luopio · April 16, 2025 06:53
diff --git a/gistfile1.txt b/gistfile1.txt
 #!/bin/sh
 set -e
 # Docker CE for Linux installation script
 #
 # See https://docs.docker.com/engine/install/ for the installation steps.
 #
 # This script is meant for quick & easy install via:
 #   $ curl -fsSL https://get.docker.com -o get-docker.sh
 #   $ sh get-docker.sh
 #
 # For test builds (ie. release candidates):
 #   $ curl -fsSL https://test.docker.com -o test-docker.sh
 #   $ sh test-docker.sh
 #
 # NOTE: Make sure to verify the contents of the script
 #       you downloaded matches the contents of install.sh
 #       located at https://github.com/docker/docker-install
 #       before executing.
 #
 # Git commit from https://github.com/docker/docker-install when
 # the script was uploaded (Should only be modified by upload job):
 SCRIPT_COMMIT_SHA="7cae5f8b0decc17d6571f9f52eb840fbc13b2737"

 CHANNEL="stable"
 DOWNLOAD_URL="https://download.docker.com"
 REPO_FILE="docker-ce.repo"
 VERSION=28.0.4
 DIND_TEST_WAIT=${DIND_TEST_WAIT:-3s}  # Wait time until docker start at dind test env

 # Issue https://github.com/rancher/rancher/issues/29246
 adjust_repo_releasever() {
 	DOWNLOAD_URL="https://download.docker.com"
 	case $1 in
 	7*)
 		releasever=7
 		;;
 	8*)
 		releasever=8
 		;;
 	*)
 		# fedora, or unsupported
 		return
 		;;
 	esac

 	for channel in "stable" "test" "nightly"; do
 		$sh_c "$config_manager --setopt=docker-ce-${channel}.baseurl=${DOWNLOAD_URL}/linux/centos/${releasever}/\\\$basearch/${channel} --save";
 		$sh_c "$config_manager --setopt=docker-ce-${channel}-debuginfo.baseurl=${DOWNLOAD_URL}/linux/centos/${releasever}/debug-\\\$basearch/${channel} --save";
 		$sh_c "$config_manager --setopt=docker-ce-${channel}-source.baseurl=${DOWNLOAD_URL}/linux/centos/${releasever}/source/${channel} --save";
 	done
 }

 mirror=''
 DRY_RUN=${DRY_RUN:-}
 while [ $# -gt 0 ]; do
 	case "$1" in
 		--mirror)
 			mirror="$2"
 			shift
 			;;
 		--dry-run)
 			DRY_RUN=1
 			;;
 		--*)
 			echo "Illegal option $1"
 			;;
 	esac
 	shift $(( $# > 0 ? 1 : 0 ))
 done

 case "$mirror" in
 	Aliyun)
 		DOWNLOAD_URL="https://mirrors.aliyun.com/docker-ce"
 		;;
 	AzureChinaCloud)
 		DOWNLOAD_URL="https://mirror.azure.cn/docker-ce"
 		;;
 esac

 # docker-ce-rootless-extras is packaged since Docker 20.10.0
 has_rootless_extras="1"
 if echo "$VERSION" | grep -q '^1'; then
 	has_rootless_extras=
 fi

 start_docker() {
 	if [ ! -z $DIND_TEST ]; then
 		# Starting dockerd manually due to dind env is not using systemd
 		dockerd &
 		sleep $DIND_TEST_WAIT
 	elif [ -d '/run/systemd/system' ] ; then
 		$sh_c 'systemctl start docker'
 	else
 		$sh_c 'service docker start'
 	fi
 }

 command_exists() {
 	command -v "$@" > /dev/null 2>&1
 }

 is_dry_run() {
 	if [ -z "$DRY_RUN" ]; then
 		return 1
 	else
 		return 0
 	fi
 }

 is_wsl() {
 	case "$(uname -r)" in
 	*microsoft* ) true ;; # WSL 2
 	*Microsoft* ) true ;; # WSL 1
 	* ) false;;
 	esac
 }

 is_darwin() {
 	case "$(uname -s)" in
 	*darwin* ) true ;;
 	*Darwin* ) true ;;
 	* ) false;;
 	esac
 }

 deprecation_notice() {
 	distro=$1
 	date=$2
 	echo
 	echo "DEPRECATION WARNING:"
 	echo "    The distribution, $distro, will no longer be supported in this script as of $date."
 	echo "    If you feel this is a mistake please submit an issue at https://github.com/docker/docker-install/issues/new"
 	echo
 	sleep 10
 }

 get_distribution() {
 	lsb_dist=""
 	# Every system that we officially support has /etc/os-release
 	if [ -r /etc/os-release ]; then
 		lsb_dist="$(. /etc/os-release && echo "$ID")"
 	fi
 	# Returning an empty string here should be alright since the
 	# case statements don't act unless you provide an actual value
 	echo "$lsb_dist"
 }

 add_debian_backport_repo() {
 	debian_version="$1"
 	backports="deb http://ftp.debian.org/debian $debian_version-backports main"
 	if ! grep -Fxq "$backports" /etc/apt/sources.list; then
 		(set -x; $sh_c "echo \"$backports\" >> /etc/apt/sources.list")
 	fi
 }

 echo_docker_as_nonroot() {
 	if is_dry_run; then
 		return
 	fi
 	if command_exists docker && [ -e /var/run/docker.sock ]; then
 		(
 			set -x
 			$sh_c 'docker version'
 		) || true
 	fi

