cenos8 stream版本安装podman配置

admin

1、安装 Podman 和 Podman-Compose。
5 Q# I. y! E6 t1 o8 U. J% N
1）安装 Podman：
* o2 D5 h( Z/ k
$ q# g  F6 a5 N# ~2 J4 ~[root@host ~]# dnf install podman podman-plugins cockpit cockpit-podman
% ^" ~3 y4 w" C& b4 v' a6 B, v[root@host ~]# systemctl enable --now podman
6 }/ K$ L. [6 W" M[root@host ~]# systemctl enable --now cockpit.socket
安装cockpit和cockpit-podman后，可以通过【https://ip:9090】来管理容器。

, P$ b1 E' o5 X; n1 _4 @9 h2）安装 Podman-Compose：

% a# }0 @2 j1 d9 ^$ G[root@host ~]# dnf install python3
[root@host ~]# pip3 install podman-compose
程序安装位置：
镜像管理程序：/usr/bin/podman
编译文件执行程序：/usr/local/bin/podman-compose
配置文件目录：/etc/containers，/usr/share/containers
+ ~* K7 i4 {1 l
更新

[root@host ~]# dnf upgrade podman
[root@host ~]# pip3 install -U podman-compose

2、设置国内镜像仓库加速器。

" h( [; A. H+ Q1）备份原配置文件：

[root@host ~]# cp /etc/containers/registries.conf{,.bak}
3 c# X: `' Q, [0 c. J2）使用文本编辑器打开配置文件：

[root@host ~]# vim /etc/containers/registries.conf
* V3 ^8 z+ Y: f3）删除原有内容，重新编写文件内容后保存：

! t" d0 }" ?" W6 M. G7 E: ?; {unqualified-search-registries = ["docker.io"]

[[registry]]
) B+ Q4 r9 Z0 q( [$ Vprefix = "docker.io"
location = "docker.io"
. m  n  V! k9 K8 O
+ C" X/ h3 b: C- R- G[[registry.mirror]]
3 F0 k: s+ Z3 P( ?location = "mirrors.tuna.tsinghua.edu.cn"

# e: j. Y  a* @
4、设置镜像仓库和运行时目录。

1）创建镜像仓库目录：

[root@host ~]# mkdir -p /data/containers/{run,graph}
2）备份原配置文件：
% y- `/ R( p) z
[root@host ~]# cp /etc/containers/storage.conf{,.bak}
3）使用文本编辑器打开配置文件：
9 L& m( a- u2 V/ Y! X6 X! L" O: d
[root@host ~]# vim /etc/containers/storage.conf
5 Q* y( O* ]- L: L5 e% S5 X4）修改文件以下内容后保存：
& J7 b' p& l7 }/ _& b
# root 用户运行时目录
- T! ]! x4 G, U  G+ i; qrunroot = "/data/containers/run"
+ d2 q! I0 ~% i2 {. O
# root 用户镜像仓库目录
graphroot = "/data/containers/graph"

0 e, L! ^  W( i$ h$ T* g5、修改 SELinux 配置文件，永久关闭 SELinux。
, n: ~! g& a# N; g$ L
使用文本编辑器打开"/etc/selinux/config"文件：

5 n( A3 g& y4 q& I. ][root@host ~]# vim /etc/selinux/config
! p! W2 q8 @+ _( ?$ a, f' k. [将 "SELINUX" 参数设置为："permissive" 或者 "disabled"，并保存：
6 G1 K1 r. s' U) I$ d0 U7 I
: H) l- [: ?5 B3 U
( w6 `/ d6 S; V$ F" o$ c) C# Q+ Y#     enforcing - 表示启用 SELinux 安全策略。
#     permissive - 表示启用 SELinux 安全策略，但不强制验证。如果执行第一步可以正常运行，则建议设置此值。
#     disabled - 关闭 SELinux 安全策略，相当于没有安装 SELinux。
SELINUX=disabled
2 ^$ D. e! `: }9 g1 t, }5 B4 @  a

重启服务器：
8 n" f. c/ ^1 ^* i5 d  F
3 U, F$ [8 @! R  q7 O! L9 z[root@host ~]# shutdown -r now

admin

podman的配置文件 /etc/containers/registries.conf
; ~. }- A: c1 t; W9 K全局配置文件: /etc/containers/registries.conf
' z6 ^3 f- N0 K  H" ^用户配置文件: ~/.config/containers/registries.conf
1 ?# s$ W6 H4 T备份原文件
9 Q# A- g* c' n
sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.bak

sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.`date "+%Y-%m-%dT%H:%M:%S"`.bak
4 `. L/ [, f& x  A4 g; q
sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.`date "+%Y%m%d%H%M%S"`.bak

