cenos8 stream版本安装podman配置

admin

1、安装 Podman 和 Podman-Compose。
: t+ }+ a, d/ v; P5 p/ z, p
1）安装 Podman：
% a0 N9 U  B( g8 d9 e
[root@host ~]# dnf install podman podman-plugins cockpit cockpit-podman
1 V: t* s7 S& k: k* k[root@host ~]# systemctl enable --now podman
[root@host ~]# systemctl enable --now cockpit.socket
安装cockpit和cockpit-podman后，可以通过【https://ip:9090】来管理容器。
6 s: O8 B# r3 q% a
2）安装 Podman-Compose：
, V7 E1 X, m# r  }, X. U! b( p  l
/ u3 r+ N& H4 q- R2 M4 M[root@host ~]# dnf install python3
7 k0 A  Z+ o2 E9 M9 y& }8 r5 x[root@host ~]# pip3 install podman-compose
5 {9 t- w4 n( r程序安装位置：
8 ?% h$ m* h4 L, {% u镜像管理程序：/usr/bin/podman
编译文件执行程序：/usr/local/bin/podman-compose
配置文件目录：/etc/containers，/usr/share/containers

. q' Y; F/ H' D4 _更新
, [, v* G/ u6 f& |$ G
[root@host ~]# dnf upgrade podman
[root@host ~]# pip3 install -U podman-compose
& L/ k. b# L# h/ S' J! O
2、设置国内镜像仓库加速器。
" u5 C$ m/ L. V* r
0 ^; o  |3 c/ z6 K9 ~' w( v* U5 n- F1）备份原配置文件：

[root@host ~]# cp /etc/containers/registries.conf{,.bak}
2）使用文本编辑器打开配置文件：

[root@host ~]# vim /etc/containers/registries.conf
! b1 r  u* e1 R$ K- C) H3）删除原有内容，重新编写文件内容后保存：
* D( n, h) S5 X: h
unqualified-search-registries = ["docker.io"]

[[registry]]
0 T" Z# i* j% }1 L( zprefix = "docker.io"
location = "docker.io"

! Y. K3 d# k& T0 L' l3 `[[registry.mirror]]
location = "mirrors.tuna.tsinghua.edu.cn"


4、设置镜像仓库和运行时目录。
; s  S4 ]' a5 ?
4 ~9 }8 \7 T  j- G7 h" L8 R1）创建镜像仓库目录：
$ S; A0 G5 [+ C; e: w
[root@host ~]# mkdir -p /data/containers/{run,graph}
1 X6 u( f" c7 ]/ s: A2）备份原配置文件：
/ l3 d9 `2 ]  G$ X* j9 L( U  Y5 P) N
[root@host ~]# cp /etc/containers/storage.conf{,.bak}
3）使用文本编辑器打开配置文件：

' A. M/ e# b8 x  C[root@host ~]# vim /etc/containers/storage.conf
4）修改文件以下内容后保存：

# root 用户运行时目录
" X; p1 }' Q% O% Grunroot = "/data/containers/run"

# root 用户镜像仓库目录
graphroot = "/data/containers/graph"

9 W& y. Q' u8 A! H5 K2 t5、修改 SELinux 配置文件，永久关闭 SELinux。

* x+ H# G3 p2 Q, X* C8 N. o使用文本编辑器打开"/etc/selinux/config"文件：

/ y/ T9 K+ m. g& f; B5 T3 x[root@host ~]# vim /etc/selinux/config
+ S9 H; ]9 i, M, n3 m/ H将 "SELINUX" 参数设置为："permissive" 或者 "disabled"，并保存：
, q0 d& v, r* \/ O, \

- V. d. }% E+ ]; J! y#     enforcing - 表示启用 SELinux 安全策略。
#     permissive - 表示启用 SELinux 安全策略，但不强制验证。如果执行第一步可以正常运行，则建议设置此值。
#     disabled - 关闭 SELinux 安全策略，相当于没有安装 SELinux。
SELINUX=disabled
- L* i+ O1 I, N8 x  y$ y; }

5 Q* Y8 y! A* t0 N' Y: _5 _重启服务器：
/ P. t4 N5 [6 W# h7 D# H2 T
% F6 z0 k& l( @* `% k# w  t" Z[root@host ~]# shutdown -r now
* J) s: p* E, E9 ^1 @+ ?

admin

podman的配置文件 /etc/containers/registries.conf
( C/ r9 r' W( T7 ^% H2 }全局配置文件: /etc/containers/registries.conf
6 J0 n1 B) a6 Z& I用户配置文件: ~/.config/containers/registries.conf
! G* ?/ e# o( V备份原文件
8 W1 d7 z; G" I7 L2 c1 C
: k2 r9 B, t9 `sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.bak
2 L# N  `( w3 J3 Q0 D5 q$ W
sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.`date "+%Y-%m-%dT%H:%M:%S"`.bak

