二进制方式安装docker - Thu, Dec 26, 2019

二进制方式安装docker

• 1. 概述
• 2. 二进制docker
  • 2.1 二进制docker下载位置
  • 2.2 解压压缩包
  • 2.3 复制二进制文件到/user/bin下
• 3. 添加docker用户组
  • 3.1 添加用户组
  • 3.2 将当前用户添加到用户组
• 4. 添加docker和containerd服务
  • 4.1 docker守护进程
  • 4.2 docker socket
  • 4.3 容器守护进程
• 5. 添加开机启动

1. 概述

由于开发版是以linux内核的形式进行安装,所以系统内部没有apt,yum相关的包安装工具.软件需要以二进制的形式进行安装.

2. 二进制docker

2.1 二进制docker下载位置

https://download.docker.com/linux/static/stable/

2.2 解压压缩包

tar xzvf /path/to/<FILE>.tar.gz

2.3 复制二进制文件到/user/bin下

sudo cp docker/* /usr/bin/

3. 添加docker用户组

3.1 添加用户组

sudo groupadd docker

3.2 将当前用户添加到用户组

sudo usermod -aG docker $USER

4. 添加docker和containerd服务

4.1 docker守护进程

docker.service

[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
BindsTo=containerd.service
After=network-online.target firewalld.service containerd.service
Wants=network-online.target
Requires=docker.socket

[Service]
Type=notify
# the default is not to use systemd for cgroups because the delegate issues still
# exists and systemd currently does not support the cgroup feature set required
# for containers run by docker
ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
ExecReload=/bin/kill -s HUP $MAINPID
TimeoutSec=0
RestartSec=2
Restart=always

# Note that StartLimit* options were moved from "Service" to "Unit" in systemd 229.
# Both the old, and new location are accepted by systemd 229 and up, so using the old location
# to make them work for either version of systemd.
StartLimitBurst=3

# Note that StartLimitInterval was renamed to StartLimitIntervalSec in systemd 230.
# Both the old, and new name are accepted by systemd 230 and up, so using the old name to make
# this option work for either version of systemd.
StartLimitInterval=60s

# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity

# Comment TasksMax if your systemd version does not support it.
# Only systemd 226 and above support this option.
TasksMax=infinity

# set delegate yes so that systemd does not reset the cgroups of docker containers
Delegate=yes

# kill only the docker process, not all processes in the cgroup
KillMode=process

[Install]
WantedBy=multi-user.target

4.2 docker socket

docker.socket

[Unit]
Description=Docker Socket for the API
PartOf=docker.service

[Socket]
ListenStream=/var/run/docker.sock
SocketMode=0660
SocketUser=root
SocketGroup=docker

[Install]
WantedBy=sockets.target

4.3 容器守护进程

containerd.service

[Unit]
Description=containerd container runtime
Documentation=https://containerd.io
After=network.target

[Service]
ExecStartPre=-/sbin/modprobe overlay
ExecStart=/usr/bin/containerd
KillMode=process
Delegate=yes
LimitNOFILE=1048576
# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNPROC=infinity
LimitCORE=infinity
TasksMax=infinity

[Install]
WantedBy=multi-user.target

5. 添加开机启动

sudo systemctl enable containerd
sudo systemctl enable docker