搜索到
34
篇与
Docker
的结果
-
failed to create kubelet: misconfiguration: kubelet cgroup driver: "cgroupfs" is different from docker cgroup 在安装kubernetes的过程中，经常会遇见如下错误failed to create kubelet: misconfiguration: kubelet cgroup driver: "cgroupfs" is different from docker cgroup 原因是docker的Cgroup Driver和kubelet的Cgroup Driver不一致。有两种方式解决问题，一种是修改docker,，另一种是修改kubelet；1、修改docker的Cgroup Driver修改/etc/docker/daemon.json文件 { "exec-opts": ["native.cgroupdriver=systemd"] } 重启docker systemctl daemon-reload systemctl restart docker2、修改kubelet的Cgroup Driver修改/etc/systemd/system/kubelet.service.d/10-kubeadm.conf文件，增加--cgroup-driver=cgroupfs Environment="KUBELET_KUBECONFIG_ARGS=--bootstrap-kubeconfig=/etc/kubernetes/bootstrap-kubelet.conf --kubeconfig=/etc/kubernetes/kubelet.conf --cgroup-driver=cgroupfs" 重启kubelet systemctl daemon-reload systemctl restart kubelet -
启动Docker报错Selinux解决办法 如出现以下错误Error starting daemon: SELinux is not supported with the overlay2 graph driver on this kernel. Either boot into a newer kernel or disable selinux in docker (--selinux-enabled=false)解决方案 vim /etc/sysconfig/docker # Modify these options if you want to change the way the docker daemon runs OPTIONS='--selinux-enabled=false --log-driver=journald --signature-verification=false' if [ -z "${DOCKER_CERT_PATH}" ]; then DOCKER_CERT_PATH=/etc/docker fi
-
CentOS7搭建Harbor企业级Docker仓库 centos7搭建Harbor企业级docker仓库安装dockercurl -fsSL "https://get.docker.com/" | sh systemctl enable --now docker安装docker-composeyum update -y yum install python-pip pip install --upgrade setuptools # 可能由于setuptools版本过低报错 pip install docker-compose # 如果报错可以试试 --ignore-installed安装Harborwget -P /usr/local/src/ https://storage.googleapis.com/harbor-releases/release-1.7.0/harbor-online-installer-v1.7.5.tgz # 在线安装 # 最新版本请查看https://github.com/goharbor/harbor/releases/ cd /usr/local/src/ tar zxf harbor-online-installer-v1.7.5.tgz -C /usr/local/ cd /usr/local/harbor/ bash install.sh # 使用--with-clair添加镜像漏洞扫描功能配置文件vim /usr/local/harbor/harbor.cfg # harbor配置文件 # 找到以下项目并且修改 hostname = test.com # 修改访问域名，如果使用其它端口，请在后面添加端口号，如test.com:8080 #邮箱配置（根据实际账号配置） email_server = smtp.qq.com email_server_port = 465 email_username = [email protected] email_password = 123456 email_from = [email protected] # 经测试发现必须要和email_username相同才可以发邮件 email_ssl = true # 开启ssl保护，使用端口465，关闭使用端口25 #禁止用户注册 self_registration = off #设置只有管理员可以创建项目 project_creation_restriction = adminonly #设置管理员密码 harbor_admin_password = 123456容器集群管理cd /usr/local/harbor/ docker-compose ps # 查看harbor集群容器，安装后已经启动 # ---------- 控制 ---------- # 必须要在/usr/local/harbor/目录下，或者-f指定docker-compose.yml # 启动Harbor docker-compose start # 停止Harbor docker-comose stop # 重启Harbor docker-compose restart # 移除Harbor docker-compose down -v # -v 参数移除vloume # 重新创建并启动 docker-compose up -d # ---------- 控制 ----------修改nginx端口（如有需要）vim /usr/local/harbor/docker-compose.yml # 把proxy下的80:80改为8080:80则为使用8080访问harbor docker-compose stop proxy # proxy其实就是nginx docker-compose up -d proxy # 重新开启nginx netstat -lntp # 查看本地打开端口，如果有docker-proxy为8080则修改成功 # 如果有安全组防火墙，记得先放行对应端口上传、下载镜像# 由于使用80端口需要备案，harbor页面已经修改为8080端口（注意修改harbor.cfg的hostname后需要重新执行install.sh） vim /etc/docker/daemon.json # 添加 "insecure-registries":["test.com:8080"] } docker login test.com:8080 # 尝试登录 # 编写dockerfile mkdir ~/test_harbor && cd ~/test_harbor cat << EOF > Dockerfile FROM nginx:latest MAINTAINER test "[email protected]" # 配置环境变量 ENV LANG=C.UTF-8 TZ=Asia/Shanghai EOF # build镜像 docker build -t test.com:8080/library/nginx:latest . # push镜像到远程仓库 docker push test.com:8080/library/nginx:latest # 从远程仓库拉取镜像 docker pull test.com:8080/library/nginx:latest
-
Docker部署【酸的一批的乳品】 vim docker-compose.ymlshadowsocks: image: shadowsocks/shadowsocks-libev container_name: shadowsocks ports: - "server-port:8388" environment: - METHOD=chacha20-ietf-poly1305 - PASSWORD=your passwd restart: always{message type="info" content="images：使用镜像，本实例使用的是官网镜像container_name：容器名称ports：指定映射端口METHOD：配置加密方法PASSWORD：设置密码restart：容器重启策略"/}METHOD：加密方法可自行选择 rc4-md5 aes-256-gcm aes-128-cfb aes-192-cfb aes-256-cfb xchacha20-ietf-poly1305 chacha20-ietf-poly1305 salsa20 chacha20 and chacha20-ietf下载地址Windows Linux
-
