一、下载docker二进制包
wget https://download.docker.com/linux/static/stable/x86_64/docker-19.03.13.tgz --no-check-certificate
tar xvf docker-19.03.13.tgz
groupadd docker
chown .docker docker/*
cp -a docker/* /usr/bin/
二、创建/usr/lib/systemd/system/docker.service文件
[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network-online.target firewalld.service
Wants=network-online.target
[Service]
Type=notify
# the default is not to use systemd for cgroups because the delegate issues still
# exists and systemd currently does not support the cgroup feature set required
# for containers run by docker
ExecStart=/usr/bin/dockerd -H tcp://0.0.0.0:2375 -H unix://var/run/docker.sock
ExecReload=/bin/kill -s HUP $MAINPID
# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity
# Uncomment TasksMax if your systemd version supports it.
# Only systemd 226 and above support this version.
#TasksMax=infinity
TimeoutStartSec=0
# set delegate yes so that systemd does not reset the cgroups of docker containers
Delegate=yes
# kill only the docker process, not all processes in the cgroup
KillMode=process
# restart the docker process if it exits prematurely
Restart=always
StartLimitBurst=3
StartLimitInterval=60s
[Install]
WantedBy=multi-user.target
三、启动docker
systemctl daemon-reload
systemctl enable docker
systemctl start docker
chown .docker /var/run/docker.sock
docker -v
四、普通用户test直接使用docker命令
usermod -G docker test
