【系列】CentOS 7.3 离线安装（无网络环境）CI CD环境之docker+docker compose
目录
1.【系列】CentOS 7.3 离线安装（无网络环境）CI CD环境之docker+docker compose（本篇在此）
2.【系列】CentOS 7.3 离线安装（无网络环境）CI CD环境之gitlab + gitlab runner(docker in docker)
3.【系列】CentOS 7.3 离线安装（无网络环境）CI CD环境之harbor
4.【系列】CentOS 7.3 离线安装（无网络环境）CI CD环境之gitlab runner 关于私有docker仓库配置
5.【系列】CentOS 7.3 离线安装（无网络环境）CI CD环境之sonarqube配置
网上有N多离线安装的教程，但都不是在无网络环境下安装 ，在这里我会记录在服务器无网络环境下离线安装CICD所需环境的完成过程
1.docker + docker compose
2.gitlab + gitlab runner (docker in docker)
3.habor
4.k8s
本篇记录无网络环境安装docker+docker compse的过程
首先下载离线docker 和docker compose离线安装包
这里注意不要下载rpm离线安装包，因为会有可能因为系统中的包版本不对导致安装docker rpm 包时出现依赖错误，但由于服务器无法连接网络导致boom~
docker 离线包下载地址：https://download.docker.com/linux/static/stable/
docker compose 离线包下载地址：https://github.com/docker/compose/releases
这里我下载的是docker-19.03.9版本
1. 安装docker
1.1 将离线包上传到服务器上，执行以下脚本：
tar xzvf docker-19.03.9.tgz cp docker/* /usr/bin/ dockerd &
如果中途没有报错，则说明安装成功，可以用docker info 命令测试以下是否可以正常显示
如果出现报错，则执行以下命令情况刚刚的安装，并重新执行1.中的脚本
rm -rf /var/run/docker rm -rf /var/lib/docker rm -rf /var/run/docker.pid rm -rf /var/run/docker.sock文件 ps -aux | grep docker 停止docker相关进程 netstat -nplt | grep docker 解除docker相关进程占用端口
1.2 设置docker为系统服务
1.2.1 配置containerd
命令如下：
mkdir /etc/containerd containerd config default > /etc/containerd/config.toml touch /usr/lib/systemd/system/containerd.service vi /usr/lib/systemd/system/containerd.service
containerd.service 内容如下：
[Unit]
Description=containerd container runtime
Documentation=https://containerd.io
After=network.target[Service]
ExecStartPre=/sbin/modprobe overlay
ExecStart=/usr/bin/containerd # 这是你 containerd 文件的放置路径
Delegate=yes
KillMode=process
LimitNOFILE=1048576
# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNPROC=infinity
LimitCORE=infinity[Install]
WantedBy=multi-user.target
执行以下命令启动containerd服务并查看服务的状态：
systemctl daemon-reload
systemctl enable containerd.service
systemctl start containerd.service
systemctl status containerd.service
1.2.2 配置docker.socket
命令如下：
groupadd docker touch /usr/lib/systemd/system/docker.socket vi /usr/lib/systemd/system/docker.socket
docker.socket文件内容如下：
[Unit]
Description=Docker Socket for the API
PartOf=docker.service[Socket]
ListenStream=/var/run/docker.sock
SocketMode=0660
SocketUser=root
# 如果出现错误：chown socket at step GROUP: No such process, 可以修改下面的 SocketGroup=root 或创建 docker 用户组（命令 groupadd docker）
SocketGroup=docker[Install]
WantedBy=sockets.target
执行以下命令启动containerd服务并查看服务的状态：
systemctl daemon-reload
systemctl enable containerd.service
systemctl start containerd.service
systemctl status containerd.service
1.2.3 配置docker.service服务
执行以下命令：
touch /usr/lib/systemd/system/docker.service vi /usr/lib/systemd/system/docker.service
docker.service文件内容如下：
[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
BindsTo=containerd.service
After=network-online.target firewalld.service containerd.service
Wants=network-online.target
Requires=docker.socket[Service]
Type=notify
# the default is not to use systemd for cgroups because the delegate issues still
# exists and systemd currently does not support the cgroup feature set required
# for containers run by docker
ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
ExecReload=/bin/kill -s HUP $MAINPID
TimeoutSec=0
RestartSec=2
Restart=always# Note that StartLimit* options were moved from "Service" to "Unit" in systemd 229.
# Both the old, and new location are accepted by systemd 229 and up, so using the old location
# to make them work for either version of systemd.
StartLimitBurst=3# Note that StartLimitInterval was renamed to StartLimitIntervalSec in systemd 230.
# Both the old, and new name are accepted by systemd 230 and up, so using the old name to make
# this option work for either version of systemd.
StartLimitInterval=60s# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity# Comment TasksMax if your systemd version does not support it.
# Only systemd 226 and above support this option.
TasksMax=infinity# set delegate yes so that systemd does not reset the cgroups of docker containers
Delegate=yes# kill only the docker process, not all processes in the cgroup
KillMode=process[Install]
WantedBy=multi-user.target
在启动服务之前需要先对服务进行解禁操作，执行以下命令：
systemctl unmask docker.service
systemctl unmask docker.socket
执行以下命令载入服务：
chmod +x /usr/lib/systemd/system/docker.service systemctl daemon-reload systemctl enable docker systemctl start docker
systemctl status docker
如果出现启动docker失败，可以尝试重启服务器，我这里重启后docker状态就正常了
2. 安装docker compose
将docker compose 离线安装包上传至服务器，在安装包目录下执行以下命令：
mv docker-compose-Linux-x86_64 /usr/local/bin/docker-compose chmod +x /usr/local/bin/docker-compose docker-compose -v
如出现docker-compose 命令不存在
可执行下列命令，增加链接：
sudo ln -s /usr/local/bin/docker-compose /usr/bin/docker-compose
到这里就安装完成了。
参考：
1. https://blog.csdn.net/ws995339251/article/details/90580258
