1
# 创建安装目录
2
mkdir -p /usr/local/podman/bin \
3
         /usr/local/podman/etc/containers \
4
         /usr/local/podman/storage \
5
         /usr/local/podman/run/containers/storage \
6
         /usr/local/podman/run/tmp \
7
         /usr/local/podman/docs
8

9
# 解压二进制包
10
cd /usr/local/src/ && tar -xzf podman-static-v6.1.4-linux-amd64.tar.gz
11

12
# 移动文件
13
mv /usr/lcoal/src/podman-linux-amd64/usr/local/bin/*      /usr/local/podman/bin/
14
mv /usr/lcoal/src/podman-linux-amd64/usr/local/lib        /usr/local/podman/lib
15
mv /usr/lcoal/src/podman-linux-amd64/usr/local/share      /usr/local/podman/share
16
mv /usr/lcoal/src/podman-linux-amd64/etc/containers/*     /usr/local/podman/etc/containers/
17
cp /usr/lcoal/src/podman-linux-amd64/README.md            /usr/local/podman/docs/README.md
18

19
# 移动quadlet，与netavark/aardvark-dns 同一搜索路径
20
mv /usr/lcoal/src/podman-linux-amd64/usr/local/libexec/podman/quadlet /usr/local/podman/lib/podman/quadlet
21

22
# 上游自带的 storage.conf.d 把 mount_program 指向 /usr/local/bin/fuse-overlayfs（我们的目录外），
23
# 必须删掉，否则会引用包外路径
24
rm -rf /usr/local/podman/etc/containers/storage.conf.d

1
# 修改podman二进制文件名
2
mv /usr/local/podman/bin/podman /usr/local/podman/bin/podman.real
3

4
# 新建一个名为podman的脚本
5
cat > /usr/local/podman/bin/podman << 'EOF'
6
#!/bin/bash
7
PD_HOME=/usr/local/podman
8
C=$PD_HOME/etc/containers
9
export CONTAINERS_CONF=$C/containers.conf
10
export CONTAINERS_STORAGE_CONF=$C/storage.conf
11
export CONTAINERS_REGISTRIES_CONF=$C/registries.conf
12
export CONTAINERS_POLICY_JSON=$C/policy.json
13

14
export XDG_CONFIG_HOME=$PD_HOME/xdg/config
15
export XDG_DATA_HOME=$PD_HOME/xdg/data
16
export XDG_CACHE_HOME=$PD_HOME/xdg/cache
17
export XDG_RUNTIME_DIR=$PD_HOME/run
18
export TMPDIR=$PD_HOME/run/tmp
19

20
mkdir -p "$TMPDIR" "$XDG_CONFIG_HOME" "$XDG_DATA_HOME" 2>/dev/null || true
21
mkdir -p "$XDG_CACHE_HOME" 2>/dev/null || true
22
chmod 0700 "$XDG_RUNTIME_DIR" "$XDG_CONFIG_HOME" 2>/dev/null || true
23

24
exec -a podman "$PD_HOME/bin/podman.real" "$@"
25
EOF
26

27
# 修改文件权限
28
chmod 0755 /usr/local/podman/bin/podman

1
cat > /etc/profile.d/podman.sh <<'EOF'
2
if [ -d /usr/local/podman/bin ]; then
3
    case ":${PATH}:" in
4
        *:/usr/local/podman/bin:*) ;;
5
        *) PATH="/usr/local/podman/bin:${PATH}" ;;
6
    esac
7
    export PATH
8

9
    C=/usr/local/podman/etc/containers
10
    export CONTAINERS_CONF=$C/containers.conf
11
    export CONTAINERS_STORAGE_CONF=$C/storage.conf
12
    export CONTAINERS_REGISTRIES_CONF=$C/registries.conf
13
    export CONTAINERS_POLICY_JSON=$C/policy.json
14
fi
15
EOF

1
podman info                                         # 环境详情
2

3
podman volume create data                           # 命名卷
4

5
podman run -d -v data:/usr/share/nginx/html nginx   # 挂载卷
6

7
podman volume ls                                    # 卷列表
8

9
podman system df                                    # 空间占用
10

11
podman system prune -a                              # 清理未使用资源
12

13
podman system reset -f                              # 清空全部镜像/容器/卷（危险）
14

15
podman generate kube web > web.yaml                 # 导出为 K8s YAML
16

17
podman play kube web.yaml                           # 从 YAML 启动
18

19
podman pod create --name mypod -p 8080:80           # Pod

1
{
2
    "Version": "2012-10-17",
3
    "Statement": [
4
        {
5
            "Effect": "Allow",
6
            "Action": [
7
                "s3:*"
8
            ],
9
            "Resource": [
10
                "arn:aws:s3:::*",
11
                "arn:aws:s3:::*/*"
12
            ]
13
        }
14
    ]
15
}

1
# 连接minio并设置别名,（直接使用之前的myminio也行）
2
mc alias set old_minio http://127.0.0.1:9000 admin Admin@123
3

4
# 列出所有的桶
5
mc ls old_minio
6

7
# 全量备份到本地文件对象
8
mkdir -p /backup/minio_data/
9
mc mirror --overwrite old_minio/ /backup/minio_data/
10

11
# 导出所有桶的配置（桶元信息）并移动到指定位置
12
mc admin cluster bucket export old_minio && mv   old_minio-bucket-metadata.zip /backup/
13

