在华为鲲鹏服务器银河麒麟V10操作系统中安装docker及docker-pose

背景

	最近客户寄来几台为鲲鹏服务器，需要在上面安装docker及docker-compose以便运行我们的程序，跟常规的X86架构下安装docker和docker-compose稍微有些区别，特此记录。

操作步骤

0.系统版本查看

[root@localhost crcs-compile]# cat /etc/kylin-release 
Kylin Linux Advanced Server release V10 (Lance)

1.docker-ce 社区下载地址：

wget https://mirrors.nju.edu.cn/docker-ce/linux/static/stable/aarch64/docker-27.1.2.tgz

2.解压文件，拷贝至/usr/bin 下

tar -xf docker-27.1.2.tgz
cp docker/* /usr/bin
which docker

3 编写docker.service文件

cat > /etc/systemd/system/docker.service <<EOF

[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network-online.target firewalld.service
Wants=network-online.target

[Service]
Type=notify
ExecStart=/usr/bin/dockerd
ExecReload=/bin/kill -s HUP $MAINPID
LimitNOFILE=65535
LimitNPROC=65535
LimitCORE=65535
TimeoutStartSec=0
Delegate=yes
KillMode=process
Restart=on-failure
StartLimitBurst=3
StartLimitInterval=60s

[Install]
WantedBy=multi-user.target

EOF

4. 挂载docker默认存储路径[可选]
   docker的默认工作路径在/var/lib/docker ，最好不修改默认存储路径，可以做软链接

#建立工作目录
mkdir /home/application/

#格式化磁盘
mkfs.ext4 /dev/sdb

#磁盘永久挂载
vim /etc/fstab
/dev/sdb  /home/application  ext4 defaults 0 0

#使挂载生效
mount -a



# 创建docker 工作目录
mkdir -p /home/application/docker


#创建软链接
ln -s /home/application/docker /var/lib/

5 添加可执行权限

chmod +x /etc/systemd/system/docker.service

6 启动，加载，开机自启动

systemctl daemon-reload
systemctl start docker.service
systemctl enable docker.service

7 配置镜像加速器,日志管理

sudo mkdir -p /etc/docker
sudo tee /etc/docker/daemon.json <<-'EOF'
{
   "registry-mirrors": [
     "https://docker.1ms.run",
     "https://docker.1panel.live/"
   ]
 }
EOF
sudo systemctl daemon-reload
sudo systemctl restart docker

8. 在AArch64位系统上直接下载对应的二进制包

wget https://github.com/docker/compose/releases/download/v2.29.3/docker-compose-linux-aarch64  -O /usr/local/bin/docker-compose
chmod +x /usr/local/bin/docker-compose
docker-compose version

9.启动docker容器后，报错

docker: Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: container_linux.go:318: starting container process caused “permission denied”: unknown.

删除麒麟自带的podman

yum remove podman

然后执行启动容器命令