Docker

通过官方Docker Registry在局域网内部搭建私有镜像注册中心.

1 - 拉取registry镜像

[anliven@anliven ~]$ cat /etc/system-release  # 本机系统版本
CentOS Linux release 7.8.2003 (Core)
[anliven@anliven ~]$
[anliven@anliven ~]$ ip addr show |grep "192.168.56."  # 本机地址
    inet 192.168.56.102/24 brd 192.168.56.255 scope global noprefixroute dynamic enp0s8
[anliven@anliven ~]$
[anliven@anliven ~]$ docker pull registry
Using default tag: latest
latest: Pulling from library/registry
9b794450f7b6: Pull complete
6ba25693af03: Pull complete
9eb68e7589ff: Pull complete
6cf77150f665: Pull complete
339e0c26c7cc: Pull complete
Digest: sha256:5bb9b919833aa955dfe1d1121cc038330b025ec6506ce47066c9192927e3dc3d
Status: Downloaded newer image for registry:latest
docker.io/library/registry:latest
[anliven@anliven ~]$
[anliven@anliven ~]$ docker images |grep registry
registry                                                            latest              ee34aa9d8ab2        12 days ago         26.2MB
[anliven@anliven ~]$

2 - 启动registry容器

[anliven@anliven ~]$ sudo mkdir /local-registry
[anliven@anliven ~]$ ls -l / |grep local
drwxr-xr-x    2 root root    6 Apr 14 05:32 local-registry
[anliven@anliven ~]$ 
[anliven@anliven ~]$ docker run -d --name local-registry --restart=always  -p 5000:5000 -v /local-registry:/var/lib/registry registry:latest
5a7ec6db4b2f1987d2ae8355af6fbc887f64b8111efa8f2e2a42c95f8e77bae5
[anliven@anliven ~]$
[anliven@anliven ~]$ docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                    NAMES
5a7ec6db4b2f        registry:latest     "/entrypoint.sh /etc…"   8 seconds ago       Up 6 seconds        0.0.0.0:5000->5000/tcp   local-registry
[anliven@anliven ~]$
[anliven@anliven ~]$ sudo netstat -anpt |grep 5000
tcp6       0      0 :::5000                 :::*                    LISTEN      13895/docker-proxy
[anliven@anliven ~]$

浏览器打开localhost:5000/v2/， 或者命令行执行curl -v localhost:5000/v2/, 验证本地registry是否运行正常

[anliven@anliven ~]$ curl -v localhost:5000/v2/  # 验证本地registry是否运行正常
* About to connect() to localhost port 5000 (#0)
*   Trying ::1...
* Connected to localhost (::1) port 5000 (#0)
> GET /v2/ HTTP/1.1
> User-Agent: curl/7.29.0
> Host: localhost:5000
> Accept: */*
>
< HTTP/1.1 200 OK
< Content-Length: 2
< Content-Type: application/json; charset=utf-8
< Docker-Distribution-Api-Version: registry/2.0
< X-Content-Type-Options: nosniff
< Date: Wed, 14 Apr 2021 09:55:28 GMT
<
* Connection #0 to host localhost left intact
{}[anliven@anliven ~]$
[anliven@anliven ~]$
[anliven@anliven ~]$ curl localhost:5000/v2/_catalog  # 查看本地registry的镜像
{"repositories":[]}
[anliven@anliven ~]$ curl 192.168.56.102:5000/v2/_catalog  # 使用ip
{"repositories":[]}
[anliven@anliven ~]$ 

3 - 推送镜像到本地注册中心（registry）

[anliven@anliven ~]$ docker images |grep ubuntu
ubuntu                                                              latest              4e2eef94cd6b        7 months ago        73.9MB
[anliven@anliven ~]$
[anliven@anliven ~]$ docker tag ubuntu localhost:5000/ubuntu   # 更改镜像名称
[anliven@anliven ~]$ docker images |grep ubuntu
ubuntu                                                              latest              4e2eef94cd6b        7 months ago        73.9MB
localhost:5000/ubuntu                                               latest              4e2eef94cd6b        7 months ago        73.9MB
[anliven@anliven ~]$
[anliven@anliven ~]$ docker push localhost:5000/ubuntu  # 推送镜像到本地注册中心
The push refers to repository [localhost:5000/ubuntu]
a4399aeb9a0e: Pushed
35a91a75d24b: Pushed
ad44aa179b33: Pushed
2ce3c188c38d: Pushed
latest: digest: sha256:6f2fb2f9fb5582f8b587837afd6ea8f37d8d1d9e41168c90f410a6ef15fa8ce5 size: 1152
[anliven@anliven ~]$
[anliven@anliven ~]$ docker images |grep ubuntu
ubuntu                                                              latest              4e2eef94cd6b        7 months ago        73.9MB
localhost:5000/ubuntu                                               latest              4e2eef94cd6b        7 months ago        73.9MB
[anliven@anliven ~]$
[anliven@anliven ~]$ curl localhost:5000/v2/_catalog  # 查看本地registry的镜像
{"repositories":["ubuntu"]}
[anliven@anliven ~]$
[anliven@anliven ~]$ curl localhost:5000/v2/ubuntu/tags/list  # 查看本地registry中镜像的详细信息
{"name":"ubuntu","tags":["latest"]}
[anliven@anliven ~]$
[anliven@anliven ~]$ curl 192.168.56.102:5000/v2/ubuntu/tags/list
{"name":"ubuntu","tags":["latest"]}
anliven@anliven ~]$ 
[anliven@anliven ~]$ tree -L 3 /local-registry/docker/registry/v2/repositories/ubuntu/
/local-registry/docker/registry/v2/repositories/ubuntu/
├── _layers
│   └── sha256
│       ├── 46d371e02073acecf750a166495a63358517af793de739a51b680c973fae8fb9
│       ├── 4e2eef94cd6b93dd4d794c18b45c763f72edc22858e0da5b6e63a4566a54c03c
│       ├── 54ee1f796a1e650627269605cb8e6a596b77b324e6f0a1e4443dc41def0e58a6
│       ├── b66c17bbf772fa072c280b10fe87bc999420042b5fce5b111db38b4fe7c40b49
│       └── f7bfea53ad120b47cea5488f0b8331e737a97b33003517b0bd05e83925b578f0
├── _manifests
│   ├── revisions
│   │   └── sha256
│   └── tags
│       └── latest
└── _uploads

