一、Docker 二进制包安装
下载 ARM64 版 Docker 二进制包（如 20.10.24）：
wget https://download.docker.com/linux/static/stable/aarch64/docker-20.10.24.tgz
解压并部署：
tar -zxvf docker-20.10.24.tgz
sudo cp docker/* /usr/bin/
手动配置 systemd 服务（关键）：
配置 docker.service：
sudo tee /usr/lib/systemd/system/docker.service <<EOF
[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network-online.target firewalld.service containerd.service
Wants=network-online.target
Requires=containerd.service
[Service]
Type=notify
ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
ExecReload=/bin/kill -s HUP $MAINPID
TimeoutSec=0
RestartSec=2
Restart=always
[Install]
WantedBy=multi-user.target
EOF
配置 containerd.service：
sudo tee /usr/lib/systemd/system/containerd.service <<EOF
[Unit]
Description=containerd container runtime
Documentation=https://containerd.io
After=network.target
[Service]
ExecStart=/usr/bin/containerd
Restart=always
RestartSec=5
Delegate=yes
KillMode=process
OOMScoreAdjust=-999
LimitNOFILE=1048576
LimitNPROC=infinity
LimitCORE=infinity
[Install]
WantedBy=multi-user.target
EOF
配置 docker.socket：
sudo tee /usr/lib/systemd/system/docker.socket <<EOF
[Unit]
Description=Docker Socket for the API
[Socket]
ListenStream=/run/docker.sock
SocketMode=0660
SocketUser=root
SocketGroup=docker
[Install]
WantedBy=sockets.target
EOF
确保 docker 组存在：
sudo groupadd -f docker
系统服务重新生效：
sudo systemctl daemon-reload
sudo systemctl start docker.socket
sudo systemctl start containerd
sudo systemctl start docker
配置三个系统服务开机启动：
