docker基础操作

安装Docker

安装依赖包

iptables -F
setenforce 0
yum install -y yum-utils device-mapper-persistent-data lvm2 		#在线源安装

#yum-utils提供了yum-config-manager
#Device Mapper 存储驱动程序需要device-mapper-persistent-data和lvm2
#Device Mapper是Linux内核中支持逻辑卷管理的通用设备映射机制，它为实现用于存储资源管理的块设备驱动提供了一个高度模块化的内核架构。

设置阿里云镜像源

yum-config-manager --add-repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

安装Docker-CE

yum install -y docker-ce
vim /etc/selinux/config
SELINUX=disabled
[root@localhost etc]# cd /etc/docker
-bash: cd: /etc/docker: 没有那个文件或目录
[root@localhost etc]# systemctl start docker.service 
[root@localhost etc]# systemctl enable docker.service
[root@localhost etc]# cd /etc/docker/
[root@localhost docker]# ls
key.json
[root@localhost docker]# vim key.json 		#对接docker共有仓库的密钥
#key.json中的数据格式是以键值对key:value的json格式
{"crv":"P-256","d":"rQw9EAqWUorGAIz6Kp0MpXIjd2EE1L7ugpN7WYllEL4","kid":"2LIM:GQWG:XXHM:LW4K:CCYM:MAJJ:BAG7:Q2NP:RN7A:EBJX:FGVJ:YT46","kty":"EC","x":"cLZ5e0UHgJ63_00sqSP7G9xmG-EJC2tuqO-wVRoJTlY","y":"KlA8UesRJBWpzKvM7Cx1IMHzvJgGfj7vi9KAQ-r1UbA"}

[root@localhost docker]# ifconfig		#查看网卡多出一个docker0网卡
docker0: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500
        inet 172.17.0.1  netmask 255.255.0.0  broadcast 172.17.255.255
        ether 02:42:d3:aa:41:77  txqueuelen 0  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

镜像加速

tee /etc/docker/daemon.json <<-'EOF'
{
  "registry-mirrors": ["https://xxxxxxxx.mirror.aliyuncs.com"]
}
EOF
systemctl daemon-reload
systemctl restart docker

网络优化

vim /etc/sysctl.conf
net.ipv4.ip_forward=1

sysctl -p
systemctl restart network
systemctl restart docker