cenos8 stream版本安装podman配置

admin

1、安装 Podman 和 Podman-Compose。

1）安装 Podman：

[root@host ~]# dnf install podman podman-plugins cockpit cockpit-podman
6 _9 @: @  ~; u9 j" _[root@host ~]# systemctl enable --now podman
[root@host ~]# systemctl enable --now cockpit.socket
安装cockpit和cockpit-podman后，可以通过【https://ip:9090】来管理容器。
1 R1 P# l/ S- ]. @
# h- g2 C4 a8 F, L2）安装 Podman-Compose：
* s; d7 Q6 ^: e  J
6 Z, L# J! N# k7 o# H3 M[root@host ~]# dnf install python3
0 f- A1 m" @/ ]$ I[root@host ~]# pip3 install podman-compose
程序安装位置：
( {$ l2 }, F4 B& t4 z镜像管理程序：/usr/bin/podman
编译文件执行程序：/usr/local/bin/podman-compose
' x4 j, y# ^7 M! j; U8 p& C配置文件目录：/etc/containers，/usr/share/containers
" I7 a6 ^) \7 a4 O7 ]7 N
4 U8 ?) f1 i3 \5 U更新

' U( V. J1 ?4 Y7 S1 i; O[root@host ~]# dnf upgrade podman
  L2 a) X) C. N8 [[root@host ~]# pip3 install -U podman-compose
" r% o" A7 N* L( _! E$ s. }
2、设置国内镜像仓库加速器。
* k# l* P4 M4 {. I7 T. |
1）备份原配置文件：
& q8 m* \3 J1 n0 G/ Q
8 v7 [8 G/ y/ j7 I- `1 u! ~: J8 S[root@host ~]# cp /etc/containers/registries.conf{,.bak}
- j. F" c+ ?7 d* y% ~3 ]2）使用文本编辑器打开配置文件：

[root@host ~]# vim /etc/containers/registries.conf
  G  b  y- Y+ B* l) t6 }3）删除原有内容，重新编写文件内容后保存：
3 v% V" h4 o- ]6 M
unqualified-search-registries = ["docker.io"]

' R5 E9 w4 y  y4 `& X. z% m1 c[[registry]]
1 i' u5 [" P1 M  E: W! aprefix = "docker.io"
location = "docker.io"
; j' K4 E6 J3 i! D! D, ], y
( E$ ]' l3 O# S. h. q[[registry.mirror]]
location = "mirrors.tuna.tsinghua.edu.cn"
+ K3 S1 D  u% g. t' i( Z

5 v* B# i2 Y7 c! [( }( m4、设置镜像仓库和运行时目录。
$ L' ]% p. `% B' q. B' z
1）创建镜像仓库目录：

3 U) q  G+ M1 R4 L[root@host ~]# mkdir -p /data/containers/{run,graph}
3 g$ D+ a9 u' ?: f$ e2）备份原配置文件：
) i; A( m5 l9 W+ Q1 q
& r. D5 |: e9 ]5 J+ w, H[root@host ~]# cp /etc/containers/storage.conf{,.bak}
3）使用文本编辑器打开配置文件：

, X$ O; J9 O6 _2 [) Z3 E& ?[root@host ~]# vim /etc/containers/storage.conf
4）修改文件以下内容后保存：
4 z- H  c% v( d) b: q8 {
' d" b  P: z! Y$ J- c' C' M# root 用户运行时目录
% R0 h- c9 e" N8 k( v/ Urunroot = "/data/containers/run"
% M- X* d, ~# @5 x6 ?
% F8 X& _9 V, c# root 用户镜像仓库目录
7 I0 W8 r& d7 P* |+ p6 |graphroot = "/data/containers/graph"
1 p! O' w4 w: J% f) v8 Y, I
5、修改 SELinux 配置文件，永久关闭 SELinux。

使用文本编辑器打开"/etc/selinux/config"文件：

3 C: o$ [- ~. J; c[root@host ~]# vim /etc/selinux/config
. S7 Q4 V9 m$ r将 "SELINUX" 参数设置为："permissive" 或者 "disabled"，并保存：

# g, {5 S+ Q/ y
#     enforcing - 表示启用 SELinux 安全策略。
#     permissive - 表示启用 SELinux 安全策略，但不强制验证。如果执行第一步可以正常运行，则建议设置此值。
/ t4 f& Z6 g8 F8 m% ^#     disabled - 关闭 SELinux 安全策略，相当于没有安装 SELinux。
: g/ m+ z' P$ [, N. e  [SELINUX=disabled
3 p$ _$ z" @" F; ?
: V+ ]4 r+ e/ Z! L2 I0 O; l
重启服务器：
+ G. D: K, y0 s  h
2 H+ _6 ^! }2 k) ?1 `8 \( A, Z2 X[root@host ~]# shutdown -r now
# N  i+ U! u. V, F, @
; @( h# D! w5 y0 m3 a* F

admin

podman的配置文件 /etc/containers/registries.conf
. `7 \- R3 K; p全局配置文件: /etc/containers/registries.conf
: `3 {5 Y7 W2 W* ]4 F# p  d用户配置文件: ~/.config/containers/registries.conf
备份原文件

