docker 宿主机配置容器桥接网络并给容器部署桥接 IP 和启动 sshd 服务供外部远程连接
一、docker 宿主机配置容器桥接网络并给容器部署桥接 IP 和启动 sshd 服务供外部远程连接
说明: 原来宿主机 ip: 192.168.14.140 原来宿主机网关： 192.168.14.2 原来宿主机网卡名字：ens33
1.安装 centos7 系统:
刚安装完 centos7 时（nat 模式虚拟机）自动获取的 IP 是：192.168.140,自动分配的网关:192.168.14.2
[root@bogon ~]# ifconfig
ens33: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.14.140 netmask 255.255.255.0 broadcast 192.168.14.255
inet6 fe80::29a3:566b:af9e:e0d5 prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:14:3a:22 txqueuelen 1000 (Ethernet)
RX packets 407468 bytes 585262453 (558.1 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 124643 bytes 10172407 (9.7 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1 (Local Loopback)
RX packets 4 bytes 340 (340.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 4 bytes 340 (340.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
2.安装 docker 服务并下载相关镜像（主要 cent6.5 且带 sshd 服务的）：
[root@localhost ~]# cat /etc/redhat-release
CentOS Linux release 7.3.1611 (Core)
[root@localhost ~]# systemctl stop firewalld.service #关闭防火墙
[root@localhost ~]# systemctl disable firewalld.service #禁止防火墙开机自启
[root@localhost ~]# getenforce
Enforcing
[root@localhost ~]# setenforce 0 #此处是否关闭 selinux 和下面报错没关系，尽量关闭吧
[root@localhost ~]# yum -y install docker #安装 docker
[root@localhost ~]# systemctl start docker #启动 docker,下面错误
Job for docker.service failed because the control process exited with error code. See "systemctl status
docker.service" and "journalctl -xe" for details.
#注意包上面错，是因为此 linux 的内核中的 SELinux 不支持 overlay2 graph driver，解决方法：要么启动一个新内核，要么
就在 docker 里禁用 selinux，--selinux-enabled=false
[root@localhost ~]# vi /etc/sysconfig/docker #前面是禁用 selinux，后面是为了能下载镜像
# /etc/sysconfig/docker
# Modify these options if you want to change the way the docker daemon runs
OPTIONS='--selinux-enabled=false --log-driver=journald --signature-verification=false --registry-mirror=http://f2d6cb40.m.daocloud.io' #添加该源
if [ -z "${DOCKER_CERT_PATH}" ]; then
DOCKER_CERT_PATH=/etc/docker
剩余10页未读，继续阅读
资源评论
