docker安装篇，第二篇 在Ubuntu18.04上开启RESTful API接口，HTTP与HTTPS接口访问

sudo mkdir -p /etc/systemd/system/docker.service.d

sudo vim /etc/systemd/system/docker.service.d/http-proxy.conf

[Service]
ExecStart=
#HTTP使用以下命令
ExecStart=/usr/bin/dockerd -H fd:// -H tcp://0.0.0.0:2375

sudo vim /etc/systemd/system/docker.service.d/http-proxy.conf

[Service]
ExecStart=
#HTTP使用以下命令
ExecStart=/usr/bin/dockerd -H fd:// -H tcp://0.0.0.0:2375

sudo systemctl daemon-reload
sudo systemctl restart docker.service
sudo netstat -lntp | grep dockerd

$ openssl genrsa -aes256 -out ca-key.pem 4096


Generating RSA private key, 4096 bit long modulus
....................................................................++
........++
e is 65537 (0x10001)
Enter pass phrase for ca-key.pem:(输入自己要设置的密码，并记住该密码，下面要用)
Verifying - Enter pass phrase for ca-key.pem:(确认设置的密码)

$ openssl req -new -x509 -days 365 -key ca-key.pem -sha256 -out ca.pem


Enter pass phrase for ca-key.pem:(输入上一步设置的密码)
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:CN(输入国家的名字)
State or Province Name (full name) [Some-State]:shandong(输入省份的名字)
Locality Name (eg, city) []:jinan(输入城市的名字)
Organization Name (eg, company) [Internet Widgits Pty Ltd]:cnHuaShao(输入机构、公司的名字，不输入直接回车)
Organizational Unit Name (eg, section) []:cnHuaShao(输入单位、部门名字，不输入直接回车)
Common Name (e.g. server FQDN or YOUR name) []:zhangyc(输入主机名，这里输入的是$HOST,需要保证其HOSTS文件中已经配置了该名称)
Email Address []:lz2392504@gmail.com(输入邮箱地址)

$ openssl genrsa -out server-key.pem 4096

Generating RSA private key, 4096 bit long modulus
.....................................................................++
.................................................................................................++
e is 65537 (0x10001)


$ openssl req -subj "/CN=zhangyc" -sha256 -new -key server-key.pem -out server.csr

$ echo subjectAltName = DNS:zhangyc,IP:192.168.10.10,IP:127.0.0.1 >> extfile.cnf

$ echo extendedKeyUsage = serverAuth >> extfile.cnf

$ openssl x509 -req -days 365 -sha256 -in server.csr -CA ca.pem -CAkey ca-key.pem \
  -CAcreateserial -out server-cert.pem -extfile extfile.cnf

Signature ok
subject=/CN=zhangyc(输入host名)
Getting CA Private Key
Enter pass phrase for ca-key.pem:(输入第一步时设置的密码)