码启.未来

Appearance

Docker ​

在 Debian 12 上安装 Docker ​

Docker 环境准备 ​

系统配置修改 （按需）配置 sudoers 权限:

shell
# 切换到root账号

su -

# 安装必要组件

apt-get install sudo curl iptables vim

# 添加 appuser 账号 sudo 权限
visudo /etc/sudoers


# 添加以下内容

appuser ALL=(ALL:ALL) ALL

# Ctrl+O 保存，然后Ctrl+X 退出

Docker 引擎部署

  • 修改APT源(如果安装OS时选择的是国外的源则需要修改)
shell
sudo cp /etc/apt/sources.list /etc/apt/sources.list.bak
sudo rm /etc/apt/sources.list

sudo cat <<EOF >/etc/apt/sources.list
deb https://mirrors.aliyun.com/debian/ bookworm main non-free contrib
deb-src https://mirrors.aliyun.com/debian/ bookworm main non-free contrib
deb https://mirrors.aliyun.com/debian-security/ bookworm-security main
deb-src https://mirrors.aliyun.com/debian-security/ bookworm-security main
deb https://mirrors.aliyun.com/debian/ bookworm-updates main non-free contrib
deb-src https://mirrors.aliyun.com/debian/ bookworm-updates main non-free contrib
deb https://mirrors.aliyun.com/debian/ bookworm-backports main non-free contrib
deb-src https://mirrors.aliyun.com/debian/ bookworm-backports main non-free contrib

EOF

添加Docker源:

shell
sudo install -m 0755 -d /etc/apt/keyrings
sudo curl -fsSL https://mirrors.aliyun.com/docker-ce/linux/debian/gpg -o /etc/apt/keyrings/docker.asc
sudo chmod a+r /etc/apt/keyrings/docker.asc


sudo echo \
  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://mirrors.aliyun.com/docker-ce/linux/debian \
  $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | \
  sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
sudo apt-get update

移除已存在的 Docker 引擎:

shell
sudo su  # 获取root 权限
for pkg in docker.io docker-doc docker-compose podman-docker containerd runc; do sudo apt-get remove $pkg; done

安装 Docker 引擎：

shell
sudo apt-get install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

确认Docker部署路径:

shell
sudo df -h
# 如果/var/lib路径磁盘大小不够，使用命令建立软链接
sudo ln -s /dockerhomexxxx /var/lib/

配置Docker 网络子网和Docker Registry备用源:

shell
sudo mkdir -p /etc/docker
sudo tee /etc/docker/daemon.json <<EOF
{
  "bip": "10.1.0.1/25",
  "default-address-pools":
  [
    {"base":"10.1.0.0/24","size":25}
  ],
  "registry-mirrors": [
    "https://cr.laoyou.ip-ddns.com",
    "https://a.ussh.net",
    "https://hub.littlediary.cn",
    "https://hub.crdz.gq",
    "https://docker.kejilion.pro",
    "https://registry.dockermirror.com",
    "https://hub.rat.dev",
    "https://atomhub.openatom.cn",
    "https://docker.1ms.run",
    "https://dytt.online",
    "https://func.ink",
    "https://lispy.org",
    "https://docker.xiaogenban1993.com"
  ]
}
EOF
sudo systemctl daemon-reload
sudo systemctl restart docker

启动 Docker 引擎:

shell
sudo systemctl start docker

# 配置 Docker 引擎自启动
sudo systemctl enable docker

部署 Docker 管理 UI ​

下载Portainer YAML

shell
cd /tmp
curl -L https://downloads.portainer.io/ce-lts/portainer-agent-stack.yml -o portainer-agent-stack.yml

如果无法下载，也可以手动编辑yaml后上传

yaml
version: '3.2'

services:
  agent:
    image: portainer/agent:lts
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - /var/lib/docker/volumes:/var/lib/docker/volumes
    networks:
      - agent_network
    deploy:
      mode: global
      placement:
        constraints: [node.platform.os == linux]

  portainer:
    image: portainer/portainer-ce:lts
    command: -H tcp://tasks.agent:9001 --tlsskipverify
    ports:
      - "9443:9443"
      - "9000:9000"
      - "8000:8000"
    volumes:
      - portainer_data:/data
    networks:
      - agent_network
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints: [node.role == manager]

networks:
  agent_network:
    driver: overlay
    attachable: true

volumes:
  portainer_data:

OR

yaml
version: '3.2'

services:
  agent:
    image: registry.ifcloud.com/portainer/agent:2.20.1
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - /var/lib/docker/volumes:/var/lib/docker/volumes
    networks:
      - agent_network
    deploy:
      mode: global
      placement:
        constraints: [node.platform.os == linux]

  portainer:
    image: registry.ifcloud.com/portainer/portainer-ce:2.20.1
    command: -H tcp://tasks.agent:9001 --tlsskipverify
    ports:
      - "9000:9000"
    volumes:
      - portainer_data:/data
    networks:
      - agent_network
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints: [node.role == manager]

networks:
  agent_network:
    driver: overlay
    attachable: true

volumes:
  portainer_data:

