cenos8 stream版本安装podman配置

admin

1、安装 Podman 和 Podman-Compose。

0 O  ~7 u4 f( k6 u0 }& h  }1）安装 Podman：
" x  b2 T) a% Y' B9 b+ S
7 ~( t! K/ j3 I* M[root@host ~]# dnf install podman podman-plugins cockpit cockpit-podman
6 Y9 W- f2 s% y: R) L[root@host ~]# systemctl enable --now podman
[root@host ~]# systemctl enable --now cockpit.socket
* Z* ]' S8 Y+ L安装cockpit和cockpit-podman后，可以通过【https://ip:9090】来管理容器。

2）安装 Podman-Compose：
" Z, Q! r2 s+ O* o) r
[root@host ~]# dnf install python3
; A8 B, ?( V  U( \2 Y5 u[root@host ~]# pip3 install podman-compose
程序安装位置：
镜像管理程序：/usr/bin/podman
编译文件执行程序：/usr/local/bin/podman-compose
+ d8 f0 S6 H- ^4 W1 t) b配置文件目录：/etc/containers，/usr/share/containers
1 F4 q! u2 {. D/ \+ x
更新

[root@host ~]# dnf upgrade podman
  b2 U1 ^# N& Q& w( u[root@host ~]# pip3 install -U podman-compose
5 ~- H" X& m$ r7 t$ r- |7 v
2、设置国内镜像仓库加速器。
- e0 Y3 m- @" s  D! _6 l
1）备份原配置文件：

[root@host ~]# cp /etc/containers/registries.conf{,.bak}
7 b  X; h, G- Q% v: z9 E& g2）使用文本编辑器打开配置文件：
( h( [- q2 f% h5 ]7 W! r% L
9 E+ D0 f# i( g  I( V: [( K[root@host ~]# vim /etc/containers/registries.conf
3）删除原有内容，重新编写文件内容后保存：

* T8 m4 I( l. l+ Tunqualified-search-registries = ["docker.io"]
8 E0 F# t8 G: R2 `( F. F
4 z9 C& v: ^# ~7 }# y- N[[registry]]
$ D  @8 y2 @, w8 v% O; Xprefix = "docker.io"
location = "docker.io"

[[registry.mirror]]
5 a: T9 t9 t* blocation = "mirrors.tuna.tsinghua.edu.cn"
- Z& l% o* _7 k. L2 U
4 |3 X6 G, ~( `- C5 v' e
4、设置镜像仓库和运行时目录。
3 a+ ?/ k( c5 K; r2 H& L
; R4 z5 c1 J; b# K! u% C: J1）创建镜像仓库目录：

[root@host ~]# mkdir -p /data/containers/{run,graph}
5 V# \# Y1 m* P' L2）备份原配置文件：
- Q" [; U; ]5 z& E4 b
/ `) [, s3 [" P/ D9 }4 Q[root@host ~]# cp /etc/containers/storage.conf{,.bak}
3）使用文本编辑器打开配置文件：

. |. K7 Z3 r' ?$ m2 @[root@host ~]# vim /etc/containers/storage.conf
2 s. b* u) H& I' K. I2 \4）修改文件以下内容后保存：
$ L- B0 v5 {8 V0 A8 e
# root 用户运行时目录
runroot = "/data/containers/run"

# root 用户镜像仓库目录
% O8 p; e3 W6 ?; W  M/ w( ], r1 l. Cgraphroot = "/data/containers/graph"
6 \! D! p9 ]0 F) [6 }( ]4 }
5、修改 SELinux 配置文件，永久关闭 SELinux。
' U5 C% z# ^9 a1 u% v
9 O4 t5 F6 N9 d, Y. m. e使用文本编辑器打开"/etc/selinux/config"文件：
2 H/ ?  D( W# j- x3 E  g
$ N. m: O- C9 @" G1 Q4 F) O% k[root@host ~]# vim /etc/selinux/config
将 "SELINUX" 参数设置为："permissive" 或者 "disabled"，并保存：

! ]& E4 ^' q( K7 I! P* O1 o
#     enforcing - 表示启用 SELinux 安全策略。
#     permissive - 表示启用 SELinux 安全策略，但不强制验证。如果执行第一步可以正常运行，则建议设置此值。
, w9 q( N$ L1 }#     disabled - 关闭 SELinux 安全策略，相当于没有安装 SELinux。
% u( N. [6 z3 L. tSELINUX=disabled
% N# V/ S" n' u8 Q

