瘦了就帅了 Cuile

nano /etc/pve/lxc/<CTID>.conf

apt update \
&& apt install -y curl gpg gnupg2

# 查看 Debian版本
apt install -y lsb-release \
&& lsb_release -a

# if Debian Release == 13
# 添加 Kubic 项目的 Debian_Testing 软件源
echo 'deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/Debian_Testing/ /' | sudo tee /etc/apt/sources.list.d/kubic.list
# 下载并添加对应的 GPG 密钥
curl -fsSL https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/Debian_Testing/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/kubic.gpg > /dev/null

# 更新软件包列表并安装 Podman
apt update \
    && apt install -y podman \
    && podman version 


# 安装 podman-compose
apt install -y pipx \
&& pipx ensurepath \
&& . ~/.bashrc \
&& pipx install podman-compose \
&& podman-compose version
    
# iptables必须安装，否则netavark无法运行
apt install -y iptables 
# 防火墙一定要加这条，否则容器之间的名称解析无法工作
iptables -A INPUT -p udp -m udp --dport 53 -j ACCEPT

dnf install -y podman python3 python3-pip \
    && podman --version ; podman info \
    && python3 -m pip install --upgrade pip \
    && python3 -m pip install podman-compose \
    && podman-compose -v \
    && systemctl enable podman-restart.service \
    && systemctl start podman-restart.service

# nano /etc/containers/registries.conf
unqualified-search-registries = ["docker.io"]

[[registry]]
prefix = "docker.io"
location = "docker.io"
[[registry.mirror]]
location = "docker.1ms.run"
[[registry.mirror]]
location = "hub.rat.dev"
[[registry.mirror]]
location = "docker.xuanyuan.me"

[[registry]]
prefix = "ghcr.io"
location = "ghcr.io"
[[registry.mirror]]
location = "ghcr.nju.edu.cn"

cat >> /etc/systemd/journald.conf << 'EOF'
# 限制磁盘上日志总大小（最关键的参数）
SystemMaxUse=200M
# 限制单个日志文件大小
SystemMaxFileSize=50M
# 限制保留的日志文件数量
SystemMaxFiles=5
# 运行时（内存中）日志大小，你已设置
RuntimeMaxUse=32M
EOF

systemctl restart systemd-journald

# 当 messages 超过 100M 时轮转，保留 3 个备份，并压缩旧文件。copytruncate 确保不需要重启 rsyslog
cat > /etc/logrotate.d/messages << 'EOF'
/var/log/messages {
    size 100M
    rotate 3
    compress
    missingok
    notifempty
    copytruncate
}
EOF

# /etc/containers/containers.conf
[containers]
# 将默认日志驱动从 journald 改为文件驱动
log_driver = "k8s-file"
# 设置日志文件大小上限 99 MB（例如 10 MiB = 10485760 字节）
log_size_max = 103809024

[containers]
default_sysctls = []

podman run --rm hello-world

[docker|podman] image ls -a
# or
[docker|podman] images

[docker|podman] container ls -a
# or
[docker|podman] ps

[docker|podman] compose -f <yaml_file> logs [-f] [service name]
# or
[docker|podman] logs [-f] [container id]

[docker|podman] compose -f <yaml_file> config

echo 'y' | [docker|podman] system prune

# 导出
[docker|podman] save -o <image>.tar <image_name:label | image_id>
# 导入
# 使用image_id导出的镜像，导入时也没有名字
[docker|podman] load -i <image>.tar

# 创建临时容器
[docker|podman] conatiner create --name <container_name> <image_name>
# 从容器复制文件到宿主机
[docker|podman] conatiner cp <container_name>:<file_path> <dest_path>
# 清理临时窗口
[docker|podman] container rm <container_name>

[docker|podman] network create [name]

echo "alias d-ll='[docker|podman] image ls -a; echo; [docker|podman] container ls -a'" >> ~/.bashrc \
    && echo "alias d-ps='[docker|podman] ps'" >> ~/.bashrc \
    && echo "alias d-clean='[docker|podman] system prune -f'" >> ~/.bashrc \
    && echo "alias d-rm='_a(){ [docker|podman] image rm $1; echo; [docker|podman] container rm $1; }; _a'" >> ~/.bashrc \
    && echo "alias d-exec='_a(){ [docker|podman] exec -it $1 /bin/bash; }; _a'" >> ~/.bashrc \
    && echo "alias d-stop='_a(){ [docker|podman] container stop $1; }; _a'" >> ~/.bashrc \
    && echo "alias d-kill='_a(){ [docker|podman] container kill $1; }; _a'" >> ~/.bashrc
    
source ~/.bashrc