5 _% R7 J+ t, [# u0 s$ g0 zsudo cp /etc/containers/registries.conf /etc/containers/registries.conf.`date "+%Y%m%d%H%M%S"`.bak
3 a  @7 i: H2 K$ C6 I. v; b
sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.`date "+%y%m%d%H%M%S"`.bak

5 ]6 T1 w+ D) |( _6 ?) O[ -e /etc/containers/registries.conf.BackupDir ] || mkdir /etc/containers/registries.conf.BackupDir
sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.BackupDir/registries.conf.`date "+%Y%m%d%H%M%S"`.bak
( r( q0 A7 m* C" U: R
: [5 t" P7 J" T% N编辑

sudo vi /etc/containers/registries.conf

sudo vi ~/.config/containers/registries.conf

. B6 ~! z. G2 f# |! k' n% f- ~查看

sudo cat /etc/containers/registries.conf
1 ]( z* \1 e' `4 o6 A% {4 _0 v4 e
( @/ A- G8 K: f' D9 \( B0 C$ Zsudo cat ~/.config/containers/registries.conf

) G+ |% x: q% O$ `1 ysudo more /etc/containers/registries.conf
& v, Z0 A# {' N* \  F/ {2 P
sudo less /etc/containers/registries.conf
& z( g* ]3 ?6 D8 I5 X5 e- Z
# s' F9 W7 o3 \: F1 D9 J, p其中prefix是pull的时候指定的镜像前缀，location是获取镜像的地址，如果不指定prefix则默认和location一致。insecure=true表示允许通过HTTP协议来获取镜像，对于私有化部署/内网测试环境下无https证书的环境来说很有帮助。

4 _6 G1 c# p; O# U配置单个镜像源

! v- j+ h. _! \( i& k使用中科大源

###  CentOS9原版 unqualified-search-registries
/ S* a% Q0 \) O# unqualified-search-registries = ["registry.fedoraproject.org", "registry.access.redhat.com", "registry.centos.org", "quay.io", "docker.io"]
) M( G7 I- p+ }# Q2 c
( a8 T" x! ^* x6 m5 M( V###  Fedora36原版 unqualified-search-registries
# unqualified-search-registries = ["registry.fedoraproject.org", "registry.access.redhat.com", "docker.io", "quay.io"]

$ w/ R7 b# O4 O) R# x###  Rocky9原版 unqualified-search-registries
# unqualified-search-registries = ["registry.fedoraproject.org", "registry.access.redhat.com", "registry.centos.org", "quay.io", "docker.io"]

###  AlmaLinux9原版 unqualified-search-registries
. T+ p" [: U' c, @# u$ X$ v# unqualified-search-registries = ["registry.access.redhat.com", "registry.redhat.io", "docker.io"]

5 [2 M3 \7 W# t3 d' `: ^### 取消从默认地址搜索的仓库域名
unqualified-search-registries = ["docker.io"]

### 自定义搜索器
: v% M" X, C2 [7 x[[registry]]
( b3 R' v0 _: e5 j. ?- i### 仓库前缀
prefix = "docker.io"
# @" X7 Q0 \- k5 t8 \0 d1 [1 V) y6 V### 加速器地址
3 m7 j. G. |- q- Z  x, B; t+ Glocation = "docker.mirrors.ustc.edu.cn"
! `/ w- ?; H; p% f! _" i9 u### 允许通过http协议获取镜像
insecure = true
5 N, p' i* C( J% h
# B* G  _! ~" E2 q
4 @$ X" h; ?% _* g, _
5 R) I  E$ h% i% U- b: w
使用docker中国区的源

" z5 q2 w( y1 kunqualified-search-registries = ["docker.io"]
9 O# p; r7 q( h5 O' g- H
/ I: }& K3 J* N9 |& e9 ][[registry]]
9 G1 G$ c/ s; ~. f+ Q" O7 k6 qprefix = "docker.io"
4 _$ N% f/ J7 A- w7 a' Blocation = "registry.docker-cn.com"
insecure = true


+ e) O5 k! v) v3 h* R: C使用163源

& f, d- b& @2 A( }unqualified-search-registries = ["docker.io"]
$ t" g7 j  R; Q- `3 Q' G' D
[[registry]]
% f" E' _+ l% S; {" fprefix = "docker.io"
location = "hub-mirror.c.163.com"
insecure = true

; t7 ?3 |, B  B5 P
使用阿里源
! R1 @" r3 z/ C% H
unqualified-search-registries = ["docker.io"]

