docker-registry使用场景

段帅星

已于 2024-04-18 15:35:44 修改

阅读量497

点赞数

分类专栏： docker 文章标签： docker 容器运维

于 2022-11-27 18:52:06 首次发布

本文链接：https://blog.csdn.net/weixin_47003048/article/details/128067409

版权

docker 专栏收录该内容

32 篇文章

订阅专栏

一、registry mirror dockerhub

场景：mirror dockerhub的镜像存到阿里云对象oss里面（也可以是其他的比如minio）
依赖：阿里云oss
1、创建mirror需要的配置文件

version: 0.1
log:
  level: debug
storage:
  oss:
    accesskeyid: xxx
    accesskeysecret: xxx
    region: oss-cn-beijing
    bucket: docker-proxy
    rootdirectory: dockers
    secure: false
    internal: false
http:
  addr: 0.0.0.0:5000
proxy:
      remoteurl: https://registry-1.docker.io
health:
  storagedriver:
    enabled: true
    interval: 10s
    threshold: 3

2、部署docker-registry

docker run -itd --restart=always --name registry-proxy -v `pwd`/config.yml:/etc/docker/registry/config.yml -p 5000:5000   registry:2

3、客户端配置mirror

{
  "exec-opts": ["native.cgroupdriver=systemd"],
  "log-driver": "json-file",
  "log-opts": {
    "max-size": "100m"
  },
  "registry-mirrors": ["http://docker-registry-mirror:5000"],
  "live-restore": true
}
systemctl daemon-reload && systemctl restart docker

4、测试

docker pull nginx
curl docker-registry-mirror:5000/v2/_catalog

二、搭建docker-registry存储到oss

场景：https+oss

1、创建docker-registry配置文件

version: 0.1
log:
  level: debug
storage:
  oss:
    accesskeyid: xxx
    accesskeysecret: xxx
    region: oss-cn-beijing
    bucket: docker-interal
    rootdirectory: dockers
    secure: false
    internal: false
http:
  addr: 0.0.0.0:5000
health:
  storagedriver:
    enabled: true
    interval: 10s
    threshold: 3

2、部署docker-registry

docker run -itd --restart=always --name registry-interal -v `pwd`/config.yml:/etc/docker/registry/config.yml -v /opt/certs:/certs -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/fullchain1.pem -e REGISTRY_HTTP_TLS_KEY=/certs/privkey1.pem  -p 443:5000 registry:2

三、搭建docker-registry存储到本地

1、创建docker-registry配置文件

version: 0.1
log:
  level: debug
  formatter: text
  fields:
    service: registry
    environment: staging
loglevel: debug
storage:
  filesystem:
    rootdirectory: /var/lib/registry
http:
  addr: :443
  tls:
      certificate: /certs/fullchain.cer
      key: /certs/registry.chandz.com.key

2、部署仓库

docker run -itd --name=docker-registry --restart=always -p443:443 -v /mnt/duanshuaixing/registry.chandz.com/config.yml:/etc/docker/registry/config.yml -v /mnt/duanshuaixing/registry.chandz.com/certs:/certs -v /mnt/duanshuaixing/registry.chandz.com/registry-data:/var/lib/registry registry:2