 	# intentionally mixed spaces and tabs here -- tabs are stripped by "<<-EOF", spaces are kept in the output
 	echo
 	echo "================================================================================"
 	echo
 	if [ -n "$has_rootless_extras" ]; then
 		echo "To run Docker as a non-privileged user, consider setting up the"
 		echo "Docker daemon in rootless mode for your user:"
 		echo
 		echo "    dockerd-rootless-setuptool.sh install"
 		echo
 		echo "Visit https://docs.docker.com/go/rootless/ to learn about rootless mode."
 		echo
 	fi
 	echo
 	echo "To run the Docker daemon as a fully privileged service, but granting non-root"
 	echo "users access, refer to https://docs.docker.com/go/daemon-access/"
 	echo
 	echo "WARNING: Access to the remote API on a privileged Docker daemon is equivalent"
 	echo "         to root access on the host. Refer to the 'Docker daemon attack surface'"
 	echo "         documentation for details: https://docs.docker.com/go/attack-surface/"
 	echo
 	echo "================================================================================"
 	echo
 }

 # Check if this is a forked Linux distro
 check_forked() {

 	# Check for lsb_release command existence, it usually exists in forked distros
 	if command_exists lsb_release; then
 		# Check if the `-u` option is supported
 		set +e
 		lsb_release -a -u > /dev/null 2>&1
 		lsb_release_exit_code=$?
 		set -e

 		# Check if the command has exited successfully, it means we're in a forked distro
 		if [ "$lsb_release_exit_code" = "0" ]; then
 			# Print info about current distro
 			cat <<-EOF
 			You're using '$lsb_dist' version '$dist_version'.
 			EOF

 			# Get the upstream release info
 			lsb_dist=$(lsb_release -a -u 2>&1 | tr '[:upper:]' '[:lower:]' | grep -E 'id' | cut -d ':' -f 2 | tr -d '[:space:]')
 			dist_version=$(lsb_release -a -u 2>&1 | tr '[:upper:]' '[:lower:]' | grep -E 'codename' | cut -d ':' -f 2 | tr -d '[:space:]')

 			# Print info about upstream distro
 			cat <<-EOF
 			Upstream release is '$lsb_dist' version '$dist_version'.
 			EOF
 		else
 			if [ -r /etc/debian_version ] && [ "$lsb_dist" != "ubuntu" ] && [ "$lsb_dist" != "raspbian" ]; then
 				if [ "$lsb_dist" = "osmc" ]; then
 					# OSMC runs Raspbian
 					lsb_dist=raspbian
 				else
 					# We're Debian and don't even know it!
 					lsb_dist=debian
 				fi
 				dist_version="$(sed 's/\/.*//' /etc/debian_version | sed 's/\..*//')"
 				case "$dist_version" in
 					10)
 						dist_version="buster"
 					;;
 					9)
 						dist_version="stretch"
 					;;
 					8|'Kali Linux 2')
 						dist_version="jessie"
 					;;
 				esac
 			fi
 		fi
 	fi
 }

 semverParse() {
 	major="${1%%.*}"
 	minor="${1#$major.}"
 	minor="${minor%%.*}"
 	patch="${1#$major.$minor.}"
 	patch="${patch%%[-.]*}"
 }

 do_install() {
 	echo "# Executing docker install script, commit: $SCRIPT_COMMIT_SHA"

 	if command_exists docker; then
 		docker_version="$(docker -v | cut -d ' ' -f3 | cut -d ',' -f1)"
 		MAJOR_W=1
 		MINOR_W=10

 		semverParse "$docker_version"

 		shouldWarn=0
 		if [ "$major" -lt "$MAJOR_W" ]; then
 			shouldWarn=1
 		fi

 		if [ "$major" -le "$MAJOR_W" ] && [ "$minor" -lt "$MINOR_W" ]; then
 			shouldWarn=1
 		fi

 		cat >&2 <<-'EOF'
 			Warning: the "docker" command appears to already exist on this system.

 			If you already have Docker installed, this script can cause trouble, which is
 			why we're displaying this warning and provide the opportunity to cancel the
 			installation.

 			If you installed the current Docker package using this script and are using it
 		EOF

 		if [ $shouldWarn -eq 1 ]; then
 			cat >&2 <<-'EOF'
 			again to update Docker, we urge you to migrate your image store before upgrading
 			to v1.10+.

 			You can find instructions for this here:
 			https://github.com/docker/docker/wiki/Engine-v1.10.0-content-addressability-migration
 			EOF
 		else
 			cat >&2 <<-'EOF'
 			again to update Docker, you can safely ignore this message.
 			EOF
 		fi

 		cat >&2 <<-'EOF'

 			You may press Ctrl+C now to abort this script.
 		EOF
 		( set -x; sleep 20 )
 	fi

 	user="$(id -un 2>/dev/null || true)"

 	sh_c='sh -c'
 	if [ "$user" != 'root' ]; then
 		if command_exists sudo; then
 			sh_c='sudo -E sh -c'
 		elif command_exists su; then
 			sh_c='su -c'
 		else
 			cat >&2 <<-'EOF'
 			Error: this installer needs the ability to run commands as root.
 			We are unable to find either "sudo" or "su" available to make this happen.
 			EOF
 			exit 1
 		fi
 	fi

 	if is_dry_run; then
 		sh_c="echo"
 	fi

 	# perform some very rudimentary platform detection
 	lsb_dist=$( get_distribution )
 	lsb_dist="$(echo "$lsb_dist" | tr '[:upper:]' '[:lower:]')"

 	if is_wsl; then
 		echo
 		echo "WSL DETECTED: We recommend using Docker Desktop for Windows."
 		echo "Please get Docker Desktop from https://www.docker.com/products/docker-desktop"
 		echo
 		cat >&2 <<-'EOF'

