docker(一):安装

一.升级内核
3.8以上的kernel对docker支持的更好,先升级kernel,升级到4.4;
内核安装参考:内核升级攻略
注意:make menuconfig这一步,
1)General setup->[*] enable deprecated sysfs features to support old userspace tools;
2)General Setup->Control Group Support->Memory Resource Controller for Control Groups, Control Group Support下的选项可以全选;
3)networking support → networking options → network packet filtering framework(Netfilter)下的:
Corenetfilter configuration->Netfilter connection tracking support
Corenetfilter configuration->Netfilter Xtables support (required for ip_tables)
IP: Netfilter Configuration->IPv4 connection tracking support (require for NAT)
IP: Netfilter Configuration->IP tables support (required for filtering/masq/NAT)
IP: Netfilter Configuration->MASQUERADE target support
IP: Netfilter Configuration->REDIRECT target support
IP: Netfilter Configuration->iptables NAT support

升级后还是有问题:
没有DOCKER target导致的问题
linux 2.6 OK正常,有DOCKER target:
iptables -t nat –list
结果:
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
DOCKER all – anywhere anywhere ADDRTYPE match dst-type LOCAL
DOCKER all – anywhere anywhere ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE tcp – 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535
MASQUERADE udp – 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535
MASQUERADE all – 192.168.122.0/24 !192.168.122.0/24
MASQUERADE all – 172.17.0.0/16 anywhere
MASQUERADE all – 172.17.0.0/16 anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
DOCKER all – anywhere !loopback/8 ADDRTYPE match dst-type LOCAL
DOCKER all – anywhere !loopback/8 ADDRTYPE match dst-type LOCAL

Chain DOCKER (4 references)
target prot opt source destination

所以,暂时先用2.6的内核.

二.安装

yum install docker-io

三 .下载镜像
运行docker pull centos可以直接总docker官网下载
我自己电脑上下载失败了.
参考:解决docker镜像无法下载的问题
使用命令docker pull daocloud.io/library/centos:latest下载了centos镜像

四.启动容器

#以交互方式启动容器
docker run -i -t centos /bin/bash