{"id":34895,"date":"2023-05-10T04:12:15","date_gmt":"2022-12-29T15:45:39","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8docker%e6%97%a0%e7%89%b9%e6%9d%83docker\/"},"modified":"2024-04-30T03:25:56","modified_gmt":"2024-04-29T19:25:56","slug":"%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8docker%e6%97%a0%e7%89%b9%e6%9d%83docker","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8docker%e6%97%a0%e7%89%b9%e6%9d%83docker\/","title":{"rendered":"\u5c1d\u8bd5\u4f7f\u7528[Docker]\u65e0\u7279\u6743Docker"},"content":{"rendered":"<h1>\u65e0\u6839 Docker \u662f\u4ec0\u4e48<\/h1>\n<blockquote><p>\u6839\u7121\u3057\u30e2\u30fc\u30c9\uff08Rootless mode\uff09\u306f\u3001Docker\u30c7\u30fc\u30e2\u30f3\u3068\u30b3\u30f3\u30c6\u30ca\u3092root\u4ee5\u5916\u306e\u30e6\u30fc\u30b6\u304c\u5b9f\u884c\u3067\u304d\u308b\u3088\u3046\u306b\u3059\u308b\u3053\u3068\u3067\u3001\u30c7\u30fc\u30e2\u30f3\u3084\u30b3\u30f3\u30c6\u30ca\u30e9\u30f3\u30bf\u30a4\u30e0\u306b\u5b58\u5728\u3059\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u8106\u5f31\u6027\u3092\u56de\u907f\u3057\u307e\u3059\u3002<\/p><\/blockquote>\n<h1>\u8fd9\u6b21\u7684\u73af\u5883<\/h1>\n<ul class=\"post-ul\">Ubuntu Server 20.04 on VMware ESXi<\/ul>\n<h1>\u6311\u6218\u73b0\u5728\u5f00\u59cb<\/h1>\n<h2>\u9996\u5148\uff0c\u9700\u8981\u8fdb\u884c\u4e8b\u524d\u51c6\u5907\u3002<\/h2>\n<h3>\u5f15\u5165 uidmap<\/h3>\n<blockquote><p>\u5728\u4e3b\u673a\u4e0a\u5fc5\u987b\u5b89\u88c5 newuidmap \u4e0e newgidmap\u3002<\/p><\/blockquote>\n<p>\u6839\u636e\u8bf4\u660e\uff0c\u6211\u4f1a\u5b89\u88c5\u5b83\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span><span class=\"nb\">sudo <\/span>apt <span class=\"nb\">install<\/span> <span class=\"nt\">-y<\/span> uidmap\r\n<\/code><\/pre>\n<p>\u5982\u679c\u6ca1\u6709\u5b89\u88c5\u8fd9\u4e2a\uff0c\u4f60\u5728\u5b89\u88c5 Docker \u7684\u65f6\u5019\u9700\u8981\u5b89\u88c5\u5b83\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"c\"># Installing stable version 19.03.12<\/span>\r\n<span class=\"c\"># Missing system requirements. Please run following commands to<\/span>\r\n<span class=\"c\"># install the requirements and run this installer again.<\/span>\r\n<span class=\"c\"># Alternatively iptables checks can be disabled with SKIP_IPTABLES=1<\/span>\r\n\r\n<span class=\"nb\">cat<\/span> <span class=\"o\">&lt;&lt;<\/span><span class=\"no\">EOF<\/span><span class=\"sh\"> | sudo sh -x\r\napt-get install -y uidmap\r\n<\/span><span class=\"no\">EOF\r\n<\/span><\/code><\/pre>\n<p>\u56e0\u4e3a\u88ab\u8bf4\u4e86\u6240\u4ee5\u8981\u8bb0\u5f97\u4e0d\u8981\u5fd8\u8bb0\u653e\u8fdb\u53bb\u3002\uff08\u4e2a\u4eba\u7ecf\u5386\uff09<\/p>\n<h3>\u786e\u8ba4\u7528\u6237\u6807\u8bc6\/\u7ec4\u6807\u8bc6 (UID\/GID)<\/h3>\n<blockquote><p>\/etc\/subuid \u548c\/etc\/subgid\u5e94\u8be5\u81f3\u5c11\u5305\u542b65,536\u4e2a\u5b50\u7528\u6237UID\/GID\u3002<\/p><\/blockquote>\n<p>\u56e0\u4e3a\u8fd9\u662f\u8fd9\u6837\u7684\uff0c\u6211\u4eec\u6700\u597d\u786e\u8ba4\u4e00\u4e0b\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span><span class=\"nb\">grep<\/span> ^<span class=\"si\">$(<\/span><span class=\"nb\">whoami<\/span><span class=\"si\">)<\/span>: \/etc\/subuid\r\ndev:100000:65536\r\n<span class=\"nv\">$ <\/span><span class=\"nb\">grep<\/span> ^<span class=\"si\">$(<\/span><span class=\"nb\">whoami<\/span><span class=\"si\">)<\/span>: \/etc\/subgid\r\ndev:100000:65536\r\n<\/code><\/pre>\n<p>\u5982\u679c\u4e24\u4e2a\u6570\u91cf\u4e2d\u90fd\u5305\u542b\u4e8665536\uff0c\u90a3\u5c31\u662f\u53ef\u4ee5\u7684\u3002<\/p>\n<h2>\u5b89\u88c5<\/h2>\n<p>\u53ef\u4ee5\u50cf\u666e\u901a\u7684Docker\u4e00\u6837\u5f88\u5bb9\u6613\u5730\u8fdb\u884c\u4e00\u884c\u4ee3\u7801\u5f15\u5165\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>curl <span class=\"nt\">-fsSL<\/span> get.docker.com\/rootless | sh\r\n<span class=\"c\"># Installing stable version 19.03.12<\/span>\r\n  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current\r\n                                 Dload  Upload   Total   Spent    Left  Speed\r\n100 57.9M  100 57.9M    0     0  18.0M      0  0:00:03  0:00:03 <span class=\"nt\">--<\/span>:--:-- 18.0M\r\n  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current\r\n                                 Dload  Upload   Total   Spent    Left  Speed\r\n100 18.3M  100 18.3M    0     0  6245k      0  0:00:03  0:00:03 <span class=\"nt\">--<\/span>:--:-- 6245k\r\n<span class=\"c\"># starting systemd service<\/span>\r\n\u25cf docker.service - Docker Application Container Engine <span class=\"o\">(<\/span>Rootless<span class=\"o\">)<\/span>\r\n     Loaded: loaded <span class=\"o\">(<\/span>\/home\/dev\/.config\/systemd\/user\/docker.service<span class=\"p\">;<\/span> disabled<span class=\"p\">;<\/span> vendor preset: enabled<span class=\"o\">)<\/span>\r\n     Active: active <span class=\"o\">(<\/span>running<span class=\"o\">)<\/span> since Sat 2020-07-25 08:07:23 UTC<span class=\"p\">;<\/span> 21ms ago\r\n       Docs: https:\/\/docs.docker.com\r\n   Main PID: 45635 <span class=\"o\">(<\/span>rootlesskit<span class=\"o\">)<\/span>\r\n     CGroup: \/user.slice\/user-1000.slice\/user@1000.service\/docker.service\r\n             tq45635 rootlesskit <span class=\"nt\">--net<\/span><span class=\"o\">=<\/span>vpnkit <span class=\"nt\">--mtu<\/span><span class=\"o\">=<\/span>1500 <span class=\"nt\">--slirp4netns-sandbox<\/span><span class=\"o\">=<\/span>auto <span class=\"nt\">--slirp4netns-seccomp<\/span><span class=\"o\">=<\/span>auto <span class=\"nt\">--disable-host-loopback<\/span> <span class=\"nt\">--port-driver<\/span><span class=\"o\">=<\/span><span class=\"nb\">builtin<\/span> <span class=\"nt\">--copy-up<\/span><span class=\"o\">=<\/span>\/etc <span class=\"nt\">--copy-up<\/span><span class=\"o\">=<\/span>\/run \/home\/dev\/bin\/dockerd-rootless.sh <span class=\"nt\">--experimental<\/span> <span class=\"nt\">--storage-driver<\/span><span class=\"o\">=<\/span>overlay2\r\n             tq45647 \/proc\/self\/exe <span class=\"nt\">--net<\/span><span class=\"o\">=<\/span>vpnkit <span class=\"nt\">--mtu<\/span><span class=\"o\">=<\/span>1500 <span class=\"nt\">--slirp4netns-sandbox<\/span><span class=\"o\">=<\/span>auto <span class=\"nt\">--slirp4netns-seccomp<\/span><span class=\"o\">=<\/span>auto <span class=\"nt\">--disable-host-loopback<\/span> <span class=\"nt\">--port-driver<\/span><span class=\"o\">=<\/span><span class=\"nb\">builtin<\/span> <span class=\"nt\">--copy-up<\/span><span class=\"o\">=<\/span>\/etc <span class=\"nt\">--copy-up<\/span><span class=\"o\">=<\/span>\/run \/home\/dev\/bin\/dockerd-rootless.sh <span class=\"nt\">--experimental<\/span> <span class=\"nt\">--storage-driver<\/span><span