 			You may press Ctrl+C now to abort this script.
 		EOF
 		( set -x; sleep 20 )
 	fi

 	case "$lsb_dist" in

 		ubuntu)
 			if command_exists lsb_release; then
 				dist_version="$(lsb_release --codename | cut -f2)"
 			fi
 			if [ -z "$dist_version" ] && [ -r /etc/lsb-release ]; then
 				dist_version="$(. /etc/lsb-release && echo "$DISTRIB_CODENAME")"
 			fi
 		;;

 		debian|raspbian)
 			dist_version="$(sed 's/\/.*//' /etc/debian_version | sed 's/\..*//')"
 			case "$dist_version" in
 				10)
 					dist_version="buster"
 				;;
 				9)
 					dist_version="stretch"
 				;;
 				8)
 					dist_version="jessie"
 				;;
 			esac
 		;;

 		centos|rhel)
 			if [ -z "$dist_version" ] && [ -r /etc/os-release ]; then
 				dist_version="$(. /etc/os-release && echo "$VERSION_ID")"
 			fi
 		;;

 		oracleserver|ol)
 			lsb_dist="ol"
 			# need to switch lsb_dist to match yum repo URL
 			dist_version="$(rpm -q --whatprovides redhat-release --queryformat "%{VERSION}\n" | sed 's/\/.*//' | sed 's/\..*//' | sed 's/Server*//')"
 		;;

 		*)
 			if command_exists lsb_release; then
 				dist_version="$(lsb_release --release | cut -f2)"
 			fi
 			if [ -z "$dist_version" ] && [ -r /etc/os-release ]; then
 				dist_version="$(. /etc/os-release && echo "$VERSION_ID")"
 			fi
 		;;

 	esac

 	# Check if this is a forked Linux distro
 	check_forked

 	# Run setup for each distro accordingly
 	case "$lsb_dist" in
 		ubuntu|debian|raspbian)
 			pre_reqs="apt-transport-https ca-certificates curl"
 			if [ "$lsb_dist" = "debian" ]; then
 				# libseccomp2 does not exist for debian jessie main repos for aarch64
 				if [ "$(uname -m)" = "aarch64" ] && [ "$dist_version" = "jessie" ]; then
 					add_debian_backport_repo "$dist_version"
 				fi
 			fi

 			if ! command -v gpg > /dev/null; then
 				pre_reqs="$pre_reqs gnupg"
 			fi
 			apt_repo="deb [arch=$(dpkg --print-architecture)] $DOWNLOAD_URL/linux/$lsb_dist $dist_version $CHANNEL"
 			(
 				if ! is_dry_run; then
 					set -x
 				fi
 				$sh_c 'apt-get update -qq >/dev/null'
 				$sh_c "DEBIAN_FRONTEND=noninteractive apt-get install -y -qq $pre_reqs >/dev/null"
 				$sh_c "curl -fsSL \"$DOWNLOAD_URL/linux/$lsb_dist/gpg\" | apt-key add -qq - >/dev/null"
 				$sh_c "echo \"$apt_repo\" > /etc/apt/sources.list.d/docker.list"
 				$sh_c 'apt-get update -qq >/dev/null'
 			)
 			pkg_version=""
 			if [ -n "$VERSION" ]; then
 				if is_dry_run; then
 					echo "# WARNING: VERSION pinning is not supported in DRY_RUN"
 				else
 					# Will work for incomplete versions IE (17.12), but may not actually grab the "latest" if in the test channel
 					pkg_pattern="$(echo "$VERSION" | sed "s/-ce-/~ce~.*/g" | sed "s/-/.*/g").*-0~$lsb_dist"
 					search_command="apt-cache madison 'docker-ce' | grep '$pkg_pattern' | head -1 | awk '{\$1=\$1};1' | cut -d' ' -f 3"
 					pkg_version="$($sh_c "$search_command")"
 					echo "INFO: Searching repository for VERSION '$VERSION'"
 					echo "INFO: $search_command"
 					if [ -z "$pkg_version" ]; then
 						echo
 						echo "ERROR: '$VERSION' not found amongst apt-cache madison results"
 						echo
 						exit 1
 					fi
 					search_command="apt-cache madison 'docker-ce-cli' | grep '$pkg_pattern' | head -1 | awk '{\$1=\$1};1' | cut -d' ' -f 3"
 					# Don't insert an = for cli_pkg_version, we'll just include it later
 					cli_pkg_version="$($sh_c "$search_command")"
 					pkg_version="=$pkg_version"
 				fi
 			fi
 			(
 				if ! is_dry_run; then
 					set -x
 				fi
 				if [ -n "$cli_pkg_version" ]; then
 					$sh_c "apt-get install -y -qq --no-install-recommends docker-ce-cli=$cli_pkg_version >/dev/null"
 				fi
 				$sh_c "apt-get install -y -qq --no-install-recommends docker-ce$pkg_version >/dev/null"
 				# shellcheck disable=SC2030
 				if [ -n "$has_rootless_extras" ]; then
 					# Install docker-ce-rootless-extras without "--no-install-recommends", so as to install slirp4netns when available
 					$sh_c "DEBIAN_FRONTEND=noninteractive apt-get install -y -qq docker-ce-rootless-extras$pkg_version >/dev/null"
 				fi
                                start_docker
 			)
 			echo_docker_as_nonroot
 			exit 0
 			;;
 		centos|fedora|rhel|ol)
                        # installing centos packages
 			yum_repo="$DOWNLOAD_URL/linux/centos/$REPO_FILE"
 			if ! curl -Ifs "$yum_repo" > /dev/null; then
 				echo "Error: Unable to curl repository file $yum_repo, is it valid?"
 				exit 1
 			fi
 			if [ "$lsb_dist" = "fedora" ]; then
 				pkg_manager="dnf"
 				config_manager="dnf config-manager"
 				enable_channel_flag="--set-enabled"
 				disable_channel_flag="--set-disabled"
 				pre_reqs="dnf-plugins-core"
 				pkg_suffix="fc$dist_version"
 			else
 				pkg_manager="yum"
 				config_manager="yum-config-manager"
 				enable_channel_flag="--enable"
 				disable_channel_flag="--disable"
 				pre_reqs="yum-utils"
 				pkg_suffix="el"
 			fi
 			(
 				if ! is_dry_run; then
 					set -x
 				fi
 				$sh_c "$pkg_manager install -y -q $pre_reqs"
 				$sh_c "$config_manager --add-repo $yum_repo"

