广告制作网站,适合代码新手做的网站,阜阳网站建设公司,班级网站设计wordpress【Docker】Docker学习⑦ - Docker仓库之单机Dokcer Registry 七、 Docker仓库之单机Dokcer Registry1 下载docker registry镜像2 搭建单机仓库2.1 创建授权使用目录2.2 创建用户2.3 验证用户密码2.4 启动docker registry2.5 验证端口和容器2.6 测试登录仓库2.7 在Server1登陆后… 【Docker】Docker学习⑦ - Docker仓库之单机Dokcer Registry 七、 Docker仓库之单机Dokcer Registry1 下载docker registry镜像2 搭建单机仓库2.1 创建授权使用目录2.2 创建用户2.3 验证用户密码2.4 启动docker registry2.5 验证端口和容器2.6 测试登录仓库2.7 在Server1登陆后上传镜像2.8 Server2下载镜像并启动 七、 Docker仓库之单机Dokcer Registry
Docker Registry作为Docker的核心组件之一负责镜像内容的存储与分发客户端的docker pull以及push命令都将直接与registry 进行交互最初版本的registry由Python实现由于设计初期在安全性性能以及API的设计上有着诸多的缺陷。该版本在0.9之后停止了开发由新的项目distribution新的docker register被称为Distrition来重新设计并开发下一代Registry新的项目由go语言开发所有的API底层存储方式系统架构都进行了全面的重新设计已解决上一代registry中存在的问题2016年4月份registry2.0正式发布docker1.6版本开始知识registry2.0而8月份随着docker1.8发布docker hub正式启用2.1版本registry全面替代之前的版本新版registry对镜像存储格式进行了重新设计并和旧版不兼容docker1.5和之前的版本无法读取2.0的镜像另外Registry2.4版本之后支持了回收站机制也就是可以删除镜像了在2.4版本之前是无法支持删除镜像的所以如果你要使用最好是大于Registry2.4版本的。 本部分将介绍通过官方提供的docker registry 镜像来简单搭建一套本地私有仓库环境。
1 下载docker registry镜像 docker pull registry2 搭建单机仓库
2.1 创建授权使用目录 mkdir -p /docker/auth2.2 创建用户 cd /docker#报错docker run --entrypoint htpasswd registry -Bbn jack 123456 auth/htpasswd#修改htpasswd -Bbn test 123456 auth/htpasswd日志 [rootgbase8c_1 ~]# docker pull registryUsing default tag: latestlatest: Pulling from library/registry79e9f2f55bf5: Pull complete 0d96da54f60b: Pull complete 5b27040df4a2: Pull complete e2ead8259a04: Pull complete 3790aef225b9: Pull complete Digest: sha256:169211e20e2f2d5d115674681eb79d21a217b296b43374b8e39f97fcf866b375Status: Downloaded newer image for registry:latestdocker.io/library/registry:latest[rootgbase8c_1 ~]# mkdir -p /docker/auth [rootgbase8c_1 ~]# cd /docker[rootgbase8c_1 docker]# docker imagesREPOSITORY TAG IMAGE ID CREATED SIZEregistry latest b8604a3fe854 2 years ago 26.2MB[rootgbase8c_1 docker]# docker run --entrypoint htpasswd registry -Bbn jack 123456 auth/htpasswddocker: Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: exec: htpasswd: executable file not found in $PATH: unknown.ERRO[0000] error waiting for container: 2.3 验证用户密码 cat auth/htpasswd[rootgbase8c_1 docker]# cat auth/htpasswdtest:$2y$05$BCm9sruCprQymAV5vk5XKOybtlVb4vrftWXqbe5fbpjlq2suQPYwO2.4 启动docker registry docker run -d -p5000:5000 --restartalways --name registry1 -v /docker/auth:/auth -e REGISTRY_AUTHhtpasswd -e REGISTRY_AUTH_HTPASSWD_REALMRegistry Realm -e REGISTRY_AUTH_HTPASSWD_PATH/auth/htpasswd registry2.5 验证端口和容器
日志 [rootgbase8c_1 docker]# docker run -d -p5000:5000 --restartalways --name registry1 -v /docker/auth:/auth -e REGISTRY_AUTHhtpasswd -e REGISTRY_AUTH_HTPASSWD_REALMRegistry Realm -e REGISTRY_AUTH_HTPASSWD_PATH/auth/htpasswd registryec968bda55f7068065688569d83ea6f4c53d413af39e6dbe4c06a1f4dd58178f[rootgbase8c_1 docker]# docker psCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMESec968bda55f7 registry /entrypoint.sh /etc… 4 seconds ago Up 4 seconds 0.0.0.0:5000-5000/tcp, :::5000-5000/tcp registry1[rootgbase8c_1 docker]# ss -ntlState Recv-Q Send-Q Local Address:Port Peer Address:Port LISTEN 0 128 *:5000 *:* 2.6 测试登录仓库