0 a1 _8 V* [: A! I; asudo cp /etc/containers/registries.conf /etc/containers/registries.conf.`date "+%y%m%d%H%M%S"`.bak
" s! T# F1 F- Y: f
[ -e /etc/containers/registries.conf.BackupDir ] || mkdir /etc/containers/registries.conf.BackupDir
4 h% L  F& j2 W7 ?9 t9 jsudo cp /etc/containers/registries.conf /etc/containers/registries.conf.BackupDir/registries.conf.`date "+%Y%m%d%H%M%S"`.bak

编辑
- I, X" U1 Y0 {( E6 _
sudo vi /etc/containers/registries.conf

sudo vi ~/.config/containers/registries.conf
8 n& ^2 z; l7 g
查看

sudo cat /etc/containers/registries.conf

sudo cat ~/.config/containers/registries.conf
4 a9 s: ~0 G- C: @. u4 r' g
7 p, u6 Y# A- ~0 I& ^# Vsudo more /etc/containers/registries.conf
$ l0 z% z( {4 e4 d+ |0 u
" ?# \$ V$ x; p  g: P5 L/ }sudo less /etc/containers/registries.conf

8 y; L+ b7 C. E, K- r% ]: O其中prefix是pull的时候指定的镜像前缀，location是获取镜像的地址，如果不指定prefix则默认和location一致。insecure=true表示允许通过HTTP协议来获取镜像，对于私有化部署/内网测试环境下无https证书的环境来说很有帮助。
4 x# e' c9 ]( W) {
配置单个镜像源

: @: q+ V: ]5 H% o" U使用中科大源
- u: q+ h# K9 H7 F  N, G
/ S( p6 L& J0 U# |/ _$ [  z. i6 @###  CentOS9原版 unqualified-search-registries
) h! L1 W) {0 d" b8 x2 I# unqualified-search-registries = ["registry.fedoraproject.org", "registry.access.redhat.com", "registry.centos.org", "quay.io", "docker.io"]

###  Fedora36原版 unqualified-search-registries
" n5 d: C$ M5 ]& k& `# x& M* ~# unqualified-search-registries = ["registry.fedoraproject.org", "registry.access.redhat.com", "docker.io", "quay.io"]
2 }# Z+ {  {! U4 M/ j" ?7 z9 F
  K4 D% ?8 I, h+ I" E8 k###  Rocky9原版 unqualified-search-registries
: x7 N. u( |4 U6 L# unqualified-search-registries = ["registry.fedoraproject.org", "registry.access.redhat.com", "registry.centos.org", "quay.io", "docker.io"]
' K" G$ m8 R( X
###  AlmaLinux9原版 unqualified-search-registries
" g2 ?- o7 d1 F! |# unqualified-search-registries = ["registry.access.redhat.com", "registry.redhat.io", "docker.io"]
9 ~2 b( j' b9 x# C$ \0 K2 J
### 取消从默认地址搜索的仓库域名
% J- J' M4 e' e# Eunqualified-search-registries = ["docker.io"]
. m, W( n: ~% M+ s$ U+ n
### 自定义搜索器
5 F2 U  o' F  T[[registry]]
### 仓库前缀
  q, [1 c" ~1 @4 y9 j' mprefix = "docker.io"
### 加速器地址
location = "docker.mirrors.ustc.edu.cn"
& t# j1 r5 R$ {- x" z5 A. e1 e  Q### 允许通过http协议获取镜像
/ j- r$ t* j6 f+ O/ A3 D! Minsecure = true



  u1 f  r3 ^/ \3 V5 C
使用docker中国区的源
& t( S# s' K. Z: {: E3 a
5 E5 w) T  t5 u. }unqualified-search-registries = ["docker.io"]
( |1 I, j. u) x9 K5 A
4 a5 [0 P( O2 ?8 R[[registry]]
prefix = "docker.io"
: p& Y7 ?7 O/ z2 v" }; elocation = "registry.docker-cn.com"
insecure = true

; q) m7 \7 z. I
使用163源
- d) A& v: J: V1 G* a
unqualified-search-registries = ["docker.io"]
; k% Y/ F0 I  b
3 }: \3 p7 v6 G! h& S3 {4 ?[[registry]]
prefix = "docker.io"
% S! N  `& O+ Y  h) I) x9 olocation = "hub-mirror.c.163.com"
insecure = true
) y) s! w0 s2 l; N8 K7 N% T