[[registry]]
8 ?, G' ?3 R& V7 jprefix = "docker.io"
3 `5 n& V9 E& y, Q" H4 `( Slocation = "xxxxxx.mirror.aliyuncs.com"
) o8 z7 P  E% U( [7 ~

! l9 \6 c+ X# T" G. [8 N
2 k* Z" T0 u. h' @5 m2 h配置多个镜像源

" b% D6 K8 _1 u& Y; }unqualified-search-registries = ["docker.io"]
& g8 u0 V, t+ ]: j7 P  o
( ~- ^3 N3 I5 o; i$ `[[registry]]
prefix = "docker.io"
' U2 D* j# d& F3 t7 W2 x& ylocation = "hub-mirror.c.163.com"
7 l- e! k- ~( g1 Qinsecure = true
. I7 R" I! ?& b5 v
[[registry.mirror]]
/ X' t, B1 `* f, rlocation = "docker.mirrors.ustc.edu.cn"
, N3 k) K$ {  ~7 O/ I5 Xinsecure = true
) N- F4 y4 S) L[[registry.mirror]]
location = "hub-mirror.c.163.com"
2 ]6 s) a1 a% ~" }6 winsecure = true
# @% x; S2 `- M+ Y- T% U  M[[registry.mirror]]
location = "registry.docker-cn.com"
insecure = true

用脚本配置

#!/bin/bash
[ -e /etc/containers/registries.conf.BackupDir ] || mkdir /etc/containers/registries.conf.BackupDir
sudo cp /etc/containers/registries.conf /etc/containers/registries.conf.BackupDir/registries.conf.`date "+%Y%m%d%H%M%S"`.bak
printf '
- `$ ^# D; g& Y' D6 P+ ]/ wunqualified-search-registries = ["docker.io"]

% Y' R6 `4 O# M  C  T2 _/ E* A. S: a0 {[[registry]]
% Y5 _1 I" i  ^& j5 }9 yprefix = "docker.io"
) A5 n% ?% c3 J* M8 L% D, a/ f& Ylocation = "hub-mirror.c.163.com"
insecure = true
7 k5 r1 ]2 D% u: p6 T1 o. j[[registry.mirror]]
location = "docker.mirrors.ustc.edu.cn"
  r& J8 Y9 O$ s( V1 @insecure = true
2 ]/ F$ G  O! I[[registry.mirror]]
# X# U# l! m  ?! r0 d* flocation = "hub-mirror.c.163.com"
: f) b+ F( i3 p7 n" E6 E/ V# Ginsecure = true
. I2 O& K& Q  L; ?9 I6 i0 I[[registry.mirror]]
$ L# M- G4 n$ w6 K" S  n6 Ilocation = "registry.docker-cn.com"
/ U+ D& ]# O, V1 |( n4 xinsecure = true
' | sudo tee /etc/containers/registries.conf
- ^" u2 w# ]- `. ]9 I
: F2 }+ J" g% z( n% ^' a  y. c/ B/ ?
; ?; E/ y+ {( `. e测试,查看信息
. J) M& U- w1 x/ @# g; V
sudo podman run hello-world
; z9 X" d$ ?& [# s% F
3 t- ^4 H; m# x, O8 |sudo podman info
& A/ }7 b$ x- @! d

admin

安装podman：
dnf install -y @container-tools
& L2 T1 ?: m6 u, v' z, L2 a3 ndnf install -y podman
3 l- ~' r- f4 U1 e% L' X安装podman：
dnf install -y @container-tools
9 \* K5 r" ]3 L$ Z7 }5 B; v. }dnf install -y podman

* S! m2 Z4 g+ l; D, a7 I/ @. w备份文件：
cp /etc/containers/registries.conf{,.bak}

0 p) F. ?( w& Z  \, Y/ p6 Q修改文件：
vim /etc/containers/registries.conf
/ ?3 Y* l  I% v- B去掉红帽的哪些配置，只保留下面的配置：
9 L$ B8 m* ~, nunqualified-search-registries = ["docker.io"]
unqualified-search-registries = ["docker.io"]
[[registry]]
: R1 k( Y( l8 T# s7 |prefix = "docker.io"
location = "docker.io"

$ e% p0 Z& P4 Y4 [[[registry.mirror]]
; ~3 Z9 `- h* X; O# e' x) T5 nlocation = "mirror.baidubce.com"
. c0 V+ c; @  W; I$ D+ X+ H
/ m: E1 f3 o$ m! L* L/ B

dnf install -y podman

dnf install -y podman podman-plugins cockpit cockpit-podman

systemctl enable --now podman.service

systemctl enable --now cockpit.socket

' Q, F. t. u. Q1 U( T& P* O0 B
9 ]8 K! E3 o/ x  [9 t; b3 ?: i3 q