标签:systemd compose service containerd 离线 CI systemctl docker
无网络环境安装docker + docker compose
网上有N多离线安装的教程,但都不是在无网络环境下安装 ,在这里我会记录在服务器无网络环境下离线安装CICD所需环境的完成过程
1.docker + docker compose
2.gitlab + gitlab runner (docker in docker)
3.habor
4.k8s
本篇记录无网络环境安装docker+docker compse的过程
首先下载离线docker 和docker compose离线安装包
这里注意不要下载rpm离线安装包,因为会有可能因为系统中的包版本不对导致安装docker rpm 包时出现依赖错误,但由于服务器无法连接网络导致boom~
docker 离线包下载地址:https://download.docker.com/linux/static/stable/
docker compose 离线包下载地址:https://github.com/docker/compose/releases
这里我下载的是docker-19.03.9版本
1. 安装docker
1.1 将离线包上传到服务器上,执行以下脚本:
tar xzvf docker-19.03.9.tgz cp docker/* /usr/bin/ dockerd &
如果中途没有报错,则说明安装成功,可以用docker info 命令测试以下是否可以正常显示
如果出现报错,则执行以下命令情况刚刚的安装,并重新执行1.中的脚本
rm -rf /var/run/docker rm -rf /var/lib/docker rm -rf /var/run/docker.pid rm -rf /var/run/docker.sock文件 ps -aux | grep docker 停止docker相关进程 netstat -nplt | grep docker 解除docker相关进程占用端口
1.2 设置docker为系统服务
1.2.1 配置containerd
命令如下:
mkdir /etc/containerd containerd config default > /etc/containerd/config.toml touch /usr/lib/systemd/system/containerd.service vi /usr/lib/systemd/system/containerd.service
containerd.service 内容如下:
[Unit]
Description=containerd container runtime
Documentation=https://containerd.io
After=network.target[Service]
ExecStartPre=/sbin/modprobe overlay
ExecStart=/usr/bin/containerd # 这是你 containerd 文件的放置路径
Delegate=yes
KillMode=process
LimitNOFILE=1048576
# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNPROC=infinity
LimitCORE=infinity[Install]
WantedBy=multi-user.target
执行以下命令启动containerd服务并查看服务的状态:
systemctl daemon-reload systemctl enable containerd.service systemctl start containerd.service systemctl status containerd.service
1.2.2 配置docker.socket
命令如下:
groupadd docker touch /usr/lib/systemd/system/docker.socket vi /usr/lib/systemd/system/docker.socket
docker.socket文件内容如下:
[Unit]
Description=Docker Socket for the API
PartOf=docker.service[Socket]
ListenStream=/var/run/docker.sock
SocketMode=0660
SocketUser=root
# 如果出现错误:chown socket at step GROUP: No such process, 可以修改下面的 SocketGroup=root 或创建 docker 用户组(命令 groupadd docker)
SocketGroup=docker[Install]
WantedBy=sockets.target
执行以下命令启动containerd服务并查看服务的状态:
systemctl daemon-reload systemctl enable containerd.service systemctl start containerd.service systemctl status containerd.service
1.2.3 配置docker.service服务
执行以下命令:
touch /usr/lib/systemd/system/docker.service vi /usr/lib/systemd/system/docker.service
docker.service文件内容如下:
[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
BindsTo=containerd.service
After=network-online.target firewalld.service containerd.service
Wants=network-online.target
Requires=docker.socket[Service]
Type=notify
# the default is not to use systemd for cgroups because the delegate issues still
# exists and systemd currently does not support the cgroup feature set required
# for containers run by docker
ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
ExecReload=/bin/kill -s HUP $MAINPID
TimeoutSec=0
RestartSec=2
Restart=always# Note that StartLimit* options were moved from "Service" to "Unit" in systemd 229.
# Both the old, and new location are accepted by systemd 229 and up, so using the old location
# to make them work for either version of systemd.
StartLimitBurst=3# Note that StartLimitInterval was renamed to StartLimitIntervalSec in systemd 230.
# Both the old, and new name are accepted by systemd 230 and up, so using the old name to make
# this option work for either version of systemd.
StartLimitInterval=60s# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity# Comment TasksMax if your systemd version does not support it.
# Only systemd 226 and above support this option.
TasksMax=infinity# set delegate yes so that systemd does not reset the cgroups of docker containers
Delegate=yes# kill only the docker process, not all processes in the cgroup
KillMode=process[Install]
WantedBy=multi-user.target
在启动服务之前需要先对服务进行解禁操作,执行以下命令:
systemctl unmask docker.service systemctl unmask docker.socket
执行以下命令载入服务:
chmod +x /usr/lib/systemd/system/docker.service systemctl daemon-reload systemctl enable docker systemctl start docker
systemctl status docker
如果出现启动docker失败,可以尝试重启服务器,我这里重启后docker状态就正常了
2. 安装docker compose
将docker compose 离线安装包上传至服务器,在安装包目录下执行以下命令:
mv docker-compose-Linux-x86_64 /usr/local/bin/docker-compose chmod +x /usr/local/bin/docker-compose docker-compose -v
到这里就安装完成了。
参考:
1. https://blog.csdn.net/ws995339251/article/details/90580258
2. https://blog.csdn.net/catoop/article/details/102523847
标签:systemd,compose,service,containerd,离线,CI,systemctl,docker 来源: https://www.cnblogs.com/c-supreme/p/13159526.html
本站声明: 1. iCode9 技术分享网(下文简称本站)提供的所有内容,仅供技术学习、探讨和分享; 2. 关于本站的所有留言、评论、转载及引用,纯属内容发起人的个人观点,与本站观点和立场无关; 3. 关于本站的所有言论和文字,纯属内容发起人的个人观点,与本站观点和立场无关; 4. 本站文章均是网友提供,不完全保证技术分享内容的完整性、准确性、时效性、风险性和版权归属;如您发现该文章侵犯了您的权益,可联系我们第一时间进行删除; 5. 本站为非盈利性的个人网站,所有内容不会用来进行牟利,也不会利用任何形式的广告来间接获益,纯粹是为了广大技术爱好者提供技术内容和技术思想的分享性交流网站。