---ip段---docker

-ip addr

docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 

    link/ether 02:42:9b:db:6b:48 brd ff:ff:ff:ff:ff:ff

    inet 172.17.0.1/16

br-6f0087be721f: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 

    link/ether 02:42:44:4a:a9:9c brd ff:ff:ff:ff:ff:ff

    inet 172.18.0.1/24

...

nmcli connection modify docker0 connection.zone public

systemctl stop NetworkManager.service

firewall-cmd --permanent --zone=public --add-interface=docker0

firewall-cmd --permanent --zone=public --add-interface=eth0

firewall-cmd --permanent --zone=public --add-interface=br-6f0087be721f

systemctl start NetworkManager.service

nmcli connection modify docker0 connection.zone public

nmcli connection modify br-6f0087be721f connection.zone public

systemctl restart NetworkManager.service

systemctl restart docker.service