14
# 完整导出old_minio全部IAM（用户、策略、用户绑定的策略） 执行完成后，在 `/backup/` 下会得到 zip 包
15
mc admin cluster iam export old_minio -o /backup/old_minio-iam-metadata.zip
16

17
# 关闭minio
18
systemctl stop minio

1
cd /data1/minio
2

3
[root@localhost /data1/minio]# tree
4
.
5
├── disk1
6
│   ├── bucket-2
7
│   ├── test-bucket
8
│   │   └── 111.json
9
│   │       └── xl.meta
10
│   └── upload-file
11
│       └── 新建文本文档.txt
12
│           └── xl.meta
13
├── disk2
14
│   ├── bucket-2
15
│   ├── test-bucket
16
│   │   └── 111.json
17
│   │       └── xl.meta
18
│   └── upload-file
19
│       └── 新建文本文档.txt
20
│           └── xl.meta
21
├── disk3
22
│   ├── bucket-2
23
│   ├── test-bucket
24
│   │   └── 111.json
25
│   │       └── xl.meta
26
│   └── upload-file
27
│       └── 新建文本文档.txt
28
│           └── xl.meta
29
└── disk4
30
    ├── bucket-2
31
    ├── test-bucket
32
    │   └── 111.json
33
    │       └── xl.meta
34
    └── upload-file
35
        └── 新建文本文档.txt
36
            └── xl.meta

1
cat > /etc/systemd/system/minio-cluster.service <<'EOF'
2
[Unit]
3
Description=MinIO Object Storage Server
4
Documentation=https://docs.min.io
5
Wants=network-online.target
6
After=network-online.target
7

8
[Service]
9
User=root
10
Environment="MINIO_ROOT_USER=admin"
11
Environment="MINIO_ROOT_PASSWORD=Admin@123456"
12
# 后续负载均衡使用
13
Environment="MINIO_SERVER_URL=http://10.22.51.91:19000"
14
Environment="MINIO_BROWSER_REDIRECT_URL=http://10.22.51.91:19001"
15

16
# 集群数据目录，使用环境变量
17
Environment="MINIO_VOLUMES=http://10.22.51.91/data2/minio/disk1 \
18
http://10.22.51.91/data2/minio/disk2 \
19
http://10.22.51.91/data2/minio/disk3 \
20
http://10.22.51.91/data2/minio/disk4 \
21
http://10.22.51.72/data2/minio/disk1 \
22
http://10.22.51.72/data2/minio/disk2 \
23
http://10.22.51.72/data2/minio/disk3 \
24
http://10.22.51.72/data2/minio/disk4 \
25
http://10.22.51.74/data2/minio/disk1 \
26
http://10.22.51.74/data2/minio/disk2 \
27
http://10.22.51.74/data2/minio/disk3 \
28
http://10.22.51.74/data2/minio/disk4"
29

30
# 执行命令：minio server 数据目录，指定console端口
31
ExecStart=/usr/local/bin/minio server $MINIO_VOLUMES --console-address ":9001"
32
LimitNOFILE=65536
33

34
# 进程重启策略
35
Restart=always
36
RestartSec=5
37

38
# 日志输出
39
StandardOutput=journal+console
40
StandardError=journal+console
41

42
[Install]
43
WantedBy=multi-user.target
44
EOF

1
user root;
2
worker_processes auto;
3
error_log /var/log/nginx/error.log warn;
4
pid /var/run/nginx.pid;
5

6
events {
7
    worker_connections 1024;
8
}
9

10
http {
11
    include /etc/nginx/mime.types;
12
    default_type application/octet-stream;
13

14
    log_format main '$remote_addr - $remote_user [$time_local] "$request" '
15
                    '$status $body_bytes_sent "$http_referer" '
16
                    '"$http_user_agent" "$http_x_forwarded_for"';
17
    access_log /var/log/nginx/access.log main;
18

19
    sendfile on;
20
    keepalive_timeout 65;
21

22
    upstream minio_api {
23
        ip_hash;
24
        server 10.22.51.91:9000;
25
        server 10.22.51.72:9000;
26
        server 10.22.51.74:9000;
27
    }
28

29
    upstream minio_console {
30
        server 10.22.51.91:9001;
31
        server 10.22.51.72:9001;
32
        server 10.22.51.74:9001;
33
    }
34

35
    server {
36
        listen 19000;
37
        server_name _;
38

39
        location / {
40
            proxy_http_version 1.1;
41
            proxy_set_header Connection "";
42
            proxy_set_header Host $host:$server_port;
43
            proxy_set_header X-Real-IP $remote_addr;
44
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
45
            proxy_set_header X-Forwarded-Proto $scheme;
46

47
            proxy_connect_timeout 300;
48
            proxy_send_timeout 300;
49
            proxy_read_timeout 300;
50

51
            proxy_cache off;
52
            proxy_buffering off;
53

54
            proxy_pass http://minio_api;
55
        }
56
    }
57

58
    server {
59
        listen 19001;
60
        server_name _;
61

62
        location / {
63
            proxy_http_version 1.1;
64
            proxy_set_header Connection "";
65
            proxy_set_header Host $host:$server_port;
66
            proxy_set_header X-Real-IP $remote_addr;
67
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
68
            proxy_set_header X-Forwarded-Proto $scheme;
69

70
            proxy_connect_timeout 300;
71
            proxy_send_timeout 300;
72
            proxy_read_timeout 300;
73

74
            proxy_cache off;
75
            proxy_buffering off;
76

77
            proxy_pass http://minio_console;
78
        }
79
    }
80
}