先更新并安装依赖

apt update
apt install -y ca-certificates curl gnupg lsb-release

创建 keyrings 目录并导入 Docker GPG key

install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg
chmod a+r /etc/apt/keyrings/docker.gpg

添加 Docker 仓库（Bookworm = Debian 12）

echo \
"deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] \
https://download.docker.com/linux/debian bookworm stable" \
| tee /etc/apt/sources.list.d/docker.list > /dev/null

安装 docker 引擎及相关插件

apt update
apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

启动并开机自启

systemctl enable --now docker

验证

docker run --rm hello-world