Portainer管理服务器的Docker

　　‍

被管理的Docker修改

• vi /usr/lib/systemd/system/docker.service 修改 [Service]的ExecStart，增加 -H tcp://0.0.0.0:2375

[Service]
Type=notify
# the default is not to use systemd for cgroups because the delegate issues still
# exists and systemd currently does not support the cgroup feature set required
# for containers run by docker
ExecStart=/usr/bin/dockerd -H tcp://0.0.0.0:2375 -H fd:// --containerd=/run/containerd/containerd.sock

• 刷新配置文件，重启docker

systemctl daemon-reload
systemctl restart docker

• 查看docker进程是否监听

[root@localhost ~]# netstat -ano | grep 2375
tcp6       0      0 :::2375                 :::*                    LISTEN      off (0.00/0/0)

• 查看系统网络端口2375是否被docker所监听

  [root@localhost ~]# netstat -tulp
  Active Internet connections (only servers)
  Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name  
  tcp        0      0 0.0.0.0:ssh             0.0.0.0:*               LISTEN      3124/sshd         
  tcp        0      0 localhost:smtp          0.0.0.0:*               LISTEN      3379/master       
  tcp6       0      0 [::]:2375               [::]:*                  LISTEN      13964/dockerd

• 添加防火墙2375/tcp ，并重载防火墙

  [root@localhost ~]#  firewall-cmd --zone=public --add-port=2375/tcp --permanent
  success
  [root@localhost ~]# firewall-cmd --reload
  success

　　‍

portainer进行添加