关闭selinux

vi /etc/selinux/config

将“SELINUX”项的值改为“disabled”，保存文件并退出即可。

临时关闭

setenforce 0
/usr/sbin/sestatus -v

关闭防火墙

systemctl disable firewalld
systemctl stop firewalld

安装docker 

经过多次版本兼容性测试目前 docker版本 定在 20.10.24

下载 docker

https://download.docker.com/linux/static/stable/aarch64/docker-20.10.24.tgz

安装命令

tar xvpf docker-20.10.24.tgz
cp -p docker/* /usr/bin

配置启动文件

/usr/lib/systemd/system/docker.service

[Unit]
Description=Docker Application Container Engine
Documentation=http://docs.docker.com
After=network.target docker.socket

[Service]
Type=notify
# EnvironmentFile=-/run/flannel/docker
# WorkingDirectory=/usr/local/bin
# ExecStart=/usr/bin/dockerd  -H tcp://0.0.0.0:4243 -H unix:///var/run/docker.sock --selinux-enabled=false
ExecStart=/usr/bin/dockerd -H unix:///var/run/docker.sock 
ExecReload=/bin/kill -s HUP $MAINPID
TimeoutStartSec=0

# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity

# Uncomment TasksMax if your systemd version supports it.
# Only systemd 226 and above support this version.
TasksMax=infinity

# set delegate yes so that systemd does not reset the cgroups of docker containers
Delegate=yes
# kill only the docker process, not all processes in the cgroup
KillMode=process
Restart=on-failure

[Install]
WantedBy=multi-user.target

启动命令

systemctl daemon-reload
systemctl enable docker
systemctl start docker 
systemctl status docker 

安装 rancher 经过版本测试 2.6.x 系列都可以安装 2.6.11 之后会有一些乱码，高版本安装无法启动

docker run -d --restart=unless-stopped \
  -p 80:80 -p 443:443 \
  --privileged \
  rancher/rancher:v2.6.11

docker ps 查看id
docker logs id 查看日志

安装完毕