2022-04-25 22:28:41 +08:00
## Install
#### 1.设置存储库
##### a. 更新APT程序包索引并安装程序包, 以允许APT通过HTTPS使用存储库:
```shell
$ sudo apt-get update
$ sudo apt-get install \
ca-certificates \
curl \
gnupg \
lsb-release
```
##### b.添加Docker官方GPG密钥
```shell
$ curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
```
##### c.使用以下命令设置稳定的存储库。要添加夜间或测试存储库,请在下面命令中的稳定一词之后添加夜间或测试(或两者)一词。了解夜间频道和测试频道。
```shell
$ echo \
"deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/ubuntu \
$(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
```
#### 2.安装Docker
##### a.更新apt包索引, 安装最新版本的Docker Engine和Containerd, 或进入下一步安装具体版本
```shell
$ sudo apt-get update
$ sudo apt-get install docker-ce docker-ce-cli containerd.io
```
>如果您启用了多个 Docker 存储库,则在 apt-get install 或 apt-get update 命令中未指定版本的情况下安装或更新始终会安装可能的最高版本,这可能不适合您的稳定性需求。
##### b.要安装特定版本的 Docker Engine, 请在 repo 中列出可用版本,然后选择并安装:
列出您的存储库中可用的版本:
```shell
$ apt-cache madison docker-ce
docker-ce | 5:18.09.1~3-0~ubuntu-xenial | https://download.docker.com/linux/ubuntu xenial/stable amd64 Packages
docker-ce | 5:18.09.0~3-0~ubuntu-xenial | https://download.docker.com/linux/ubuntu xenial/stable amd64 Packages
docker-ce | 18.06.1~ce~3-0~ubuntu | https://download.docker.com/linux/ubuntu xenial/stable amd64 Packages
docker-ce | 18.06.0~ce~3-0~ubuntu | https://download.docker.com/linux/ubuntu xenial/stable amd64 Packages
```
使用第二列中的版本字符串安装特定版本,例如 5:18.09.1~3-0~ubuntu-xenial
```shell
$ sudo apt-get install docker-ce=< VERSION_STRING > docker-ce-cli=< VERSION_STRING > containerd.io
```
##### 通过运行 hello-world 映像来验证 Docker 引擎是否已正确安装。
```shell
$ sudo docker run hello-world
```
>此命令下载测试映像并在容器中运行它。当容器运行时,它会打印一条消息并退出。
## Upgrade
要升级 Docker Engine, 首先运行 sudo apt-get update, 然后按照安装说明(Intall的第二节第b段),选择要安装的新版本。
## Uninstall
#### 1.卸载Docker Engine、CLI和Containerd包
**purge 命令会同时清除软件包和软件的配置文件 谨慎操作**
```shell
$ sudo apt-get purge docker-ce docker-ce-cli containerd.io
```
#### 2.主机上的映像、容器、卷或自定义配置文件不会自动删除。要删除所有映像、容器和卷,请执行以下操作(谨慎操作)
```shell
$ sudo rm -rf /var/lib/docker
$ sudo rm -rf /var/lib/containerd
```
## Expand
#### 1.配置镜像加速器
2023-10-09 23:12:04 +08:00
下面列出国内常用的加速站点,排名不分先后,总体来说阿里云速度较稳定。
docker中国区官方镜像加速:
[https://registry.docker-cn.com ](https://link.zhihu.com/?target=https%3A//registry.docker-cn.com/ )
网易镜像加速:
[http://hub-mirror.c.163.com ](https://link.zhihu.com/?target=http%3A//hub-mirror.c.163.com/ )
中国科技大学镜像加速:
[https://docker.mirrors.ustc.edu.cn ](https://link.zhihu.com/?target=https%3A//docker.mirrors.ustc.edu.cn/ )
腾讯云镜像加速:
[https://mirror.ccs.tencentyun.com ](https://link.zhihu.com/?target=https%3A//mirror.ccs.tencentyun.com/ )
阿里云镜像加速:
[https://ung2thfc.mirror.aliyuncs.com ](https://link.zhihu.com/?target=https%3A//ung2thfc.mirror.aliyuncs.com/ )
2022-04-25 22:28:41 +08:00
docker官方镜像仓库国内访问较慢, 我们需要设置国内镜像服务:
```bash
sudo mkdir -p /etc/docker
sudo tee /etc/docker/daemon.json < < - ' EOF '
2023-10-09 23:12:04 +08:00
{"registry-mirrors": ["https://registry.docker-cn.com"]}
2022-04-25 22:28:41 +08:00
EOF
sudo systemctl daemon-reload
sudo systemctl restart docker
```
#### 2.查看当前安装版本和可安装版本
apt-cache policy 列出软件包可下载的版本 和当前安装版本
```bash
$ apt-cache policy docker-ce
docker-ce:
Installed: 5:20.10.14~3-0~ubuntu-focal #已安装版本
Candidate: 5:20.10.14~3-0~ubuntu-focal #候选版本 (最新版本)
Version table: #可安装版本的列表
** * 5:20.10.14~3-0~ubuntu-focal 500
500 https://download.docker.com/linux/ubuntu focal/stable amd64 Packages
100 /var/lib/dpkg/status
5:20.10.13~3-0~ubuntu-focal 500
500 https://download.docker.com/linux/ubuntu focal/stable amd64 Packages
5:20.10.12~3-0~ubuntu-focal 500
500 https://download.docker.com/linux/ubuntu focal/stable amd64 Packages
5:20.10.11~3-0~ubuntu-focal 500
500 https://download.docker.com/linux/ubuntu focal/stable amd64 Packages
5:20.10.10~3-0~ubuntu-focal 500
500 https://download.docker.com/linux/ubuntu focal/stable amd64 Packages
```
#### 3.添加用户到docker组中
默认情况下,`docker`命令只能由 **root** 用户或由 **docker** 组中的用户运行, docker 组用户是在Docker安装过程中自动创建的。
