{"id":43716,"date":"2025-06-14T08:40:55","date_gmt":"2025-06-14T00:40:55","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/43716.html"},"modified":"2025-06-14T08:40:55","modified_gmt":"2025-06-14T00:40:55","slug":"%e4%bb%a5%e5%89%8d%e5%9c%a8%e6%9c%8d%e5%8a%a1%e5%99%a8%e5%90%af%e5%8a%a8%e4%ba%86docker%ef%bc%8c%e7%8e%b0%e5%9c%a8%e4%b8%8d%e9%9c%80%e8%a6%81%e4%ba%86%ef%bc%8c%e4%b8%ba%e4%ba%86%e5%ae%89%e5%85%a8","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/43716.html","title":{"rendered":"\u4ee5\u524d\u5728\u670d\u52a1\u5668\u542f\u52a8\u4e86docker\uff0c\u73b0\u5728\u4e0d\u9700\u8981\u4e86\uff0c\u4e3a\u4e86\u5b89\u5168\uff0c\u53bb\u6389docker\u670d\u52a1@Ubuntu"},"content":{"rendered":"<p>\u4ee5\u524d\u5728\u670d\u52a1\u5668\u542f\u52a8\u4e86docker&#xff0c;docker\u91cc\u9762\u8fd0\u884c\u4e86paddleserving\u670d\u52a1\u5668&#xff1a;\u5728docker\u4e2d\u5b89\u88c5paddle serving &#064;FreeBSD&#xff08;\u5f85\u7eed&#xff09;_pkg-config is required for building pyav-CSDN\u535a\u5ba2\u3002\u73b0\u5728\u4e0d\u9700\u8981\u8fd9\u4e2adocker\u670d\u52a1\u5668\u4e86&#xff0c;\u6240\u4ee5\u9488\u5bf9docker 9292\u7aef\u53e3\u7684\u6620\u5c04\u4e5f\u4e0d\u9700\u8981\u4e86&#xff0c;\u4e3a\u4e86\u5b89\u5168&#xff0c;\u51c6\u5907\u53bb\u6389docker\u3002\u4ee5\u4e0b\u662f\u95ee\u9898\u5904\u7406\u8bb0\u5f55\u3002<\/p>\n<\/p>\n<h2>\u767b\u5f55\u670d\u52a1\u5668&#xff0c;\u7a81\u7136\u53d1\u73b09292\u7aef\u53e3\u5f02\u5e38&#xff08;\u5b9e\u9645\u4e0a\u662f\u81ea\u5df1\u5fd8\u8bb0\u4e86&#xff0c;\u8fd9\u662f\u81ea\u5df1\u5f00\u7684&#xff09;<\/h2>\n<h3>\u4f7f\u7528ps -auxw \u5217\u51fa\u6240\u6709\u8fdb\u7a0b&#xff0c;\u54a8\u8be2\u6587\u5fc3\u8fdb\u884c\u5b89\u5168\u5ba1\u8ba1<\/h3>\n<p>\u8bf7\u770b\u770b\u6709\u6ca1\u6709\u4ec0\u4e48\u5b89\u5168\u9690\u60a3&#xff1a;root       35010  0.0  0.0 240308  3648 ?        Ssl   2022   0:30 \/usr\/lib\/policykit-1\/polkitd &#8211;no-debug<br \/>\nroot       35104  0.0  0.0 315092  1944 ?        Ssl   2022   0:01 \/usr\/sbin\/ModemManager<br \/>\nroot       40571  0.0  0.0  57248  8140 ?        Ss    2024   0:00 nginx: master process \/usr\/sbin\/nginx -g daemon on; master_proces<br \/>\nroot      102790  0.2  0.2 1344948 23532 ?       Ssl   2022 2876:37 \/usr\/bin\/containerd<br \/>\nroot      103211  0.0  0.4 1753308 37392 ?       Ssl   2022 184:16 \/usr\/bin\/dockerd -H fd:\/\/ &#8211;containerd&#061;\/run\/containerd\/containerd<br \/>\nroot      103243  0.0  0.0   2488    68 ?        S     2022   0:00 bpfilter_umh<br \/>\nroot      118849  0.0  0.0 1222376  568 ?        Sl    2022   0:57 \/usr\/bin\/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 9292<br \/>\nroot      118857  0.0  0.0 1222376  588 ?        Sl    2022   0:58 \/usr\/bin\/docker-proxy -proto tcp -host-ip :: -host-port 9292 -con<br \/>\nroot      118872  0.0  0.0 114100   988 ?        