搭建私有 Docker 仓库服务器

Docker Hub 是 Docker 官方的公共仓库服务器,用户在 DockerHub 上只能创建一个私有仓库,这对于有些用户是不够用的,而且 DockerHub 服务器的访问速度也是个很大问题,那么我们希望能在自己本地的服务器上创建一个类似于 DockerHub 仓库服务器供团队使用,这也是可以的。

我测试的环境是 Mac OSX 下,已经通过 Boot2Docker 工具安装好 Docker 的环境,通过 命令boot2docker ip 可以查看虚拟机的 IP 是 192.168.59.104。那么下面我就在自己虚拟机上搭建一个私有的 Docker 仓库服务器:

安装运行 Docker-Registry

运行官方提供的 registry 镜像,将端口映射到主机的 5000 端口上,其它均使用默认配置:

guohl@ghl-MBP ⮀ ~ ⮀ docker run -d -p 5000:5000 registry Unable to find image 'registry:latest' locally 6cfde7386ab2: Pull complete 9789d95d9fda: Pull complete 19443e64f223: Pull complete b329371ab73c: Pull complete f0daee9a4e8f: Pull complete a66e50e56475: Pull complete 8ab3d2988df5: Pull complete 5f60fa7ea945: Pull complete db22a140c899: Pull complete 5b2fff9306bd: Pull complete 511136ea3c5a: Already exists f3c84ac3a053: Already exists a1a958a24818: Already exists 9fec74352904: Already exists d0955f21bf24: Already exists registry:latest: The image you are pulling has been verified. Important: image verification is a tech preview feature and should not be relied on to provide security. Status: Downloaded newer image for registry:latest 8fb8e82e61822e593e10b59a4e7bbad18c789b34e3b38942d5b63dccb497ed09 上传镜像到私有仓库

创建好私有仓库之后,我们就可以向该仓库上传镜像,别人也可以从该仓库下载镜像了。

查看本地已有的镜像:

guohl@ghl-MBP ⮀ ~ ⮀ docker images REPOSITORY TAG IMAGE ID CREATED VIRTUAL SIZE nginx latest 637d3b2f5fb5 4 days ago 93.44 MB MySQL latest 0feafece277d 11 days ago 282.9 MB wordpress latest f90659c8fdb9 2 weeks ago 451.5 MB Ubuntu latest d0955f21bf24 4 weeks ago 188.3 MB google/golang latest 3cc1d7ae0e9c 11 weeks ago 611.3 MB hello-world latest e45a5af57b00 3 months ago 910 B

通过 docker tage 命令将 hello-world 这个镜像标记为 192.168.59.104:5000/hello-world之后,再 push 到该镜像到私有仓库:

guohl@ghl-MBP ⮀ ~ ⮀ docker tag hello-world 192.168.59.104:5000/hello-world guohl@ghl-MBP ⮀ ~ ⮀ docker push 192.168.59.104:5000/hello-world FATA[0000] Error: v1 ping attempt failed with error: Get https://192.168.59.104:5000/v1/_ping: dial tcp 192.168.59.104:5000: connection refused. If this private registry supports only HTTP or HTTPS with an unknown CA certificate, please add `--insecure-registry 192.168.59.104:5000` to the daemon's arguments. In the case of HTTPS, if you have access to the registry's CA certificate, no need for the flag; simply place the CA certificate at /etc/docker/certs.d/192.168.59.104:5000/ca.crt

发现报错,使用 SO上类似问题 的解决方法可以解决上面的错误:

To use the --insecure-registry option, add it to the file /var/lib/boot2docker/profile inside the boot2docker VM. You can get into the VM with boot2docker ssh. The file contents should look like:

EXTRA_ARGS="--insecure-registry REGISTRY_IP:PORT" You will then need to restart boot2docker (e.g. boot2docker restart).

步骤如下:

使用 boot2docker ssh 登陆到 boot2docker 虚拟机

修改 /var/lib/boot2docker/profile 文件,向该文件中增加一行:EXTRA_ARGS="--insecure-registry 192.168.59.104:5000"

退出该虚拟机并使用命令 boot2docker restart 重启 boot2docker

完成重启之后,将私有仓库服务器运行起来,并 push hello-world 到该仓库:

guohl@ghl-MBP ⮀ ~ ⮀ docker run -d -p 5000:5000 registry 4935607095a22655da1ef91feb6f569264a50529cb8d594d520fe62da81250db guohl@ghl-MBP ⮀ ~ ⮀ docker push 192.168.59.104:5000/test The push refers to a repository [192.168.59.104:5000/test] (len: 1) Sending image list Pushing repository 192.168.59.104:5000/test (1 tags) 511136ea3c5a: Image successfully pushed 31cbccb51277: Image successfully pushed e45a5af57b00: Image successfully pushed Pushing tag for rev [e45a5af57b00] on {:5000/v1/repositories/test/tags/latest}

使用 Docker 的 RESTful API 可以查看仓库服务器中的镜像:

guohl@ghl-MBP ⮀ ~ ⮀ curl :5000/v1/search {"num_results": 1, "query": "", "results": [{"description": "", "name": "library/hello-world"}]}%

表示 hello-world 镜像已成功长传至私有仓库服务器了。

从私有仓库中下载、搜索镜像

内容版权声明:除非注明,否则皆为本站原创文章。

转载注明出处:https://www.heiqu.com/d42b822f044407c25262528d14ab3608.html