cenos8 stream版本安装podman配置

admin

1、安装 Podman 和 Podman-Compose。
1 Z# a) N" ?0 L) x& B* T
1）安装 Podman：
$ Q& @6 m  S' g' ^" a, O1 n: L
0 b! h! k) z5 f& y! a3 ][root@host ~]# dnf install podman podman-plugins cockpit cockpit-podman
[root@host ~]# systemctl enable --now podman
[root@host ~]# systemctl enable --now cockpit.socket
$ O$ n- q+ k( b安装cockpit和cockpit-podman后，可以通过【https://ip:9090】来管理容器。

2）安装 Podman-Compose：
& Y9 f; q$ J7 S8 \' g* Q$ {
+ e* S, _1 P) T, q( O' h+ X+ q[root@host ~]# dnf install python3
" l5 y6 J9 @3 R) k- C[root@host ~]# pip3 install podman-compose
程序安装位置：
% V8 J7 V3 i8 l+ k镜像管理程序：/usr/bin/podman
( Z& e* J$ O4 [8 F- u编译文件执行程序：/usr/local/bin/podman-compose
. Y5 w5 Y: C, N3 g  W配置文件目录：/etc/containers，/usr/share/containers

) b, J2 K( o% q8 }8 N) O( l更新
  i! L; ?9 q; N; A  Q+ i1 R
$ U. p. f8 C: N$ H[root@host ~]# dnf upgrade podman
" K9 j4 \' z! K% z: D/ l" t' h[root@host ~]# pip3 install -U podman-compose
0 f$ r) `  l$ a3 M0 Q0 s$ y! H* q  ^
9 G& S. l+ I: X  H$ k3 w7 s2、设置国内镜像仓库加速器。

1）备份原配置文件：

[root@host ~]# cp /etc/containers/registries.conf{,.bak}
/ p4 W' W# Z8 N. [$ I6 p2）使用文本编辑器打开配置文件：
' W5 y, D9 A: c( |% u* N- E
[root@host ~]# vim /etc/containers/registries.conf
3）删除原有内容，重新编写文件内容后保存：
% P, y/ {/ @$ M* b& n
- {& t7 q0 b( b8 n* j# gunqualified-search-registries = ["docker.io"]

[[registry]]
" Z$ p' Y  A) _' ]3 M3 [prefix = "docker.io"
; n# }- u& N) N. U$ ^, U- ]. glocation = "docker.io"
. z# d8 ~# T$ M% |
7 t' p: g7 L2 }, J( {+ m[[registry.mirror]]
* X* f$ ?7 \. W1 ^0 z. [location = "mirrors.tuna.tsinghua.edu.cn"


# {4 {& n% O. A8 L8 u! _, I7 `4、设置镜像仓库和运行时目录。
2 H3 g% W- ~0 u1 Q2 i4 s
4 H4 Y' ~9 {' A7 F1）创建镜像仓库目录：

[root@host ~]# mkdir -p /data/containers/{run,graph}
9 P# ]! J" s% r- m2）备份原配置文件：

3 h& ]' ], Z: n) r[root@host ~]# cp /etc/containers/storage.conf{,.bak}
) ?/ h4 o  H. v$ m! D3）使用文本编辑器打开配置文件：

[root@host ~]# vim /etc/containers/storage.conf
4）修改文件以下内容后保存：
) J( S3 x* P: e/ \. {3 x& o
# root 用户运行时目录
3 @/ ]5 c. z, |! Lrunroot = "/data/containers/run"

# w0 R( y5 w( G8 M( Y+ g# root 用户镜像仓库目录
4 M# H' E  H3 |graphroot = "/data/containers/graph"

' B! J7 I* B2 j! q) S( b1 F7 J% Q5、修改 SELinux 配置文件，永久关闭 SELinux。
' E7 H( M  f' I5 y* b4 @/ d
+ H$ P, p8 T$ R2 ~+ M! E" `6 R2 h使用文本编辑器打开"/etc/selinux/config"文件：

9 X0 Y# E, B+ k! c) A5 a[root@host ~]# vim /etc/selinux/config
将 "SELINUX" 参数设置为："permissive" 或者 "disabled"，并保存：

- q  E, X3 X- t6 _' n
' L! @% g( B! D8 u5 w#     enforcing - 表示启用 SELinux 安全策略。
: g$ ?2 Y) }+ a) X#     permissive - 表示启用 SELinux 安全策略，但不强制验证。如果执行第一步可以正常运行，则建议设置此值。
9 q9 u$ j+ J' @- O#     disabled - 关闭 SELinux 安全策略，相当于没有安装 SELinux。
SELINUX=disabled
8 G5 g6 I" ]# }, T, e
- M% a4 e) X7 o8 E5 ?! I' Q
* @& {0 I# V' ]重启服务器：