class=\"o\">=<\/span>overlay2\r\n             mq45656 newgidmap 45647 0 1000 1 1 100000 65536\r\n\r\nJul 25 08:07:23 docker dockerd-rootless.sh[45635]: + which slirp4netns\r\nJul 25 08:07:23 docker dockerd-rootless.sh[45635]: + <span class=\"o\">[<\/span> <span class=\"nt\">-z<\/span> <span class=\"o\">]<\/span>\r\nJul 25 08:07:23 docker dockerd-rootless.sh[45635]: + which vpnkit\r\nJul 25 08:07:23 docker dockerd-rootless.sh[45635]: + <span class=\"nv\">net<\/span><span class=\"o\">=<\/span>vpnkit\r\nJul 25 08:07:23 docker dockerd-rootless.sh[45635]: + <span class=\"o\">[<\/span> <span class=\"nt\">-z<\/span> <span class=\"o\">]<\/span>\r\nJul 25 08:07:23 docker dockerd-rootless.sh[45635]: + <span class=\"nv\">mtu<\/span><span class=\"o\">=<\/span>1500\r\nJul 25 08:07:23 docker dockerd-rootless.sh[45635]: + <span class=\"o\">[<\/span> <span class=\"nt\">-z<\/span> <span class=\"o\">]<\/span>\r\nJul 25 08:07:23 docker dockerd-rootless.sh[45635]: + <span class=\"nv\">_DOCKERD_ROOTLESS_CHILD<\/span><span class=\"o\">=<\/span>1\r\nJul 25 08:07:23 docker dockerd-rootless.sh[45635]: + <span class=\"nb\">export <\/span>_DOCKERD_ROOTLESS_CHILD\r\nJul 25 08:07:23 docker dockerd-rootless.sh[45635]: + <span class=\"nb\">exec <\/span>rootlesskit <span class=\"nt\">--net<\/span><span class=\"o\">=<\/span>vpnkit <span class=\"nt\">--mtu<\/span><span class=\"o\">=<\/span>1500 <span class=\"nt\">--slirp4netns-sandbox<\/span><span class=\"o\">=<\/span>auto <span class=\"nt\">--slirp4netns-seccomp<\/span><span class=\"o\">=<\/span>auto <span class=\"nt\">--disable-host-loopback<\/span> <span class=\"nt\">--port-driver<\/span><span class=\"o\">=<\/span><span class=\"nb\">builtin<\/span> <span class=\"nt\">--copy-up<\/span><span class=\"o\">=<\/span>\/etc <span class=\"nt\">--copy-up<\/span><span class=\"o\">=<\/span>\/run \/home\/dev\/bin\/dockerd-rootless.sh <span class=\"nt\">--experimental<\/span> <span class=\"nt\">--storage-driver<\/span><span class=\"o\">=<\/span>overlay2\r\nClient: Docker Engine - Community\r\n Version:           19.03.12\r\n API version:       1.40\r\n Go version:        go1.13.10\r\n Git commit:        48a66213fe\r\n Built:             Mon Jun 22 15:42:53 2020\r\n OS\/Arch:           linux\/amd64\r\n Experimental:      <span class=\"nb\">false\r\n\r\n<\/span>Server: Docker Engine - Community\r\n Engine:\r\n  Version:          19.03.12\r\n  API version:      1.40 <span class=\"o\">(<\/span>minimum version 1.12<span class=\"o\">)<\/span>\r\n  Go version:       go1.13.10\r\n  Git commit:       48a66213fe\r\n  Built:            Mon Jun 22 15:49:35 2020\r\n  OS\/Arch:          linux\/amd64\r\n  Experimental:     <span class=\"nb\">true\r\n <\/span>containerd:\r\n  Version:          v1.2.13\r\n  GitCommit:        7ad184331fa3e55e52b890ea95e65ba581ae3429\r\n runc:\r\n  Version:          1.0.0-rc10\r\n  GitCommit:        dc9208a3303feef5b3839f4323d9beb36df0a9dd\r\n docker-init:\r\n  Version:          0.18.0\r\n  GitCommit:        fec3683\r\n<span class=\"c\"># Docker binaries are installed in \/home\/dev\/bin<\/span>\r\n<span class=\"c\"># WARN: dockerd is not in your current PATH or pointing to \/home\/dev\/bin\/dockerd<\/span>\r\n<span class=\"c\"># Make sure the following environment variables are set (or add them to ~\/.bashrc):<\/span>\r\n\r\n<span class=\"nb\">export <\/span><span