docker 详细文档

cat /etc/docker/daemon.json
{
          "registry-mirrors": ["https://gyszh473.mirror.aliyuncs.com","https://nrbewqda.mirror.aliyuncs.com","https://dmmxhzvq.mirror.aliyuncs.com","https://docker.mirrors.ustc.edu.cn/","https://reg-mirror.qiniu.com","https://hub-mirror.c.1com/","http://f1361db2.m.daocloud.io","https://registry.docker-cn.com"],  #允许访问的仓库
          "insecure-registries": ["192.168.70.125:5000"],   #声明哪些 registry 不需要 TLS 校验
          "data-root":"/data/docker",      #docker根目录的位置
          "exec-opts":["native.cgroupdriver=systemd"],      #
          "log-driver":"json-file",
          "log-opts": {"max-size":"100m", "max-file":"3"},   #日志驱动的参数
          "storage-driver": "overlay2",       #镜像 & 容器文件系统的实现方式
          "max-concurrent-downloads": 10,    #同一时间允许多少个 layer 下载
          "max-concurrent-uploads": 10,      #push 镜像时的并发层数
          "iptables": true,                  # Docker 操作宿主机 iptables
          "userland-proxy": true,            # 端口映射是否通过用户态代理实现
          "dns": ["223.5.5.5", "114.114.114.114"],  #容器内 /etc/resolv.conf 的来源
          "bip": "172.31.0.1/16",           # docker0 网桥的 IP + 网段   所有容器通过它 NAT 出去
          "live-restore": true   #false：Docker 挂 → 容器也停  true：Docker 挂 → 容器继续跑
        }