Docker笔记 -- 本地Registry服务器

• 主机清单

主机	IP	HOST
Docker Registry	13.13.2.2	registry
Docker Client-1	13.13.3.3	docker01
Docker Client-2	13.13.4.4	docker02

• 安装软件（all）

[root@docker ~]# yum install yum-utils
[root@docker ~]# yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
[root@docker ~]# dnf install docker-ce
[root@docker ~]# 

• 编写/etc/hosts（all）

[root@registry ~]# vi /etc/hosts
[root@registry ~]# tail -3 /etc/hosts
13.13.2.2 registry
13.13.3.3 docker01
13.13.4.4 docker02
[root@registry ~]# 

• 搭建registry容器服务

1. 编写registry服务启动文件（registry）

[root@registry ~]# mkdir /etc/docker/registry/
[root@registry ~]# vi /etc/docker/registry/docker-compose.yml
[root@registry ~]# cat /etc/docker/registry/docker-compose.yml
registry:
  restart: always	# 随Docker启动而启动
  image: registry
  container_name: registry-daemon
  ports:
    - 5000:5000
  environment:
    REGISTRY_AUTH: htpasswd
    REGISTRY_AUTH_HTPASSWD_PATH: /etc/docker/registry/auth/htpasswd	# 密码文件位置
    REGISTRY_AUTH_HTPASSWD_REALM: Registry Realm
  volumes:
    - /var/lib/registry:/var/lib/registry		# 将容器registry目录同步至本地，防止容器损坏images丢失
    - /etc/docker/registry/auth/:/etc/docker/registry/auth/	# ！！！将密码文件拷贝至容器供其认证

/etc/docker/registry/auth/：确认registry认证时的密码文件路径，否则会认证失败，如下：

[root@registry ~]# cat /etc/docker/registry/docker-compose.yml
....
    - /etc/docker/registry/auth/:/auth/
[root@registry registry]# docker login registry:5000
Username: duser
Password: 
Error response from daemon: login attempt to http://registry:5000/v2/ failed with status: 401 Unauthorized
[root@registry registry]# docker container logs registry_registry_1 
time="2020-10-07T03:41:34.891374071Z" level=warning msg="htpasswd is missing, provisioning with default user" go.version=go1.11.2 password="tKpELoAn_Pgll5pdqxLFKMPObiaARVTh5xIMKxqRbgQ" user=docker 
[root@registry registry]# docker container exec -it registry_registry_1 /bin/sh
/ # cat /etc/docker/registry/auth/htpasswd 
docker:tKpELoAn_Pgll5pdqxLFKMPObiaARVTh5xIMKxqRbgQ
/ # 

2. 生成密码文件（registry）

[root@registry ~]# mkdir /etc/docker/registry/auth
[root@registry ~]# dnf install httpd-tools
[root@registry ~]# htpasswd -Bbn duser 123456 > /etc/docker/registry/auth/htpasswd
[root@registry ~]# 

3. 启动registry服务（registry）

[root@registry ~]# docker pull registry
[root@registry ~]# curl -L "https://github.com/docker/compose/releases/download/1.27.4/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
[root@registry ~]# chmod +x /usr/local/bin/docker-compose 
[root@registry ~]# cd /etc/docker/registry/
[root@registry registry]# docker-compose up -d
Creating registry_registry_1 ... done
[root@registry registry]# 

4. 开放防火墙端口（registry）

[root@registry ~]# firewall-cmd --permanent --add-port=5000/tcp
success
[root@registry ~]# firewall-cmd --reload
success
[root@registry ~]# 

5. 暴露registry服务（all）

[root@registry ~]# vi /etc/docker/daemon.json
[root@registry ~]# cat /etc/docker/daemon.json 
{
  "insecure-registries":["registry:5000"]
}
[root@registry ~]# systemctl restart docker.service 
[root@registry ~]#

• 客户端Docker01模拟上传镜像

[root@docker01 ~]# docker pull busybox
[root@docker01 ~]# docker tag busybox:latest registry:5000/busybox:latest
[root@docker01 ~]# docker images
REPOSITORY              TAG                 IMAGE ID            CREATED             SIZE
registry:5000/busybox   latest              6858809bf669        4 weeks ago         1.23MB
busybox                 latest              6858809bf669        4 weeks ago         1.23MB
[root@docker01 ~]# docker login registry:5000
Username: duser
Password: 
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded
[root@docker01 ~]# docker push registry:5000/busybox:latest 
The push refers to repository [registry:5000/busybox]
be8b8b42328a: Pushed 
latest: digest: sha256:2ca5e69e244d2da7368f7088ea3ad0653c3ce7aaccd0b8823d11b0d5de956002 size: 527
[root@docker01 ~]# 

• 客户端Docker02模拟下载镜像

[root@docker02 ~]# docker login registry:5000
[root@docker02 ~]# docker pull registry:5000/busybox:latest
latest: Pulling from busybox
df8698476c65: Pull complete 
Digest: sha256:2ca5e69e244d2da7368f7088ea3ad0653c3ce7aaccd0b8823d11b0d5de956002
Status: Downloaded newer image for registry:5000/busybox:latest
registry:5000/busybox:latest
[root@docker02 ~]# docker images
REPOSITORY              TAG                 IMAGE ID            CREATED             SIZE
registry:5000/busybox   latest              6858809bf669        4 weeks ago         1.23MB
[root@docker02 ~]#