CentOS 9 系统安装 Docker

---

容器化技术如 Docker 已成为提升应用部署效率和管理便捷性的关键利器。你是否曾在使用 Docker 时遭遇安装繁琐、配置复杂的困扰？或者对如何在 CentOS 9 系统上标准化安装 Docker 充满好奇？今天，就让我们一同深入探索 CentOS 9 系统安装 Docker 的标准化流程，解开其中的奥秘，助你轻松驾驭 Docker，开启容器化应用的全新体验之旅！

一、系统设置

调整关键内核参数
在 /etc/sysctl.conf 中进行配置，能优化系统性能，为 Docker 运行提供更高效的环境。

cat >> /etc/sysctl.conf << EOF
# 网络优化
net.core.somaxconn = 65535
net.ipv4.tcp_max_syn_backlog = 65535
net.ipv4.tcp_fin_timeout = 15
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_syncookies = 1
# 内存管理
vm.swappiness = 0
# 文件系统
fs.file-max = 2097152
fs.inotify.max_user_watches = 524288
EOF
sysctl -p

‌Cgroups v2 启用
Cgroups v2 是 Linux 内核的一项重要特性，能更好地管理容器资源。

# 修改 GRUB 配置  
sudo sed -i 's/GRUB_CMDLINE_LINUX=".*"/GRUB_CMDLINE_LINUX="systemd.unified_cgroup_hierarchy=1"/g' /etc/default/grub  
sudo  grub2-mkconfig -o /boot/grub2/grub.cfg  # 适用于 CentOS 7/8/9  需 Linux 5.4+ 内核
reboot  

网卡多队列与中断均衡

# 启用网卡多队列  eth0 是你的网卡名。
ethtool -l eth0 #查看 combined 支持数量
ethtool -L eth0 combined 8  
# 配置 IRQ 亲和性  
sudo sh -c "echo 0-7 > /sys/class/net/eth0/device/msi_irqs/affinity" ‌

修改 centos.repo 文件

mv /etc/yum.repos.d/centos.repo /etc/yum.repos.d/centos.repo.bak
vim  /etc/yum.repos.d/centos.repo
i

接下来，我们将以下的内容粘贴到 centos.repo 文件中。这些配置涵盖了多个不同的软件源，每个源都有其独特的作用。

[baseos]
name=CentOS Stream $releasever - BaseOS
baseurl=https://mirrors.aliyun.com/centos-stream/$stream/BaseOS/$basearch/os/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
countme=1
enabled=1

[baseos-debug]
name=CentOS Stream $releasever - BaseOS - Debug
baseurl=https://mirrors.aliyun.com/centos-stream/$stream/BaseOS/$basearch/debug/tree/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
enabled=0

[baseos-source]
name=CentOS Stream $releasever - BaseOS - Source
baseurl=https://mirrors.aliyun.com/centos-stream/$stream/BaseOS/source/tree/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
enabled=0

[appstream]
name=CentOS Stream $releasever - AppStream
baseurl=https://mirrors.aliyun.com/centos-stream/$stream/AppStream/$basearch/os/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
countme=1
enabled=1

[appstream-debug]
name=CentOS Stream $releasever - AppStream - Debug
baseurl=https://mirrors.aliyun.com/centos-stream/$stream/AppStream/$basearch/debug/tree/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
enabled=0

[appstream-source]
name=CentOS Stream $releasever - AppStream - Source
baseurl=https://mirrors.aliyun.com/centos-stream/$stream/AppStream/$basearch/debug/tree/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
enabled=0

[crb]
name=CentOS Stream $releasever - CRB
baseurl=https://mirrors.aliyun.com/centos-stream/$stream/CRB/$basearch/os/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
countme=1
enabled=0

[crb-debug]
name=CentOS Stream $releasever - CRB - Debug
baseurl=https://mirrors.aliyun.com/centos-stream/$stream/CRB/$basearch/debug/tree/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
enabled=0

[crb-source]
name=CentOS Stream $releasever - CRB - Source
baseurl=https://mirrors.aliyun.com/centos-stream/$stream/CRB/source/tree/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
enabled=0

修改 centos - addons.repo 文件

mv /etc/yum.repos.d/centos-addons.repo /etc/yum.repos.d/centos-addons.repo.bak
vim /etc/yum.repos.d/centos-addons.repo
i

