#修改配置文件
vim /etc/systemd/system/multi-user.target.wants/docker.service
# 增加-H tcp://0.0.0.0
[Unit]Description=DockerApplicationContainerEngineDocumentation=https://docs.docker.com
After=network-online.target docker.socket firewalld.service containerd.service time-set.target
Wants=network-online.target containerd.service
Requires=docker.socket
[Service]Type=notify
# the default is not touse systemd for cgroups because the delegate issues still
# exists and systemd currently does not support the cgroup feature set required
# for containers run by docker
# 此处增加-H tcp://0.0.0.0ExecStart=/usr/bin/dockerd -H fd://-H tcp://0.0.0.0--containerd=/run/containerd/containerd.sock
ExecReload=/bin/kill -s HUP $MAINPID
TimeoutStartSec=0RestartSec=2Restart=always
# Note that StartLimit* options were moved from "Service"to"Unit" in systemd 229.
# Both the old, and new location are accepted by systemd 229 and up, so using the old location
# tomake them work for either version of systemd.
StartLimitBurst=3
# Note that StartLimitInterval was renamed toStartLimitIntervalSec in systemd 230.
# Both the old, and new name are accepted by systemd 230 and up, so using the old name tomake
# this option work for either version of systemd.
StartLimitInterval=60s
# Having non-zero Limit*s causes performance problems due toaccounting overhead
# in the kernel. We recommend using cgroups todo container-local accounting.
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity
# CommentTasksMaxif your systemd version does not support it.
# Only systemd 226 and above support thisoption.
TasksMax=infinity
# set delegate yes so that systemd does not reset the cgroups of docker containers
Delegate=yes
# kill only the docker process, not all processes in the cgroup
KillMode=process
OOMScoreAdjust=-500[Install]WantedBy=multi-user.target