DockerCE之执行docker info出现两条警告信息及解决方案

DockerCE之执行docker info出现两条警告信息

安装完docker-ce 20.10.12版本后，执行docker info的时候出现下面的警告信息。

WARNING: bridge-nf-call-iptables is disabledWARNING: bridge-nf-call-ip6tables is disabled

[root@node-1 docker-ce]# systemctl start docker.service
[root@node-1 docker-ce]# systemctl status docker.service
● docker.service – Docker Application Container Engine
Loaded: loaded (/usr/lib/systemd/system/docker.service; disabled; vendor preset: disabled)
Active: active (running) since 四 2021-12-16 07:13:27 CST; 1s ago
Docs: https://docs.docker.com
Main PID: 96606 (dockerd)
Tasks: 8
Memory: 27.5M
CGroup: /system.slice/docker.service
└─96606 /usr/bin/dockerd -H fd:// –containerd=/run/containerd/containerd.sock

12月 16 07:13:27 node-1 dockerd[96606]: time=\”2021-12-16T07:13:27.284939882+08:00\” level=info msg=\”scheme \\\”unix\\\” not registered, fallback to default scheme\” module=grpc
12月 16 07:13:27 node-1 dockerd[96606]: time=\”2021-12-16T07:13:27.284958321+08:00\” level=info msg=\”ccResolverWrapper: sending update to cc: {[{unix:///run/containerd/containerd.sock <nil> 0 <nil>}] <nil> <nil>}\” module=grpc
12月 16 07:13:27 node-1 dockerd[96606]: time=\”2021-12-16T07:13:27.284970554+08:00\” level=info msg=\”ClientConn switching balancer to \\\”pick_first\\\”\” module=grpc
12月 16 07:13:27 node-1 dockerd[96606]: time=\”2021-12-16T07:13:27.347482341+08:00\” level=info msg=\”Loading containers: start.\”
12月 16 07:13:27 node-1 dockerd[96606]: time=\”2021-12-16T07:13:27.733612330+08:00\” level=info msg=\”Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option –bip can be used to set a preferred IP address\”
12月 16 07:13:27 node-1 dockerd[96606]: time=\”2021-12-16T07:13:27.820102802+08:00\” level=info msg=\”Loading containers: done.\”
12月 16 07:13:27 node-1 dockerd[96606]: time=\”2021-12-16T07:13:27.867156288+08:00\” level=info msg=\”Docker daemon\” commit=459d0df graphdriver(s)=overlay2 version=20.10.12
12月 16 07:13:27 node-1 dockerd[96606]: time=\”2021-12-16T07:13:27.867280919+08:00\” level=info msg=\”Daemon has completed initialization\”
12月 16 07:13:27 node-1 systemd[1]: Started Docker Application Container Engine.
12月 16 07:13:27 node-1 dockerd[96606]: time=\”2021-12-16T07:13:27.928730639+08:00\” level=info msg=\”API listen on /var/run/docker.sock\”
[root@node-1 docker-ce]# docker info
Client:
Debug Mode: false
Plugins:
scan: Docker Scan (Docker Inc., v0.9.0)

Server:
Containers: 0
Running: 0
Paused: 0
Stopped: 0
Images: 0
Server Version: 20.10.12
Storage Driver: overlay2
Backing Filesystem: xfs
Supports d_type: true
Native Overlay Diff: true
userxattr: false
Logging Driver: json-file
Cgroup Driver: cgroupfs
Plugins:
Volume: local
Network: bridge host ipvlan macvlan null overlay
Log: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslog
Swarm: inactive
Runtimes: io.containerd.runc.v2 io.containerd.runtime.v1.linux runc
Default Runtime: runc
Init Binary: docker-init
containerd version: 7b11cfaabd73bb80907dd23182b9347b4245eb5d
runc version: v1.0.2-0-g52b36a2
init version: de40ad0
Security Options:
seccomp
Profile: default
Kernel Version: 3.10.0-1160.el7.x86_64
Operating System: CentOS Linux 7 (Core)
OSType: linux
Architecture: x86_64
CPUs: 2
Total Memory: 7.777GiB
Name: node-1
ID: D4T7:EWDQ:JKDN:REHH:ODYZ:LPEV:YQU4:FWAE:FSKF:ATUQ:5IV6:GAFL
Docker Root Dir: /var/lib/docker
Debug Mode: false
Registry: https://index.docker.io/v1/
Labels:
Experimental: false
Insecure Registries:
127.0.0.0/8
Live Restore Enabled: false

WARNING: bridge-nf-call-iptables is disabled
WARNING: bridge-nf-call-ip6tables is disabled

解决

在/etc/sysctl.info文件中增加下面两行配置，保存后执行sysctl -p即可。

net.bridge.bridge-nf-call-ip6tables = 1net.bridge.bridge-nf-call-iptables = 1

[root@node-1 docker-ce]# vi /etc/sysctl.conf
# sysctl settings are defined through files in
# /usr/lib/sysctl.d/, /run/sysctl.d/, and /etc/sysctl.d/.
#
# Vendors settings live in /usr/lib/sysctl.d/.
# To override a whole file, create a new file with the same in
# /etc/sysctl.d/ and put new settings there. To override
# only specific settings, add a file with a lexically later
# name in /etc/sysctl.d/ and put new settings there.
#
# For more information, see sysctl.conf(5) and sysctl.d(5).

vm.max_map_count=262145
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1

[root@node-1 docker-ce]# sysctl -p
vm.max_map_count = 262145
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1

[root@node-1 docker-ce]# docker info
Client:
Debug Mode: false
Plugins:
scan: Docker Scan (Docker Inc., v0.9.0)