接下来，我们将以下的内容粘贴到 centos - addons.repo 文件中。

[highavailability]
name=CentOS Stream $releasever - HighAvailability
baseurl=http://mirrors.aliyun.com/centos-stream/$stream/HighAvailability/$basearch/os/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
countme=1
enabled=0

[highavailability-debug]
name=CentOS Stream $releasever - HighAvailability - Debug
baseurl=http://mirrors.aliyun.com/centos-stream/$stream/HighAvailability/$basearch/debug/tree/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
enabled=0

[highavailability-source]
name=CentOS Stream $releasever - HighAvailability - Source
baseurl=http://mirrors.aliyun.com/centos-stream/$stream/HighAvailability/source/tree/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
enabled=0

[nfv]
name=CentOS Stream $releasever - NFV
baseurl=http://mirrors.aliyun.com/centos-stream/$stream/NFV/$basearch/os/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
countme=1
enabled=0

[nfv-debug]
name=CentOS Stream $releasever - NFV - Debug
baseurl=http://mirrors.aliyun.com/centos-stream/$stream/NFV/$basearch/debug/tree/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
enabled=0

[nfv-source]
name=CentOS Stream $releasever - NFV - Source
baseurl=http://mirrors.aliyun.com/centos-stream/$stream/NFV/source/tree/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
enabled=0

[rt]
name=CentOS Stream $releasever - RT
baseurl=http://mirrors.aliyun.com/centos-stream/$stream/RT/$basearch/os/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
countme=1
enabled=0

[rt-debug]
name=CentOS Stream $releasever - RT - Debug
baseurl=http://mirrors.aliyun.com/centos-stream/$stream/RT/$basearch/debug/tree/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
enabled=0

[rt-source]
name=CentOS Stream $releasever - RT - Source
baseurl=http://mirrors.aliyun.com/centos-stream/$stream/RT/source/tree/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
enabled=0

[resilientstorage]
name=CentOS Stream $releasever - ResilientStorage
baseurl=http://mirrors.aliyun.com/centos-stream/$stream/ResilientStorage/$basearch/os/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
countme=1
enabled=0

[resilientstorage-debug]
name=CentOS Stream $releasever - ResilientStorage - Debug
baseurl=http://mirrors.aliyun.com/centos-stream/$stream/ResilientStorage/$basearch/debug/tree/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
enabled=0

[resilientstorage-source]
name=CentOS Stream $releasever - ResilientStorage - Source
baseurl=http://mirrors.aliyun.com/centos-stream/$stream/ResilientStorage/source/tree/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
enabled=0

[extras-common]
name=CentOS Stream $releasever - Extras packages
baseurl=http://mirrors.aliyun.com/centos-stream/SIGs/$stream/extras/$basearch/extras-common/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Extras-SHA512
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
countme=1
enabled=1

[extras-common-source]
name=CentOS Stream $releasever - Extras packages - Source
baseurl=http://mirrors.aliyun.com/centos-stream/SIGs/$stream/extras/source/extras-common/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Extras-SHA512
gpgcheck=1
repo_gpgcheck=0
metadata_expire=6h
enabled=0

我们需要清理并重建 yum 缓存，让我们刚刚修改的配置能够生效。

wget https://mirrors.aliyun.com/epel/epel-next-release-latest-9.noarch.rpm
wget https://mirrors.aliyun.com/epel/epel-release-latest-9.noarch.rpm
yum -y install epel-next-release-latest-9.noarch.rpm
yum -y install epel-release-latest-9.noarch.rpm
yum clean all && yum makecache

二、清理旧版本与残留文件

# 卸载旧版本组件
sudo dnf remove -y docker docker-client docker-client-latest docker-common docker-latest docker-latest-logrotate docker-logrotate docker-engine podman
# 删除残留目录
sudo rm -rf /var/lib/docker /var/lib/containerd /etc/cni/net.d

三、安装基础依赖工具

# 更新系统并安装必要组件,安装完成后重启一下，更新时有可能会更新内核。
sudo dnf update -y
sudo dnf install -y dnf-plugins-core yum-utils device-mapper-persistent-data lvm2

