="2021-03-28T00:11:21.457445318+08:00" level=warning msg="[graphdriver] WARNING: the devicemapper storage-driver is deprecated, and will be removed in a future release"
Mar 28 00:11:21 localhost.localdomain dockerd[16827]: time="2021-03-28T00:11:21.464967636+08:00" level=warning msg="Unable to find pids cgroup in mounts"
Mar 28 00:11:21 localhost.localdomain dockerd[16827]: time="2021-03-28T00:11:21.465155371+08:00" level=info msg="Loading containers: start."
Mar 28 00:11:21 localhost.localdomain firewalld[875]: 2021-03-28 00:11:21 ERROR: INVALID_TYPE: structure size mismatch 16 != 13
Mar 28 00:11:21 localhost.localdomain firewalld[875]: 2021-03-28 00:11:21 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -C FORWARD -j DOCKER-ISOLATION' failed: iptables v1.4.21: Couldn't load target `DOCKER-ISOLATION':No such file 
                                                      
                                                      Try `iptables -h' or 'iptables --help' for more information.
Mar 28 00:11:21 localhost.localdomain firewalld[875]: 2021-03-28 00:11:21 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -D PREROUTING -m addrtype --dst-type LOCAL -j DOCKER' failed: iptables: No chain/target/match by that name.
Mar 28 00:11:21 localhost.localdomain firewalld[875]: 2021-03-28 00:11:21 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -D OUTPUT -m addrtype --dst-type LOCAL ! --dst 127.0.0.0/8 -j DOCKER' failed: iptables: No chain/target/match by t
Mar 28 00:11:21 localhost.localdomain firewalld[875]: 2021-03-28 00:11:21 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -D OUTPUT -m addrtype --dst-type LOCAL -j DOCKER' failed: iptables: No chain/target/match by that name.
Mar 28 00:11:21 localhost.localdomain firewalld[875]: 2021-03-28 00:11:21 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -D PREROUTING' failed: iptables: Bad rule (does a matching rule exist in that chain?).
Mar 28 00:11:21 localhost.localdomain firewalld[875]: 2021-03-28 00:11:21 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -D OUTPUT' failed: iptables: Bad rule (does a matching rule exist in that chain?).
Mar 28 00:11:21 localhost.localdomain firewalld[875]: 2021-03-28 00:11:21 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -F DOCKER-ISOLATION' failed: iptables: No chain/target/match by that name.
Mar 28 00:11:21 localhost.localdomain firewalld[875]: 2021-03-28 00:11:21 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -X DOCKER-ISOLATION' failed: iptables: No chain/target/match by that name.
Mar 28 00:11:21 localhost.localdomain firewalld[875]: 2021-03-28 00:11:21 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -n -L DOCKER' failed: iptables: No chain/target/match by that name.
Mar 28 00:11:21 localhost.localdomain firewalld[875]: 2021-03-28 00:11:21 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -n -L DOCKER' failed: iptables: No chain/target/match by that name.
Mar 28 00:11:21 localhost.localdomain firewalld[875]: 2021-03-28 00:11:21 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -n -L DOCKER-ISOLATION-STAGE-1' failed: iptables: No chain/target/match by that name.
Mar 28 00:11:21 localhost.localdomain firewalld[875]: 2021-03-28 00:11:21 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -n -L DOCKER-ISOLATION-STAGE-2' failed: iptables: No chain/target/match by that name.
Mar 28 00:11:21 localhost.localdomain firewalld[875]: 2021-03-28 00:11:21 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -C DOCKER-ISOLATION-STAGE-1 -j RETURN' failed: iptables: Bad rule (does a matching rule exist in that chain?).
Mar 28 00:11:21 localhost.localdomain firewalld[875]: 2021-03-28 00:11:21 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -C DOCKER-ISOLATION-STAGE-2 -j RETURN' failed: iptables: Bad rule (does a matching rule exist in that chain?).
Mar 28 00:11:21 localhost.localdomain dockerd[16827]: time="2021-03-28T00:11:21.600902894+08:00" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred
Mar 28 00:11:21 localhost.localdomain firewalld[875]: 2021-03-28 00:11:21 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -C DOCKER -i docker0 -j RETURN' failed: iptables: Bad rule (does a matching rule exist in that chain?).
Mar 28 00:11:21 localhost.localdomain firewalld[875]: 2021-03-28 00:11:21 ERROR: COMMAND_FAILED: '/sbin/iptables -D FORWARD -i docker0 -o docker0 -j DROP' failed: iptables: Bad rule (does a matching rule exist in that chain?).
Mar 28 00:11:21 localhost.localdomain firewalld[875]: 2021-03-28 00:11:21 ERROR: INVALID_ZONE: docker
Mar 28 00:11:21 localhost.localdomain dockerd[16827]: time="2021-03-28T00:11:21.625370875+08:00" level=warning msg="unmountAndDeactivate: open /var/lib/docker/devicemapper/mnt: no such file or directory" storage-driver=devicemapper
Mar 28 00:11:21 localhost.localdomain dockerd[16827]: failed to start daemon: Error initializing network controller: Error creating default "bridge" network: Failed to program NAT chain: INVALID_ZONE: docker