报错 [rootgbase8c_1 docker]# docker login 192.168.56.200:5000Username: testPassword: Error response from daemon: Get https://192.168.56.200:5000/v2/: http: server gave HTTP response to HTTPS client解决方式1(无效) 编辑各docker 服务器/etc/sysconfig/docker 配置文件如下#Server1:vim /etc/sysconfig/dockerOPTIONS--selinux-enabled --log-driverjournaldADD_REGISTRY--add-registry 192.168.56.200:5000INSECURE_REGISTRY--insecure-registry 192.168.56.200:5000#重启dockersystemctl restart docker#Server2:vim /etc/sysconfig/dockerOPTIONS--selinux-enabled --log-driverjournaldif [ -z ${DOCKER_CERT_PATH} ];thenDOCKER_CERT_PATH/etc/dockerfiADD_REGISTRY--add-registry 192.168.56.200:5000INSECURE_REGISTRY--insecure-registry 192.168.56.200:5000#重启dockersystemctl restart docker解决方式2 [rootgbase8c_private docker]# cat /etc/docker/daemon.json{insecure-registries:[192.168.56.199,192.168.56.200:5000], #←新增registry-mirrors:[https://pkjijpqo.mirror.aliyuncs.com]}#登录成功[rootgbase8c_private docker]# docker login 192.168.56.200:5000Username (test): testPassword: Login Succeeded2.7 在Server1登陆后上传镜像
2.7.1 镜像打tag docker tag jack/nginx-1.22.1:v1 192.168.56.200:5000/jack/nginx-1.22.1:v12.7.2 上传镜像 docker push 192.168.56.200:5000/jack/nginx-1.22.1:v1日志 [rootgbase8c_1 docker]# docker tag jack/nginx-1.22.1:v1 192.168.56.200:5000/jack/nginx-1.22.1:v1[rootgbase8c_1 docker]# docker imagesREPOSITORY TAG IMAGE ID CREATED SIZEjack/nginx-1.22.1 v1 5ec2d0d6aa22 2 weeks ago 638MB192.168.56.200:5000/jack/nginx-1.22.1 v1 5ec2d0d6aa22 2 weeks ago 638MB[rootgbase8c_1 docker]# docker push 192.168.56.200:5000/jack/nginx-1.22.1:v1The push refers to repository [192.168.56.200:5000/jack/nginx-1.22.1]a7a030277385: Pushed 033b7c388a51: Pushed 62900648f903: Pushed 7bb7d3a7a010: Pushed 9e9129ee0c59: Pushed 382519f0e19e: Pushed a4437975d033: Pushed badae34ffc22: Pushed 26a72414b92b: Pushed 661b4c00d916: Pushed 74ddd0ec08fa: Pushed v1: digest: sha256:145e675dbf1533dd5cf834a4131128fd0b8d0f3f7a959919fba782f2261a1164 size: 26212.8 Server2下载镜像并启动
2.8.1 登录并从docker registry 下载镜像 docker imagesdocker login 192.168.56.200:5000docker pull 192.168.56.200:5000/jack/nginx-1.22.1:v12.8.2 验证下载成功 docker images2.8.3 从下载的镜像启动容器 docker run -d --name docker-registry -p80:80 192.168.56.200:5000/jack/nginx-1.22.1:v1 nginx2.8.4 验证登录 日志 [rootgbase8c_private docker]# docker login 192.168.56.200:5000Username (test): testPassword: Login Succeeded[rootgbase8c_private docker]# docker pull 192.168.56.200:5000/jack/nginx-1.22.1:v1v1: Pulling from jack/nginx-1.22.1Digest: sha256:145e675dbf1533dd5cf834a4131128fd0b8d0f3f7a959919fba782f2261a1164Status: Downloaded newer image for 192.168.56.200:5000/jack/nginx-1.22.1:v1[rootgbase8c_private docker]# docker imagesREPOSITORY TAG IMAGE ID CREATED SIZE192.168.56.200:5000/jack/nginx-1.22.1 v1 5ec2d0d6aa22 2 weeks ago 638MB[rootgbase8c_private docker]# docker run -d --name docker-registry -p80:80 192.168.56.200:5000/jack/nginx-1.22.1:v1 nginx2cf5864c064519853ead197bc1bba643eeb7dd21bac28be93bd9f7a7f876e409[rootgbase8c_private docker]# docker psCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES2cf5864c0645 192.168.56.200:5000/jack/nginx-1.22.1:v1 nginx 8 seconds ago Up 7 seconds 0.0.0.0:80-80/tcp, 443/tcp docker-registry
