046、创建Docker Machine（2019-03-11 周一）

1、创建machine要求 能够通过ssh没密钥登录远程主机，过程略

[root@dm03 ~]# ssh-copy-id -i .ssh/id_rsa.pub 123.58.8.20

/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: ".ssh/id_rsa.pub"

/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed

/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys

root@123.58.8.20's password:

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh '123.58.8.20'"

and check to make sure that only the key(s) you wanted were added.

2、各host配置apt源，包括docker-ce源

scp /etc/apt/sources.list 123.58.8.20:/etc/apt/sources.list

3、各host修改防火墙，开启tcp 2376

ssh 123.58.8.20 'ufw allow 2376'

4、安装docker

[root@dm03 ~]# docker-machine create --driver generic --generic-ip-address 123.58.8.20 host1

Running pre-create checks...

Creating machine...

(host1) No SSH key specified. Assuming an existing key at the default location.    # ssh登录到远程主机

Waiting for machine to be running, this may take a few minutes...

Detecting operating system of created instance...

Waiting for SSH to be available...

Detecting the provisioner...

Provisioning with ubuntu(systemd)...    # 安装docker

Installing Docker...

Copying certs to the local machine directory...    # 拷贝证书

Copying certs to the remote machine...

Setting Docker configuration on the remote daemon...    # 配置docker

Checking connection to Docker...    # 启动docker

Docker is up and running!

To see how to connect your Docker Client to the Docker Engine running on this virtual machine, run: docker-machine env host1

[root@dm03 ~]# docker-machine ls

NAME    ACTIVE   DRIVER    STATE     URL                      SWARM   DOCKER     ERRORS

host1   -        generic   Running   tcp://123.58.8.20:2376           v18.09.3

host2   -        generic   Running   tcp://123.58.8.75:2376           v18.09.3

5、如果安装docker的时候报证书相关错误可以执行一下命令进行修复

docker-machine regenerate-certs host1

登录到一台docker host上可以看到主机名已经修改成了host2 ，且docker配置文件开启了远程连接，并启用了tls安全认证和加密

root@host2:~# hostname

host2

root@host2:~# cat /etc/systemd/system/docker.service.d/10-machine.conf

[Service]

ExecStart=

ExecStart=/usr/bin/dockerd -H tcp://0.0.0.0:2376 -H unix:///var/run/docker.sock --storage-driver overlay2 --tlsverify --tlscacert /etc/docker/ca.pem --tlscert /etc/docker/server.pem --tlskey /etc/docker/server-key.pem --label provider=generic

Environment=

root@host2:~#