如果不想用 sudo 来执行 docker 命令,那么我们只需要把对应的用户添加到 docker 组中即可。
```bash
sudo usermod -aG docker ${USER}
```
使用新组成员身份执行命令, 需要注销后重新登录, 或使用su来切换身份。
```bash
su - ${USER}
```
我们可以通过`id`这个命令来确认刚刚添加的用户是否已经在 docker 组中:
```bash
$ id -nG
#输出
ds adm cdrom sudo dip plugdev lxd docker
```
## ERROR
#### 1.解决docker服务无法重启, 报错loaded (/usr/lib/systemd/system/docker.service; enabled; vendor preset: disabled)
执行docker服务重启systemctl restart docker.service命令后, 服务未正常启动, 查看docker服务的状态, 报loaded (/usr/lib/systemd/system/docker.service; enabled; vendor preset: disabled)。
```bash
[root@localhost ~]# systemctl start docker.service
Job for docker.service failed because start of the service was attempted too often. See "systemctl status docker.service" and "journalctl -xe" for details.
To force a start use "systemctl reset-failed docker.service" followed by "systemctl start docker.service" again.
[root@localhost ~]# systemctl status docker.service
● docker.service - Docker Application Container Engine
Loaded: loaded (/usr/lib/systemd/system/docker.service; enabled; vendor preset: disabled)
Active: failed (Result: start-limit) since Mo 2020-06-08 10:59:41 CST; 1min 44s ago
Docs: https://docs.docker.com
Process: 12296 ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock (code=exited, status=1/FAILURE)
Main PID: 12296 (code=exited, status=1/FAILURE)
Jun 08 10:59:41 localhost.localdomain systemd[1]: start request repeated too quickly for docker.service
Jun 08 10:59:41 localhost.localdomain systemd[1]: Failed to start Docker Application Container Engine.
Jun 08 10:59:41 localhost.localdomain systemd[1]: Unit docker.service entered failed state.
Jun 08 10:59:41 localhost.localdomain systemd[1]: docker.service failed.
Jun 08 11:00:06 localhost.localdomain systemd[1]: start request repeated too quickly for docker.service
Jun 08 11:00:06 localhost.localdomain systemd[1]: Failed to start Docker Application Container Engine.
Jun 08 11:00:06 localhost.localdomain systemd[1]: docker.service failed.
Jun 08 11:00:25 localhost.localdomain systemd[1]: start request repeated too quickly for docker.service
Jun 08 11:00:25 localhost.localdomain systemd[1]: Failed to start Docker Application Container Engine.
Jun 08 11:00:25 localhost.localdomain systemd[1]: docker.service failed.
```
##### a.检查/etc/docker/daemon.json文件配置是否正确。
```bash
[root@localhost ~]# cat /etc/docker/daemon.json
{
"insecure-registries":["11.1.14.145:8080"],
"hosts": ["tcp://127.0.0.1:2375", "unix:///var/run/docker.sock"]
}
```
##### b.检查/usr/lib/systemd/system/docker.service文件是否正常。
```bash
[root@localhost ~]# cat /usr/lib/systemd/system/docker.service
[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network-online.target firewalld.service
Wants=network-online.target
[Service]
Type=notify
# the default is not to use systemd for cgroups because the delegate issues still
# exists and systemd currently does not support the cgroup feature set required
# for containers run by docker
ExecStart=/usr/bin/dockerd
ExecReload=/bin/kill -s HUP $MAINPID
# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity
# Uncomment TasksMax if your systemd version supports it.
# Only systemd 226 and above support this version.
#TasksMax=infinity
TimeoutStartSec=0
# set delegate yes so that systemd does not reset the cgroups of docker containers
Delegate=yes
# kill only the docker process, not all processes in the cgroup
KillMode=process
# restart the docker process if it exits prematurely
Restart=on-failure
StartLimitBurst=3
StartLimitInterval=60s
[Install]
WantedBy=multi-user.target
```
**参考:**
[docker官方ubuntu安装文档 ](https://docs.docker.com/engine/install/ubuntu/#install-using-the-repository )
[阿里云镜像加速器配置 ](https://cr.console.aliyun.com/cn-hangzhou/instances/mirrors )
[docker扩展配置 ](https://kalacloud.com/blog/how-to-install-and-use-docker-on-ubuntu )
[docker 启动错误 ](https://www.jianshu.com/p/7d38cd3bf387 )