准备安装runtime -Docker

• 更新apt包索引并安装包以允许apt通过HTTPS使用存储库
  apt update -y
  sudo apt-get -y install ca-certificates curl gnupg-agent lsb-release
• 添加Docker的官方GPG密钥
  curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
• 添加Docker的存储库
  echo "deb [arch=(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
• 安装Docker engine
  sudo apt-get -y update
  apt-get install docker-ce docker-ce-cli containerd.io -y
• 配置 Docker 守护程序，尤其是使用 systemd 来管理容器的 cgroup
  sudo mkdir /etc/docker
  cat <<EOF | sudo tee /etc/docker/daemon.json
  {
  "exec-opts": ["native.cgroupdriver=systemd"],
  "log-driver": "json-file",
  "log-opts": {
  "max-size": "100m"
  },
  "storage-driver": "overlay2"
  }
  EOF
  systemctl daemon-reload
  systemctl restart docker
  systemctl enable docker
• docker0 网桥的容器添加了ACCEPT规则
  sed -i '18c ExecStartPost=/sbin/iptables -P FORWARD ACCEPT' /lib/systemd/system/docker.service
  systemctl daemon-reload && systemctl restart docker.service