7 {8 h; u* ~; G9 [& v! s8 ]1 `[root@host ~]# shutdown -r now
3 ^: L$ m- V) f3 V1 ?$ Y5 S2 E
: X: `6 {  C; g" T7 y

admin

podman的配置文件 /etc/containers/registries.conf
, W; Z& L! X' z) I2 F全局配置文件: /etc/containers/registries.conf
. I5 V& P" ^6 m; g2 ?' P用户配置文件: ~/.config/containers/registries.conf
- z! N$ P- A7 u  `( D备份原文件

sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.bak

sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.`date "+%Y-%m-%dT%H:%M:%S"`.bak
; p4 C3 `, D  X* C$ y
sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.`date "+%Y%m%d%H%M%S"`.bak
2 d. p* i; |- c$ _# N0 I/ |  O1 q$ b
sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.`date "+%y%m%d%H%M%S"`.bak
$ H& o/ z4 {# _0 d7 f( [
[ -e /etc/containers/registries.conf.BackupDir ] || mkdir /etc/containers/registries.conf.BackupDir
! k2 [+ ^0 _! i3 J5 g% P4 gsudo cp /etc/containers/registries.conf /etc/containers/registries.conf.BackupDir/registries.conf.`date "+%Y%m%d%H%M%S"`.bak

  ~" K7 d7 Q/ h: R编辑
  h' O  P/ U2 D$ W0 V) w3 @( G
sudo vi /etc/containers/registries.conf
% L) b7 ?4 w1 q+ p! ^" D
sudo vi ~/.config/containers/registries.conf
1 c, E0 Q& U& q0 h
5 x9 j" c; K7 T9 A/ w查看
+ |8 L6 W9 b! O' b9 f1 r3 Y! F8 [* t
! C$ a, P" r' x2 _# e3 Psudo cat /etc/containers/registries.conf
" v/ y. [; @% q7 p* r$ i+ \9 j
+ V# Q" k5 R! I9 n. I! Lsudo cat ~/.config/containers/registries.conf

sudo more /etc/containers/registries.conf
9 {. g# ~$ l0 _+ |0 ^
4 D% w" h2 o, O  O# z' Ssudo less /etc/containers/registries.conf

. X% W2 w: L' E7 L- n! {( Q$ x其中prefix是pull的时候指定的镜像前缀，location是获取镜像的地址，如果不指定prefix则默认和location一致。insecure=true表示允许通过HTTP协议来获取镜像，对于私有化部署/内网测试环境下无https证书的环境来说很有帮助。

& N0 e# J" f6 J& p配置单个镜像源
5 [- a5 L8 k8 O$ h* I
使用中科大源
) c% A  b* P& h% ?
###  CentOS9原版 unqualified-search-registries
# unqualified-search-registries = ["registry.fedoraproject.org", "registry.access.redhat.com", "registry.centos.org", "quay.io", "docker.io"]
2 \8 ^3 |8 r" b9 p& u' k9 R! J
###  Fedora36原版 unqualified-search-registries
" e1 z5 t0 B3 j5 ?2 ~# unqualified-search-registries = ["registry.fedoraproject.org", "registry.access.redhat.com", "docker.io", "quay.io"]

6 V( [6 y. C" g$ K9 s" D% X: F###  Rocky9原版 unqualified-search-registries
# unqualified-search-registries = ["registry.fedoraproject.org", "registry.access.redhat.com", "registry.centos.org", "quay.io", "docker.io"]

###  AlmaLinux9原版 unqualified-search-registries
) X4 u7 ^" w8 A/ `# e# unqualified-search-registries = ["registry.access.redhat.com", "registry.redhat.io", "docker.io"]

### 取消从默认地址搜索的仓库域名
; f4 V& d1 H+ M0 ^/ W$ j: }  {+ s& Bunqualified-search-registries = ["docker.io"]

### 自定义搜索器
[[registry]]
; n# X, y& h2 G7 G### 仓库前缀
/ R# E/ W, f3 Y4 Hprefix = "docker.io"
### 加速器地址
location = "docker.mirrors.ustc.edu.cn"
8 E& j" F9 F$ Y+ U) v8 u### 允许通过http协议获取镜像
2 S1 s* P' E' g6 S+ Q# ~6 Oinsecure = true
0 F, @. d  w- C


3 G: D" v7 A( ]5 O9 |1 ?5 _
# M8 A  O. u9 Z" k8 T3 B9 m使用docker中国区的源

unqualified-search-registries = ["docker.io"]

[[registry]]
prefix = "docker.io"
( f+ c8 L9 Y' Z' w* I5 e/ Wlocation = "registry.docker-cn.com"
insecure = true
1 g# a+ @7 G" y4 e# C% W" v7 J
% |# a/ a% Z' f4 b
* k2 G, h2 I$ B  M( ]使用163源

unqualified-search-registries = ["docker.io"]