class=\"nv\">PATH<\/span><span class=\"o\">=<\/span>\/home\/dev\/bin:<span class=\"nv\">$PATH<\/span>\r\n<span class=\"nb\">export <\/span><span class=\"nv\">DOCKER_HOST<\/span><span class=\"o\">=<\/span>unix:\/\/\/run\/user\/1000\/docker.sock\r\n\r\n<span class=\"c\">#<\/span>\r\n<span class=\"c\"># To control docker service run:<\/span>\r\n<span class=\"c\"># systemctl --user (start|stop|restart) docker<\/span>\r\n<span class=\"c\">#<\/span>\r\n<\/code><\/pre>\n<p>\u73af\u5883\u53d8\u91cf\u5c06\u88ab\u6dfb\u52a0\u4ee5\u4f7f\u5f97\u80fd\u591f\u4f7f\u7528docker\u547d\u4ee4\uff0c\u867d\u7136\u5df2\u7ecf\u5b8c\u6210\u4e86\u5b89\u88c5\u4f46\u662f\u8fd9\u6837\u65e0\u6cd5\u4f7f\u7528docker\u547d\u4ee4\uff0c\u56e0\u4e3a\u5b83\u5e76\u6ca1\u6709\u5b89\u88c5\u5728PATH\u8def\u5f84\u4e0b\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span><span class=\"nb\">export <\/span><span class=\"nv\">PATH<\/span><span class=\"o\">=<\/span>\/home\/dev\/bin:<span class=\"nv\">$PATH<\/span>\r\n<span class=\"nv\">$ <\/span><span class=\"nb\">export <\/span><span class=\"nv\">DOCKER_HOST<\/span><span class=\"o\">=<\/span>unix:\/\/<span class=\"nv\">$XDG_RUNTIME_DIR<\/span>\/docker.sock\r\n<\/code><\/pre>\n<p>\u8ba9\u6211\u4eec\u5b9e\u9645\u786e\u8ba4\u4e00\u4e0b\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>docker info\r\nClient:\r\n Debug Mode: <span class=\"nb\">false\r\n\r\n<\/span>Server:\r\n Containers: 0\r\n  Running: 0\r\n  Paused: 0\r\n  Stopped: 0\r\n Images: 1\r\n Server Version: 19.03.12\r\n Storage Driver: overlay2\r\n  Backing Filesystem: extfs\r\n  Supports d_type: <span class=\"nb\">true\r\n  <\/span>Native Overlay Diff: <span class=\"nb\">false\r\n <\/span>Logging Driver: json-file\r\n Cgroup Driver: none\r\n Plugins:\r\n  Volume: <span class=\"nb\">local\r\n  <\/span>Network: bridge host ipvlan macvlan null overlay\r\n  Log: awslogs fluentd gcplogs gelf journald json-file <span class=\"nb\">local <\/span>logentries splunk syslog\r\n Swarm: inactive\r\n Runtimes: runc\r\n Default Runtime: runc\r\n Init Binary: docker-init\r\n containerd version: 7ad184331fa3e55e52b890ea95e65ba581ae3429\r\n runc version: dc9208a3303feef5b3839f4323d9beb36df0a9dd\r\n init version: fec3683\r\n Security Options:\r\n  seccomp\r\n   Profile: default\r\n  rootless\r\n Kernel Version: 5.4.0-42-generic\r\n Operating System: Ubuntu 20.04.1 LTS\r\n OSType: linux\r\n Architecture: x86_64\r\n CPUs: 8\r\n Total Memory: 7.774GiB\r\n Name: docker\r\n ID: NURI:7LP5:IHUJ:VSSV:6E5W:VMLS:4D52:X5EJ:CB24:CDJ2:OMAO:LMWB\r\n Docker Root Dir: \/home\/dev\/.local\/share\/docker\r\n Debug Mode: <span class=\"nb\">false\r\n <\/span>Registry: https:\/\/index.docker.io\/v1\/\r\n Labels:\r\n Experimental: <span class=\"nb\">true\r\n <\/span>Insecure Registries:\r\n  127.0.0.0\/8\r\n Live Restore Enabled: <span class=\"nb\">false\r\n <\/span>Product License: Community Engine\r\n<\/code><\/pre>\n<p>\u786e\u8ba4\u4e86\u53ef\u4ee5\u4f7f\u7528docker\u547d\u4ee4\uff0c\u4ee5\u53caSecurity Options\u4e2d\u5305\u542brootless\u7684\u70b9\u3002<\/p>\n<h2>\u8bd5\u7740\u4f7f\u7528\u4e00\u4e0b<\/h2>\n<p>\u5148\u8bd5\u8bd5\u8fd0\u884cNginx\u5427\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>docker run <span class=\"nt\">-dP<\/span> <span class=\"nt\">--name<\/span> nginx nginx\r\n11cd14bb3bf8d4b99aa46be825bfd7f51143bc578e68ef265f3add1baa0b19ed\r\n<span class=\"nv\">$ <\/span>docker ps\r\nCONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                   NAMES\r\n11cd14bb3bf8        nginx               <span class=\"s2\">\"\/docker-entrypoint.