apiv1

部署独立的dockerd服务, 拥有独立ip, 并提供一个可以支持远程docker的sshd服务

可以同时部署多个互不冲突的到不同的<局域网内独立ip地址>,充分利用服务器资源.

准备工作

配置macvlan和docker macvlan

部署镜像仓库服务registry, 减少重复拉取镜像. 部署配置参考这里

vim compose.yml # registry部署配置
docker compose up -d
开始配置

compose.override.yml

name: ${COMPOSE_PROJECT_NAME}
services:
  dind:
    networks:
      lan:
        ipv4_address: ${BIND_IP}
    environment:
      - PGID=2000
      - PUID=2000
    configs:
      - source: authorized_keys
        target: /home/${USERNAME:-docker}/.ssh/authorized_keys
      - source: ssh.conf
        target: /etc/ssh/ssh_config.d/ssh.conf
      - source: sshd.conf
        target: /etc/ssh/sshd_config.d/sshd.conf
      - source: docker-daemon.json
        target: /etc/docker/daemon.json
configs:
  authorized_keys:
    content: |
      ${AUTH_KEYS}
  ssh.conf:
    content: |

  sshd.conf:
    content: |
      ListenAddress 0.0.0.0
      Port 22
  docker-daemon.json:
    content: |
      {
        "registry-mirrors": ["http://localhost:5000"],
        "insecure-registries": ["localhost:5000"]
      }

networks:
  lan:
    name: macvlan-network
    external: true

.env

# 指定项目名称,不要和别的compose项目冲突
COMPOSE_PROJECT_NAME=''

# ssh-keygen 生成的公钥放这里
AUTHORIZED_KEYS='
  <secrets>
  <secrets>
  <secrets>
'

# 指定的局域网ip
BIND_IP=