关闭 selinux

# setenforce 0
# sed -i --follow-symlinks 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/sysconfig/selinux
# cat /etc/sysconfig/selinux

解压二进制文件

tar -xf docker-28.5.2.tgz
cp docker/* /usr/bin/

安装buildx

[root@ip-172-20-60-110 docker-binary-install]# ll ~/.docker/cli-plugins/docker-buildx
-rwxr-xr-x. 1 root root 68251832 May 27 11:28 /root/.docker/cli-plugins/docker-buildx
[root@ip-172-20-60-110 docker-binary-install]# ll
total 163280
-rwxr-xr-x. 1 root root 68251832 May 27 11:27 buildx-v0.29.1.linux-amd64
-rw-r--r--. 1 root root      253 May 27 11:17 containerd.service
-rw-r--r--. 1 root root      434 May 27 11:06 daemon.json
-rw-r--r--. 1 root root 81477327 May 27 10:52 docker-28.5.2.tgz
-rw-r--r--. 1 root root 17450125 May 27 10:52 docker-rootless-extras-28.5.2.tgz
-rw-r--r--. 1 root root      597 May 27 11:05 docker.service
[root@ip-172-20-60-110 docker-binary-install]#
[root@ip-172-20-60-110 docker-binary-install]# mv ~/.docker/cli-plugins/buildx ~/.docker/cli-plugins/docker-buildx
[root@ip-172-20-60-110 docker-binary-install]# docker buildx version
github.com/docker/buildx v0.29.1 a32761aeb3debd39be1eca514af3693af0db334b
[root@ip-172-20-60-110 docker-binary-install]#

启用docker.service

[root@ip-172-20-72-64 ~]# cat /etc/systemd/system/docker.service
[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network-online.target firewalld.service containerd.service
Wants=network-online.target

[Service]
Type=notify
ExecStart=/usr/bin/dockerd \
  --default-ulimit nofile=65536:65536 \
  --host=unix:///var/run/docker.sock \
  --containerd=/run/containerd/containerd.sock  

ExecReload=/bin/kill -s HUP $MAINPID
TimeoutStartSec=0
Restart=always
RestartSec=2  
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity 
TasksMax=infinity
Delegate=yes
KillMode=process

[Install]
WantedBy=multi-user.target
[root@ip-172-20-72-64 ~]#

设置/etc/docker/daemon.json

[root@ip-172-20-72-64 ~]# cat /etc/docker/daemon.json
{
  "insecure-registries": [
    "cloud.test.com",
    "registry.local:5000"
  ],
  "log-driver": "json-file",
  "log-opts": {
    "max-size": "50m",
    "max-file": "3"
  },
  "bip": "172.150.0.1/16",
  "default-address-pools": [
    {
      "base": "172.100.0.0/16",
      "size": 24
    },
    {
      "base": "172.120.0.0/16",
      "size": 24
    }
  ],
  "experimental": true,
  "exec-opts": ["native.cgroupdriver=systemd"]
}
[root@ip-172-20-72-64 ~]#