 				if [ "$CHANNEL" != "stable" ]; then
 					$sh_c "$config_manager $disable_channel_flag docker-ce-*"
 					$sh_c "$config_manager $enable_channel_flag docker-ce-$CHANNEL"
 				fi
 				if [ "$lsb_dist" = "rhel" ] || [ "$lsb_dist" = "ol" ]; then
 					adjust_repo_releasever "$dist_version"
 					# Add extra repo for version 7.x
 					if [[ "$dist_version" =~ "7." ]] || [ "$dist_version" == "7" ] ; then
 						if [ "$lsb_dist" = "rhel" ]; then
 							$sh_c "$config_manager $enable_channel_flag rhui-REGION-rhel-server-extras"
 							$sh_c "$config_manager $enable_channel_flag rhui-rhel-7-server-rhui-extras-rpms"
 							$sh_c "$config_manager $enable_channel_flag rhui-rhel-7-for-arm-64-extras-rhui-rpms"
 							$sh_c "$config_manager $enable_channel_flag rhel-7-server-rhui-extras-rpms"
 							$sh_c "$config_manager $enable_channel_flag rhel-7-server-extras-rpms"
 						else
 							$sh_c "$config_manager $enable_channel_flag ol7_addons"
 							# Adding OL7 developer repo if doesn't exist
 							if [ "$(yum repolist | grep yum.oracle.com_repo_OracleLinux_OL7_developer > /dev/null || echo add)" == "add" ]; then
 								$sh_c "$config_manager --add-repo https://yum.oracle.com/repo/OracleLinux/OL7/developer/x86_64"
 							fi
 						fi
 					fi
 				fi
 				$sh_c "$pkg_manager makecache"
 			)
 			pkg_version=""
 			if [ -n "$VERSION" ]; then
 				if is_dry_run; then
 					echo "# WARNING: VERSION pinning is not supported in DRY_RUN"
 				else
 					pkg_pattern="$(echo "$VERSION" | sed "s/-ce-/\\\\.ce.*/g" | sed "s/-/.*/g").*$pkg_suffix"
 					search_command="$pkg_manager list --showduplicates 'docker-ce' | grep '$pkg_pattern' | tail -1 | awk '{print \$2}'"
 					pkg_version="$($sh_c "$search_command")"
 					echo "INFO: Searching repository for VERSION '$VERSION'"
 					echo "INFO: $search_command"
 					if [ -z "$pkg_version" ]; then
 						echo
 						echo "ERROR: '$VERSION' not found amongst $pkg_manager list results"
 						echo
 						exit 1
 					fi
 					search_command="$pkg_manager list --showduplicates 'docker-ce-cli' | grep '$pkg_pattern' | tail -1 | awk '{print \$2}'"
 					# It's okay for cli_pkg_version to be blank, since older versions don't support a cli package
 					cli_pkg_version="$($sh_c "$search_command" | cut -d':' -f 2)"
 					# Cut out the epoch and prefix with a '-'
 					pkg_version="-$(echo "$pkg_version" | cut -d':' -f 2)"
 				fi
 			fi
 			(
 				if ! is_dry_run; then
 					set -x
 				fi
 				# install the correct cli version first
 				if [ -n "$cli_pkg_version" ]; then
 					$sh_c "$pkg_manager install -y -q docker-ce-cli-$cli_pkg_version"
 				fi
 				$sh_c "$pkg_manager install -y -q docker-ce$pkg_version"
 				# shellcheck disable=SC2031
 				if [ -n "$has_rootless_extras" ]; then
 					$sh_c "$pkg_manager install -y -q docker-ce-rootless-extras$pkg_version"
 				fi
                                if ! command_exists iptables; then
                                        $sh_c "$pkg_manager install -y -q iptables"
                                fi
                                start_docker
 			)
 			echo_docker_as_nonroot
 			exit 0
 			;;
                rancheros)
                        (
                        set -x
                        $sh_c "sleep 3;ros engine list --update"
                        engine_version="$(sudo ros engine list | awk '{print $2}' | grep ${docker_version} | tail -n 1)"
                        if [ "$engine_version" != "" ]; then
                                $sh_c "ros engine switch -f $engine_version"
                        fi
                        )
                        exit 0
                        ;;
 		*)
 			if [ -z "$lsb_dist" ]; then
 				if is_darwin; then
 					echo
 					echo "ERROR: Unsupported operating system 'macOS'"
 					echo "Please get Docker Desktop from https://www.docker.com/products/docker-desktop"
 					echo
 					exit 1
 				fi
 			fi
 			echo
 			echo "ERROR: Unsupported distribution '$lsb_dist'"
 			echo
 			exit 1
 			;;
 	esac
 	exit 1
 }

 install_iscsi() {
 	sh_c='sh -c'
 	set -x
 	$sh_c 'apt-get update'
 	echo "Installing open-iscsi"
 	$sh_c 'apt-get install -y open-iscsi'
 }

