#!/bin/bash
Docker 二进制包安装脚本（最终修复版）
作者：Doubao
日期：2025-07-19
颜色定义
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[0;33m'
NC='\033[0m' # 无颜色
定义变量
DOCKER_VERSION="28.3.2"
PACKAGE_DIR="/opt/docker-packages" # 安装包目录
PACKAGE_PATH="PACKAGE_DIR/docker-DOCKER_VERSION.tgz" # 安装包路径
EXTRACT_DIR="/tmp/docker-install" # 解压目录
LOG_FILE="/var/log/docker_install.log"
日志函数
log() {
local message="$1"
local level="$2"
if [ -z "$level" ]; then
level="INFO"
fi
echo "[(date '+%Y-%m-%d %H:%M:%S')\] \[level] message" \| tee -a "LOG_FILE"
}
错误处理函数
error() {
log "$1" "ERROR"
echo -e "{RED}错误: 1${NC}" >&2
exit 1
}
检查是否为 root 用户
check_root() {
if [ "$(id -u)" -ne 0 ]; then
error "请使用 root 用户执行此脚本"
fi
}
检查系统架构
check_arch() {
local arch=$(uname -m)
if [ "$arch" != "aarch64" ]; then
error "此脚本仅适用于 aarch64 架构，当前架构为 $arch"
fi
log "系统架构检查通过: $arch"
}
检查安装包
check_package() {
if [ ! -d "$PACKAGE_DIR" ]; then
error "安装包目录 $PACKAGE_DIR 不存在"
fi
if [ ! -f "$PACKAGE_PATH" ]; then
尝试查找匹配的包
local found_pkg=(ls "PACKAGE_DIR"/docker-*.tgz 2>/dev/null | head -1)
if [ -n "$found_pkg" ]; then
log "未找到 PACKAGE_PATH，但发现匹配的包: found_pkg"
PACKAGE_PATH="$found_pkg"
DOCKER_VERSION=(basename "found_pkg" | sed 's/docker-//' | sed 's/.tgz//')
log "自动检测到 Docker 版本: $DOCKER_VERSION"
else
error "安装包 $PACKAGE_PATH 不存在，且未找到匹配的 docker-*.tgz 文件"
fi
fi
验证文件类型
local file_type=(file -b "PACKAGE_PATH")
if ! echo "$file_type" | grep -q "gzip compressed data"; then
error "安装包 $PACKAGE_PATH 不是有效的 gzip 压缩文件"
fi
log "安装包检查通过"
}
卸载旧版本
uninstall_old() {
log "卸载旧版本 Docker..."
停止运行中的 Docker 服务
systemctl stop docker.service docker.socket || true
卸载旧版本
yum remove -y docker \
docker-client \
docker-client-latest \
docker-common \
docker-latest \
docker-latest-logrotate \
docker-logrotate \
docker-engine \
docker-ce || true
移除残留文件和符号链接
log "移除旧版 Docker 二进制文件和符号链接..."
rm -f /usr/bin/docker* /usr/bin/containerd* /usr/bin/runc /usr/bin/ctr || true
log "旧版本 Docker 卸载完成"
}
解压安装包
extract_package() {
log "解压安装包..."
创建解压目录
mkdir -p "$EXTRACT_DIR"
rm -rf "$EXTRACT_DIR"/*
解压
tar -xzf "PACKAGE_PATH" -C "EXTRACT_DIR" || error "解压安装包失败"
检查解压结果
if [ ! -d "$EXTRACT_DIR/docker" ]; then
error "解压后未找到 docker 目录"
fi
log "安装包解压完成"
}
安装 Docker
install_docker() {
log "开始安装 Docker $DOCKER_VERSION..."
移除目标目录中可能存在的符号链接
log "移除 /usr/bin 目录下的 Docker 相关符号链接..."
rm -f /usr/bin/docker /usr/bin/docker-init /usr/bin/docker-proxy /usr/bin/dockerd \
/usr/bin/containerd /usr/bin/containerd-shim /usr/bin/containerd-shim-runc-v2 \
/usr/bin/ctr /usr/bin/runc || true
复制二进制文件到 /usr/bin
log "复制 Docker 二进制文件..."
cp -f "$EXTRACT_DIR/docker"/* /usr/bin/ || error "复制 Docker 二进制文件失败"
验证安装
log "验证 Docker 安装..."
if ! docker --version >/dev/null 2>&1; then
error "Docker 安装失败，无法获取版本信息"
fi
log "Docker 版本: $(docker --version)"
创建必要的目录
mkdir -p /etc/docker /var/lib/docker
log "Docker 安装完成"
}
配置 Docker 服务
configure_docker_service() {
log "配置 Docker 服务..."