\u2026\"<\/span>   19 seconds ago      Up 18 seconds       0.0.0.0:32768-&gt;80\/tcp   nginx\r\n<span class=\"nv\">$ <\/span>curl <span class=\"nt\">-s<\/span> localhost:32768 | <span class=\"nb\">head<\/span> <span class=\"nt\">-n<\/span> 5\r\n&lt;<span class=\"o\">!<\/span>DOCTYPE html&gt;\r\n&lt;html&gt;\r\n&lt;<span class=\"nb\">head<\/span><span class=\"o\">&gt;<\/span>\r\n&lt;title&gt;Welcome to nginx!&lt;\/title&gt;\r\n&lt;style&gt;\r\n<\/code><\/pre>\n<p>\u6211\u786e\u8ba4\u4e86\u7aef\u53e3\u8f6c\u53d1\u6b63\u5e38\u5de5\u4f5c\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>ps <span class=\"nt\">-aux<\/span> | <span class=\"nb\">grep <\/span>docker\r\ndev         1519  0.0  0.0 112232  6856 ?        Ssl  10:18   0:00 rootlesskit <span class=\"nt\">--net<\/span><span class=\"o\">=<\/span>vpnkit <span class=\"nt\">--mtu<\/span><span class=\"o\">=<\/span>1500 <span class=\"nt\">--slirp4netns-sandbox<\/span><span class=\"o\">=<\/span>auto <span class=\"nt\">--slirp4netns-seccomp<\/span><span class=\"o\">=<\/span>auto <span class=\"nt\">--disable-host-loopback<\/span> <span class=\"nt\">--port-driver<\/span><span class=\"o\">=<\/span><span class=\"nb\">builtin<\/span> <span class=\"nt\">--copy-up<\/span><span class=\"o\">=<\/span>\/etc <span class=\"nt\">--copy-up<\/span><span class=\"o\">=<\/span>\/run \/home\/dev\/bin\/dockerd-rootless.sh <span class=\"nt\">--experimental<\/span> <span class=\"nt\">--storage-driver<\/span><span class=\"o\">=<\/span>overlay2\r\ndev         1528  7.4  0.1 112872 12060 ?        Sl   10:18   0:05 \/proc\/self\/exe <span class=\"nt\">--net<\/span><span class=\"o\">=<\/span>vpnkit <span class=\"nt\">--mtu<\/span><span class=\"o\">=<\/span>1500 <span class=\"nt\">--slirp4netns-sandbox<\/span><span class=\"o\">=<\/span>auto <span class=\"nt\">--slirp4netns-seccomp<\/span><span class=\"o\">=<\/span>auto <span class=\"nt\">--disable-host-loopback<\/span> <span class=\"nt\">--port-driver<\/span><span class=\"o\">=<\/span><span class=\"nb\">builtin<\/span> <span class=\"nt\">--copy-up<\/span><span class=\"o\">=<\/span>\/etc <span class=\"nt\">--copy-up<\/span><span class=\"o\">=<\/span>\/run \/home\/dev\/bin\/dockerd-rootless.sh <span class=\"nt\">--experimental<\/span> <span class=\"nt\">--storage-driver<\/span><span class=\"o\">=<\/span>overlay2\r\ndev         1562 20.5  0.8 1638352 67892 ?       Sl   10:18   0:14 dockerd <span class=\"nt\">--experimental<\/span> <span class=\"nt\">--storage-driver<\/span><span class=\"o\">=<\/span>overlay2\r\ndev         1583  1.1  0.2 1241920 23784 ?       Ssl  10:18   0:00 containerd <span class=\"nt\">--config<\/span> \/run\/user\/1000\/docker\/containerd\/containerd.toml <span class=\"nt\">--log-level<\/span> info\r\ndev         1875  0.0  0.0 106976  4780 ?        Sl   10:19   0:00 \/home\/dev\/bin\/rootlesskit-docker-proxy <span class=\"nt\">-proto<\/span> tcp <span class=\"nt\">-host-ip<\/span> 0.0.0.0 <span class=\"nt\">-host-port<\/span> 32768 <span class=\"nt\">-container-ip<\/span> 172.17.0.2 <span class=\"nt\">-container-port<\/span> 80\r\ndev         1880  0.0  0.0 103372  2364 ?        