 install_nfs() {
 	sh_c='sh -c'
 	set -x
 	$sh_c 'apt-get update'
 	echo "Installing nfs-common"
 	$sh_c 'apt-get install -y nfs-common'
 }

 fix_docker_logs() {
 	mkdir -p /etc/docker
 	cat << EOF > /etc/docker/daemon.json
 {
  "log-driver": "json-file",
  "log-opts": {"max-size": "100m", "max-file": "3"}
 }
 EOF
 }
 # wrapped up in a function so that we have some protection against only getting
 # half the file during "curl | sh"
 fix_docker_logs
 install_iscsi
 install_nfs
 do_install
	#!/bin/sh
	set -e
	# Docker CE for Linux installation script
	#
	# See https://docs.docker.com/engine/install/ for the installation steps.
	#
	# This script is meant for quick & easy install via:
	# $ curl -fsSL https://get.docker.com -o get-docker.sh
	# $ sh get-docker.sh
	#
	# For test builds (ie. release candidates):
	# $ curl -fsSL https://test.docker.com -o test-docker.sh
	# $ sh test-docker.sh
	#
	# NOTE: Make sure to verify the contents of the script
	# you downloaded matches the contents of install.sh
	# located at https://github.com/docker/docker-install
	# before executing.
	#
	# Git commit from https://github.com/docker/docker-install when
	# the script was uploaded (Should only be modified by upload job):
	SCRIPT_COMMIT_SHA="7cae5f8b0decc17d6571f9f52eb840fbc13b2737"

	CHANNEL="stable"
	DOWNLOAD_URL="https://download.docker.com"
	REPO_FILE="docker-ce.repo"
	VERSION=28.0.4
	DIND_TEST_WAIT=${DIND_TEST_WAIT:-3s} # Wait time until docker start at dind test env

	# Issue https://github.com/rancher/rancher/issues/29246
	adjust_repo_releasever() {
	DOWNLOAD_URL="https://download.docker.com"
	case $1 in
	7*)
	releasever=7
	;;
	8*)
	releasever=8
	;;
	*)
	# fedora, or unsupported
	return
	;;
	esac

	for channel in "stable" "test" "nightly"; do
	$sh_c "$config_manager --setopt=docker-ce-${channel}.baseurl=${DOWNLOAD_URL}/linux/centos/${releasever}/\\\$basearch/${channel} --save";
	$sh_c "$config_manager --setopt=docker-ce-${channel}-debuginfo.baseurl=${DOWNLOAD_URL}/linux/centos/${releasever}/debug-\\\$basearch/${channel} --save";
	$sh_c "$config_manager --setopt=docker-ce-${channel}-source.baseurl=${DOWNLOAD_URL}/linux/centos/${releasever}/source/${channel} --save";
	done
	}

	mirror=''
	DRY_RUN=${DRY_RUN:-}
	while [ $# -gt 0 ]; do
	case "$1" in
	--mirror)
	mirror="$2"
	shift
	;;
	--dry-run)
	DRY_RUN=1
	;;
	--*)
	echo "Illegal option $1"
	;;
	esac
	shift $(( $# > 0 ? 1 : 0 ))
	done

	case "$mirror" in
	Aliyun)
	DOWNLOAD_URL="https://mirrors.aliyun.com/docker-ce"
	;;
	AzureChinaCloud)
	DOWNLOAD_URL="https://mirror.azure.cn/docker-ce"
	;;
	esac

	# docker-ce-rootless-extras is packaged since Docker 20.10.0
	has_rootless_extras="1"
	if echo "$VERSION" \| grep -q '^1'; then
	has_rootless_extras=
	fi

	start_docker() {
	if [ ! -z $DIND_TEST ]; then
	# Starting dockerd manually due to dind env is not using systemd
	dockerd &
	sleep $DIND_TEST_WAIT
	elif [ -d '/run/systemd/system' ] ; then
	$sh_c 'systemctl start docker'
	else
	$sh_c 'service docker start'
	fi
	}

	command_exists() {
	command -v "$@" > /dev/null 2>&1
	}

	is_dry_run() {
	if [ -z "$DRY_RUN" ]; then
	return 1
	else
	return 0
	fi
	}

	is_wsl() {
	case "$(uname -r)" in
	microsoft ) true ;; # WSL 2
	Microsoft ) true ;; # WSL 1
	* ) false;;
	esac
	}

	is_darwin() {
	case "$(uname -s)" in
	darwin ) true ;;
	Darwin ) true ;;
	* ) false;;
	esac
	}

	deprecation_notice() {
	distro=$1
	date=$2
	echo
	echo "DEPRECATION WARNING:"
	echo " The distribution, $distro, will no longer be supported in this script as of $date."
	echo " If you feel this is a mistake please submit an issue at https://github.com/docker/docker-install/issues/new"
	echo
	sleep 10
	}

	get_distribution() {
	lsb_dist=""
	# Every system that we officially support has /etc/os-release
	if [ -r /etc/os-release ]; then
	lsb_dist="$(. /etc/os-release && echo "$ID")"
	fi
	# Returning an empty string here should be alright since the
	# case statements don't act unless you provide an actual value
	echo "$lsb_dist"
	}

	add_debian_backport_repo() {
	debian_version="$1"
	backports="deb http://ftp.debian.org/debian $debian_version-backports main"
	if ! grep -Fxq "$backports" /etc/apt/sources.list; then
	(set -x; $sh_c "echo \"$backports\" >> /etc/apt/sources.list")
	fi
	}

	echo_docker_as_nonroot() {
	if is_dry_run; then
	return
	fi
	if command_exists docker && [ -e /var/run/docker.sock ]; then
	(
	set -x
	$sh_c 'docker version'
	) \|\| true
	fi