创建 systemd 服务文件
cat > /etc/systemd/system/docker.service << EOF
Unit
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network-online.target firewalld.service containerd.service
Wants=network-online.target
Requires=containerd.service
Service
Type=notify
the default is not to use systemd for cgroups because the delegate issues still
exists and systemd currently does not support the cgroup feature set required
for containers run by docker
ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
ExecReload=/bin/kill -s HUP \$MAINPID
TimeoutSec=0
RestartSec=2
Restart=always
Note that StartLimit* options were moved from "Service" to "Unit" in systemd 229.
Both the old, and new location are accepted by systemd 229 and up, so using the old location
to make them work for either version of systemd.
StartLimitBurst=3
Note that StartLimitInterval was renamed to StartLimitIntervalSec in systemd 230.
Both the old, and new name are accepted by systemd 230 and up, so using the old name to make
this option work for either version of systemd.
StartLimitInterval=60s
Having non-zero Limit*s causes performance problems due to accounting overhead
in the kernel. We recommend using cgroups to do container-local accounting.
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity
Comment TasksMax if your systemd version does not support it.
Only systemd 226 and above support this option.
TasksMax=infinity
set delegate yes so that systemd does not reset the cgroups of docker containers
Delegate=yes
kill only the docker process, not all processes in the cgroup
KillMode=process
OOMScoreAdjust=-500
Install
WantedBy=multi-user.target
EOF
重载 systemd
systemctl daemon-reload
启动 Docker 并设置开机自启
log "启动 Docker 服务..."
systemctl enable --now docker
验证 Docker 服务状态
if ! systemctl is-active docker >/dev/null 2>&1; then
error "Docker 服务未启动"
fi
log "Docker 服务状态: $(systemctl is-active docker)"
测试 Docker 运行
log "测试 Docker 基本功能..."
if ! docker run --rm hello-world >/dev/null 2>&1; then
error "Docker 测试运行失败"
fi
log "Docker 测试运行成功"
}
配置 Docker
configure_docker() {
log "配置 Docker..."
设置镜像加速器（可选）
cat > /etc/docker/daemon.json << EOF
{
"registry-mirrors": ["https://registry.docker-cn.com"],
"exec-opts": ["native.cgroupdriver=systemd"],
"log-driver": "json-file",
"log-opts": {
"max-size": "100m"
},
"storage-driver": "overlay2",
"storage-opts": [
"overlay2.override_kernel_check=true"
]
}
EOF
重启 Docker 服务使配置生效
log "重启 Docker 服务以应用配置..."
systemctl restart docker
log "Docker 配置完成"
}
添加用户到 docker 组（可选）
add_user_to_docker_group() {
local user="{1:-(whoami)}"
log "将用户 $user 添加到 docker 组..."
if ! getent group docker >/dev/null; then
groupadd docker
fi
usermod -aG docker "$user"
log "用户 $user 已添加到 docker 组"
log "注意: 需要重新登录才能生效"
}
清理临时文件
cleanup() {
log "清理临时文件..."
rm -rf "$EXTRACT_DIR"
log "临时文件清理完成"
}
显示安装信息
show_install_info() {
echo -e "{GREEN}====================================================================={NC}"
echo -e "{GREEN}Docker 已成功安装！{NC}"
echo -e "{GREEN}版本: (docker --version)${NC}"
echo -e "{GREEN}状态: (systemctl is-active docker)${NC}"
echo -e "{GREEN}====================================================================={NC}"
echo -e "{YELLOW}使用提示:{NC}"
echo -e " 1. 普通用户需要重新登录才能使用 docker 命令"
echo -e " 2. 查看 Docker 信息: docker info"
echo -e " 3. 运行第一个容器: docker run -it ubuntu bash"
echo -e "{YELLOW}日志文件位置: LOG_FILE${NC}"
}
主函数
main() {
echo -e "{GREEN}开始执行 Docker 二进制包安装脚本...{NC}"
log "========================================================="
log "开始执行 Docker 二进制包安装脚本"
log "系统信息: $(uname -a)"
check_root
check_arch
check_package
uninstall_old
extract_package
install_docker
configure_docker_service
configure_docker
add_user_to_docker_group
cleanup
show_install_info
log "Docker 二进制包安装脚本执行完成"
log "========================================================="
}
执行主函数
main
安装docker