使用static binaries离线安装docker

　　许多国产化项目部署需要用到docker，而服务器有必须处于离线状态，那么离线安装docker就成为了一个问题，离线安装docker本身并不难，难的是安装docker的依赖软件。

　　经过多次尝试，依赖软件也没有安装成功，在一筹莫展之际，在docker官网看到，有一种离线安装方式叫：static binaries

一、static binaries安装docker

1，下载离线静态包：https://download.docker.com/linux/static/stable/

2，执行命令：

sudo cp docker/* /usr/bin/
sudo dockerd &

二、启动遇到的问题

　　 正常只要进行上述两个步骤就可以成功了，但是还是遇到了一些问题。

1，failed to start daemon: Devices cgroup isn't mounted

这个是因为默认的cgroup的cpu，memory等没有被挂载，需要使用一个脚本来挂载，具体使用脚本是

#!/bin/sh
# Copyright 2011 Canonical, Inc
#           2014 Tianon Gravi
# Author: Serge Hallyn <serge.hallyn@canonical.com>
#         Tianon Gravi <tianon@debian.org>
set -e

# for simplicity this script provides no flexibility

# if cgroup is mounted by fstab, don't run
# don't get too smart - bail on any uncommented entry with 'cgroup' in it
if grep -v '^#' /etc/fstab | grep -q cgroup; then
    echo 'cgroups mounted from fstab, not mounting /sys/fs/cgroup'
    exit 0
fi

# kernel provides cgroups?
if [ ! -e /proc/cgroups ]; then
    exit 0
fi

# if we don't even have the directory we need, something else must be wrong
if [ ! -d /sys/fs/cgroup ]; then
    exit 0
fi

# mount /sys/fs/cgroup if not already done
if ! mountpoint -q /sys/fs/cgroup; then
    mount -t tmpfs -o uid=0,gid=0,mode=0755 cgroup /sys/fs/cgroup
fi

cd /sys/fs/cgroup

# get/mount list of enabled cgroup controllers
for sys in $(awk '!/^#/ { if ($4 == 1) print $1 }' /proc/cgroups); do
    mkdir -p $sys
    if ! mountpoint -q $sys; then
        if ! mount -n -t cgroup -o $sys cgroup $sys; then
            rmdir $sys || true
        fi
    fi
done

# example /proc/cgroups:
#  #subsys_name    hierarchy    num_cgroups    enabled
#  cpuset    2    3    1
#  cpu    3    3    1
#  cpuacct    4    3    1
#  memory    5    3    0
#  devices    6    3    1
#  freezer    7    3    1
#  blkio    8    3    1

# enable cgroups memory hierarchy, like systemd does (and lxc/docker desires)
# https://github.com/systemd/systemd/blob/v245/src/core/cgroup.c#L2983
# https://bugs.debian.org/940713
if [ -e /sys/fs/cgroup/memory/memory.use_hierarchy ]; then
    echo 1 > /sys/fs/cgroup/memory/memory.use_hierarchy
fi

exit 0

2，failed to create NAT chain DOCKER: iptables failed

 docker的运行依赖于iptables，利用其中的nat功能

下载iptables：http://mirrors.ustc.edu.cn/debian/pool/main/i/iptables/

安装即可。