一、优化系统
modprobe br_netfilter
cat >> /etc/sysctl.conf << EOF
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
EOF
sysctl -p
二、二进制安装docker
install_docker.sh
#!/bin/bash
#docker版本
#version=19.03.9
version=20.10.11
#docker安装路径
install_path=/opt
#下载docker二进制安装文件
if [ ! -f "docker-${version}.tgz" ]; then
#wget https://download.docker.com/linux/static/stable/$(uname -i)/docker-${version}.tgz
curl https://download.docker.com/linux/static/stable/$(uname -i)/docker-${version}.tgz -o docker-${version}.tgz
fi
#解压到指定的安装目录
tar zxvf docker-${version}.tgz -C ${install_path}
#把二进制文件link到/usr/bin下
ln -s ${install_path}/docker/* /usr/bin/
#创建docker.service自启动脚本
cat > /etc/systemd/system/docker.service << EOF
[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network-online.target firewalld.service
Wants=network-online.target
[Service]
Type=notify
ExecStart=/usr/bin/dockerd
ExecReload=/bin/kill -s HUP $MAINPID
LimitNOFILE=infinity
LimitNPROC=infinity
TimeoutStartSec=0
Delegate=yes
KillMode=process
Restart=on-failure
StartLimitBurst=3
StartLimitInterval=60s
[Install]
WantedBy=multi-user.target
EOF
#创建docker配置文件
if [ ! -d "/etc/docker" ]; then
mkdir /etc/docker
fi
cat > /etc/docker/daemon.json <<EOF
{
"bip":"172.19.0.1/16",
"registry-mirrors": ["https://dockerhub.azk8s.cn", "https://docker.mirrors.ustc.edu.cn"],
"insecure-registries": ["127.0.0.1/8"],
"max-concurrent-downloads": 10,
"log-driver": "json-file",
"log-level": "warn",
"log-opts": {
"max-size": "10m",
"max-file": "3"
},
"data-root": "/var/lib/docker"
}
EOF
#开机自启动
systemctl daemon-reload
systemctl enable docker
systemctl start docker
#docker_compose
docker_composer_version=v2.1.1
curl -L "https://github.com/docker/compose/releases/download/$docker_composer_version/docker-compose-$(uname -s)-$(uname -m)" -o /usr/bin/docker-compose
chmod +x /usr/bin/docker-compose
#验证
docker-compose version
arm64版本1.22下载地址
wget https://github.com/ubiquiti/docker-compose-aarch64/releases/download/1.22.0/docker-compose-Linux-aarch64
arm64版本1.23下载地址
https://gitee.com/hknarutofk/kubeasz-arm64/raw/master/etc/ansible/bin/docker-compose
arm64版本2.1.1下载地址
wget https://github.com/docker/compose/releases/download/v2.1.1/docker-compose-linux-aarch64