	# intentionally mixed spaces and tabs here -- tabs are stripped by "<<-EOF", spaces are kept in the output
	echo
	echo "================================================================================"
	echo
	if [ -n "$has_rootless_extras" ]; then
	echo "To run Docker as a non-privileged user, consider setting up the"
	echo "Docker daemon in rootless mode for your user:"
	echo
	echo " dockerd-rootless-setuptool.sh install"
	echo
	echo "Visit https://docs.docker.com/go/rootless/ to learn about rootless mode."
	echo
	fi
	echo
	echo "To run the Docker daemon as a fully privileged service, but granting non-root"
	echo "users access, refer to https://docs.docker.com/go/daemon-access/"
	echo
	echo "WARNING: Access to the remote API on a privileged Docker daemon is equivalent"
	echo " to root access on the host. Refer to the 'Docker daemon attack surface'"
	echo " documentation for details: https://docs.docker.com/go/attack-surface/"
	echo
	echo "================================================================================"
	echo
	}

	# Check if this is a forked Linux distro
	check_forked() {

	# Check for lsb_release command existence, it usually exists in forked distros
	if command_exists lsb_release; then
	# Check if the `-u` option is supported
	set +e
	lsb_release -a -u > /dev/null 2>&1
	lsb_release_exit_code=$?
	set -e

	# Check if the command has exited successfully, it means we're in a forked distro
	if [ "$lsb_release_exit_code" = "0" ]; then
	# Print info about current distro
	cat <<-EOF
	You're using '$lsb_dist' version '$dist_version'.
	EOF

	# Get the upstream release info
	lsb_dist=$(lsb_release -a -u 2>&1 \| tr '[:upper:]' '[:lower:]' \| grep -E 'id' \| cut -d ':' -f 2 \| tr -d '[:space:]')
	dist_version=$(lsb_release -a -u 2>&1 \| tr '[:upper:]' '[:lower:]' \| grep -E 'codename' \| cut -d ':' -f 2 \| tr -d '[:space:]')

	# Print info about upstream distro
	cat <<-EOF
	Upstream release is '$lsb_dist' version '$dist_version'.
	EOF
	else
	if [ -r /etc/debian_version ] && [ "$lsb_dist" != "ubuntu" ] && [ "$lsb_dist" != "raspbian" ]; then
	if [ "$lsb_dist" = "osmc" ]; then
	# OSMC runs Raspbian
	lsb_dist=raspbian
	else
	# We're Debian and don't even know it!
	lsb_dist=debian
	fi
	dist_version="$(sed 's/\/.//' /etc/debian_version \| sed 's/\..//')"
	case "$dist_version" in
	10)
	dist_version="buster"
	;;
	9)
	dist_version="stretch"
	;;
	8\|'Kali Linux 2')
	dist_version="jessie"
	;;
	esac
	fi
	fi
	fi
	}

	semverParse() {
	major="${1%%.*}"
	minor="${1#$major.}"
	minor="${minor%%.*}"
	patch="${1#$major.$minor.}"
	patch="${patch%%[-.]*}"
	}

	do_install() {
	echo "# Executing docker install script, commit: $SCRIPT_COMMIT_SHA"

	if command_exists docker; then
	docker_version="$(docker -v \| cut -d ' ' -f3 \| cut -d ',' -f1)"
	MAJOR_W=1
	MINOR_W=10

	semverParse "$docker_version"

	shouldWarn=0
	if [ "$major" -lt "$MAJOR_W" ]; then
	shouldWarn=1
	fi

	if [ "$major" -le "$MAJOR_W" ] && [ "$minor" -lt "$MINOR_W" ]; then
	shouldWarn=1
	fi

	cat >&2 <<-'EOF'
	Warning: the "docker" command appears to already exist on this system.

	If you already have Docker installed, this script can cause trouble, which is
	why we're displaying this warning and provide the opportunity to cancel the
	installation.

	If you installed the current Docker package using this script and are using it
	EOF

	if [ $shouldWarn -eq 1 ]; then
	cat >&2 <<-'EOF'
	again to update Docker, we urge you to migrate your image store before upgrading
	to v1.10+.

	You can find instructions for this here:
	https://github.com/docker/docker/wiki/Engine-v1.10.0-content-addressability-migration
	EOF
	else
	cat >&2 <<-'EOF'
	again to update Docker, you can safely ignore this message.
	EOF
	fi

	cat >&2 <<-'EOF'

	You may press Ctrl+C now to abort this script.
	EOF
	( set -x; sleep 20 )
	fi

	user="$(id -un 2>/dev/null \|\| true)"

	sh_c='sh -c'
	if [ "$user" != 'root' ]; then
	if command_exists sudo; then
	sh_c='sudo -E sh -c'
	elif command_exists su; then
	sh_c='su -c'
	else
	cat >&2 <<-'EOF'
	Error: this installer needs the ability to run commands as root.
	We are unable to find either "sudo" or "su" available to make this happen.
	EOF
	exit 1
	fi
	fi

	if is_dry_run; then
	sh_c="echo"
	fi

	# perform some very rudimentary platform detection
	lsb_dist=$( get_distribution )
	lsb_dist="$(echo "$lsb_dist" \| tr '[:upper:]' '[:lower:]')"

	if is_wsl; then
	echo
	echo "WSL DETECTED: We recommend using Docker Desktop for Windows."
	echo "Please get Docker Desktop from https://www.docker.com/products/docker-desktop"
	echo
	cat >&2 <<-'EOF'