重启服务器：
" k# E5 q1 B) j# k
[root@host ~]# shutdown -r now

+ J* v. q0 v7 H, N: Z; o  z# t5 a

admin

podman的配置文件 /etc/containers/registries.conf
全局配置文件: /etc/containers/registries.conf
# Y' s% F4 G. h$ \0 \用户配置文件: ~/.config/containers/registries.conf
备份原文件
: k/ T! D9 u0 {+ U. X9 U: T
sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.bak
9 N. i; l* l# k8 y6 ?4 T1 n. ~. ^7 c
sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.`date "+%Y-%m-%dT%H:%M:%S"`.bak

0 `1 Q5 ?* v  b7 Xsudo cp /etc/containers/registries.conf /etc/containers/registries.conf.`date "+%Y%m%d%H%M%S"`.bak

2 a1 C' F+ o& Q% Rsudo cp /etc/containers/registries.conf /etc/containers/registries.conf.`date "+%y%m%d%H%M%S"`.bak
9 Z: N/ S! p0 e3 O
2 ?" H4 s1 |# W: s' T* m+ W2 {3 P[ -e /etc/containers/registries.conf.BackupDir ] || mkdir /etc/containers/registries.conf.BackupDir
) ]* I, k$ E/ F. I$ \sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.BackupDir/registries.conf.`date "+%Y%m%d%H%M%S"`.bak

9 ?0 |) e; }, h& e9 Q/ F: \! w, R编辑

sudo vi /etc/containers/registries.conf
+ i; u# K7 Z- I  h4 @* }5 b: H+ P7 `! f
+ c9 b6 _& [( C( M3 u0 v6 ~& _sudo vi ~/.config/containers/registries.conf
: H1 @7 ?; n. W( i
查看
# ^) S0 o- b" b2 H6 F$ n
sudo cat /etc/containers/registries.conf

sudo cat ~/.config/containers/registries.conf
* `, b# x% j: }- B1 h% z
! e; d) g6 u' csudo more /etc/containers/registries.conf

+ R! G8 |  V. M9 Z% [* ?sudo less /etc/containers/registries.conf

其中prefix是pull的时候指定的镜像前缀，location是获取镜像的地址，如果不指定prefix则默认和location一致。insecure=true表示允许通过HTTP协议来获取镜像，对于私有化部署/内网测试环境下无https证书的环境来说很有帮助。

配置单个镜像源
% @; K' M+ ~& r0 W; d
0 _  Z* X! E6 T" t# G! r' i9 D使用中科大源
  g& o' m# L) S
###  CentOS9原版 unqualified-search-registries
* e8 h+ F' u( B' w4 b4 \" v# unqualified-search-registries = ["registry.fedoraproject.org", "registry.access.redhat.com", "registry.centos.org", "quay.io", "docker.io"]
6 ^7 s& E" v- ?* o* S$ x
+ d' B" x! E9 `4 R& d2 x& r7 [###  Fedora36原版 unqualified-search-registries
# unqualified-search-registries = ["registry.fedoraproject.org", "registry.access.redhat.com", "docker.io", "quay.io"]

  s& X" R- y" F###  Rocky9原版 unqualified-search-registries
% s+ i, E+ M/ e2 }2 Z. s. F# unqualified-search-registries = ["registry.fedoraproject.org", "registry.access.redhat.com", "registry.centos.org", "quay.io", "docker.io"]
6 p  ?1 v+ i* S
###  AlmaLinux9原版 unqualified-search-registries
( C# K. P2 ?& u6 _  A6 ]* ^- [# unqualified-search-registries = ["registry.access.redhat.com", "registry.redhat.io", "docker.io"]

### 取消从默认地址搜索的仓库域名
" V$ |' v: ~. u( M4 q& @; dunqualified-search-registries = ["docker.io"]
; ?' H( O. q1 `6 z; z: c- _" i; i
! M! |# @4 u! e  B/ \2 j### 自定义搜索器
* J  \8 }6 S4 L4 S  w[[registry]]
### 仓库前缀
prefix = "docker.io"
8 z* W( ]" G, n, s  R; t### 加速器地址
3 d/ d, q2 N$ I( p  k7 ^5 m8 x! j9 Llocation = "docker.mirrors.ustc.edu.cn"
### 允许通过http协议获取镜像
insecure = true
1 m2 @* z; s* x' O- d# }
8 }7 V. c, y1 l# p& d7 x2 F
* k# p4 a: K, \$ Q

: M$ C) \* I1 _0 d6 ?( E. n) o使用docker中国区的源

$ ?) C: N; |2 K6 d. n( @unqualified-search-registries = ["docker.io"]

[[registry]]
prefix = "docker.io"
location = "registry.docker-cn.com"
7 @0 W$ U$ s7 b. F$ ainsecure = true