Sl    2022  77:17 \/usr\/bin\/containerd-shim-runc-v2 -namespace moby -id 4c28ed7f6fb3 <\/p>\n<p>\u6839\u636e\u63d0\u4f9b\u7684\u8fdb\u7a0b\u5217\u8868\u5206\u6790&#xff0c;\u4ee5\u4e0b\u662f\u8be6\u7ec6\u7684\u5b89\u5168\u8bc4\u4f30\u548c\u52a0\u56fa\u5efa\u8bae&#xff1a;<\/p>\n<h4>\u4e00\u3001\u5173\u952e\u98ce\u9669\u70b9\u5206\u6790<\/h4>\n<li>\n<p>\u200cDocker\u76f8\u5173\u670d\u52a1\u66b4\u9732\u98ce\u9669\u200c<\/p>\n<ul>\n<li>\u68c0\u6d4b\u5230Docker\u4ee3\u7406\u8fdb\u7a0b\u66b4\u9732\u7aef\u53e3&#xff1a; \/usr\/bin\/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 9292 # IPv4 \/usr\/bin\/docker-proxy -proto tcp -host-ip :: -host-port 9292 # IPv6  <\/li>\n<li>\u98ce\u9669\u7b49\u7ea7&#xff1a;\u9ad8\u5371&#xff08;\u76f4\u63a5\u66b4\u9732\u57280.0.0.0\u4e14\u65e0\u7f51\u7edc\u9694\u79bb&#xff09;<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>\u200c\u6743\u9650\u7ba1\u7406\u670d\u52a1\u98ce\u9669\u200c<\/p>\n<ul>\n<li>polkitd\u8fdb\u7a0b&#xff08;PID 35010&#xff09;\u8fd0\u884c\u53c2\u6570\u542b&#8211;no-debug&#xff0c;\u53ef\u80fd\u9690\u85cf\u5ba1\u8ba1\u65e5\u5fd7<\/li>\n<li>\u5386\u53f2\u6f0f\u6d1e\u8bb0\u5f55&#xff1a;CVE-2021-4034&#xff08;pkexec\u672c\u5730\u63d0\u6743&#xff09;<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>\u200c\u5bb9\u5668\u8fd0\u884c\u65f6\u957f\u671f\u8fd0\u884c\u200c<\/p>\n<ul>\n<li>containerd&#xff08;PID 102790&#xff09;\u5df2\u8fd0\u884c2876\u5c0f\u65f6&#xff0c;\u5b58\u5728\u672a\u66f4\u65b0\u6f0f\u6d1e\u98ce\u9669<\/li>\n<li>dockerd&#xff08;PID 103211&#xff09;\u4f7f\u7528\u9ed8\u8ba4\u5957\u63a5\u5b57&#xff08;-H fd:\/\/&#xff09;\u53ef\u80fd\u6743\u9650\u8fc7\u5bbd<\/li>\n<\/ul>\n<\/li>\n<h4>\u4e8c\u3001\u7d27\u6025\u5904\u7406\u63aa\u65bd<\/h4>\n<li>\n<p>\u200cDocker\u7aef\u53e3\u52a0\u56fa\u200c<\/p>\n<p>  # \u7acb\u5373\u9650\u52369292\u7aef\u53e3\u8bbf\u95ee&#xff08;\u793a\u4f8b\u4ec5\u5141\u8bb8\u5185\u7f51&#xff09;<br \/>\nsudo iptables -A DOCKER-USER -p tcp &#8211;dport 9292 ! -s 192.168.1.0\/24 -j DROP<br \/>\nsudo ip6tables -A DOCKER-USER -p tcp &#8211;dport 9292 ! -s fd00::\/8 -j DROP<\/p>\n<p># \u9a8c\u8bc1\u89c4\u5219<br \/>\nsudo iptables -L DOCKER-USER -n &#8211;line-numbers<\/p>\n<\/li>\n<li>\n<p>\u200cPolkit\u5b89\u5168\u914d\u7f6e\u200c<\/p>\n<p>  # \u68c0\u67e5polkit\u89c4\u5219\u6743\u9650<br \/>\ngrep -r &#034;allow_any&#034; \/etc\/polkit-1\/rules.d\/<\/p>\n<p># \u66f4\u65b0polkit\u5230\u6700\u65b0\u7248&#xff08;\u4fee\u590d\u5df2\u77e5\u6f0f\u6d1e&#xff09;<br \/>\nsudo apt install &#8211;only-upgrade policykit-1<\/p>\n<\/li>\n<h4>\u4e09\u3001\u6df1\u5ea6\u5b89\u5168\u5efa\u8bae<\/h4>\n<li>\n<p>\u200c\u5bb9\u5668\u8fd0\u884c\u65f6\u52a0\u56fa\u200c<\/p>\n<p>  # 1. \u542f\u7528containerd\u5ba1\u8ba1\u65e5\u5fd7<br \/>\nsudo mkdir -p \/etc\/containerd\/conf.d\/<br \/>\ncat &lt;&lt;EOF | sudo tee \/etc\/containerd\/conf.d\/audit.toml<br \/>\nversion &#061; 2<br \/>\n[plugins.