离线安装 docker
一、下载二进制文件
a>从官网下载
https://download.docker.com/linux/static/stable/x86_64/
b>从我的网盘下载
[url=http://cdn.dimored.com/f/33339115-1421860553-b421e6?p=9840]docker-27.3.1.tgz[/url] (访问密码: 9840)
[root@hostname ~]# wget https://download.docker.com/linux/static/stable/x86_64/docker-27.3.1.tgz --2024-11-05 21:00:03-- https://download.docker.com/linux/static/stable/x86_64/docker-27.3.1.tgz Resolving download.docker.com (download.docker.com)... 3.163.218.12, 3.163.218.48, 3.163.218.52, ... Connecting to download.docker.com (download.docker.com)|3.163.218.12|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 75324256 (72M) [application/x-tar] Saving to: ‘docker-27.3.1.tgz’ docker-27.3.1.tgz 100%[=======================================================================================================>] 71.83M 93.9MB/s in 0.8s 2024-11-05 21:00:04 (93.9 MB/s) - ‘docker-27.3.1.tgz’ saved [75324256/75324256]
二、解压并复制文件
[root@hostname ~]# tar -xf docker-27.3.1.tgz
[root@hostname ~]# mv docker/* /usr/bin/
[root@hostname ~]# rm -rf docker
[root@hostname ~]# rm -rf docker-27.3.1.tgz
三、配置docker数据目录
mkdir /etc/docker
cat > /etc/docker/daemon.json<< EOF
{
"log-driver":"json-file",
"log-opts": {"max-size":"500m", "max-file":"3"},
"insecure-registries": ["regharbor.demo.cn"],
"data-root": "/data/docker",
"bip": "172.30.35.1/24"
}
EOF
如下配置来源于网络仅供参考:
网络优化参数
{
"log-driver": "json-file",
"log-opts": {
"max-size": "500m",
"max-file": "3"
},
"insecure-registries": ["regharbor.gaiaworks.cn"],
"data-root": "/data/docker",
"bip": "172.30.35.1/24",
// 网络相关优化
"mtu": 1500,
"default-address-pools": [
{
"base": "172.30.0.0/16",
"size": 24
}
],
"icc": false,
// DNS配置
"dns": ["8.8.8.8", "8.8.4.4"],
// 存储驱动优化
"storage-driver": "overlay2",
"storage-opts": ["overlay2.override_kernel_check=true"]
}
参数说明
网络安全:
icc: false - 禁用容器间通信,增加安全性
default-address-pools - 定义新建网络的IP地址池范围
mtu - 设置最大传输单元大小,优化网络性能
性能优化:
storage-driver: overlay2 - 使用性能更好的存储驱动
dns - 配置可靠的DNS服务器,提高域名解析速度
注意事项
修改配置后需要重启 Docker 服务才能生效
在修改 bip 和网络相关配置时,需要确保:
不与现有网络冲突
不与 VPN 网段冲突
预留足够的 IP 地址空间
生产环境建议启用日志轮转和大小限制,防止日志占用过多磁盘空间
四、制作systemctl 启动文件
cat >>/etc/systemd/system/docker.service<<EOF
[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network-online.target firewalld.service
Wants=network-online.target
[Service]
Type=notify
ExecStart=
ExecStart=/usr/bin/dockerd
ExecReload=/bin/kill -s HUP $MAINPID
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity
TimeoutStartSec=0
Delegate=yes
KillMode=process
Restart=on-failure
StartLimitBurst=3
StartLimitInterval=60s
[Install]
WantedBy=multi-user.target
EOF
[root@hostname ~]# systemctl start docker #启动
[root@hostname ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
[root@hostname ~]# systemctl enable docker #配置开机启动
Created symlink /etc/systemd/system/multi-user.target.wants/docker.service → /etc/systemd/system/docker.service.

浙公网安备 33010602011771号