0 u1 S  F3 F; esudo cp /etc/containers/registries.conf /etc/containers/registries.conf.bak

sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.`date "+%Y-%m-%dT%H:%M:%S"`.bak
/ T; R, u6 e( _9 f# m/ h. m# O3 V
sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.`date "+%Y%m%d%H%M%S"`.bak
2 @1 ~3 [0 j# E3 `
sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.`date "+%y%m%d%H%M%S"`.bak
6 P: x1 I/ T! x7 L4 e( v/ @
[ -e /etc/containers/registries.conf.BackupDir ] || mkdir /etc/containers/registries.conf.BackupDir
4 m  U: S6 @0 D3 e8 p" S3 Msudo cp /etc/containers/registries.conf /etc/containers/registries.conf.BackupDir/registries.conf.`date "+%Y%m%d%H%M%S"`.bak

编辑

, y1 B- ?' ~, o" h, g8 jsudo vi /etc/containers/registries.conf
7 a6 P* H  e: ^& n0 F8 H& n, P  U
sudo vi ~/.config/containers/registries.conf

查看

4 l& `6 w9 I9 Vsudo cat /etc/containers/registries.conf
1 o0 \0 _2 G/ |+ ~. K
" e6 b' s; J' f) s. Z5 gsudo cat ~/.config/containers/registries.conf
$ z8 l- B( s4 {* Q3 a1 h0 n
6 i  w8 |8 F7 u' V! dsudo more /etc/containers/registries.conf

sudo less /etc/containers/registries.conf

其中prefix是pull的时候指定的镜像前缀，location是获取镜像的地址，如果不指定prefix则默认和location一致。insecure=true表示允许通过HTTP协议来获取镜像，对于私有化部署/内网测试环境下无https证书的环境来说很有帮助。
0 m& U9 H* @; y
/ M5 J# c2 E/ M- s- J" E配置单个镜像源
8 R' o" o. J& p! ~: t; k+ ^
  c* _' x1 a6 q  q使用中科大源

###  CentOS9原版 unqualified-search-registries
# unqualified-search-registries = ["registry.fedoraproject.org", "registry.access.redhat.com", "registry.centos.org", "quay.io", "docker.io"]

###  Fedora36原版 unqualified-search-registries
/ q2 D$ E5 b' s& w$ y# unqualified-search-registries = ["registry.fedoraproject.org", "registry.access.redhat.com", "docker.io", "quay.io"]

###  Rocky9原版 unqualified-search-registries
- ^- K: J" ]. C- @4 a. |# unqualified-search-registries = ["registry.fedoraproject.org", "registry.access.redhat.com", "registry.centos.org", "quay.io", "docker.io"]

###  AlmaLinux9原版 unqualified-search-registries
# unqualified-search-registries = ["registry.access.redhat.com", "registry.redhat.io", "docker.io"]

### 取消从默认地址搜索的仓库域名
unqualified-search-registries = ["docker.io"]
3 P/ ?/ k, T; i3 [1 P( ^
### 自定义搜索器
[[registry]]
- q8 N( X* Y) k5 q### 仓库前缀
5 A' G. K5 J  V7 R; h% O5 m7 Mprefix = "docker.io"
8 W! u1 }; K0 Z3 J% @7 G6 ]### 加速器地址
6 V8 c9 o& x# \8 q9 e3 ]location = "docker.mirrors.ustc.edu.cn"
### 允许通过http协议获取镜像
insecure = true

% n! f( I. e" f$ R+ L


使用docker中国区的源

2 L$ ]# B/ U; w; v8 s' _unqualified-search-registries = ["docker.io"]
" [2 X% h8 T( R: k8 T7 Y. z
8 f6 r: o  U' f# {) r0 q[[registry]]
, |# w$ y/ y7 P- i6 mprefix = "docker.io"
3 M/ J# n$ ?. C, v; Y8 N  @& r$ Mlocation = "registry.docker-cn.com"
insecure = true
, ]7 O/ `- T: }# }6 c/ {0 X) V

使用163源
0 k  n7 ^% ?+ K) ?1 J7 G) j
& `- g. s8 U. D! k' a/ H: k7 Z# kunqualified-search-registries = ["docker.io"]