Sl   10:19   0:00 docker-proxy <span class=\"nt\">-container-ip<\/span> 172.17.0.2 <span class=\"nt\">-container-port<\/span> 80 <span class=\"nt\">-host-ip<\/span> 127.0.0.1 <span class=\"nt\">-host-port<\/span> 32768 <span class=\"nt\">-proto<\/span> tcp\r\ndev         1891  0.0  0.0 108872  4604 ?        Sl   10:19   0:00 containerd-shim <span class=\"nt\">-namespace<\/span> moby <span class=\"nt\">-workdir<\/span> \/home\/dev\/.local\/share\/docker\/containerd\/daemon\/io.containerd.runtime.v1.linux\/moby\/2f657a2a65b754ff9bd59254f1cd36b745c3f2679aa795c474e6ba29ead4e560 <span class=\"nt\">-address<\/span> \/run\/user\/1000\/docker\/containerd\/containerd.sock <span class=\"nt\">-containerd-binary<\/span> \/home\/dev\/bin\/containerd <span class=\"nt\">-runtime-root<\/span> \/run\/user\/1000\/docker\/runtime-runc\r\ndev         1976  0.0  0.0   5192   740 pts\/0    S+   10:20   0:00 <span class=\"nb\">grep<\/span> <span class=\"nt\">--color<\/span><span class=\"o\">=<\/span>auto docker\r\n<\/code><\/pre>\n<p>\u800c\u4e14\uff0c\u6211\u4e5f\u786e\u8ba4\u4e86\u5b83\u662f\u7531dev\u7528\u6237\u800c\u4e0d\u662froot\u7528\u6237\u6267\u884c\u7684\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u65e0\u6839 Docker \u662f\u4ec0\u4e48 \u6839\u7121\u3057\u30e2\u30fc\u30c9\uff08Rootless mode\uff09\u306f\u3001Docker\u30c7\u30fc\u30e2\u30f3\u3068\u30b3\u30f3\u30c6\u30ca\u3092ro [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-34895","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v21.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u5c1d\u8bd5\u4f7f\u7528[Docker]\u65e0\u7279\u6743Docker - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u5c1d\u8bd5\u4f7f\u7528docker\u65e0\u7279\u6743docker\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u5c1d\u8bd5\u4f7f\u7528[Docker]\u65e0\u7279\u6743Docker\" \/>\n<meta property=\"og:description\" content=\"\u65e0\u6839 Docker \u662f\u4ec0\u4e48 \u6839\u7121\u3057\u30e2\u30fc\u30c9\uff08Rootless mode\uff09\u306f\u3001Docker\u30c7\u30fc\u30e2\u30f3\u3068\u30b3\u30f3\u30c6\u30ca\u3092ro [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u5c1d\u8bd5\u4f7f\u7528docker\u65e0\u7279\u6743docker\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2022-12-29T15:45:39+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-29T19:25:56+00:00\" \/>\n<meta name=\"author\" content=\"\u9038, \u79d1\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u9038, \u79d1\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8docker%e6%97%a0%e7%89%b9%e6%9d%83docker\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8docker%e6%97%a0%e7%89%b9%e6%9d%83docker\/\",\"name\":\"\u5c1d\u8bd5\u4f7f\u7528[Docker]\u65e0\u7279\u6743Docker - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2022-12-29T15:45:39+00:00\",\"dateModified\":\"2024-04-29T19:25:56+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/85c1dae56e6ea1e695c73d33c684d487\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8docker%e6%97%a0%e7%89%b9%e6%9d%83docker\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8docker%e6%97%a0%e7%89%b9%e6%9d%83docker\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8docker%e6%97%a0%e7%89%b9%e6%9d%83docker\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u5c1d\u8bd5\u4f7f\u7528[Docker]\u65e0\u7279\u6743Docker\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/85c1dae56e6ea1e695c73d33c684d487\",\"name\":\"\u9038, \u79d1\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/c94f6d9cbbfbca863fab309840bd690c153c95f8490c290ad2ed54dd693dad16?