docker虛擬網橋實現固定IP，容器互通，外網可用
阿新 • • 發佈：2017-12-06
docker 虛擬化 網橋 centos 容器服務 提示：
Docker不再兼容CentOS6，在使用docker的時候請將系統進行升級
CentOS最低版本7.0 kernel最低3.10.0
註意關閉SElinux和iptables等防火墻
一、更新阿裏雲CentOS源，安裝Docker
備份yum源 # mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup 下載阿裏雲yum源 # wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo 更新緩存 # yum clean all && yum makecache 下載epel # yum -y install epel-release 更新緩存 # yum clean all && yum makecache 安裝docker # yum -y install docker-io 啟動docker服務 # systemctl start docker 測試docker狀態 # docker info
參考 http://mirrors.aliyun.com/help/centos
參考 https://help.aliyun.com/document_detail/51853.html
二、下載centos鏡像並啟動，安裝網絡工具後重新進行封裝為鏡像
1、下載centos鏡像：
[root@aliyun home]# docker search centos INDEX NAME DESCRIPTION STARS OFFICIAL AUTOMATED docker.io docker.io/centos The official build of CentOS. 3857 [OK] docker.io docker.io/ansible/centos7-ansible Ansible on Centos7 103 [OK] docker.io docker.io/jdeathe/centos-ssh CentOS-6 6.9 x86_64 / CentOS-7 7.4.1708 x8... 90 [OK] docker.io docker.io/consol/centos-xfce-vnc Centos container with "headless" VNC sessi... 35 [OK] docker.io docker.io/tutum/centos Simple CentOS docker image with SSH access 34 docker.io docker.io/imagine10255/centos6-lnmp-php56 centos6-lnmp-php56 33 [OK] ... [root@aliyun home]# docker pull docker.io/centos Using default tag: latest Trying to pull repository docker.io/library/centos ... latest: Pulling from docker.io/library/centos 85432449fd0f: Pull complete Digest: sha256:3b1a65e9a05f0a77b5e8a698d3359459904c2a354dc3b25ae2e2f5c95f0b3667 [root@aliyun home]# docker images REPOSITORY TAG IMAGE ID CREATED SIZE docker.io/centos latest 3fa822599e10 6 days ago 203.5 MB
2、進入容器安裝網絡工具：
[root@aliyun home]# docker run -itd --name=centos_net 3fa /bin/bash c7bc119c8387e133b37aa5ff713074529b51f2d6303780310b6ba520eeef6a79 [root@aliyun home]# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES c7bc119c8387 3fa "/bin/bash" 4 seconds ago Up 4 seconds centos_net [root@aliyun home]# docker attach c7b [root@c7bc119c8387 /]# yum -y install net-tools iproute ... 等待yum安裝完成（Ctrl + P + Q）快捷鍵回到宿主主機，容器後臺繼續運行
3、重新封裝為鏡像：
[root@aliyun home]# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES c7bc119c8387 3fa "/bin/bash" 3 minutes ago Up 3 minutes centos_net [root@aliyun home]# docker commit c7b centos_net sha256:7a04c40fc8f8a727d2d3467fc3a75d8a5c3639cf0ad27f35b53c0f67f3783afc [root@aliyun home]# docker images REPOSITORY TAG IMAGE ID CREATED SIZE centos_net latest 7a04c40fc8f8 10 seconds ago 288.6 MB docker.io/centos latest 3fa822599e10 6 days ago 203.5 MB [root@aliyun home]# docker stop c7b && docker rm c7b c7b c7b
三、創建虛擬網橋並設置為默認網橋
1、安裝pipework
[root@aliyun home]# mkdir -p /home/pipework && cd /home/pipework [root@aliyun pipework]# yum -y install git ... [root@aliyun pipework]# git clone https://github.com/jpetazzo/pipework.git Cloning into 'pipework'... remote: Counting objects: 501, done. remote: Total 501 (delta 0), reused 0 (delta 0), pack-reused 501 Receiving objects: 100% (501/501), 172.97 KiB | 0 bytes/s, done. Resolving deltas: 100% (264/264), done. [root@aliyun pipework]# ls pipework [root@aliyun pipework]# ls ./pipework/ docker-compose.yml doctoc LICENSE pipework pipework.spec README.md [root@aliyun pipework]# cp -rp pipework/pipework /usr/local/bin/
參考 http://blog.csdn.net/xu470438000/article/details/50512442
2、創建虛擬網橋
安裝bridge管理工具
[root@aliyun pipework]# yum -y install bridge-utils
停止docker服務
[root@aliyun pipework]# systemctl stop docker
查看網卡狀態
[root@aliyun pipework]# ip a s
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
link/ether 00:16:3e:04:3b:69 brd ff:ff:ff:ff:ff:ff
inet 172.31.43.125/20 brd 172.31.47.255 scope global eth0
valid_lft forever preferred_lft forever
3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN
link/ether 02:42:2f:aa:d4:c5 brd ff:ff:ff:ff:ff:ff
inet 172.17.0.1/16 scope global docker0
valid_lft forever preferred_lft forever
停止自帶的docker0網橋
[root@aliyun pipework]# ip link set dev docker0 down
刪除該docker0網橋
[root@aliyun pipework]# brctl delbr docker0
查看，已不存在了，刪除成功
[root@aliyun pipework]# ip a s
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
link/ether 00:16:3e:04:3b:69 brd ff:ff:ff:ff:ff:ff
inet 172.31.43.125/20 brd 172.31.47.255 scope global eth0
valid_lft forever preferred_lft forever
創建br0虛擬網橋
[root@aliyun pipework]# brctl addbr br0
啟動br0虛擬網橋
[root@aliyun pipework]# ip link set dev br0 up
為該虛擬網橋設置ip和掩碼
[root@aliyun pipework]# ip addr add 192.168.1.1/24 dev br0
查看，設置成功
[root@aliyun pipework]# ip a s
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
link/ether 00:16:3e:04:3b:69 brd ff:ff:ff:ff:ff:ff
inet 172.31.43.125/20 brd 172.31.47.255 scope global eth0
valid_lft forever preferred_lft forever
6: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN qlen 1000
link/ether 22:e9:84:47:82:c8 brd ff:ff:ff:ff:ff:ff
inet 192.168.1.1/24 scope global br0
valid_lft forever preferred_lft foreverdocker虛擬網橋實現固定IP，容器互通，外網可用