&#034;io.containerd.runtime.v1.linux&#034;]<br \/>\n  runtime &#061; &#034;runc&#034;<br \/>\n  runtime_root &#061; &#034;\/run\/containerd\/runc&#034;<br \/>\n[debug]<br \/>\n  level &#061; &#034;info&#034;<br \/>\nEOF<\/p>\n<p># 2. \u9650\u5236docker.sock\u6743\u9650<br \/>\nsudo chmod 660 \/var\/run\/docker.sock<br \/>\nsudo chown root:docker \/var\/run\/docker.sock<\/p>\n<\/li>\n<li>\n<p>\u200c\u7f51\u7edc\u9694\u79bb\u65b9\u6848\u200c<\/p>\n<p>  # \u521b\u5efadocker\u5b89\u5168\u7f51\u7edc<br \/>\ndocker network create &#8211;internal secure-net<br \/>\ndocker network connect secure-net &lt;your_container&gt;<\/p>\n<p># \u9a8c\u8bc1\u7f51\u7edc\u914d\u7f6e<br \/>\ndocker inspect &lt;container_id&gt; | grep -A 5 Networks<\/p>\n<\/li>\n<h4>\u56db\u3001\u98ce\u9669\u7b49\u7ea7\u8bc4\u4f30\u8868<\/h4>\n<table>\n<tr>\u98ce\u9669\u70b9\u5f71\u54cd\u8303\u56f4\u4fee\u590d\u4f18\u5148\u7ea7\u9a8c\u8bc1\u65b9\u6cd5<\/tr>\n<tbody>\n<tr>\n<td>Docker 9292\u7aef\u53e3\u66b4\u9732<\/td>\n<td>\u5168\u7f51\u53ef\u8fbe<\/td>\n<td>\u7d27\u6025<\/td>\n<td>telnet &lt;IP&gt; 9292<\/td>\n<\/tr>\n<tr>\n<td>Polkit\u8c03\u8bd5\u6a21\u5f0f\u5173\u95ed<\/td>\n<td>\u672c\u5730\u63d0\u6743<\/td>\n<td>\u9ad8<\/td>\n<td>pkaction &#8211;version<\/td>\n<\/tr>\n<tr>\n<td>Containerd\u957f\u671f\u8fd0\u884c<\/td>\n<td>\u5bb9\u5668\u9003\u9038<\/td>\n<td>\u4e2d<\/td>\n<td>containerd &#8211;version<\/td>\n<\/tr>\n<tr>\n<td>Docker\u9ed8\u8ba4\u5957\u63a5\u5b57\u6743\u9650<\/td>\n<td>\u6743\u9650\u63d0\u5347<\/td>\n<td>\u9ad8<\/td>\n<td>ls -l \/var\/run\/docker.sock<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4>\u4e94\u3001\u76d1\u63a7\u65b9\u6848\u5efa\u8bae<\/h4>\n<li>\n<p>\u200c\u5b9e\u65f6\u68c0\u6d4b\u811a\u672c\u200c<\/p>\n<p>  #!\/bin\/bash<br \/>\n# \u76d1\u63a7\u5f02\u5e38\u5bb9\u5668\u521b\u5efa<br \/>\nsudo auditctl -w \/usr\/bin\/docker -k docker_cmd<br \/>\nsudo ausearch -k docker_cmd | grep exec<\/p>\n<p># \u68c0\u6d4bpolkit\u5f02\u5e38\u8bf7\u6c42<br \/>\njournalctl -u polkit &#8211;since &#034;1 hour ago&#034; | grep -i &#034;security&#034;<\/p>\n<\/li>\n<li>\n<p>\u200c\u65e5\u5fd7\u5206\u6790\u91cd\u70b9\u200c<\/p>\n<ul>\n<li>\/var\/log\/containers\/\u76ee\u5f55\u4e0b\u7684\u5f02\u5e38\u542f\u52a8\u8bb0\u5f55<\/li>\n<li>journalctl -u docker\u4e2d\u7684\u7279\u6743\u64cd\u4f5c&#xff08;&#8211;privileged\u53c2\u6570&#xff09;<\/li>\n<\/ul>\n<\/li>\n<p>\u5efa\u8bae\u7acb\u5373\u5904\u7406Docker\u7aef\u53e3\u66b4\u9732\u95ee\u9898&#xff0c;\u5e76\u572824\u5c0f\u65f6\u5185\u5b8c\u6210polkit\u5347\u7ea7\u3002\u5176\u4ed6\u9879\u76ee\u53ef\u5728\u5468\u7ef4\u62a4\u7a97\u53e3\u671f\u5b9e\u65bd\u3002<\/p>\n<\/p>\n<h2>\u51c6\u5907\u628adocker\u5173\u95ed&#xff1a;<\/h2>\n<p>\u4ee5\u4e0b\u662f\u5173\u95edDocker\u670d\u52a1\u7684\u7cfb\u7edf\u5316\u64cd\u4f5c\u6307\u5357&#xff0c;\u6db5\u76d6\u4e0d\u540c\u573a\u666f\u4e0b\u7684\u5b89\u5168\u5173\u95ed\u65b9\u6cd5\u53ca\u540e\u7eed\u9a8c\u8bc1\u6d41\u7a0b&#xff1a;<\/p>\n<hr \/>\n<h4>\u200c\u4e00\u3001\u5e38\u89c4\u5173\u95ed\u65b9\u6cd5&#xff08;\u63a8\u8350&#xff09;\u200c<\/h4>\n<h5>\u200c1. \u4f7f\u7528systemd\u7ba1\u7406\u670d\u52a1\u200c<\/h5>\n<p># 1. \u505c\u6b62\u6240\u6709\u8fd0\u884c\u4e2d\u7684\u5bb9\u5668<br \/>\nsudo docker stop $(sudo docker ps -aq)<\/p>\n<p># 2. \u505c\u6b62Docker\u670d\u52a1&#xff08;\u542bcontainerd\u4f9d\u8d56&#xff09;<br \/>\nsudo systemctl stop docker containerd<\/p>\n<p># 3. \u7981\u7528\u5f00\u673a\u81ea\u542f&#xff08;\u53ef\u9009&#xff09;<br \/>\nsudo systemctl disable docker containerd<\/p>\n<p># 4. \u9a8c\u8bc1\u72b6\u6001<br \/>\nsudo systemctl status docker containerd<\/p>\n<p>\u200c\u8f93\u51fa\u793a\u4f8b\u200c&#xff1a;<\/p>\n<p>sudo docker ps<br \/>\nCONTAINER ID   IMAGE                                                    COMMAND   CREATED       STATUS       PORTS                                               NAMES<br \/>\n4c28ed7f6fb3   registry.baidubce.com\/paddlepaddle\/serving:0.8.0-devel   &#034;bash&#034;    2 years ago   Up 2 years   22\/tcp, 0.0.0.0:9292-&gt;9292\/tcp, :::9292-&gt;9292\/tcp   test<br \/>\nsudo docker stop 4c28ed7f6fb3<br \/>\n4c28ed7f6fb3 <\/p>\n<p>sudo systemctl stop docker containerd<br \/>\nWarning: Stopping docker.service, but it can still be activated by:<br \/>\n  docker.socket<br \/>\nsudo systemctl status docker containerd<br \/>\n\u25cf docker.service &#8211; Docker Application Container Engine<br \/>\n     Loaded: loaded (\/lib\/systemd\/system\/docker.service; enabled; vendor preset: enabled)<br \/>\n     Active: inactive (dead) since Thu 2025-06-12 11:33:38 CST; 37s ago <\/p>\n<\/p>\n<h5>\u200c2. \u4f20\u7edfSysVinit\u7cfb\u7edf\u200c<\/h5>\n<p># CentOS 6\/Debian 8\u7b49\u65e7\u7cfb\u7edf sudo service docker stop sudo chkconfig docker off # \u7981\u7528\u81ea\u542f  <\/p>\n<hr \/>\n<h4>\u200c\u4e8c\u3001\u7d27\u6025\u5173\u95ed\u573a\u666f\u200c<\/h4>\n<h5>\u200c1. \u5f3a\u5236\u7ec8\u6b62\u8fdb\u7a0b&#xff08;\u5f53systemd\u5931\u6548\u65f6&#xff09;\u200c<\/h5>\n<p># 1. \u67e5\u627eDocker\u76f8\u5173\u8fdb\u7a0b<br \/>\nsudo ps aux | grep -E &#039;docker|containerd|dockerd&#039;<\/p>\n<p># 2. \u5f3a\u5236\u7ec8\u6b62&#xff08;\u8c28\u614e\u4f7f\u7528&#xff09;<br \/>\nsudo kill -9 $(pgrep dockerd) $(pgrep containerd)<\/p>\n<p># 3. \u6e05\u7406\u6b8b\u7559\u5957\u63a5\u5b57<br \/>\nsudo rm -f \/var\/run\/docker.sock \/run\/containerd\/containerd.sock<\/p>\n<h5>\u200c2. \u6e05\u9664Docker\u7f51\u7edc\u6b8b\u7559\u200c<\/h5>\n<p># \u5220\u9664\u6240\u6709Docker\u865a\u62df\u7f51\u5361&#xff08;\u9632\u6b62\u7f51\u7edc\u51b2\u7a81&#xff09;<br \/>\nsudo ip link show | grep -E &#039;docker|veth&#039; | awk &#039;{print $2}&#039; | cut -d&#039;:&#039; -f1 | xargs -I {} sudo ip link del {}<\/p>\n<hr \/>\n<h4>\u200c\u4e09\u3001\u9a8c\u8bc1\u5173\u95ed\u72b6\u6001\u200c<\/h4>\n<table>\n<tr>\u68c0\u67e5\u9879\u547d\u4ee4\u793a\u4f8b\u9884\u671f\u7ed3\u679c<\/tr>\n<tbody>\n<tr>\n<td>\u670d\u52a1\u72b6\u6001<\/td>\n<td>systemctl is-active