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/c94f6d9cbbfbca863fab309840bd690c153c95f8490c290ad2ed54dd693dad16?s=96&d=mm&r=g\",\"caption\":\"\u9038, \u79d1\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/keyi\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8docker%e6%97%a0%e7%89%b9%e6%9d%83docker\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u5c1d\u8bd5\u4f7f\u7528[Docker]\u65e0\u7279\u6743Docker - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u5c1d\u8bd5\u4f7f\u7528docker\u65e0\u7279\u6743docker\/","og_locale":"zh_CN","og_type":"article","og_title":"\u5c1d\u8bd5\u4f7f\u7528[Docker]\u65e0\u7279\u6743Docker","og_description":"\u65e0\u6839 Docker \u662f\u4ec0\u4e48 \u6839\u7121\u3057\u30e2\u30fc\u30c9\uff08Rootless mode\uff09\u306f\u3001Docker\u30c7\u30fc\u30e2\u30f3\u3068\u30b3\u30f3\u30c6\u30ca\u3092ro [&hellip;]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u5c1d\u8bd5\u4f7f\u7528docker\u65e0\u7279\u6743docker\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2022-12-29T15:45:39+00:00","article_modified_time":"2024-04-29T19:25:56+00:00","author":"\u9038, \u79d1","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u9038, \u79d1","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"4 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8docker%e6%97%a0%e7%89%b9%e6%9d%83docker\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8docker%e6%97%a0%e7%89%b9%e6%9d%83docker\/","name":"\u5c1d\u8bd5\u4f7f\u7528[Docker]\u65e0\u7279\u6743Docker - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2022-12-29T15:45:39+00:00","dateModified":"2024-04-29T19:25:56+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/85c1dae56e6ea1e695c73d33c684d487"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8docker%e6%97%a0%e7%89%b9%e6%9d%83docker\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8docker%e6%97%a0%e7%89%b9%e6%9d%83docker\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8docker%e6%97%a0%e7%89%b9%e6%9d%83docker\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u5c1d\u8bd5\u4f7f\u7528[Docker]\u65e0\u7279\u6743Docker"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/85c1dae56e6ea1e695c73d33c684d487","name":"\u9038, \u79d1","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/c94f6d9cbbfbca863fab309840bd690c153c95f8490c290ad2ed54dd693dad16?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c94f6d9cbbfbca863fab309840bd690c153c95f8490c290ad2ed54dd693dad16?s=96&d=mm&r=g","caption":"\u9038, \u79d1"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/keyi\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8docker%e6%97%a0%e7%89%b9%e6%9d%83docker\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/34895","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=34895"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/34895\/revisions"}],"predecessor-version":[{"id":89396,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/34895\/revisions\/89396"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=34895"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=34895"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=34895"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}