vim /etc/sysconfig/network-scripts/ifcfg-ens33
輸入i進入到編輯模式,將下面的內(nèi)容復制到文件中
TYPE=Ethernet PROXY_METHOD=none BROWSER_ONLY=no BOOTPROTO=dhcp DEFROUTE=yes IPV4_FAILURE_FATAL=no IPV6INIT=yes IPV6_AUTOCONF=yes IPV6_DEFROUTE=yes IPV6_FAILURE_FATAL=no IPV6_ADDR_GEN_MODE=stable-privacy NAME=ens33 UUID=36b40bc6-6775-4e02-8161-e245d0e3892f DEVICE=ens33 #以下為橋接部分設(shè)置 ONBOOT=yes BRIDGE=br0 PEERDNS=yes PEERROUTES=yes IPV6_PEERDNS=yes IPV6_PEERROUTES=yes
4、創(chuàng)建自定義網(wǎng)橋br0
vim ifcfg-br0
并且將配置內(nèi)容復制到配置文件中
DEVICE=br0 BOOTPROTO=static NM_CINTROLLER=no ONBOOT=yes TYPE=Bridge IPADDR=192.168.186.128 NETMASK=255.255.255.0
重啟虛擬機網(wǎng)絡(luò)服務(wù)
systemctl restart network
5、修改docker配置文件,指定網(wǎng)橋
修改docker的配置文件/etc/sysconfig/
vim /etc/sysconfig/docker
修改內(nèi)容如下
OPTIONS='--selinux-enabled --log-driver=journald --signature-verification=false'
修改為:
OPTIONS='--selinux-enabled -b=br0'
修改完之后:
# /etc/sysconfig/docker
# Modify these options if you want to change the way the docker daemon runs
#OPTIONS='--selinux-enabled --log-driver=journald --signature-verification=false'
OPTIONS='--selinux-enabled -b=br0'
if [ -z "${DOCKER_CERT_PATH}" ]; then
DOCKER_CERT_PATH=/etc/docker
fi
# Do not add registries in this file anymore. Use /etc/containers/registries.conf
# instead. For more information reference the registries.conf(5) man page.
# Location used for temporary files, such as those created by
# docker load and build operations. Default is /var/lib/docker/tmp
# Can be overriden by setting the following environment variable.
# DOCKER_TMPDIR=/var/tmp
# Controls the /etc/cron.daily/docker-logrotate cron job status.
# To disable, uncomment the line below.
# LOGROTATE=false
# docker-latest daemon can be used by starting the docker-latest unitfile.
# To use docker-latest client, uncomment below lines
#DOCKERBINARY=/usr/bin/docker-latest
#DOCKERDBINARY=/usr/bin/dockerd-latest
#DOCKER_CONTAINERD_BINARY=/usr/bin/docker-containerd-latest
#DOCKER_CONTAINERD_SHIM_BINARY=/usr/bin/docker-containerd-shim-latest
other_args='-b br0'
5、重啟Docker服務(wù)
systemctl restart docker
6、創(chuàng)建Docker容器實例
docker run -itd --name test1 --net=none centos /bin/bash
–net=none代表容器的網(wǎng)卡都是為空的,需要通過pipework進行自定義指定
7、指定網(wǎng)卡
pipework br0 test1 192.168.186.111/24@192.168.186.128
8、進入到容器,嘗試Ping宿主機和同網(wǎng)段IP是否能夠Ping通
# 進入到容器 docker attach test1 # ping 宿主機 ping 192.168.186.22
8.1 修改同網(wǎng)段主機ip
修改主機ip,網(wǎng)段與宿主機A網(wǎng)橋IP段保持一致。設(shè)置后,宿主機A,B之間可以互相ping通
# ping 同網(wǎng)段Ip ping 192.168.186.33
到這里,就完成了Docker網(wǎng)絡(luò)之間的通信。