docker<\/td>\n<td>inactive<\/td>\n<\/tr>\n<tr>\n<td>\u8fdb\u7a0b\u5b58\u6d3b<\/td>\n<td>pgrep dockerd<\/td>\n<td>\u65e0\u8f93\u51fa<\/td>\n<\/tr>\n<tr>\n<td>\u7aef\u53e3\u5360\u7528<\/td>\n<td>&#096;ss -tulnp | grep -E &#039;2375<\/td>\n<td>2376<\/td>\n<td>9292&#039;&#096;<\/td>\n<td>\u65e0Docker\u76f8\u5173\u7aef\u53e3<\/td>\n<\/tr>\n<tr>\n<td>\u5bb9\u5668\u72b6\u6001<\/td>\n<td>docker ps -a<\/td>\n<td>Cannot connect to the Docker daemon<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr \/>\n<h4>\u200c\u56db\u3001\u6570\u636e\u6301\u4e45\u5316\u5904\u7406\u200c<\/h4>\n<h5>\u200c1. \u5907\u4efd\u91cd\u8981\u6570\u636e<\/h5>\n<h5>\u5bfc\u51fa\u955c\u50cf\u200c<\/h5>\n<p>sudo docker save -o \/mnt\/data\/data\/paddleservingimages.tar 4c28ed7f6fb3<\/p>\n<p>\u597d\u4e48&#xff0c;\u52a8\u624b\u592a\u5feb\u4e86&#xff0c;\u5fd8\u8bb0\u5148\u5907\u4efd\u4e86\u3002\u00a0docker ps\u5565\u4e5f\u6ca1\u6709\u4e86<\/p>\n<p> sudo docker ps<br \/>\nCONTAINER ID   IMAGE     COMMAND   CREATED   STATUS    PORTS     NAMES <\/p>\n<p>bashCopy Code<\/p>\n<\/p>\n<p>\u5907\u4efd\u5377\u6570\u636e sudo tar -czvf \/backup\/docker_volumes.tar.gz \/var\/lib\/docker\/volumes\/ <\/p>\n<h5>\u200c2. \u6e05\u7406\u6b8b\u7559\u6570\u636e&#xff08;\u5f7b\u5e95\u5378\u8f7d\u65f6&#xff09;\u200c<\/h5>\n<p># 1. \u505c\u6b62\u6240\u6709\u670d\u52a1\u540e<br \/>\nsudo apt purge docker-ce docker-ce-cli containerd.io  # Debian\/Ubuntu<br \/>\nsudo yum remove docker-ce docker-ce-cli containerd.io  # CentOS\/RHEL<\/p>\n<p># 2. \u5220\u9664\u6570\u636e\u76ee\u5f55&#xff08;\u8c28\u614e\u64cd\u4f5c&#xff09;<br \/>\nsudo rm -rf \/var\/lib\/docker \/var\/lib\/containerd<\/p>\n<p>\u5220\u9664\u6570\u636e\u540e&#xff0c;\u786c\u76d8\u7a7a\u95f4\u91ca\u653e\u4e0d\u5c11<\/p>\n<p>df -H<\/p>\n<p>\/dev\/vda1        53G   50G  933M  99% \/<\/p>\n<p>\/dev\/vda1        53G   27G   24G  53% \/<\/p>\n<hr \/>\n<h4>\u200c\u4e94\u3001\u5b89\u5168\u5efa\u8bae\u200c<\/h4>\n<li>\n<p>\u200c\u5173\u95ed\u524d\u64cd\u4f5c\u200c&#xff1a;<\/p>\n<ul>\n<li>\u786e\u4fdd\u65e0\u5173\u952e\u4e1a\u52a1\u5bb9\u5668\u8fd0\u884c&#xff08;\u901a\u8fc7docker ps\u786e\u8ba4&#xff09;<\/li>\n<li>\u5bfc\u51fa\u5173\u952e\u955c\u50cf&#xff08;\u4f7f\u7528docker save&#xff09;<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>\u200c\u5173\u95ed\u540e\u68c0\u67e5\u200c&#xff1a;<\/p>\n<ul>\n<li>\u786e\u8ba4\u65e0\u6b8b\u7559\u8fdb\u7a0b&#xff08;ps aux \\\\| grep docker&#xff09;<\/li>\n<li>\u9a8c\u8bc1\u9632\u706b\u5899\u89c4\u5219&#xff08;\u5982iptables -L\u4e2d\u65e0DOCKER\u94fe&#xff09;<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>\u200c\u66ff\u4ee3\u65b9\u6848\u200c&#xff1a;<\/p>\n<ul>\n<li>\u82e5\u9700\u4e34\u65f6\u9694\u79bb&#xff0c;\u53ef\u4fee\u6539iptables\u89c4\u5219&#xff1a;  sudo iptables -I INPUT -p tcp &#8211;dport 2375 -j DROP<br \/>\nsudo iptables -I INPUT -p tcp &#8211;dport 2376 -j DROP<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<hr \/>\n<h4>\u200c\u516d\u3001\u5e38\u89c1\u95ee\u9898\u5904\u7406\u200c<\/h4>\n<h5>\u200c1. \u9519\u8bef&#xff1a;Cannot connect to the Docker daemon\u200c<\/h5>\n<ul>\n<li>\u200c\u539f\u56e0\u200c&#xff1a;\u670d\u52a1\u5df2\u505c\u6b62\u6216\u6743\u9650\u4e0d\u8db3<\/li>\n<li>\u200c\u89e3\u51b3\u200c&#xff1a; sudo usermod -aG docker $USER # \u6dfb\u52a0\u7528\u6237\u5230docker\u7ec4&#xff08;\u9700\u91cd\u65b0\u767b\u5f55\u751f\u6548&#xff09;  <\/li>\n<\/ul>\n<h5>\u200c2. \u9519\u8bef&#xff1a;Device or resource busy\u200c<\/h5>\n<ul>\n<li>\u200c\u539f\u56e0\u200c&#xff1a;\u6709\u8fdb\u7a0b\u5360\u7528Docker\u8d44\u6e90<\/li>\n<li>\u200c\u89e3\u51b3\u200c&#xff1a; sudo lsof \/var\/lib\/docker # \u67e5\u627e\u5360\u7528\u8fdb\u7a0b sudo kill -9 &lt;PID&gt; # \u7ec8\u6b62\u76f8\u5173\u8fdb\u7a0b  <\/li>\n<\/ul>\n<hr \/>\n<p>\u901a\u8fc7\u4ee5\u4e0a\u6b65\u9aa4&#xff0c;\u53ef\u5b89\u5168\u5173\u95edDocker\u670d\u52a1\u5e76\u9a8c\u8bc1\u5173\u95ed\u72b6\u6001\u3002\u5982\u9700\u91cd\u65b0\u542f\u7528&#xff0c;\u4f7f\u7528sudo systemctl start docker\u5373\u53ef\u6062\u590d\u670d\u52a1\u3002<\/p>\n<\/p>\n<h2>\u603b\u7ed3<\/h2>\n<p>\u628a\u670d\u52a1\u5668\u7684docker\u670d\u52a1\u5173\u6389\u4e86\u3002<\/p>\n<p>\u7a7a\u95f4\u91ca\u653e\u4e8627G<\/p>\n<\/p>\n<p>\u670d\u52a1\u5668\u76849292\u7aef\u53e3\u5907\u7528\u30029292\u662fpaddleserving\u7684\u9ed8\u8ba4\u5f00\u653e\u7aef\u53e3\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb878\u6b21\uff0c\u70b9\u8d5e25\u6b21\uff0c\u6536\u85cf16\u6b21\u3002\u670d\u52a1\u5668\u5b89\u5168\u5173\u95edDocker\u670d\u52a1\u8bb0\u5f55\uff1a\u53d1\u73b09292\u7aef\u53e3\u5f02\u5e38\u66b4\u9732\u540e\uff0c\u901a\u8fc7\u7cfb\u7edf\u5ba1\u8ba1\u53d1\u73b0Docker\u76f8\u5173\u8fdb\u7a0b\uff08docker-proxy\u3001dockerd\u7b49\uff09\u5b58\u5728\u9ad8\u5371\u98ce\u9669\u3002\u7acb\u5373\u91c7\u53d6\u5173\u95ed\u63aa\u65bd\uff1a\u5148\u505c\u6b62\u6240\u6709\u5bb9\u5668\uff08docker stop\uff09\uff0c\u518d\u5173\u95edDocker\u548ccontainerd\u670d\u52a1\uff08systemctl stop\uff09\uff0c\u5e76\u7981\u7528\u5f00\u673a\u81ea\u542f\u3002\u9a8c\u8bc1\u786e\u8ba4\u670d\u52a1\u5df2\u505c\u7528\u540e\uff0c\u6e05\u7406\u91ca\u653e\u4e8627G\u5b58\u50a8\u7a7a\u95f4\u3002\u5904\u7406\u8fc7\u7a0b\u4e2d\u56e0\u64cd\u4f5c\u8f83\u5feb\u672a\u5907\u4efd\u5bb9\u5668\u6570\u636e\uff0c\u540e\u7eed\u5efa\u8bae\u52a0\u5f3a\u5b89\u5168\u9632\u62a4\uff0c\u5305\u62ec\u7f51\u7edc\u9694\u79bb\u3001\u6743\u9650\u7ba1\u7406\u548c\u65e5\u5fd7\u76d1\u63a7\u3002\u5173\u95ed\u540e\u670d\u52a1\u56689292\u7aef\u53e3\u6062\u590d\u6b63\u5e38\u5907\u7528\u72b6\u6001\u3002<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[58,43,1012,44,1279],"topic":[],"class_list":["post-43716","post","type-post","status-publish","format-standard","hentry","category-server","tag-linux","tag-43","tag-1012","tag-44","tag-1279"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u4ee5\u524d\u5728\u670d\u52a1\u5668\u542f\u52a8\u4e86docker\uff0c\u73b0\u5728\u4e0d\u9700\u8981\u4e86\uff0c\u4e3a\u4e86\u5b89\u5168\uff0c\u53bb\u6389docker\u670d\u52a1@Ubuntu - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/43716.