下载离线安装包：https://download.docker.com/linux/static/stable/x86_64/
把离线包上传到服务器解压：
把命令放到/usr/bin下，
在/etc/systemd/system下添加docker.service
fyzzz
[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network-online.target firewalld.service
Wants=network-online.target
[Service]
Type=notify
# the default is not to use systemd for cgroups because the delegate issues still
# exists and systemd currently does not support the cgroup feature set required
# for containers run by docker
ExecStart=/usr/bin/dockerd --graph=/var/docker/lib/
ExecReload=/bin/kill -s HUP $MAINPID
# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity
# Uncomment TasksMax if your systemd version supports it.
# Only systemd 226 and above support this version.
#TasksMax=infinity
TimeoutStartSec=0
# set delegate yes so that systemd does not reset the cgroups of docker containers
Delegate=yes
# kill only the docker process, not all processes in the cgroup
KillMode=process
# restart the docker process if it exits prematurely
Restart=on-failure
StartLimitBurst=3
StartLimitInterval=60s
[Install]
WantedBy=multi-user.target
启动：systemctl start docker
开机自启：systemctl enable docker
查看状态：systemctl status docker
在有网的机器pull：docker pull registry
save： docker save -o registry.image registry
在需要安装的机器上load：docker load < registry.image
docker run -d -v /data/registry:/var/lib/registry
-p 5000:5000
--restart=always
--name registry registry
启动参数说明：
-v：宿主机挂载目录:/var/lib/registry
-p：宿主机端口:5000
--name：容器名称
在客户端查看镜像仓库中的所有镜像：
curl http://your-server-ip:5000/v2/_catalog
修改/etc/docker/daemon.json，没有就创建
添加如下内容：
{
"insecure-registries" : [ "your-server-ip:5000" ]
}
重启docker：systemctl restart docker
给镜像打tag：
docker tag your-image-name:tagname your-server-ip:5000/your-image-name:tagname
上传：
docker push your-registry-server-ip:5000/your-image-name:tagname
docker pull your-server-ip:5000/your-image-name:tagname
推荐使用sealos：https://www.sealyun.com/instructions
https://github.com/helm/helm/releases
解压，命令放到$PATH下
apiVersion: v1
kind: ServiceAccount
metadata:
name: tiller
namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
name: tiller
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-admin
subjects:
- kind: ServiceAccount
name: tiller
namespace: kube-system
执行：kubectl create -f rbac-config.yaml
helm init --upgrade --service-account tiller --tiller-image registry.cn-hangzhou.aliyuncs.com/google_containers/tiller:v2.14.2 --stable-repo-url http://127.0.0.1/
备注：上面命令中的**--stable-repo-url http://127.0.0.1/这个是我用nginx做的，这儿下面放了一个文件index.yaml文件，可以从这儿下载到 https://kubernetes.oss-cn-hangzhou.aliyuncs.com/charts/index.yaml
查看pod：kubectl get pod -n kube-system|grep tiller
检查客户端和服务端是否一致：helm version
helm reset -f
rm -rf ~/.helm