#下载docker https://download.docker.com/linux/static/stable/x86_64/
#离线安装https://docs.docker.com/engine/install/binaries/
curl -OL https://download.docker.com/linux/static/stable/x86_64/docker-25.0.3.tgz
tar -zxvf docker-*.tgz
mv docker/* /usr/bin/
#mv docker/* /usr/local/bin/
#ln -s /usr/local/bin/docker /usr/bin/docker
mv docker.service /etc/systemd/system/
chmod +x /etc/systemd/system/docker.service
#rocky服务报错可以存到下面的目录 
mv docker.service /etc/systemd/system/multi-user.target.wants

#重载systemd下 xxx.service文件
sudo systemctl daemon-reload
sudo systemctl list-unit-files | grep docker
sudo journalctl -u docker
#依赖 网络防火墙组件
apt install -y iptables nftables
#启动Docker
systemctl start docker
#设置开机自启
systemctl enable docker.service
#查看docker状态
systemctl status docker
#查看docker版本
docker -v

#docker-compose	https://github.com/docker/compose/releases 下载对应架构的
curl -OL https://github.com/docker/compose/releases/download/v2.24.6/docker-compose-linux-x86_64
mv docker-compose-linux-x86_64 /usr/local/bin/docker-compose
chmod +x /usr/local/bin/docker-compose
ln -s /usr/local/bin/docker-compose /usr/bin/docker-compose
docker-compose -v
#如无反应，关闭selinux


#导出镜像
docker save -o mysql.tar mysql
#导入镜像
docker load -i mysql.tar


#查看IP
ip address
#设置网卡ifcfg-eth0的IP
ip address add 10.10.10.2/24 dev eth0


#临时关闭SELinux重启恢复 
#查看selinux状态
#强制模式SELINUX=enforcing：表示所有违反安全策略的行为都将被禁止。
#宽容模式SELINUX=permissive：表示所有违反安全策略的行为不被禁止，但是会在日志中作记录。
getenforce
Enforcing
#设置为宽容模式
sudo setenforce 0
#验证
getenforce
Permissive
#关闭SELinux
vi /etc/selinux/config
SELINUX=disabled
:wq
#sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config
reboot

#添加docker节点 
sudo mkdir -p /etc/docker
sudo tee /etc/docker/daemon.json <<-'EOF'
{
  "registry-mirrors": [
    "https://docker.1ms.run",
    "https://docker.1panel.live",
    "https://docker.xuanyuan.me",
    "https://dockerproxy.net",
    "https://image.cloudlayer.icu",
    "https://docker-registry.nmqu.com",
    "https://hub.amingg.com",
    "https://docker.amingg.com",
    "https://docker.hlmirror.com",
    "https://hub1.nat.tf",
    "https://hub2.nat.tf",
    "https://hub3.nat.tf",
    "https://hub4.nat.tf",
    "https://docker.m.daocloud.io",
    "https://docker.kejilion.pro",
    "https://docker.367231.xyz",
    "https://hub.1panel.dev",
    "https://docker.etcd.fun",
    "https://docker.cattt.net",
    "https://docker.apiba.cn",
    "https://proxy.vvvv.ee"
  ]
}
EOF
#docker走代理
cat>/etc/docker/daemon.json <<END
{    "proxies": {        
        "http-proxy": "socks5://127.0.0.1:1080",        
        "https-proxy": "socks5://127.0.0.1:1080",        
        "no-proxy": "http://exampdle.com"    
        }
      }
END
cat> /etc/systemd/system/docker.service.d/proxy.conf <<END
[Service]
Environment="HTTP_PROXY=http://your-proxy.com:your-port"
Environment="HTTPS_PROXY=http://your-proxy.com:your-port"
Environment="NO_PROXY=localhost,127.0.0.1,docker-registry.somecorporation.com"
END