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4ee5\u524d\u5728\u670d\u52a1\u5668\u542f\u52a8\u4e86docker\uff0c\u73b0\u5728\u4e0d\u9700\u8981\u4e86\uff0c\u4e3a\u4e86\u5b89\u5168\uff0c\u53bb\u6389docker\u670d\u52a1@Ubuntu - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb878\u6b21\uff0c\u70b9\u8d5e25\u6b21\uff0c\u6536\u85cf16\u6b21\u3002\u670d\u52a1\u5668\u5b89\u5168\u5173\u95edDocker\u670d\u52a1\u8bb0\u5f55\uff1a\u53d1\u73b09292\u7aef\u53e3\u5f02\u5e38\u66b4\u9732\u540e\uff0c\u901a\u8fc7\u7cfb\u7edf\u5ba1\u8ba1\u53d1\u73b0Docker\u76f8\u5173\u8fdb\u7a0b\uff08docker-proxy\u3001dockerd\u7b49\uff09\u5b58\u5728\u9ad8\u5371\u98ce\u9669\u3002\u7acb\u5373\u91c7\u53d6\u5173\u95ed\u63aa\u65bd\uff1a\u5148\u505c\u6b62\u6240\u6709\u5bb9\u5668\uff08docker stop\uff09\uff0c\u518d\u5173\u95edDocker\u548ccontainerd\u670d\u52a1\uff08systemctl stop\uff09\uff0c\u5e76\u7981\u7528\u5f00\u673a\u81ea\u542f\u3002\u9a8c\u8bc1\u786e\u8ba4\u670d\u52a1\u5df2\u505c\u7528\u540e\uff0c\u6e05\u7406\u91ca\u653e\u4e8627G\u5b58\u50a8\u7a7a\u95f4\u3002\u5904\u7406\u8fc7\u7a0b\u4e2d\u56e0\u64cd\u4f5c\u8f83\u5feb\u672a\u5907\u4efd\u5bb9\u5668\u6570\u636e\uff0c\u540e\u7eed\u5efa\u8bae\u52a0\u5f3a\u5b89\u5168\u9632\u62a4\uff0c\u5305\u62ec\u7f51\u7edc\u9694\u79bb\u3001\u6743\u9650\u7ba1\u7406\u548c\u65e5\u5fd7\u76d1\u63a7\u3002\u5173\u95ed\u540e\u670d\u52a1\u56689292\u7aef\u53e3\u6062\u590d\u6b63\u5e38\u5907\u7528\u72b6\u6001\u3002\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/43716.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2025-06-14T00:40:55+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/43716.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/43716.html\",\"name\":\"\u4ee5\u524d\u5728\u670d\u52a1\u5668\u542f\u52a8\u4e86docker\uff0c\u73b0\u5728\u4e0d\u9700\u8981\u4e86\uff0c\u4e3a\u4e86\u5b89\u5168\uff0c\u53bb\u6389docker\u670d\u52a1@Ubuntu - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2025-06-14T00:40:55+00:00\",\"dateModified\":\"2025-06-14T00:40:55+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/43716.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/43716.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/43716.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4ee5\u524d\u5728\u670d\u52a1\u5668\u542f\u52a8\u4e86docker\uff0c\u73b0\u5728\u4e0d\u9700\u8981\u4e86\uff0c\u4e3a\u4e86\u5b89\u5168\uff0c\u53bb\u6389docker\u670d\u52a1@Ubuntu\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u4ee5\u524d\u5728\u670d\u52a1\u5668\u542f\u52a8\u4e86docker\uff0c\u73b0\u5728\u4e0d\u9700\u8981\u4e86\uff0c\u4e3a\u4e86\u5b89\u5168\uff0c\u53bb\u6389docker\u670d\u52a1@Ubuntu - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/43716.html","og_locale":"zh_CN","og_type":"article","og_title":"\u4ee5\u524d\u5728\u670d\u52a1\u5668\u542f\u52a8\u4e86docker\uff0c\u73b0\u5728\u4e0d\u9700\u8981\u4e86\uff0c\u4e3a\u4e86\u5b89\u5168\uff0c\u53bb\u6389docker\u670d\u52a1@Ubuntu - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb878\u6b21\uff0c\u70b9\u8d5e25\u6b21\uff0c\u6536\u85cf16\u6b21\u3002\u670d\u52a1\u5668\u5b89\u5168\u5173\u95edDocker\u670d\u52a1\u8bb0\u5f55\uff1a\u53d1\u73b09292\u7aef\u53e3\u5f02\u5e38\u66b4\u9732\u540e\uff0c\u901a\u8fc7\u7cfb\u7edf\u5ba1\u8ba1\u53d1\u73b0Docker\u76f8\u5173\u8fdb\u7a0b\uff08docker-proxy\u3001dockerd\u7b49\uff09\u5b58\u5728\u9ad8\u5371\u98ce\u9669\u3002\u7acb\u5373\u91c7\u53d6\u5173\u95ed\u63aa\u65bd\uff1a\u5148\u505c\u6b62\u6240\u6709\u5bb9\u5668\uff08docker stop\uff09\uff0c\u518d\u5173\u95edDocker\u548ccontainerd\u670d\u52a1\uff08systemctl stop\uff09\uff0c\u5e76\u7981\u7528\u5f00\u673a\u81ea\u542f\u3002\u9a8c\u8bc1\u786e\u8ba4\u670d\u52a1\u5df2\u505c\u7528\u540e\uff0c\u6e05\u7406\u91ca\u653e\u4e8627G\u5b58\u50a8\u7a7a\u95f4\u3002\u5904\u7406\u8fc7\u7a0b\u4e2d\u56e0\u64cd\u4f5c\u8f83\u5feb\u672a\u5907\u4efd\u5bb9\u5668\u6570\u636e\uff0c\u540e\u7eed\u5efa\u8bae\u52a0\u5f3a\u5b89\u5168\u9632\u62a4\uff0c\u5305\u62ec\u7f51\u7edc\u9694\u79bb\u3001\u6743\u9650\u7ba1\u7406\u548c\u65e5\u5fd7\u76d1\u63a7\u3002\u5173\u95ed\u540e\u670d\u52a1\u56689292\u7aef\u53e3\u6062\u590d\u6b63\u5e38\u5907\u7528\u72b6\u6001\u3002","og_url":"https:\/\/www.wsisp.com\/helps\/43716.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2025-06-14T00:40:55+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"4 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/43716.html","url":"https:\/\/www.wsisp.com\/helps\/43716.html","name":"\u4ee5\u524d\u5728\u670d\u52a1\u5668\u542f\u52a8\u4e86docker\uff0c\u73b0\u5728\u4e0d\u9700\u8981\u4e86\uff0c\u4e3a\u4e86\u5b89\u5168\uff0c\u53bb\u6389docker\u670d\u52a1@Ubuntu - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2025-06-14T00:40:55+00:00","dateModified":"2025-06-14T00:40:55+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/43716.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/43716.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/43716.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"\u4ee5\u524d\u5728\u670d\u52a1\u5668\u542f\u52a8\u4e86docker\uff0c\u73b0\u5728\u4e0d\u9700\u8981\u4e86\uff0c\u4e3a\u4e86\u5b89\u5168\uff0c\u53bb\u6389docker\u670d\u52a1@Ubuntu"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/43716","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=43716"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/43716\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=43716"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=43716"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=43716"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=43716"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}