Docker私有仓库1

一、搭建私有仓库

#环境

Ip 192.168.0.34

X86云主机

[root@lh- /]# uname -a
Linux lh- 3.10.-327.13..el7.x86_64 # SMP Thu Mar  :: UTC  x86_64 x86_64 x86_64 GNU/Linux

操作系统

[root@lh- data]# cat /etc/redhat-release
CentOS Linux release 7.2. (Core)

#拉registry镜像，运行一个容器

[root@lh- ~]# sudo docker pull registry
[root@lh- ~]# sudo docker run -d -p : -v /opt/data/registry:/tmp/registry registry

#拉busybox镜像，打标签

[root@lh- ~]# sudo docker pull busybox
[root@lh- ~]# sudo docker tag busybox 192.168.0.34:/busybox

#提交镜像到私有仓库

[root@lh- ~]#  sudo docker push 192.168.0.34:/busybox
The push refers to a repository [192.168.0.34:/busybox]
unable to ping registry endpoint https://192.168.0.34:5000/v0/
v2 ping attempt failed with error: Get https://192.168.0.34:5000/v2/: dial tcp 192.168.0.34:5000: getsockopt: connection refused
 v1 ping attempt failed with error: Get https://192.168.0.34:5000/v1/_ping: dial tcp 192.168.0.34:5000: getsockopt: connection refused

因为Docker从1.3.x之后，与docker registry交互默认使用的是https，但是此处搭建私有仓库却只提供http服务，所以当和私有仓库交互时报上述错误。因此需要在启动docker server时增加启动参数为默认使用http访问。

#若无问题，直接查看仓库镜像

[root@lh- data]# curl -XGET 192.168.0.34:/v2/_catalog

二、FAQ

#上面push镜像是报错，docker配置文件中添加如下一行：

[root@lh- ~]# vi /etc/sysconfig/docker
# If you have a registry secured with https but do not have proper certs
# distributed, you can tell docker to not look for full authorization by
# adding the registry to the INSECURE_REGISTRY line and uncommenting it.
# INSECURE_REGISTRY='--insecure-registry'
INSECURE_REGISTRY='--insecure-registry=192.168.0.34:5000'

#重启docker服务

[root@lh- ~]# systemctl restart docker.service
Warning: docker.service changed on disk. Run 'systemctl daemon-reload' to reload units.

[root@lh- ~]# sudo docker push 192.168.0.34:/busybox
The push refers to a repository [192.168.0.34:/busybox]
Put http://192.168.0.34:5000/v1/repositories/busybox/: dial tcp 192.168.0.34:5000: getsockopt: connection refused

注：连接拒绝。报错后面可以看到是因为未启动容器，不过此时配置文件未生效。

[root@lh- ~]# ps -aux|grep docker
root       1.3  0.4   ?        Ssl  :   : /usr/bin/docker-current daemon --exec-opt native.cgroupdriver=systemd --selinux-enabled --log-driver=journald --insecure-registry=192.168.0.34:
root       0.2  0.1   ?        Sl   :   : docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port  -container-ip 172.17.0.2 -container-port
root       0.0  0.0     pts/    S+   :   : grep --color=auto docker

注：根据输出可以看出我们更改配置文件并没有生效

#修改docker配置文件，使其重启服务能生效

[root@lh- ~]# vi /usr/lib/systemd/system/docker.service
[Unit]
Description=Docker Application Container Engine
Documentation=http://docs.docker.com
After=network.target rhel-push-plugin.socket
Wants=docker-storage-setup.service

[Service]
Type=notify
NotifyAccess=all
EnvironmentFile=-/etc/sysconfig/docker
EnvironmentFile=-/etc/sysconfig/docker-storage
EnvironmentFile=-/etc/sysconfig/docker-network
Environment=GOTRACEBACK=crash
ExecStart=/usr/bin/docker-current daemon \
          --exec-opt native.cgroupdriver=systemd \
          $OPTIONS \
          $DOCKER_STORAGE_OPTIONS \
          $DOCKER_NETWORK_OPTIONS \
          $ADD_REGISTRY \
          $BLOCK_REGISTRY \
          $INSECURE_REGISTRY
LimitNOFILE=
LimitNPROC=
LimitCORE=infinity
TimeoutStartSec=
MountFlags=slave
Restart=on-abnormal

[Install]
WantedBy=multi-user.target

#重启docker服务，查看修改配置是否写入

[root@lh- ~]# systemctl daemon-reload
[root@lh- ~]# systemctl restart docker
[root@lh- ~]# ps -aux|grep docker
root        2.8  0.3   ?        Ssl  :   : /usr/bin/docker-current daemon --exec-opt native.cgroupdriver=systemd --selinux-enabled --log-driver=journald --insecure-registry=192.168.0.34:
root        0.5  0.2   ?        Sl   :   : docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port  -container-ip 172.17.0.2 -container-port
root        0.0  0.0     pts/    S+   :   : grep --color=auto docker

#前面提交到私有仓库报错

[root@lh- ~]# sudo docker push 192.168.0.34:/busybox
The push refers to a repository [192.168.0.34:/busybox]
Put http://192.168.0.34:5000/v1/repositories/busybox/: dial tcp 192.168.0.34:5000: getsockopt: connection refused

[root@lh- ~]# docker ps -a
CONTAINER ID        IMAGE                           COMMAND                  CREATED             STATUS                         PORTS                                          NAMES
b57ed47acdc1        rancher/swarm-agent:v0.1.3      "swarm-agent"             minutes ago      Up  minutes                                                                 r-Swarm_swarm-agent_1
6cb333619b90        registry                        "/entrypoint.sh /etc/"    hours ago         Exited () About an hour ago                                                  pensive_lovelace
[root@lh- ~]# docker start 6cb333619b90
6cb333619b90
[root@lh- ~]# sudo docker push 192.168.0.34:/busybox
The push refers to a repository [192.168.0.34:/busybox]
8ac8bfaff55a: Pushed
latest: digest: sha256:a59906e33509d14c036c8678d687bd4eec81ed7c4b8ce907b888c607f6a1e0e6 size: 

原因：未开启registry镜像容器。

#进入容器报错

[root@lh- ~]# docker exec -it 6cb333619b90 /bin/bash
exec: "/bin/bash": stat /bin/bash: no such file or directory

原因：不支持bash

#进入容器查看镜像存储

[root@lh- ~]# docker exec -it 6cb333619b90 /bin/sh
/ #
/ # ls
bin            entrypoint.sh  home           linuxrc        mnt            root           sbin           sys            usr
dev            etc            lib            media          proc           run            srv            tmp            var
/ # cd tmp/registry/
/tmp/registry # ls
/tmp/registry # ls

[root@lh- ~]# sudo docker run 192.168.0.34:/busybox
[root@lh- ~]# docker ps -a
CONTAINER ID        IMAGE                           COMMAND                  CREATED             STATUS                     PORTS                                          NAMES
e7a80ce00dbe        192.168.0.34:/busybox       "sh"                      seconds ago       Exited ()  seconds ago

[root@lh- ~]# docker images
REPOSITORY                         TAG                 IMAGE ID            CREATED             SIZE192.168.0.34:/busybox          latest              2b8fd9751c4c         weeks ago        1.093 MB

感觉写一起有些太长了，再来一篇吧

https://www.cnblogs.com/zeppelin/p/5906435.html

欢迎扫码关注下面公众号，定期分享大数据与知识图谱相关知识点，读书思考。