centos7 docker配置桥接，与容器网络互联

环境：

[root@localhost ~]# cat /etc/redhat-release 
CentOS Linux release 7.7.1908 (Core)

[root@localhost ~]# uname -r
3.10.0-1062.el7.x86_64

[root@localhost ~]# ifconfig 
ens33: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.1.111  netmask 255.255.255.0  broadcast 192.168.1.255
        inet6 fe80::13c3:5f21:11b7:51c5  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:bf:81:71  txqueuelen 1000  (Ethernet)
        RX packets 80  bytes 9527 (9.3 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 90  bytes 12443 (12.1 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

安装配置

执行下面命令，可以直接放在脚本中运行，这里的网卡是ens33

#!/bin/bash
#by auth toyix
#2020年8月7日 11:51:54
#auto install config docker bridge 
##########################################
#安装基础环境
yum install docker* -y
yum install bridge-utils -y
systemctl start docker
systemctl stop docker
 
#停止及删除docker0网桥
ifconfig docker0 down
brctl delbr docker0
#查看网桥信息
brctl show
 
#改ens33网卡配置文件
cd /etc/sysconfig/network-scripts/
cat>ifcfg-ens33 <<-EOF 
	DEVICE=ens33
	BOOTPROTO=none
	NM_CONTROLLED=no
	ONBOOT=yes
	TYPE=Ethernet
	BRIDGE="br0"
	IPADDR=192.168.1.111
	NETMASK=255.255.255.0
	GATEWAY=192.168.1.1
	USERCTL=no
EOF

#创建桥接网卡br0配置文件
cat>ifcfg-br0 <<-EOF
	DEVICE="br0" 
	BOOTPROTO=none
	IPV6INIT=no
	NM_CONTROLLED=no
	ONBOOT=yes
	TYPE="Bridge"
	IPADDR=192.168.1.111
	NETMASK=255.255.255.0
	GATEWAY=192.168.1.1
	USERCTL=no
EOF

#docker启用br0设置
cat>/etc/sysconfig/docker-network <<-EOF
	# /etc/sysconfig/docker-network
	DOCKER_NETWORK_OPTIONS="-b=br0"
EOF

#备份DNS文件
cp /etc/resolv.conf{,.bak}
cat /etc/resolv.conf

#git下载pipework
git clone https://github.com/jpetazzo/pipework
\cp pipework/pipework /usr/local/bin/

#网络重启dns归还
/etc/init.d/network restart
\cp /etc/resolv.conf.bak /etc/resolv.conf

#启动docker服务，查看服务是否启动
systemctl start docker
ps -ef|grep docker

执行结果

Cloning into 'pipework'...
remote: Enumerating objects: 8, done.
remote: Counting objects: 100% (8/8), done.
remote: Compressing objects: 100% (6/6), done.
remote: Total 518 (delta 2), reused 5 (delta 2), pack-reused 510
Receiving objects: 100% (518/518), 182.72 KiB | 0 bytes/s, done.
Resolving deltas: 100% (272/272), done.
Restarting network (via systemctl):                        [  OK  ]
root      2104  2012  0 12:01 pts/0    00:00:00 sh autodockerbridge.sh
root      2962     1 10 12:02 ?        00:00:00 /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2 -b=br0
root      2969  2962  1 12:02 ?        00:00:00 /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
root      3068  2104  0 12:02 pts/0    00:00:00 grep docker

查看网络信息

[root@localhost src]# ifconfig 
br0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.1.111  netmask 255.255.255.0  broadcast 192.168.1.255
        inet6 fe80::20c:29ff:febf:8171  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:bf:81:71  txqueuelen 1000  (Ethernet)
        RX packets 54329  bytes 1219558719 (1.1 GiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 58619  bytes 4603307 (4.3 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

docker0: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500
        inet 172.17.0.1  netmask 255.255.0.0  broadcast 0.0.0.0
        ether 02:42:f3:14:02:7d  txqueuelen 0  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

ens33: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet6 fe80::20c:29ff:febf:8171  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:bf:81:71  txqueuelen 1000  (Ethernet)
        RX packets 924985  bytes 1353945527 (1.2 GiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 77928  bytes 6473759 (6.1 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 4  bytes 344 (344.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 4  bytes 344 (344.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

