uname -r
sudo yum update
sudo yum remove docker \
docker-client \
docker-client-latest \
docker-common \
docker-latest \
docker-latest-logrotate \
docker-logrotate \
docker-engine
sudo yum install -y yum-utils
sudo yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
sudo yum install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
sudo systemctl start docker
sudo systemctl enable docker
sudo systemctl status docker
种种原因，发现要加速器才能pull成功，很是疑惑。
sudo vim /etc/docker/daemon.json
添加以下保存
{
"registry-mirrors": [
"https://docker.211678.top",
"https://docker.1panel.live",
"https://hub.rat.dev",
"https://docker.m.daocloud.io",
"https://do.nark.eu.org",
"https://dockerpull.com",
"https://dockerproxy.cn",
"https://docker.awsl9527.cn"
]
}
sudo systemctl daemon-reload
sudo systemctl restart docker
docker pull logstash:8.14.1
docker pull kibana:8.14.1
docker pull elasticsearch:8.14.1
mkdir -p /data/elk/{es,logstash,kibana}
vi /etc/sysctl.conf #添加一行vm.max_map_count=262144
sysctl -p
mkdir -p /data/elk/es/data
chown 1000:1000 -R /data/elk/es/
docker run -d --name es -p 9200:9200 -p 9300:9300 -v /data/elk/es/data:/usr/share/elasticsearch/data elasticsearch:8.14.1
docker exec -it es bash
cd /usr/share/elasticsearch/bin
elasticsearch-setup-passwords interactive #设置密码apm_system/kibana_system/kibana/logstash_system/beat_system/remote_monitoring_user/elastic
exit
docker ps -a
docker rm -f 8333c01fd8ef #停止并删除刚才创建的elasticsearch容器
cd /usr/local/bin/
wget https://github.com/docker/compose/releases/download/v2.2.2/docker-compose-linux-x86_64 -o /usr/local/bin/docker/cli-plugins/docker-compose
cp docker-compose-Linux-x86_64 docker-compose
chmod +x /usr/local/bin/docker-compose
docker-compose version
mkdir -p /usr/local/bin/docker/cli-plugins
curl -SL https://github.com/docker/compose/releases/download/v2.2.2/docker-compose-linux-x86_64 -o /usr/local/bin/docker/cli-plugins/docker-compose
chmod +x /usr/local/bin/docker/cli-plugins/docker-compose
docker compose version
vi docker-compose.yml
version: '3'
services:
elasticsearch:
container_name: es
image: elasticsearch:8.14.1
restart: "always"
ports:
- "9200:9200"
expose:
- "9300"
volumes:
- "/data/elk/es/data:/usr/share/elasticsearch/data"
environment:
discovery.type: single-node
networks:
elastic:
ipv4_address: 172.16.200.10
kibana:
container_name: kibana
image: kibana:8.14.1
restart: "always"
ports:
- "5601:5601"
volumes:
- "/data/elk/kibana/kibana.yml:/usr/share/kibana/config/kibana.yml"
networks:
elastic:
ipv4_address: 172.16.200.20
depends_on:
- elasticsearch
logstash:
container_name: logstash
image: logstash:8.14.1
restart: "always"
expose:
- "5044"
volumes:
- "/data/elk/logstash/logstash.yml:/usr/share/logstash/logstash.yml"
- "/data/elk/logstash/conf.d/switch.conf:/usr/share/logstash/conf.d/switch.conf"
environment:
- LS_HEAP_SIZE="500m"
- MY_ES_HOST=http://172.16.200.10:9200
- m=600m
depends_on:
- elasticsearch
networks:
elastic:
ipv4_address: 172.16.200.30
networks:
elastic:
driver: bridge
ipam:
config:
- subnet: "172.16.200.0/24"
vi /data/elk/kibana/kibana.yml
server.name: kibana
server.host: "0.0.0.0"
elasticsearch.hosts: ["http://172.16.200.10:9200"]
elasticsearch.username: "kibana_system"
elasticsearch.password: "Aaddd...000"
xpack.monitoring.ui.container.elasticsearch.enabled: true
i18n.locale: "zh-CN"
vi /data/elk/logstash/logstash.yml
http.host: "0.0.0.0"
xpack.monitoring.elasticsearch.hosts: [ "http://172.16.200.10:9200" ]
xpack.monitoring.elasticsearch.username: "logstash_system"
xpack.monitoring.elasticsearch.password: "输入刚才设置的密码"
chown 1000:1000 -R /data/elk/es/
chown 1000:1000 -R /data/elk/logstash/
chown 1000:1000 -R /data/elk/kibana/
docker-compose up -d
http://192.168.112.133:9000/#/ #在线查看容器状态，全部绿色正常
htts://192.168.112.133:5601 #初始化需要一些时间，等待登录输入elastic和密码
