docker相关优化（配置优化、配置镜像加速器、收集加速镜像源）

如何构建docker 加速器

## 找台云服务器，最好海外的
    # 基于该项目  https://hub.docker.com/r/cleverest/crproxy
    docker pull cleverest/crproxy

    # 准备nginx的证书，放置在如下路径
    /opt/211cc.cc.pem
    /opt/211cc.cc.key

    # 启动容器
    docker run -d --name crproxy \
        --restart always \
        -p 443:443 \
        -e domain=dn42-la.211cc.cc\
        -v /opt/211cc.cc.pem:/etc/nginx/certs/cert.pem \
        -v /opt/211cc.cc.key:/etc/nginx/certs/privkey.pem \
        cleverest/crproxy

    # 浏览器 访问该服务器的 443端口
    https://dn42-la.211cc.cc

    # 配置 docker 加速站点（必须配置 insecure-registries 跳过不安全证书验证）
    cat > /etc/docker/daemon.json <<EOF
{
  "registry-mirrors": ["https://dn42-la.211cc.cc"],
  "insecure-registries": ["dn42-la.211cc.cc"],
  "exec-opts": ["native.cgroupdriver=systemd"]
}
EOF

    systemctl daemon-reload && systemctl restart docker

自用的加速源

## 第一个：香港（主用）
    cat > /etc/docker/daemon.json <<EOF
{
  "log-driver": "json-file",
  "log-opts": {
    "max-file": "3",
    "max-size": "100m"
  },
  "registry-mirrors": ["https://83.229.123.29"],
  "insecure-registries": ["83.229.123.29"],
  "exec-opts": ["native.cgroupdriver=systemd"]
}
EOF
    systemctl daemon-reload && systemctl restart docker

## 第二个：武汉阿里云反代香港反代dockerhub
    cat > /etc/docker/daemon.json <<EOF
{
  "log-driver": "json-file",
  "log-opts": {
    "max-file": "3",
    "max-size": "100m"
  },
  "registry-mirrors": ["https://47.122.123.71"],
  "insecure-registries": ["47.122.123.71"],
  "exec-opts": ["native.cgroupdriver=systemd"]
}
EOF
    systemctl daemon-reload && systemctl restart docker

配置镜像加速源

# Ubuntu 16.04+、Debian 8+、CentOS 7+、Rockylinux 8+
    tee /etc/docker/daemon.json <<-'EOF'
{
  "registry-mirrors": [
    "https://docker.1ms.run",
    "https://docker.registry.cyou",
    "https://docker-cf.registry.cyou",
    "https://dockercf.jsdelivr.fyi",
    "https://docker.jsdelivr.fyi",
    "https://dockertest.jsdelivr.fyi",
    "https://mirror.aliyuncs.com",
    "https://dockerproxy.com",
    "https://mirror.baidubce.com",
    "https://docker.m.daocloud.io",
    "https://docker.nju.edu.cn",
    "https://docker.mirrors.sjtug.sjtu.edu.cn",
    "https://docker.mirrors.ustc.edu.cn",
    "https://mirror.iscas.ac.cn",
    "https://docker.rainbond.cc"
  ]
}
EOF

    systemctl daemon-reload && systemctl restart docker

## 另一个组合
    tee /etc/docker/daemon.json <<-'EOF'
{
"registry-mirrors": [
    "https://docker-0.unsee.tech",
    "https://docker-cf.registry.cyou",
    "https://docker.1panel.live"
  ]
}
EOF

    systemctl daemon-reload && systemctl restart docker

docker 配置优化

# 参数介绍
    # 降低因oom导致kill docker进程的机率
    "oom-score-adjust": -1000

    # 可同时下载和上传镜像的个数
    "max-concurrent-downloads": 10
    "max-concurrent-uploads": 10

    # 修改docker的私有ip网段
    "bip": "172.29.0.1/26"

## 示例
    cat > /etc/docker/daemon.json <<EOF
{
  "oom-score-adjust": -1000,
  "max-concurrent-downloads": 10,
  "max-concurrent-uploads": 10,
  "log-driver": "json-file",
  "log-opts": {
    "max-file": "3",
    "max-size": "100m"
  },
  "registry-mirrors": ["https://83.229.123.29"],
  "insecure-registries": ["83.229.123.29"],
  "exec-opts": ["native.cgroupdriver=systemd"]
}
EOF
    systemctl daemon-reload && systemctl restart docker