创建容器测试

先导入一个centos7 镜像 - centos7 ssh

[root@localhost src]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
[root@localhost src]# 
[root@localhost src]# docker load <centos73_sshOK.tar 
34e7b85d83e4: Loading layer [==================================================>] 199.9 MB/199.9 MB
0d1585b29470: Loading layer [==================================================>] 171.6 MB/171.6 MB
f8c414e271fb: Loading layer [==================================================>] 2.048 kB/2.048 kB
7794e20d52b7: Loading layer [==================================================>] 3.072 kB/3.072 kB
596e51307fcb: Loading layer [==================================================>] 2.048 kB/2.048 kB
cf4eb7184a66: Loading layer [==================================================>] 91.05 MB/91.05 MB
668603ce0b52: Loading layer [==================================================>] 129.9 MB/129.9 MB
06b53c6c558b: Loading layer [==================================================>] 120.2 MB/120.2 MB
1e08aef36d2c: Loading layer [==================================================>] 120.1 MB/120.1 MB
e5ae92625a0e: Loading layer [==================================================>] 120.5 MB/120.5 MB
c2e6c38e2e62: Loading layer [==================================================>] 120.3 MB/120.3 MB
83bc22ec0afa: Loading layer [==================================================>] 140.4 MB/140.4 MB
6d9fb7ba9909: Loading layer [==================================================>]  2.56 kB/2.56 kB
aa8d7a6a7075: Loading layer [==================================================>] 6.144 kB/6.144 kB
9b3bb5b16837: Loading layer [==================================================>] 3.072 kB/3.072 kB
Loaded image ID: sha256:0cb9685cd88518d16b567b69d00424d276e884c7ec0ac75ccd9340f8917f92d2
[root@localhost src]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
<none>              <none>              0cb9685cd885        2 days ago          1.2 GB
改个镜像名称
[root@localhost src]# docker tag 0cb9685cd885 centos7_ssh:v7
[root@localhost src]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
centos7_ssh         v7                  0cb9685cd885        2 days ago          1.2 GB

创建容器

[root@localhost src]# docker run -itd --privileged=true --net=none --name=bigdata_192.168.1.51 --restart=always centos_ssh:v7 /usr/sbin/init
3b45aff33f3a5c0b7dcb0f2cb3e5ca494b751fe6d0462a717096035f2abb8015
改IP
[root@localhost src]# pipework br0 bigdata_192.168.1.51 192.168.1.51/24@192.168.1.111

在局域网中找一台机器连接测试

[root@localhost ~]# ifconfig ens33
ens33: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.1.112  netmask 255.255.255.0  broadcast 192.168.1.255
        inet6 fe80::d469:1174:96ea:fb70  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:5d:3f:32  txqueuelen 1000  (Ethernet)
        RX packets 3577007  bytes 4379177482 (4.0 GiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 4620226  bytes 10030369535 (9.3 GiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
连接测试
[root@localhost ~]# ssh root@192.168.1.51      
The authenticity of host '192.168.1.51 (192.168.1.51)' can't be established.
ECDSA key fingerprint is SHA256:n265ygRGIyut9OirZ+wtwmCjP1NKZoXBvWtCaJQlhFk.
ECDSA key fingerprint is MD5:d7:83:5f:3b:24:73:0d:b5:4e:d3:2f:91:08:06:cd:82.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.1.51' (ECDSA) to the list of known hosts.
root@192.168.1.51's password: 
Last login: Fri Aug  7 04:28:34 2020 from 192.168.1.103
[root@3b45aff33f3a ~]# ifconfig 
eth1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.1.51  netmask 255.255.255.0  broadcast 192.168.1.255
        inet6 fe80::741e:24ff:fe0a:affe  prefixlen 64  scopeid 0x20<link>
        ether 76:1e:24:0a:af:fe  txqueuelen 1000  (Ethernet)
        RX packets 215  bytes 24986 (24.4 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 99  bytes 19139 (18.6 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

注：

连接时，如果提示

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @
WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT IS
POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! Someone could be
eavesdropping on you right now (man-in-the-middle attack)! It is also
possible that a host key has just been changed. The fingerprint for
the ECDSA key sent by the remote host is
SHA256:n265ygRGIyut9OirZ+wtwmCjP1NKZoXBvWtCaJQlhFk. Please contact
your system administrator. Add correct host key in
/root/.ssh/known_hosts to get rid of this message. Offending ECDSA key
in /root/.ssh/known_hosts:6 ECDSA host key for 192.168.1.51 has
changed and you have requested strict checking. Host key verification
failed.

进入/root/.ssh/known_hosts删除对应IP即可
-------------------------end