本文主要记录旧版 CentOS 环境下的 Docker 搭建笔记。文中命令偏向历史环境兼容，不建议直接照搬到现代生产环境。
环境说明
当前文档针对历史开发机环境： $ cat /etc/issue CentOS release 6.3 (Final) $ uname -r 3.10.0.514.26.2.el7.x86_64 一、挂载 cgroup
-
root权限执行 Docker官网上提供的脚本：cgroupfs-mount
#!/bin/sh #copyright 2011 Canonical, Inc # 2014 Tianon Gravi # Author: Serge Hallyn serge.hallyn@canonical.com # Tianon Gravi tianon@debian.org set -e
# for simplicity this script provides no flexibility
# if cgroup is mounted by fstab, don’t run # don’t get too smart - bail on any uncommented entry with ‘cgroup’ in it if grep -v ‘^#’ /etc/fstab | grep -q cgroup; then echo ‘cgroups mounted from fstab, not mounting /sys/fs/cgroup’ exit 0 fi
# kernel provides cgroups? if [ ! -e /proc/cgroups ]; then exit 0 fi
# if we don’t even have the directory we need, something else must be wrong if [ ! -d /sys/fs/cgroup ]; then exit 0 fi
# mount /sys/fs/cgroup if not already done if ! mountpoint -q /sys/fs/cgroup; then mount -t tmpfs -o uid=0,gid=0,mode=0755 cgroup /sys/fs/cgroup fi
cd /sys/fs/cgroup
# get/mount list of enabled cgroup controllers for sys in $(awk ‘!/^#/ { if ($4 == 1) print $1 }’ /proc/cgroups); do mkdir -p $sys if ! mountpoint -q $sys; then if ! mount -n -t cgroup -o $sys cgroup $sys; then rmdir $sys || true fi fi done
# example /proc/cgroups: # #subsys_name hierarchy num_cgroups enabled # cpuset 2 3 1 # cpu 3 3 1 # cpuacct 4 3 1 # memory 5 3 0 # devices 6 3 1 # freezer 7 3 1 # blkio 8 3 1
# enable cgroups memory hierarchy, like systemd does (and lxc/docker desires) # https://github.com/systemd/systemd/blob/v245/src/core/cgroup.c#L2983 # https://bugs.debian.org/940713 if [ -e /sys/fs/cgroup/memory/memory.use_hierarchy ]; then echo 1 > /sys/fs/cgroup/memory/memory.use_hierarchy fi
exit 0
-
确认是否成功挂载 $ df -h Filesystem Size Used Avail Use% Mounted on /dev/vda1 40G 12G 27G 30% / cgroup 16G 0 16G 0% /sys/fs/cgroup
二、搭建网桥 $ brctl addbr docker0 $ ip addr add 10.0.4.1/24 dev docker0 $ ip link set dev docker0 up $ brctl show bridge name bridge id STP enabled interfaces docker0 8000.000000000000 no
三、安装docker $ mkdir /tmp/docker_install && cd /tmp/docker_install $ wget “http://koala.dmop.baidu.com:8080/fc/getfilebyid?id=8829” -O docker-1.12.5.tar.gz && tar -zxvf docker-1.12.5.tar.gz && rm -rf docker-1.12.5.tar.gz $ mv docker/* /usr/bin && rm -rf docker 四、启动 1、配置仓库 $ vim /etc/docker/daemon.json 仓库配置文件，增加如下内容 { “insecure-registries” : [””,””], “graph”:”/var/lib/docker” } 将默认路径调整，否则容易出现，no space left。 如果保存不了，可能是没有 docker 文件夹，先 mkdir /etc/docker 2、启动
不建议默认监听
tcp://0.0.0.0:2375。2375 是未加密且无鉴权的 Docker Remote API，暴露到非可信网络会带来高风险。优先只保留 Unix Socket，或至少绑定到127.0.0.1并配合额外访问控制。
$ nohup /usr/bin/dockerd –bip=10.0.4.1/24 -H unix:///var/run/docker.sock >/dev/null 2>/dev/null & $ nohup /usr/bin/dockerd –bip=10.0.4.1/24 -H tcp://127.0.0.1:2375 -H unix:///var/run/docker.sock >/dev/null 2>/dev/null & 【注】：docker重启
- kill -9 pid
- 运行上面的启动命令即可