8 `3 W1 [, X! D[[registry]]
prefix = "docker.io"
" K5 P$ b# o: z3 l8 ?0 tlocation = "hub-mirror.c.163.com"
/ k8 f! ^. T/ b9 g, |& k7 @* ?insecure = true


使用阿里源
9 y( `. h* ]' G0 R8 C' K( d
unqualified-search-registries = ["docker.io"]

* k7 R0 [+ p4 f( G% S' l[[registry]]
, G: ^; ?4 r7 x* @prefix = "docker.io"
6 Y; c% d( L9 h1 I5 Tlocation = "xxxxxx.mirror.aliyuncs.com"
6 K* E( B3 g/ X2 W0 B6 ]


配置多个镜像源

7 \) l; |0 E) \) ?4 Hunqualified-search-registries = ["docker.io"]

[[registry]]
prefix = "docker.io"
9 w9 j: J3 n6 Klocation = "hub-mirror.c.163.com"
insecure = true
, o. C0 G% K" z" Z8 m5 ]
[[registry.mirror]]
' c* r8 W' a5 z% A: ?0 Y/ Ilocation = "docker.mirrors.ustc.edu.cn"
insecure = true
[[registry.mirror]]
location = "hub-mirror.c.163.com"
insecure = true
- v4 V4 w8 z+ ]4 L5 s[[registry.mirror]]
location = "registry.docker-cn.com"
, M( n0 f' x: v0 f) i' Cinsecure = true
$ c  ^7 M* V# l, P
" [9 W& B' J9 X3 f用脚本配置
2 r' K4 k( v- x. U  Y: w' w
! D; ]& }; }  @" q& W#!/bin/bash
: t" U7 P2 \/ }) ]: F; W, p9 c5 U[ -e /etc/containers/registries.conf.BackupDir ] || mkdir /etc/containers/registries.conf.BackupDir
sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.BackupDir/registries.conf.`date "+%Y%m%d%H%M%S"`.bak
printf '
- }/ G' g) P+ u" [4 \7 ?unqualified-search-registries = ["docker.io"]

2 I% O" t- T9 b8 d; A[[registry]]
prefix = "docker.io"
/ Q9 `, r# s7 T9 z  Qlocation = "hub-mirror.c.163.com"
insecure = true
! c" t5 B, r& \8 j# Z& `[[registry.mirror]]
location = "docker.mirrors.ustc.edu.cn"
insecure = true
8 f- n2 P: m$ Z1 s# h% ~: k, A, x[[registry.mirror]]
; M6 K9 M, H, |* ]2 B! O! ylocation = "hub-mirror.c.163.com"
insecure = true
[[registry.mirror]]
5 u" ^* y" D8 M6 D! e& Xlocation = "registry.docker-cn.com"
insecure = true
+ [7 a- K7 [) s% {. o; Z8 y7 g' | sudo tee /etc/containers/registries.conf


2 {; E" j5 W& r" p# F测试,查看信息

; ^. x. m8 z" }" Msudo podman run hello-world

: |" s' w* ?. G; N; O, l: Osudo podman info


5 |) {1 }. I- f- Y

admin

安装podman：
dnf install -y @container-tools
) E6 o5 g6 p5 ?% q4 Q0 {- M# Vdnf install -y podman
3 T( K6 ]' {7 j# P8 O安装podman：
5 \  o1 @6 W0 h# p3 O- P' odnf install -y @container-tools
1 u+ Q( G! f# F7 Ldnf install -y podman

* \* `3 ^3 N+ r9 y) i" w1 ~备份文件：
! V4 @( e: `3 v9 bcp /etc/containers/registries.conf{,.bak}

修改文件：
+ E/ X4 `6 b0 U5 ?vim /etc/containers/registries.conf
! O4 a( [2 O7 q) r( {; J8 O去掉红帽的哪些配置，只保留下面的配置：
unqualified-search-registries = ["docker.io"]
" B7 r/ G& o+ I+ Qunqualified-search-registries = ["docker.io"]
[[registry]]
* ]1 K6 [$ Z" ^" o! K; e4 Nprefix = "docker.io"
/ I" t$ X& ~  S/ w5 h* }7 @location = "docker.io"

0 M5 U9 t* k' y/ ]) M" }[[registry.mirror]]
( x( s/ z4 q7 }location = "mirror.baidubce.com"

: e& f1 w( `5 F' U' @

dnf install -y podman

dnf install -y podman podman-plugins cockpit cockpit-podman

systemctl enable --now podman.service

systemctl enable --now cockpit.socket

# D" B. Y  v4 F3 {
% K: k3 M4 s! r/ _% f  ^