	You may press Ctrl+C now to abort this script.
	EOF
	( set -x; sleep 20 )
	fi

	case "$lsb_dist" in

	ubuntu)
	if command_exists lsb_release; then
	dist_version="$(lsb_release --codename \| cut -f2)"
	fi
	if [ -z "$dist_version" ] && [ -r /etc/lsb-release ]; then
	dist_version="$(. /etc/lsb-release && echo "$DISTRIB_CODENAME")"
	fi
	;;

	debian\|raspbian)
	dist_version="$(sed 's/\/.//' /etc/debian_version \| sed 's/\..//')"
	case "$dist_version" in
	10)
	dist_version="buster"
	;;
	9)
	dist_version="stretch"
	;;
	8)
	dist_version="jessie"
	;;
	esac
	;;

	centos\|rhel)
	if [ -z "$dist_version" ] && [ -r /etc/os-release ]; then
	dist_version="$(. /etc/os-release && echo "$VERSION_ID")"
	fi
	;;

	oracleserver\|ol)
	lsb_dist="ol"
	# need to switch lsb_dist to match yum repo URL
	dist_version="$(rpm -q --whatprovides redhat-release --queryformat "%{VERSION}\n" \| sed 's/\/.//' \| sed 's/\..//' \| sed 's/Server*//')"
	;;

	*)
	if command_exists lsb_release; then
	dist_version="$(lsb_release --release \| cut -f2)"
	fi
	if [ -z "$dist_version" ] && [ -r /etc/os-release ]; then
	dist_version="$(. /etc/os-release && echo "$VERSION_ID")"
	fi
	;;

	esac

	# Check if this is a forked Linux distro
	check_forked

	# Run setup for each distro accordingly
	case "$lsb_dist" in
	ubuntu\|debian\|raspbian)
	pre_reqs="apt-transport-https ca-certificates curl"
	if [ "$lsb_dist" = "debian" ]; then
	# libseccomp2 does not exist for debian jessie main repos for aarch64
	if [ "$(uname -m)" = "aarch64" ] && [ "$dist_version" = "jessie" ]; then
	add_debian_backport_repo "$dist_version"
	fi
	fi

	if ! command -v gpg > /dev/null; then
	pre_reqs="$pre_reqs gnupg"
	fi
	apt_repo="deb [arch=$(dpkg --print-architecture)] $DOWNLOAD_URL/linux/$lsb_dist $dist_version $CHANNEL"
	(
	if ! is_dry_run; then
	set -x
	fi
	$sh_c 'apt-get update -qq >/dev/null'
	$sh_c "DEBIAN_FRONTEND=noninteractive apt-get install -y -qq $pre_reqs >/dev/null"
	$sh_c "curl -fsSL \"$DOWNLOAD_URL/linux/$lsb_dist/gpg\" \| apt-key add -qq - >/dev/null"
	$sh_c "echo \"$apt_repo\" > /etc/apt/sources.list.d/docker.list"
	$sh_c 'apt-get update -qq >/dev/null'
	)
	pkg_version=""
	if [ -n "$VERSION" ]; then
	if is_dry_run; then
	echo "# WARNING: VERSION pinning is not supported in DRY_RUN"
	else
	# Will work for incomplete versions IE (17.12), but may not actually grab the "latest" if in the test channel
	pkg_pattern="$(echo "$VERSION" \| sed "s/-ce-/~ce~./g" \| sed "s/-/./g").*-0~$lsb_dist"
	search_command="apt-cache madison 'docker-ce' \| grep '$pkg_pattern' \| head -1 \| awk '{\$1=\$1};1' \| cut -d' ' -f 3"
	pkg_version="$($sh_c "$search_command")"
	echo "INFO: Searching repository for VERSION '$VERSION'"
	echo "INFO: $search_command"
	if [ -z "$pkg_version" ]; then
	echo
	echo "ERROR: '$VERSION' not found amongst apt-cache madison results"
	echo
	exit 1
	fi
	search_command="apt-cache madison 'docker-ce-cli' \| grep '$pkg_pattern' \| head -1 \| awk '{\$1=\$1};1' \| cut -d' ' -f 3"
	# Don't insert an = for cli_pkg_version, we'll just include it later
	cli_pkg_version="$($sh_c "$search_command")"
	pkg_version="=$pkg_version"
	fi
	fi
	(
	if ! is_dry_run; then
	set -x
	fi
	if [ -n "$cli_pkg_version" ]; then
	$sh_c "apt-get install -y -qq --no-install-recommends docker-ce-cli=$cli_pkg_version >/dev/null"
	fi
	$sh_c "apt-get install -y -qq --no-install-recommends docker-ce$pkg_version >/dev/null"
	# shellcheck disable=SC2030
	if [ -n "$has_rootless_extras" ]; then
	# Install docker-ce-rootless-extras without "--no-install-recommends", so as to install slirp4netns when available
	$sh_c "DEBIAN_FRONTEND=noninteractive apt-get install -y -qq docker-ce-rootless-extras$pkg_version >/dev/null"
	fi
	start_docker
	)
	echo_docker_as_nonroot
	exit 0
	;;
	centos\|fedora\|rhel\|ol)
	# installing centos packages
	yum_repo="$DOWNLOAD_URL/linux/centos/$REPO_FILE"
	if ! curl -Ifs "$yum_repo" > /dev/null; then
	echo "Error: Unable to curl repository file $yum_repo, is it valid?"
	exit 1
	fi
	if [ "$lsb_dist" = "fedora" ]; then
	pkg_manager="dnf"
	config_manager="dnf config-manager"
	enable_channel_flag="--set-enabled"
	disable_channel_flag="--set-disabled"
	pre_reqs="dnf-plugins-core"
	pkg_suffix="fc$dist_version"
	else
	pkg_manager="yum"
	config_manager="yum-config-manager"
	enable_channel_flag="--enable"
	disable_channel_flag="--disable"
	pre_reqs="yum-utils"
	pkg_suffix="el"
	fi
	(
	if ! is_dry_run; then
	set -x
	fi
	$sh_c "$pkg_manager install -y -q $pre_reqs"
	$sh_c "$config_manager --add-repo $yum_repo"

