docker swram portainer

下载 docker-18.03.1-ce.tgz

tar xf docker-18.03.1-ce.tgz

cp docker/* /usr/bin/

vim /etc/systemd/system/docker.service

[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network-online.target firewalld.service
Wants=network-online.target
[Service]
Type=notify
# the default is not to use systemd for cgroups because the delegate issues still
# exists and systemd currently does not support the cgroup feature set required
# for containers run by docker
ExecStart=/usr/bin/dockerd --graph /srv/docker
ExecReload=/bin/kill -s HUP $MAINPID
# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity
# Uncomment TasksMax if your systemd version supports it.
# Only systemd 226 and above support this version.
#TasksMax=infinity
TimeoutStartSec=0
# set delegate yes so that systemd does not reset the cgroups of docker containers
Delegate=yes
# kill only the docker process, not all processes in the cgroup
KillMode=process
# restart the docker process if it exits prematurely
Restart=on-failure
StartLimitBurst=3
StartLimitInterval=60s

[Install]
WantedBy=multi-user.target

chmod +x /etc/systemd/system/docker.service

systemctl daemon-reload

systemctl start docker

systemctl enable docker.service

systemctl status docker

docker -v

manager节点执行

docker swarm init --advertise-addr 192.168.1.100 --listen-addr 192.168.1.100:2377 

firewall-cmd --zone=public --add-port=2377/tcp --permanent

firewall-cmd --reload

worker节点执行

docker swarm join --token SWMTKN-1-x-x 192.168.1.100:2377

离线安装需要上传portainer镜像

docker load < portainer.latest.tar.gz

docker service create --name portainer --publish 9000:9000 --constraint 'node.role == manager' --mount type=bind,src=/var/run/docker.sock,dst=/var/run/docker.sock portainer/portainer -H unix:///var/run/docker.sock

firewall-cmd --zone=public --add-port=9000/tcp --permanent

firewall-cmd --reload

http://192.168.1.100:9000

搞定收工