13 directories, 0 files
[anliven@anliven ~]$

4 - 拉取本地注册中心（registry）中的镜像

[anliven@anliven ~]$ cat /etc/docker/daemon.json
{
  "registry-mirrors": ["https://t5t8q6wn.mirror.aliyuncs.com"]
}
[anliven@anliven ~]$ 
[anliven@anliven ~]$ sudo vim /etc/docker/daemon.json  # 增加insecure-registries
[anliven@anliven ~]$ cat /etc/docker/daemon.json
{
  "registry-mirrors": ["https://t5t8q6wn.mirror.aliyuncs.com"],"insecure-registries": ["192.168.56.102:5000"]
}
[anliven@anliven ~]$
[anliven@anliven ~]$ sudo systemctl daemon-reload
[anliven@anliven ~]$ sudo systemctl restart docker
[anliven@anliven ~]$
[anliven@anliven ~]$ docker pull 192.168.56.102:5000/ubuntu
Using default tag: latest
latest: Pulling from ubuntu
Digest: sha256:6f2fb2f9fb5582f8b587837afd6ea8f37d8d1d9e41168c90f410a6ef15fa8ce5
Status: Downloaded newer image for 192.168.56.102:5000/ubuntu:latest
192.168.56.102:5000/ubuntu:latest
[anliven@anliven ~]$
[anliven@anliven ~]$ docker images |grep ubuntu
ubuntu                                                              latest              4e2eef94cd6b        7 months ago        73.9MB
localhost:5000/ubuntu                                               latest              4e2eef94cd6b        7 months ago        73.9MB
192.168.56.102:5000/ubuntu                                          latest              4e2eef94cd6b        7 months ago        73.9MB
[anliven@anliven ~]$

5 - 在其他主机拉取本地注册中心（registry）中的镜像

anliven@anliven:~$ lsb_release -a  # 系统版本
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 18.04.3 LTS
Release:        18.04
Codename:       bionic
anliven@anliven:~$
anliven@anliven:~$ ip addr show |grep "192.168.56"  # 主机地址
    inet 192.168.56.101/24 brd 192.168.56.255 scope global dynamic noprefixroute enp0s8
anliven@anliven:~$
anliven@anliven:~$ sudo vim /etc/docker/daemon.json  # 增加insecure-registries
anliven@anliven:~$ cat /etc/docker/daemon.json
{
  "registry-mirrors": ["https://t5t8q6wn.mirror.aliyuncs.com"],"insecure-registries": ["192.168.56.102:5000"]
}
anliven@anliven:~$ sudo systemctl daemon-reload
anliven@anliven:~$ sudo systemctl restart docker
anliven@anliven:~$
anliven@anliven:~$ curl 192.168.56.102:5000/v2/_catalog
{"repositories":["ubuntu"]}
anliven@anliven:~$
anliven@anliven:~$ docker pull 192.168.56.102:5000/ubuntu  # 拉取本地注册中心（registry）中的镜像
Using default tag: latest
latest: Pulling from ubuntu
54ee1f796a1e: Pull complete
f7bfea53ad12: Pull complete
46d371e02073: Pull complete
b66c17bbf772: Pull complete
Digest: sha256:6f2fb2f9fb5582f8b587837afd6ea8f37d8d1d9e41168c90f410a6ef15fa8ce5
Status: Downloaded newer image for 192.168.56.102:5000/ubuntu:latest
192.168.56.102:5000/ubuntu:latest
anliven@anliven:~$
anliven@anliven:~$ docker images |grep ubuntu
192.168.56.102:5000/ubuntu    latest              4e2eef94cd6b        7 months ago        73.9MB
anliven@anliven:~$

问题处理: "http: server gave HTTP response to HTTPS client"

问题现象

[anliven@anliven ~]$ docker pull 192.168.56.102:5000/ubuntu
Using default tag: latest
Error response from daemon: Get https://192.168.56.102:5000/v2/: http: server gave HTTP response to HTTPS client
[anliven@anliven ~]$

处理方法

[anliven@anliven ~]$ cat /etc/docker/daemon.json
{
  "registry-mirrors": ["https://t5t8q6wn.mirror.aliyuncs.com"]
}
[anliven@anliven ~]$ 
[anliven@anliven ~]$ sudo vim /etc/docker/daemon.json  # 增加insecure-registries
[anliven@anliven ~]$ cat /etc/docker/daemon.json
{
  "registry-mirrors": ["https://t5t8q6wn.mirror.aliyuncs.com"],"insecure-registries": ["192.168.56.102:5000"]
}
[anliven@anliven ~]$