6.docker的私用镜像仓库registry

时间 2019-11-29

标签 6.docker docker 私用镜像仓库 registry 栏目 Docker 繁體版

原文原文链接

docker方式启动镜像仓库

/ # cat /etc/docker/registry/config.yml 
version: 0.1
log:
  fields:
    service: registry
storage:
  cache:
    blobdescriptor: inmemory
  filesystem:
    rootdirectory: /var/lib/registry
http:
  addr: :5000
  headers:
    X-Content-Type-Options: [nosniff]
health:
  storagedriver:
    enabled: true
    interval: 10s
    threshold: 3
/ # [root@localhost ~]# docker run -it --rm --name jj registry:2 /bin/sh

配置 TLS 证书

当本地主机运行 Registry 服务后，全部能访问到该主机的 Docker Host 均可以把它做为私有仓库使用，只须要在镜像名称前面添加上具体的服务器地址便可。例如将本地的nginx 推入本身的仓库linux

私有仓库须要启用 TLS 认证，不然会报错。在第一部分中，咱们介绍了经过添加 DOCKER_ OPTS="--insecure-registry yourhostname:5000" （此版本下的docker没有这个硬性要求）nginx

[root@localhost ~]# docker version 
Client:
 Version:           18.09.3
 API version:       1.39
 Go version:        go1.10.8
 Git commit:        774a1f4
 Built:             Thu Feb 28 06:33:21 2019
 OS/Arch:           linux/amd64
 Experimental:      false

Server: Docker Engine - Community
 Engine:
  Version:          18.09.3
  API version:      1.39 (minimum version 1.12)
  Go version:       go1.10.8
  Git commit:       774a1f4
  Built:            Thu Feb 28 06:02:24 2019
  OS/Arch:          linux/amd64
  Experimental:     false

推拉镜像docker

docker images
docker  tag nginx:alpine localhost:5000/nginx/alpine
docker push localhost:5000/nginx/alpine