# G8 K: [0 B% o" D/ k[[registry]]
- m4 A/ P7 _+ H5 d7 @( d9 [4 |: [prefix = "docker.io"
" h, C  R3 B& d: b/ |location = "hub-mirror.c.163.com"
- U. _$ D5 M- Q. ]7 Dinsecure = true

! |+ T% t6 j( d8 B0 U7 q, y( x6 n
# I' l1 q# ]5 ~( s- G+ t: O( f使用阿里源

0 M# X+ q3 z" l& o  f! `) z, Sunqualified-search-registries = ["docker.io"]

6 }2 Q0 P  _# G3 P0 t. T, p[[registry]]
! B  N1 |3 \9 {prefix = "docker.io"
location = "xxxxxx.mirror.aliyuncs.com"
6 s8 H' b$ m+ s" b
# \0 T$ b+ m$ F8 Z

配置多个镜像源

unqualified-search-registries = ["docker.io"]

[[registry]]
1 n6 m" R" F  e/ T; P: Kprefix = "docker.io"
location = "hub-mirror.c.163.com"
6 v; G* U4 _. e( winsecure = true

9 W2 b$ _# _! B8 f& o2 k, R2 i: x[[registry.mirror]]
location = "docker.mirrors.ustc.edu.cn"
insecure = true
1 P  S, A, F3 u6 r  o& U! z4 h[[registry.mirror]]
0 N. p* v  }$ nlocation = "hub-mirror.c.163.com"
3 Y- r0 L* `/ ]4 K# x; winsecure = true
5 K, _- x7 [) r5 S( U! B[[registry.mirror]]
location = "registry.docker-cn.com"
1 S7 Y8 t, v3 A) z: Finsecure = true
. S6 b2 i- F2 A- w
用脚本配置

# v) n5 Q8 C0 m+ |, C#!/bin/bash
[ -e /etc/containers/registries.conf.BackupDir ] || mkdir /etc/containers/registries.conf.BackupDir
sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.BackupDir/registries.conf.`date "+%Y%m%d%H%M%S"`.bak
2 h% u$ `% O& V; x7 c7 c, d( jprintf '
0 J+ F$ B4 g6 |! H. ~8 a# uunqualified-search-registries = ["docker.io"]
. t. U1 f. J( A( s
[[registry]]
prefix = "docker.io"
location = "hub-mirror.c.163.com"
8 F+ A- S3 [: d7 T  J3 oinsecure = true
5 k, N$ J2 I6 j6 U9 y% l[[registry.mirror]]
$ E2 y" v4 O; l/ Dlocation = "docker.mirrors.ustc.edu.cn"
3 b2 N% {( \- U. \insecure = true
5 v+ s2 n: G2 K2 \0 t[[registry.mirror]]
# C1 B9 i/ s* c: p# b! glocation = "hub-mirror.c.163.com"
: E6 k, B6 w! Tinsecure = true
[[registry.mirror]]
location = "registry.docker-cn.com"
insecure = true
4 b6 Z/ G) M1 S/ w5 r, f4 ~' | sudo tee /etc/containers/registries.conf


% R8 a1 V- ^" S# C9 N% `测试,查看信息
% U0 a' Y0 `. r8 P9 y
6 ?8 q9 e/ w: M$ |, y3 V* x0 J/ jsudo podman run hello-world
- J' Z; y: G: E: r! ?3 k3 Y
2 Z3 ?* C! S( G+ hsudo podman info
: C2 q. i, j4 ^4 q; Y2 d
  U) A; c7 [$ B5 N6 m( X  R3 R$ F

admin

安装podman：
dnf install -y @container-tools
2 I, U7 R9 u. E4 o" v& ^dnf install -y podman
安装podman：
dnf install -y @container-tools
! Z3 f" E% \% x/ G3 Ednf install -y podman

9 r" f, z2 ~7 n) m+ g1 D备份文件：
cp /etc/containers/registries.conf{,.bak}

; I/ G! v5 n) N) k* U9 `修改文件：
vim /etc/containers/registries.conf
去掉红帽的哪些配置，只保留下面的配置：
unqualified-search-registries = ["docker.io"]
; V& q: x) k6 u- Cunqualified-search-registries = ["docker.io"]
[[registry]]
! C/ g1 H1 s4 f% V7 P. Y( a" pprefix = "docker.io"
& H, ]0 M3 G' Z* M, W) ], ylocation = "docker.io"
2 T$ Y7 L0 C8 N3 e; e
# n6 ~$ z9 c* [( i3 T" E% l[[registry.mirror]]
location = "mirror.baidubce.com"
& I4 x4 j1 Z+ e# q! _  D1 r' A8 O* Q

dnf install -y podman

dnf install -y podman podman-plugins cockpit cockpit-podman

systemctl enable --now podman.service

systemctl enable --now cockpit.socket

' u5 q9 K& r1 _, W6 r