---

四、配置国内镜像源（企业推荐）

# 替换为阿里云镜像仓库
sudo dnf config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo 

# 备份原有仓库配置（可选）
sudo mkdir -p /etc/yum.repos.d/backup && sudo mv /etc/yum.repos.d/docker-ce.repo /etc/yum.repos.d/backup/ 

---

五、安装指定版本 Docker

# step 1: 安装必要的一些系统工具
sudo yum install -y yum-utils

# Step 2: 添加软件源信息
yum-config-manager --add-repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

# 查询可用版本（需先更新仓库）
sudo yum list docker-ce --showduplicates 

# Step 3: 安装Docker
sudo yum install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

---

六、启动服务与权限配置

# 启动服务并设置开机自启
sudo systemctl start docker
sudo systemctl enable docker

# 将当前用户加入 docker 组
sudo usermod -aG docker $USER
newgrp docker

---

七、生产环境增强配置

# 创建配置文件
cat << EOF > /etc/docker/daemon.json
{
  "registry-mirrors": [
    "https://docker.m.daocloud.io",
    "https://hub.urlsa.us.kg",
    "https://docker.urlsa.us.kg"
  ],
  "log-driver": "json-file",
  "log-opts": {
    "max-size": "100m",
    "max-file": "3"
  }
}
EOF

# 重启服务生效
sudo systemctl restart docker 

八、验证安装结果

# 基础功能验证
docker --version  # 显示版本号 
docker run --rm hello-world  # 输出  Hello from Docker! 即成功

---

附：常见问题处理

1. ‌镜像源不可用‌
   若阿里云镜像失效，可替换为清华大学镜像源：

   sudo sed -i 's#http://mirrors.aliyun.com#https://mirrors.tuna.tsinghua.edu.cn#g' /etc/yum.repos.d/docker-ce.repo 3
   

2. ‌GPU 支持‌
   需额外安装 NVIDIA 容器工具包：

   distribution=$(. /etc/os-release;echo $ID$VERSION_ID)
   curl -s -L https://nvidia.github.io/nvidia-docker/$distribution/nvidia-docker.repo | sudo tee /etc/yum.repos.d/nvidia-docker.repo
   sudo dnf install -y nvidia-docker2 
   

---

常用命令

服务启停与状态查看

systemctl start docker    # 启动 Docker 服务
systemctl stop docker     # 停止 Docker 服务
systemctl restart docker  # 重启 Docker 服务
systemctl status docker   # 查看 Docker 服务运行状态

‌版本与环境信息

docker --version   # 查看 Docker 版本
docker info        # 显示 Docker 系统信息（容器/镜像数量、存储驱动等）

镜像拉取与推送

docker pull nginx:latest          # 拉取最新版镜像
docker push registry/app:v1       # 推送镜像至私有仓库

本地镜像操作

docker images                # 列出本地所有镜像
docker images -aq            # 列出本地所有镜像ID
docker rmi nginx:latest      # 删除指定镜像（需未被容器使用）
docker rmi -f $(docker images -q)  # 强制删除全部镜像

镜像构建与导出

docker build -t app:v1 .     # 构建镜像并打标签
docker save -o app.tar app   # 导出镜像为压缩包
docker load -i app.tar       # 从压缩包加载镜像

容器启停与删除

docker run -d --name=web nginx:latest  # 启动容器（后台运行）
docker stop web               # 停止运行中的容器
docker restart web            # 重启容器
docker rm -f web              # 强制删除容器

批量操作

docker ps -a                  # 查看所有容器（含已停止的）
docker stop $(docker ps -q)   # 停止所有运行中的容器
docker rm $(docker ps -aq)    # 删除所有容器
docker ps -a --format "table {{.ID}}\t{{.Names}}\t{{.Status}}"

交互式操作

docker exec -it web /bin/bash  # 进入容器终端  web 容器名，也可以用容器ID。
docker cp web:/app/logs ./     # 从容器复制文件到宿主机

‌网络配置

docker network ls           # 查看所有网络
docker network create mynet # 创建自定义网络

数据卷挂载

docker run -v /data:/app/data mysql  # 挂载宿主机目录到容器
docker volume create db_volume        # 创建数据卷 

资源监控

docker stats       # 实时查看容器资源使用（CPU/内存/IO）
docker logs web    # 查看容器日志
docker stats --format "table {{.Container}}\t{{.CPUPerc}}\t{{.MemUsage}}"

‌清理与优化

docker system prune      # 清理无用镜像/容器/网络/缓存
docker system df         # 查看 Docker 磁盘占用