使用阿里源
, r+ `3 `" r0 g& p% m
! j( ]' P2 M# [* g: ~unqualified-search-registries = ["docker.io"]
" m( z. x0 g! K0 k& X$ F5 u
[[registry]]
prefix = "docker.io"
location = "xxxxxx.mirror.aliyuncs.com"



配置多个镜像源

4 z; }4 Y" p  L2 j+ I' qunqualified-search-registries = ["docker.io"]
* I2 H& X; D  R3 k$ c
4 g* Q) a5 H! j[[registry]]
+ q$ H' M8 ~1 N: i, Lprefix = "docker.io"
location = "hub-mirror.c.163.com"
insecure = true
' u, J6 t. R5 L; _" }# z" @# e( i  f6 V
4 m& K, W& F5 J* k2 s- s- A" k4 K$ L# j[[registry.mirror]]
location = "docker.mirrors.ustc.edu.cn"
insecure = true
[[registry.mirror]]
location = "hub-mirror.c.163.com"
insecure = true
4 M! N9 }2 Q# ^  k, I: |[[registry.mirror]]
location = "registry.docker-cn.com"
, V; }9 T( S% F" J, uinsecure = true
$ B) u  E" J$ s5 T' F
. f3 A, N* m1 @1 Y用脚本配置

#!/bin/bash
! {: \3 N5 X% V0 Y0 |[ -e /etc/containers/registries.conf.BackupDir ] || mkdir /etc/containers/registries.conf.BackupDir
sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.BackupDir/registries.conf.`date "+%Y%m%d%H%M%S"`.bak
printf '
unqualified-search-registries = ["docker.io"]
3 \* V# s% E; R" m
$ q9 t% m& w2 t[[registry]]
+ i+ J  D6 ]% Q6 U* F) S  c# k. u0 Uprefix = "docker.io"
location = "hub-mirror.c.163.com"
* F1 M: L* y1 M+ v2 w2 Hinsecure = true
8 A# v2 V) _, x( \[[registry.mirror]]
" J6 c- c4 j3 Hlocation = "docker.mirrors.ustc.edu.cn"
/ M( h* t1 B. \0 s: Vinsecure = true
[[registry.mirror]]
location = "hub-mirror.c.163.com"
insecure = true
[[registry.mirror]]
location = "registry.docker-cn.com"
insecure = true
  a# I$ s& r) I" n* B4 [' j- M1 l' | sudo tee /etc/containers/registries.conf
4 g/ @8 b/ c  f" v8 ]8 f

; m, C' ]1 d: `1 m! z. T1 p测试,查看信息
3 V* L. C6 y, s# Q& q
8 Q: n9 N# M) {4 R% p4 Y7 @1 I) Rsudo podman run hello-world
( P- ^9 D, j' \6 M9 J
sudo podman info
7 M  d6 D3 R; g3 P% H) E

( m( l( C$ b3 X( ~' O5 ?) e

admin

安装podman：
* @$ D/ l0 b3 d+ c( sdnf install -y @container-tools
8 u% e- o/ z1 c* N! p: Z* kdnf install -y podman
安装podman：
) m  E1 K6 F, I: l2 m( G  Z5 Sdnf install -y @container-tools
1 D5 _  \8 M; n6 o# Ddnf install -y podman

- {, A- t$ V% W. P2 N备份文件：
$ X6 K- Z4 l, s8 M- L* ?: M3 i4 b; Tcp /etc/containers/registries.conf{,.bak}
8 s8 D: b( `) z) i. x5 w5 d8 i
修改文件：
vim /etc/containers/registries.conf
去掉红帽的哪些配置，只保留下面的配置：
' s! X; {5 t, Q6 J: xunqualified-search-registries = ["docker.io"]
6 O+ ?' G% @# G4 Iunqualified-search-registries = ["docker.io"]
5 b/ a) W# w% O  t4 O1 f; b[[registry]]
& S# P6 r+ [% q' Zprefix = "docker.io"
3 x% q' ?4 ~$ A! q5 zlocation = "docker.io"
+ |- `$ H: S, \- y
[[registry.mirror]]
2 [$ |! ?  }7 q0 p9 a5 f) l5 Y4 Hlocation = "mirror.baidubce.com"

dnf install -y podman

dnf install -y podman podman-plugins cockpit cockpit-podman

systemctl enable --now podman.service

systemctl enable --now cockpit.socket