一、安装 Docker 二进制包
先下载 ARM64 版 Docker 二进制包，这里以 20.10.24 为例：
wget https://download.docker.com/linux/static/stable/aarch64/docker-20.10.24.tgz
解压后把二进制文件放到系统路径里：
tar -zxvf docker-20.10.24.tgz
sudo cp docker/* /usr/bin/
接下来要手动补齐 systemd 服务。这个步骤看起来啰嗦，但在静态包安装里基本绕不过去，不配好服务，后面启动和自启都会出问题。
配置 docker.service：
sudo tee /usr/lib/systemd/system/docker.service <<EOF
[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network-online.target firewalld.service containerd.service
Wants=network-online.target
Requires=containerd.service
[Service]
Type=notify
ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
ExecReload=/bin/kill -s HUP $MAINPID
TimeoutSec=0
RestartSec=2
Restart=always
[Install]
WantedBy=multi-user.target
EOF
配置 containerd.service：
sudo tee /usr/lib/systemd/system/containerd.service <<EOF
[Unit]
Description=containerd container runtime
Documentation=https://containerd.io
After=network.target
[Service]
ExecStart=/usr/bin/containerd
Restart=always
RestartSec=5
Delegate=yes
KillMode=process
OOMScoreAdjust=-999
LimitNOFILE=1048576
LimitNPROC=infinity
LimitCORE=infinity
[Install]
WantedBy=multi-user.target
EOF
配置 docker.socket：
sudo tee /usr/lib/systemd/system/docker.socket <<EOF
[Unit]
Description=Docker Socket for the API
[Socket]
ListenStream=/run/docker.sock
SocketMode=0660
SocketUser=root
SocketGroup=docker
[Install]
WantedBy=sockets.target
EOF
确保 docker 组存在：
sudo groupadd -f docker
让 systemd 重新加载配置，然后启动相关服务：
sudo systemctl daemon-reload
sudo systemctl start docker.socket
sudo systemctl start containerd
systemctl start docker