( H- R9 Z; m! g4 J+ j
( l3 v; u+ P8 X2 Y8 M. z使用163源
% H$ |2 ~3 H1 Z3 v) ^: @9 l9 D
unqualified-search-registries = ["docker.io"]
8 E; i% R: K+ q; {# q
9 M2 {4 h; r& U) M8 C$ Q[[registry]]
7 E3 o3 X4 |3 Kprefix = "docker.io"
2 K: T8 D/ {" T  T1 Elocation = "hub-mirror.c.163.com"
insecure = true
& S. [& }- w6 k1 D7 x- {

使用阿里源

unqualified-search-registries = ["docker.io"]

[[registry]]
prefix = "docker.io"
! D8 D$ L0 R1 c9 u/ s) ilocation = "xxxxxx.mirror.aliyuncs.com"
  L- m! v% n" P( ~. k


配置多个镜像源

) R9 @8 @- m$ t% y4 a! N' punqualified-search-registries = ["docker.io"]

[[registry]]
prefix = "docker.io"
  d1 b7 |4 m8 w% }8 N! Flocation = "hub-mirror.c.163.com"
insecure = true
: S" B' q; x4 b0 d  a/ x  A4 T
7 O2 }  m2 F, {[[registry.mirror]]
location = "docker.mirrors.ustc.edu.cn"
  N; F: Y$ L; M" k9 O5 Binsecure = true
- t' r5 N; U' g7 Z[[registry.mirror]]
, j* X8 a0 f2 d2 |" Ilocation = "hub-mirror.c.163.com"
' y% [* @0 T( K& s; einsecure = true
/ l' M" z! ^# c& O' `1 u2 O6 ][[registry.mirror]]
location = "registry.docker-cn.com"
% m( C& t* T' i8 minsecure = true
8 j; ?. e  p+ T' ^" J
  e& V! a4 U5 a  l用脚本配置
% F1 N) @% n" ^- D$ B* ^6 q
* U4 ?; W9 d3 L& a# z/ B- g1 U4 ^#!/bin/bash
" Q4 }" b; {3 n[ -e /etc/containers/registries.conf.BackupDir ] || mkdir /etc/containers/registries.conf.BackupDir
sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.BackupDir/registries.conf.`date "+%Y%m%d%H%M%S"`.bak
6 n) }7 g2 v- O! uprintf '
unqualified-search-registries = ["docker.io"]
1 n% F# q6 @: T' C: Z; }) n
[[registry]]
. ]6 T$ T2 {2 `" ~prefix = "docker.io"
. w7 {# A( l5 k7 d4 H9 o5 L3 N) slocation = "hub-mirror.c.163.com"
4 P4 Y" j9 \/ g  b* @" a" tinsecure = true
[[registry.mirror]]
) e& V: X% E! ^3 a$ |, Jlocation = "docker.mirrors.ustc.edu.cn"
" D3 X9 p0 Q1 w9 a. Minsecure = true
5 o, w1 |# X, j" Q! N* L0 b[[registry.mirror]]
; n/ K+ G  S* K' w5 [% L2 B" Klocation = "hub-mirror.c.163.com"
insecure = true
, o+ t2 z$ n1 }/ |+ [( w[[registry.mirror]]
location = "registry.docker-cn.com"
insecure = true
' | sudo tee /etc/containers/registries.conf


测试,查看信息

sudo podman run hello-world

: c! D/ w6 y8 w# K1 q, Y+ _sudo podman info
; m, {1 D8 Z  n! K
. B& y* T/ |4 \

admin

安装podman：
dnf install -y @container-tools
dnf install -y podman
安装podman：
dnf install -y @container-tools
& ]% F8 `+ F5 ~1 t) k# h, ^dnf install -y podman
, o3 c7 |: k. e
1 X* G+ a$ H) z+ \, D备份文件：
3 @9 _  c  F) y* w8 j6 ]cp /etc/containers/registries.conf{,.bak}

修改文件：
vim /etc/containers/registries.conf
# c+ H1 J: o  Z+ n去掉红帽的哪些配置，只保留下面的配置：
' k. i. ]: [8 Runqualified-search-registries = ["docker.io"]
unqualified-search-registries = ["docker.io"]
- m+ [" K2 L) d6 E; {- a2 U[[registry]]
/ n+ [( O& o+ A$ yprefix = "docker.io"
: {3 f6 R! Q- J1 E* ?" R5 xlocation = "docker.io"

[[registry.mirror]]
location = "mirror.baidubce.com"
$ `' u7 ]- y, a- D8 t

dnf install -y podman

dnf install -y podman podman-plugins cockpit cockpit-podman

systemctl enable --now podman.service

systemctl enable --now cockpit.socket

3 ]: c: {. D# Q* D/ F* ]