# 更新源
sudo apt update && sudo apt install ca-certificates curl gnupg lsb-release
# 添加Docker GPG密钥
curl -fsSL https://mirrors.aliyun.com/docker-ce/linux/ubuntu/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker.gpg

sudo chmod 644 /usr/share/keyrings/docker.gpg
# 添加软件源
echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker.gpg] https://mirrors.aliyun.com/docker-ce/linux/ubuntu $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list

# 安装docker
sudo apt update
sudo apt install docker-ce docker-ce-cli containerd.io docker-compose-plugin
# 开机自启
sudo systemctl enable --now docker
# 将当前用户加入docker组（免sudo）
sudo usermod -aG docker $USER
newgrp docker

docker -v
docker compose version
验证是否安装成功

----------------------------------------------------
# 创建/覆盖docker加速配置
sudo mkdir -p /etc/docker
sudo tee /etc/docker/daemon.json <<-'EOF'
{
"registry-mirrors": [
  "https://docker.xuanyuan.me",
  "https://docker.1ms.run",
  "https://docker.m.daocloud.io",
  "https://hub-mirror.c.163.com",
  "https://docker.m.daocloud.io",
  "https://docker.fxxk.dedyn.io",
  "https://dockerproxy.com",
  "https://docker.mirrors.ustc.edu.cn",
  "https://docker.nju.edu.cn",
  "https://mirror.baidubce.com",
  "https://docker.mirrors.sjtug.sjtu.edu.cn",
  "https://registry.docker-cn.com",
  "https://docker.mirrors.ustc.edu.cn"
]
}
EOF

# 重载配置+重启docker
sudo systemctl daemon-reload
sudo systemctl restart docker

# 验证加速源是否加载成功
docker info | grep -A 6 "Registry Mirrors"
出现你配置的镜像地址即代表生效。
# 重载配置+重启docker
sudo systemctl daemon-reload
sudo systemctl restart docker

# 验证加速源是否加载成功
docker info | grep -A 6 "Registry Mirrors"
出现你配置的镜像地址即代表生效。

docker run -d -p 3000:8080 --add-host=host.docker.internal:host-gateway -v open-webui:/app/backend/data --name open-webui --restart always ghcr.io/open-webui/open-webui:main
# 2026/6/30 ubuntu22上安装，有17条Pulling的记录，失败后重新拉又只有6条记录了
#如果实在太慢，可以把ghcr.io换成下列镜像下载看看
ghcr.nju.edu.cn
ghcr.m.daocloud.io
ghcr.1ms.run

----------------------------------------------------
openssl rand -hex 32
933a81ece54ac453296ca14a04ff1381fe450acbebfb9499420f60c79a20e17f


# 将运行中的容器加入searxng_default网络
docker network connect searxng_default open-webui
# 断开原有默认bridge（可选，只留自定义网络）
docker network disconnect bridge open-webui
缺点：重启容器后会恢复默认网络，永久修改必须重建容器。

docker exec -it open-webui bash
curl -i "http://127.0.0.1:8080/search?q=test&format=json"
curl -i "http://host.docker.internal:8080/search?q=test&format=json"

docker network create ai_network

# 查看open-webui所属网络
docker inspect open-webui | grep Networks
docker inspect open-webui | jq '.[0].NetworkSettings.Networks'
# 列出所有docker网络
docker network ls
# 列出所有ai_network网络里包含哪些容器
docker network inspect ai_network | jq '.[0].Containers'