docker(一):安装

一.升级内核

3.8以上的kernel对docker支持的更好,先升级kernel,升级到4.4;

内核安装参考:内核升级攻略

注意:make menuconfig这一步,

1)General setup->[*] enable deprecated sysfs features to support old userspace tools;

2)General Setup->Control Group Support->Memory Resource Controller for Control Groups, Control Group Support下的选项可以全选;

3)networking support → networking options → network packet filtering framework(Netfilter)下的:

Corenetfilter configuration->Netfilter connection tracking support

Corenetfilter configuration->Netfilter Xtables support (required for ip_tables)

IP: Netfilter Configuration->IPv4 connection tracking support (require for NAT)

IP: Netfilter Configuration->IP tables support (required for filtering/masq/NAT)

IP: Netfilter Configuration->MASQUERADE target support

IP: Netfilter Configuration->REDIRECT target support

IP: Netfilter Configuration->iptables NAT support

升级后还是有问题:

没有DOCKER target导致的问题

linux 2.6 OK正常,有DOCKER target:

iptables -t nat –list

结果:

Chain PREROUTING (policy ACCEPT)

target prot opt source destination

DOCKER all – anywhere anywhere ADDRTYPE match dst-type LOCAL

DOCKER all – anywhere anywhere ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT)

target prot opt source destination

MASQUERADE tcp – 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535

MASQUERADE udp – 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535

MASQUERADE all – 192.168.122.0/24 !192.168.122.0/24

MASQUERADE all – 172.17.0.0/16 anywhere

MASQUERADE all – 172.17.0.0/16 anywhere

Chain OUTPUT (policy ACCEPT)

target prot opt source destination

DOCKER all – anywhere !loopback/8 ADDRTYPE match dst-type LOCAL

DOCKER all – anywhere !loopback/8 ADDRTYPE match dst-type LOCAL

Chain DOCKER (4 references)

target prot opt source destination

所以,暂时先用2.6的内核.

二.安装

yum install docker-io

三 .下载镜像

运行docker pull centos可以直接总docker官网下载

我自己电脑上下载失败了.

参考:解决docker镜像无法下载的问题

使用命令

docker pull daocloud.io/library/centos:latest

下载了centos镜像

四.启动容器

#以交互方式启动容器
docker run -i -t centos /bin/bash