ARM64安装Docker的问题以及对应的内核配置项
参考---->https://www.cnblogs.com/jibril/p/15504437.html
通过 service start docker 或 systemctl start docker 或 dockerd 的问题
背景介绍:Arm Linux开发板,内核有经过裁剪的情况下,以下操作均指内核menuconfig配置项目
错误通过提示或在控制台界面journalctl-xe获得
【错误】[graphdriver] prior storage driver overlay2 failed: driver not supported
==> CONFIG_OVERLAY_FS=y
【错误】iptables v1.6.1: can't initialize iptables table `nat': Table does not exist
==> 开启IPV4的NAT及其必要前置,IP_NF_NAT
CONFIG_NF_CONNTRACK=y CONFIG_NF_CONNTRACK_IPV4=y CONFIG_NF_NAT_IPV4=y CONFIG_NF_NAT_MASQUERADE_IPV4=y CONFIG_IP_NF_IPTABLES=y CONFIG_NF_TABLES=y CONFIG_IP_NF_NAT=y
> Networking support > Networking options > Network packet filtering framework (Netfilter) > IP: Netfilter Configuration >IP tables support => y
做成模块的,可能无法自动加载而导致失败
【错误】 DOCKER: iptables v1.6.1: can't initialize iptables table `filter': Table does not exist
==> 开启Packet filtering及其必要前置
CONFIG_NF_TABLES_IPV4=y CONFIG_NFT_CHAIN_NAT_IPV4=y CONFIG_IP_NF_FILTER=y
【错误】Error initializing network controller: Error creating default "bridge" network: package not installed
==> 开启 Ethernet Bridge tables (ebtables) support 及其必要前置
CONFIG_BRIDGE NF_TABLES_BRIDGE CONFIG_BRIDGE_NF_EBTABLES
【错误】iptables failed: iptables --wait -t nat -I POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE: iptables: No chain/target/match by that name.
==>开启 MASQUERADE target support ,开启Masquerade 链
CONFIG_IP_NF_TARGET_MASQUERADE ---->这个要打开IP virtual server support,然后进入IP: Netfilter Configuration 配置
【错误】Failed to inject DOCKER in PREROUTING chain: iptables failed: iptables --wait -t nat -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER: iptables: No chain/target/match by that name.
==> addrtype的目标匹配不支持,打开即可
--wait : maximum wait to acquire xtables lock before give up:获取xtables锁的最大等待数)
-t : --table : table to manipulate (default: `filter') :要维护的表
-A:--append: Append to chain:附加到表
-m:--match:extended match (may load extension):扩展匹配(或加载扩展)目标
这里是 address类型的match没有找到
CONFIG_NFT_CHAIN_ROUTE_IPV4 CONFIG_NFT_NAT CONFIG_NFT_REDIR CONFIG_NETFILTER_XT_MATCH_ADDRTYPE
【错误】 iptables failed: iptables --wait -I FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT: iptables: No chain/target/match by that name.
==>conntrack 目标匹配没有支持,打开就好
-I:--insert:Insert in chain as rulenum (default 1=first):插入到链
-j:--jump:jump to chain with no return:跳转到链
CONFIG_NETFILTER_XT_MATCH_CONNTRACK
=============================其他未仔细验证=============================
【错误2】
failed to start daemon: Error initializing network controller: Error creating default "bridge" network: Failed to Setup IP tables: Unable to enable NAT rule: (iptables failed: iptables --wait -t nat -I POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE: iptables: No chain/target/match by that name.
【解决2】
CONFIG_BRIDGE_NETFILTER=y,以及其他带bridge字眼的选项(可能也要试试解决3)
【错误3】
failed to start daemon: Error initializing network controller: Error creating default "bridge" network: Failed to program NAT chain: Failed to inject DOCKER in PREROUTING chain: iptables failed: iptables --wait -t nat -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER: iptables: No chain/target/match by that name.
【解决3】
Networking support > Networking options > Network packet filtering framework (Netfilter)
把这下面所有的项目都勾上(包括各子项)
【错误4】
failed to mount overlay: no such device storage-driver=overlay
【解决4】
选择可用的storage-driver就好
参考 https://docs.docker.com/engine/reference/commandline/dockerd/
配置 /etc/docker/daemon.json
1 {
2 "storage-driver": "overlay" (或overlay2)
3 }
=================================警告的消除=================================
CONFIG_RT_GROUP_SCHED= y 消除 "CPU realtime scheduler"
CONFIG_BLK_DEV_THROTTLING = y 消除 "blk:throttling xxx"
CONFIG_CFQ_GROUP_IOSCHED = y 消除 "cgroup:xxx"
==============================运行时报错===================================
==>POSIX_MQUEUE=y
【错误】 CONFIG_CGROUP_BPF: missing---->解决办法
-
CONFIG_CGROUP_BPF=y
-
CONFIG_BPF=y
-
CONFIG_BPF_SYSCALL=y
-
CONFIG_NETFILTER_XT_MATCH_BPF=y
-
CONFIG_INET_UDP_DIAG=y
这些都是相关联的
【错误】要打开 CONFIG_BRIDGE_VLAN_FILTERING---->必须先打开
CONFIG_VLAN_8021Q=y
【错误】 - CONFIG_AUFS_FS: missing
aufs安装完后,就可以打开
本公司成本价甩卖工控主板,欢迎大家选购:
PCIE总线转八串口卡,PCIE总线转IO卡,瑞芯微3568板卡,寒武纪CE3226摄像头板卡,龙芯3A4000工控板卡,龙芯3A5000工控板卡,海光3250工控板卡,飞腾FT-2000/4板卡
联系方式:
电话、微信:15918785568 罗生
Email:13279654@qq.com
公众号:开发之美