部署 portainer stack:

yaml
sudo docker stack deploy -c /tmp/portainer-agent-stack.yml portainer

在 CentOS7 上安装 Docker ​

Docker 环境准备 ​

修改防火墙配置:

shell
firewall-cmd --add-port=2377/tcp --permanent
firewall-cmd --add-port=7946/tcp --permanent
firewall-cmd --add-port=7946/udp --permanent
firewall-cmd --add-port=4789/udp --permanent
firewall-cmd --reload

OR 禁用防火墙（不推荐）

shell
sudo systemctl stop firewalld
sudo systemctl disable firewalld

禁用 selinux：

shell
sudo setenforce 0
sudo cp /etc/selinux/config /etc/selinux/config.bak
sudo sed -i -e "s:SELINUX=.*:SELINUX=permissive:g" /etc/selinux/config

修改yum源为阿里云:

shell
cp /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.bak
rm /etc/yum.repos.d/CentOS-Base.repo

curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-7.repo
sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo

yum clean all && yum makecache

移除已存在的 Docker 引擎:

shell
sudo yum remove docker \
                  docker-client \
                  docker-client-latest \
                  docker-common \
                  docker-latest \
                  docker-latest-logrotate \
                  docker-logrotate \
                  docker-engine

配置 Docker 源:

shell
curl -o /etc/yum.repos.d/docker-ce.repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/docker-ce.repo

安装 Docker 引擎:

shell
sudo yum install docker-ce docker-ce-cli containerd.io

# 启动 Docker 引擎
sudo systemctl start docker

# 配置 Docker 引擎自启动
sudo systemctl enable docker

部署 Docker 管理 UI ​

在管理节点部署 Portainer : 创建/tmp/portainer.yml

yaml
version: '3.2'

services:
  agent:
    image: portainer/agent:2.20.1
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - /var/lib/docker/volumes:/var/lib/docker/volumes
    networks:
      - agent_network
    deploy:
      mode: global
      placement:
        constraints: [node.platform.os == linux]

  portainer:
    image: portainer/portainer-ce:2.20.1
    command: -H tcp://tasks.agent:9001 --tlsskipverify
    ports:
      - "9000:9000"
    volumes:
      - portainer_data:/data
    networks:
      - agent_network
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints: [node.role == manager]

networks:
  agent_network:
    driver: overlay
    attachable: true

volumes:
  portainer_data:

拉取镜像（因为网络问题可能不会成功，需要解决docker 备用源）

shell
sudo docker pull portainer/portainer-ce:2.20.1
sudo docker pull portainer/agent:2.20.1

部署 portainer：

shell
sudo docker stack deploy -c /tmp/portainer.yml portainer

在Ubuntu 22.04 上安装Docker ​

Ubuntu 软件源 ​

  • 主仓库（main, restricted, universe, multiverse）的含义

  • 更新仓库（updates）的作用

  • 安全仓库（security）的重要性

  • 回溯仓库（backports）的用途

shell
cd /etc/apt/

cat source.list

Ubuntu 系统的软件源配置文件内容，用于告诉系统从哪里下载软件包和更新。

Docker 修改 Home 路径 ​

shell
vi /etc/docker/deamon.json
shell
# data-root 路径 挂载点磁盘空间一定要充足
{
  "registry-mirrors": ["http://hub-mirror.c.163.com","https://registry.docker-cn.com","https://docker.mirrors.ustc.edu.cn"],
  "data-root": "/dockerhome"
}

重新加载 daemon

shell

systemctl daemon-reload
systemctl restart docker

导出本地镜像 ​

shell
docker save -o my-app.tar your-image-name:tag

示例：

shell
docker save -o go-app.tar my-go-app:latest

方法二：直接导出/导入镜像（适合临时使用） ​

步骤： ​

  1. 本地导出镜像
bash
docker save -o my-app.tar your-image-name:tag
# 示例：
docker save -o go-app.tar my-go-app:latest
  1. 传输到服务器
bash
# 使用 SCP (Linux/Mac)
scp go-app.tar user@your-server-ip:/tmp/

# Windows 使用 PowerShell
scp go-app.tar user@your-server-ip:/tmp/

# 或使用 WinSCP (图形化工具)
  1. 在服务器导入镜像
bash
ssh user@your-server-ip
docker load -i /tmp/go-app.tar
docker images  # 验证镜像存在
docker run -d --name go-app -p 8080:8080 my-go-app:latest

高级方案：自建私有仓库（适合企业/长期项目） ​

  1. 在服务器搭建私有仓库
bash
docker run -d -p 5000:5000 --restart=always --name registry registry:2
  1. 推送镜像到私有仓库 可以将本地的镜像（包括从外网下载来的镜像）通过打标签后，推送到私有仓库。

Docker 推送的要求是，镜像的名称必须与远程私有仓库的地址路径完全匹配。需要用 docker tag命令为本地镜像创建一个符合要求的新标签。

命令格式： docker tag <本地镜像名>:<标签> <远程仓库地址>/<项目或用户名>/<镜像名>:<标签>

bash
# 示例 将本地mariadb:10.4 推送到远程私有仓库
docker tag mariadb:10.4 registry.dajianyijing.com/mariadb:10.4
docker push registry.dajianyijing.com/mariadb:10.4
  1. 从私有仓库拉取
bash
# 服务器操作
docker pull registry.dajianyijing.com/mariadb:10.4

蜀ICP备2025150039号

Copyright © 2026 Roy