Skip to main content

docker component description

Guardian operation mode​

By default, the installation method ofeaszup is used to deploy docker. For details, seeInstall docker service

Common parameter description​

vim /etc/docker/daemon.json
{
  "registry-mirrors": [
    "https://dockerhub.azk8s.cn",
    "https://docker.mirrors.ustc.edu.cn",
    "http://hub-mirror.c .163.com"
  ],
  "max-concurrent-downloads": 10,
  "log-driver": "json-file",
  "log-level": "warn",
  "log-opts": {
    "max-size": "10m",
    "max-file": "3"
    },
  "data-root": "/var/lib/docker"
}

For specific parameters, please refer todocker official documentation

Configure docker to trust private image repositories​

If your private image repository is not configured with https or self-signed https certificate, you need to configure docker trust.

    1. If https or self-signed certificates are not configured (not trusted by browsers), you need to configure the dockerinsecure-registriesvalue, and you need to restart docker when you are done
"insecure-registries": ["goodrain.me","hub.test.com"],
    1. Self-signed certificates, and docker does not need to be restarted

You need to copy the certificate of the self-signed domain name to the following path /etc/docker/certs.d/<Private image warehouse domain name>/

Example goodrain.me

root@compute-node-99:/etc/docker/certs.d/goodrain.me# ls
server.crt