ld-linux-x86-64.so.2: bad ELF interpreter
4.12 ld-linux-x86-64.so.2: bad ELF interpreter: No such file or directory /opt/compiler/gcc-8.2/lib64/ld-linux-x86-64.so.2: bad ELF interpreter: No such file or directory 镜像中增加 ln -s /opt/compiler/gcc-12/lib64/ld-linux-x86-64.so.2 /opt/compiler/gcc-8.2/lib64/ld-linux-x86-64.so.2 修复。
docker 命令
docker exec -it -u root run -t -i bca1732dcdeb /bin/bash docker push xxxxx/xxx_projects/gray/r_centos7u9:gcc12_7_new tag 9b9b96af4f11 centos7u9:gcc12_7_new build -f Dockerfile docker pull _containers/centos7.9:gcc12
docker 命令 https://www.runoob.com/docker/docker-image-usage.html
docker rmi -f name:tag docker rmi -f imageid
docker run -u root -t -i bca1732dcdeb /bin/bash
修改时区，time
FROM image.weiyun.baidu.com/baidu_projects/hiserver-gray/msg-server_centos7u9:gcc12_7_new
MAINTAINER liuquan04 <liuquan04@baidu.com>
USER root
#RUN ln -sf /bin/bash /bin/sh
#RUN groupadd -r work && useradd -m -r -g work work && chmod 777 home/work
#RUN echo 'work:work' | chpasswd
USER root
#RUN mkdir /home/work/project
#RUN mkdir /home/work/logs
RUN cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime && echo 'Asia/Shanghai' > /etc/timezone
USER work
CMD /start.sh
~
gcc12
FROM image-beta.weiyun.baidu.com/baidu_projects/infoflow-dev1/new-adapter-dev:20220811195616_2d93ebc7
User root
RUN mkdir -p /home/opt/compiler/gcc-12
COPY ./gcc-12 /home/opt/compiler/gcc-12
RUN ln -s /home/opt/compiler/gcc-12 /opt/compiler/gcc-12
RUN rm /usr/bin/gcc
RUN ln -s /opt/compiler/gcc-12/bin/gcc /usr/bin/gcc
USER work
dockerfile
ROM image-beta.weiyun.baidu.com/baidu_projects/infoflow-dev2/centos7u9:gcc12_3_new
MAINTAINER liuquan04 <liuquan04@baidu.com>
USER root
#RUN ln -sf /bin/bash /bin/sh
#RUN groupadd -r work && useradd -m -r -g work work && chmod 777 home/work
#RUN echo 'work:work' | chpasswd
USER root
#RUN mkdir /home/work/project
#RUN mkdir /home/work/logs
COPY start.sh /start.sh
RUN chown -R work:work /home/work
RUN chown work:work /start.sh
RUN chmod 777 /start.sh
USER work
CMD /start.sh
ld-linux-x86-64.so.2: bad ELF interpreter
FROM image.weiyun.baidu.com/baidu_projects/hiserver-gray/msg-server_centos7u9:gcc12_5_new
MAINTAINER liuquan04 <liuquan04@baidu.com>
USER root
#RUN ln -sf /bin/bash /bin/sh
#RUN groupadd -r work && useradd -m -r -g work work && chmod 777 home/work
#RUN echo 'work:work' | chpasswd
USER root
#RUN mkdir /home/work/project
#RUN mkdir /home/work/logs
COPY output.tar.gz /output.tar.gz
RUN chown -R work:work /home/work
RUN chown work:work /output.tar.gz
RUN chmod 777 /output.tar.gz
RUN mkdir -p /opt/compiler/gcc-8.2/lib64/
RUN ln -s /opt/compiler/gcc-12/lib64/ld-linux-x86-64.so.2 /opt/compiler/gcc-8.2/lib64/ld-linux-x86-64.so.2
USER work
CMD /start.sh
一键打包命令
docker build –no-cache -t image.weiyun.baidu.com/baidu_projects/hiserver-gray/msg-server_centos7u9:gcc12_10_new -f Dockerfile_libcurl .
安装libcurl Dockerfile
RUN yum install libcurl3-openssl-dev
