国产系统安装docker-ce、配置mysql

银河麒麟安装docker

一、安装

添加用户组和用户，非root启动docker

groupadd docker
useradd -m -g docker docker -s /sbin/nologin

添加权限

sudo tee /etc/sudoers.d/docker >/dev/null <<EOF
docker ALL=(ALL)        NOPASSWD:  ALL
EOF

安装

cd ~
wget https://download.docker.com/linux/static/stable/x86_64/docker-20.10.6.tgz
tar xzvf  docker-20.10.6.tgz
cp docker/* /usr/bin/
rm docker-20.10.6.tgz -rf
rm docker -rf

二、配置docker启动

sudo tee /usr/lib/systemd/system/dockerd.service >/dev/null <<EOF
[Unit]
Description=Docker Daemon Service

[Service]
ExecStart=sudo /usr/bin/dockerd
Restart=always
RestartSec=10
KillSignal=SIGINT
SyslogIdentifier=docker daemon
User=docker
Group=docker
[Install]
WantedBy=multi-user.target
EOF

三、配置docker镜像源

mkdir /etc/docker
tee /etc/docker/daemon.json >/dev/null <<EOF
{
 "registry-mirrors": ["http://hub-mirror.c.163.com"]
}
EOF

四、启动docker

systemctl enable dockerd
systemctl start dockerd

五、安装mysql

1.文件解析

/home/mysql/conf.d/docker.cnf 此文件默认为 [mysqld] 组，监听端口等配置在此。
/home/mysql/conf.d/mysql.cnf 此文件为客户端配置,配置组为[mysql]。

2.命令行

mkdir -p /home/mysql/conf.d
tee /home/mysql/conf.d/docker.cnf >/dev/null <<EOF
[mysqld]
skip-host-cache
skip-name-resolve
bind-address = 0.0.0.0
port = 3306
character-set-client-handshake = false
character-set-server = utf8mb4
init_connect='SET NAMES utf8mb4'
EOF

tee /home/mysql/conf.d/mysql.cnf >/dev/null <<EOF
[client]
default-character-set = utf8mb4

[mysql]
default-character-set = utf8mb4
EOF

运行 mysql

默认将配置文件放在 /home/mysql/conf.d
否则将 /home/mysql/database

docker run \
--name mysql \
-d \
-p 3306:3306 \
-v /home/mysql/conf.d:/etc/mysql/conf.d \
-v /home/mysql/database:/var/lib/mysql \
-e MYSQL_ROOT_PASSWORD=mysql \
-e MYSQL_USER=mysql \
-e MYSQL_PASSWORD=mysql \
mysql:8.0.25

更改密码

ALTER USER 'root'@'%' IDENTIFIED WITH mysql_native_password BY 'root'
FLUSH PRIVILEGES;

正常的安装方式

wget https://dev.mysql.com/get/mysql80-community-release-el8-1.noarch.rpm
rpm -i mysql80-community-release-el8-1.noarch.rpm
yum update
yum install mysql-community-server -y
# centos: yum install mysql-server
systemctl start mysqld
# 查看密码
sudo cat /var/log/mysqld.log |grep password

## 使用获取到的密码登陆，然后修改密码
mysql -u root -p
alter user 'root'@'localhost'IDENTIFIED BY 'Admin@888';
update user set host = '%' where user='root';
flush privileges;

密码强度设置

Set Persist validate_password.length = 3
set persist validate_password.number_count=0;
set persist validate_password.mixed_case_count=0;
set persist validate_password.special_char_count=0;
set persist validate_password.dictionary_file=0;

开通端口相关

1、开放端口

firewall-cmd --zone=public --add-port=3306/tcp --permanent   # 开放3306端口

firewall-cmd --zone=public --remove-port=3306/tcp --permanent  #关闭3306端口

firewall-cmd --reload   # 配置立即生效

 

2、查看防火墙所有开放的端口

firewall-cmd --zone=public --list-ports

 

3.、关闭防火墙

如果要开放的端口太多，嫌麻烦，可以关闭防火墙，安全性自行评估

systemctl stop firewalld.service

 

4、查看防火墙状态

 firewall-cmd --state