ARM64 架构部署 Docker

参考内容：华为鲲鹏+银河麒麟v10 安装 docker-ce 踩坑

环境说明

1. 系统版本: Kylin Linux Advanced Server V10

   # cat /etc/os-release 
   NAME="Kylin Linux Advanced Server"
   VERSION="V10 (Tercel)"
   ID="kylin"
   VERSION_ID="V10"
   PRETTY_NAME="Kylin Linux Advanced Server V10 (Tercel)"
   ANSI_COLOR="0;31"

2. CPU 架构: 鲲鹏920

   # lscpu |grep "Architecture\|name"
   Architecture:                    aarch64
   Model name:                      Kunpeng-920

通过二进制安装 docker

1. 下载 docker-ce 二进制安装包，官网下载地址: download.docker.com

   wget https://download.docker.com/linux/static/stable/aarch64/docker-19.03.15.tgz

2. 解压安装包

   tar xvf docker-19.03.15.tgz

3. 安装二进制文件

   mv docker/* /usr/bin/
   mv /usr/bin/containerd /usr/local/bin/

4. 配置 systemd 服务管理

   • 创建 docker.service 文件

   cat > /usr/lib/systemd/system/docker.service <<EOF
   [Unit]
   Description=Docker Application Container Engine
   Documentation=https://docs.docker.com
   After=network-online.target docker.socket firewalld.service containerd.service
   Wants=network-online.target
   Requires=docker.socket containerd.service
   
   [Service]
   Type=notify
   # the default is not to use systemd for cgroups because the delegate issues still
   # exists and systemd currently does not support the cgroup feature set required
   # for containers run by docker
   ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
   ExecReload=/bin/kill -s HUP \$MAINPID
   TimeoutStartSec=0
   RestartSec=2
   Restart=always
   
   # Note that StartLimit* options were moved from "Service" to "Unit" in systemd 229.
   # Both the old, and new location are accepted by systemd 229 and up, so using the old location
   # to make them work for either version of systemd.
   StartLimitBurst=3
   
   # Note that StartLimitInterval was renamed to StartLimitIntervalSec in systemd 230.
   # Both the old, and new name are accepted by systemd 230 and up, so using the old name to make
   # this option work for either version of systemd.
   StartLimitInterval=60s
   
   # Having non-zero Limit*s causes performance problems due to accounting overhead
   # in the kernel. We recommend using cgroups to do container-local accounting.
   LimitNOFILE=infinity
   LimitNPROC=infinity
   LimitCORE=infinity
   
   # Comment TasksMax if your systemd version does not support it.
   # Only systemd 226 and above support this option.
   TasksMax=infinity
   
   # set delegate yes so that systemd does not reset the cgroups of docker containers
   Delegate=yes
   
   # kill only the docker process, not all processes in the cgroup
   KillMode=process
   OOMScoreAdjust=-500
   
   [Install]
   WantedBy=multi-user.target
   EOF

   • 创建 docker.socket 文件

   cat > /usr/lib/systemd/system/docker.socket <<EOF
   [Unit]
   Description=Docker Socket for the API
   
   [Socket]
   # If /var/run is not implemented as a symlink to /run, you may need to
   # specify ListenStream=/var/run/docker.sock instead.
   ListenStream=/run/docker.sock
   SocketMode=0660
   SocketUser=root
   SocketGroup=docker
   
   [Install]
   WantedBy=sockets.target
   EOF

   • 创建 containerd.service 文件

   cat > /usr/lib/systemd/system/containerd.service <<EOF
   # Copyright The containerd Authors.
   #
   # Licensed under the Apache License, Version 2.0 (the "License");
   # you may not use this file except in compliance with the License.
   # You may obtain a copy of the License at
   #
   #     http://www.apache.org/licenses/LICENSE-2.0
   #
   # Unless required by applicable law or agreed to in writing, software
   # distributed under the License is distributed on an "AS IS" BASIS,
   # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   # See the License for the specific language governing permissions and
   # limitations under the License.
   
   [Unit]
   Description=containerd container runtime
   Documentation=https://containerd.io
   After=network.target local-fs.target
   
   [Service]
   ExecStartPre=-/sbin/modprobe overlay
   ExecStart=/usr/local/bin/containerd
   
   Type=notify
   Delegate=yes
   KillMode=process
   Restart=always
   RestartSec=5
   # Having non-zero Limit*s causes performance problems due to accounting overhead
   # in the kernel. We recommend using cgroups to do container-local accounting.
   LimitNPROC=infinity
   LimitCORE=infinity
   LimitNOFILE=infinity
   # Comment TasksMax if your systemd version does not supports it.
   # Only systemd 226 and above support this version.
   TasksMax=infinity
   OOMScoreAdjust=-999
   
   [Install]
   WantedBy=multi-user.target
   EOF

5. 创建 docker 组

   groupadd docker

6. 创建 docker 配置文件

   mkdir /etc/docker
   
   cat > /etc/docker/daemon.json <<EOF
   {
     "exec-opts": ["native.cgroupdriver=systemd"],
     "registry-mirrors": [
       "https://b9pmyelo.mirror.aliyuncs.com",
       "https://registry.docker-cn.com",
       "http://hub-mirror.c.163.com",
       "https://docker.mirrors.ustc.edu.cn"
     ],
     "insecure-registries": [
       "http://218.76.62.168:8083"
     ],
     "dns": [
       "223.5.5.5", 
       "223.6.6.6"
     ],
     "data-root": "/data/docker",
     "storage-driver": "overlay2",
     "storage-opts": [
       "overlay2.override_kernel_check=true"
     ],
     "max-concurrent-downloads": 10,
     "max-concurrent-uploads": 5,
     "log-driver": "json-file",
     "log-opts": {
       "max-size": "30m",
       "max-file": "3"
     },
     "live-restore": true
   }
   EOF

7. 启动 Docker

   systemctl daemon-reload
   systemctl enable --now containerd
   systemctl enable --now docker

8. 查看 Docker 服务

   docker info

9. 配置 docker 命令行参数选项的自动补全

   # 安装 bash-completion
   yum -y install bash-completion
   
   # 下载自动补全文件
   curl https://raw.githubusercontent.com/docker/docker-ce/master/components/cli/contrib/completion/bash/docker -o /etc/bash_completion.d/docker.sh
   
   # 重新登录系统