	if [ "$CHANNEL" != "stable" ]; then
	$sh_c "$config_manager $disable_channel_flag docker-ce-*"
	$sh_c "$config_manager $enable_channel_flag docker-ce-$CHANNEL"
	fi
	if [ "$lsb_dist" = "rhel" ] \|\| [ "$lsb_dist" = "ol" ]; then
	adjust_repo_releasever "$dist_version"
	# Add extra repo for version 7.x
	if [[ "$dist_version" =~ "7." ]] \|\| [ "$dist_version" == "7" ] ; then
	if [ "$lsb_dist" = "rhel" ]; then
	$sh_c "$config_manager $enable_channel_flag rhui-REGION-rhel-server-extras"
	$sh_c "$config_manager $enable_channel_flag rhui-rhel-7-server-rhui-extras-rpms"
	$sh_c "$config_manager $enable_channel_flag rhui-rhel-7-for-arm-64-extras-rhui-rpms"
	$sh_c "$config_manager $enable_channel_flag rhel-7-server-rhui-extras-rpms"
	$sh_c "$config_manager $enable_channel_flag rhel-7-server-extras-rpms"
	else
	$sh_c "$config_manager $enable_channel_flag ol7_addons"
	# Adding OL7 developer repo if doesn't exist
	if [ "$(yum repolist \| grep yum.oracle.com_repo_OracleLinux_OL7_developer > /dev/null \|\| echo add)" == "add" ]; then
	$sh_c "$config_manager --add-repo https://yum.oracle.com/repo/OracleLinux/OL7/developer/x86_64"
	fi
	fi
	fi
	fi
	$sh_c "$pkg_manager makecache"
	)
	pkg_version=""
	if [ -n "$VERSION" ]; then
	if is_dry_run; then
	echo "# WARNING: VERSION pinning is not supported in DRY_RUN"
	else
	pkg_pattern="$(echo "$VERSION" \| sed "s/-ce-/\\\\.ce./g" \| sed "s/-/./g").*$pkg_suffix"
	search_command="$pkg_manager list --showduplicates 'docker-ce' \| grep '$pkg_pattern' \| tail -1 \| awk '{print \$2}'"
	pkg_version="$($sh_c "$search_command")"
	echo "INFO: Searching repository for VERSION '$VERSION'"
	echo "INFO: $search_command"
	if [ -z "$pkg_version" ]; then
	echo
	echo "ERROR: '$VERSION' not found amongst $pkg_manager list results"
	echo
	exit 1
	fi
	search_command="$pkg_manager list --showduplicates 'docker-ce-cli' \| grep '$pkg_pattern' \| tail -1 \| awk '{print \$2}'"
	# It's okay for cli_pkg_version to be blank, since older versions don't support a cli package
	cli_pkg_version="$($sh_c "$search_command" \| cut -d':' -f 2)"
	# Cut out the epoch and prefix with a '-'
	pkg_version="-$(echo "$pkg_version" \| cut -d':' -f 2)"
	fi
	fi
	(
	if ! is_dry_run; then
	set -x
	fi
	# install the correct cli version first
	if [ -n "$cli_pkg_version" ]; then
	$sh_c "$pkg_manager install -y -q docker-ce-cli-$cli_pkg_version"
	fi
	$sh_c "$pkg_manager install -y -q docker-ce$pkg_version"
	# shellcheck disable=SC2031
	if [ -n "$has_rootless_extras" ]; then
	$sh_c "$pkg_manager install -y -q docker-ce-rootless-extras$pkg_version"
	fi
	if ! command_exists iptables; then
	$sh_c "$pkg_manager install -y -q iptables"
	fi
	start_docker
	)
	echo_docker_as_nonroot
	exit 0
	;;
	rancheros)
	(
	set -x
	$sh_c "sleep 3;ros engine list --update"
	engine_version="$(sudo ros engine list \| awk '{print $2}' \| grep ${docker_version} \| tail -n 1)"
	if [ "$engine_version" != "" ]; then
	$sh_c "ros engine switch -f $engine_version"
	fi
	)
	exit 0
	;;
	*)
	if [ -z "$lsb_dist" ]; then
	if is_darwin; then
	echo
	echo "ERROR: Unsupported operating system 'macOS'"
	echo "Please get Docker Desktop from https://www.docker.com/products/docker-desktop"
	echo
	exit 1
	fi
	fi
	echo
	echo "ERROR: Unsupported distribution '$lsb_dist'"
	echo
	exit 1
	;;
	esac
	exit 1
	}

	install_iscsi() {
	sh_c='sh -c'
	set -x
	$sh_c 'apt-get update'
	echo "Installing open-iscsi"
	$sh_c 'apt-get install -y open-iscsi'
	}

	install_nfs() {
	sh_c='sh -c'
	set -x
	$sh_c 'apt-get update'
	echo "Installing nfs-common"
	$sh_c 'apt-get install -y nfs-common'
	}

	fix_docker_logs() {
	mkdir -p /etc/docker
	cat << EOF > /etc/docker/daemon.json
	{
	"log-driver": "json-file",
	"log-opts": {"max-size": "100m", "max-file": "3"}
	}
	EOF
	}
	# wrapped up in a function so that we have some protection against only getting
	# half the file during "curl \| sh"
	fix_docker_logs
	install_iscsi
	install_nfs
	do_install