开启包转发功能和修改内核参数

#开启包转发功能和修改内核参数
modprobe br_netfilter
cat > /etc/sysctl.d/docker.conf <<EOF
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
net.ipv4.ip_forward = 1
EOF

#使参数生效
sysctl -p /etc/sysctl.d/docker.conf

#开机自动加载模块的脚本
cat >> /etc/rc.sysinit <<EOF
#!/bin/bash
for file in /etc/sysconfig/modules/*.modules ; do
[ -x $file ] && $file
EOF

#在/etc/sysconfig/modules/目录新建模块文件
echo 'modprobe br_netfilter' >>/etc/sysconfig/modules/br_netfilter.modules

#增加执行权限
chmod 777 /etc/sysconfig/modules/br_netfilter.modules

#验证模块加载参数
lsmod |grep br_netfilter

#重启docker服务
systemctl restart docker