docker私有仓库搭建和资源限制

Docker 私有仓库的搭建

docker 私有仓库默认只支持https协议的访问不支持http协议如果需要允许通过http协议访问必须手动修改配置文件

docker官方默认提供的仓库提供软件包docker-distribution 由python开发的web系统

# yum install docker-registry
# systemctl start docker-distribution

非dockerhub的Reistry必须明确指定服务器的地址端口非顶层的私有仓库还必须给定用户名

要想把镜像推送的私有仓库必须先给镜像打上合适的标签标签错误是无法上传docker 镜像的

给镜像打标签
# docker image ls
  REPOSITORY           TAG                 IMAGE ID            
   myweb                v2                  83d7884335ed   
# docker tag myweb:v2 192.168.30.137:5000/myweb:v2_2

[root@nginx-docker]# docker push 192.168.30.137:5000/myweb
The push refers to a repository [192.168.30.137:5000/myweb]
Get https://192.168.30.137:5000/v1/_ping: http: server gave HTTP response to HTTPS client

#允许运行http协议
[root@nginx-docker docker]# vi /etc/docker/daemon.json
{
  "insecure-registries":["192.168.30.137:5000"]
}

#修改daemon.json 拉取私有仓库镜像
[root myweb]# docker pull 192.168.30.137:5000/myweb:v2_2

私有仓库的上传和下载

HARBOR 搭建私有仓库

企业级docker私有仓库项目原生支持镜像的冗余备份主要由vmware 中国团队成员开发

支持访问控制活动监控主从复制

需要借助docker-compose 单机容器编排工具安装HARBOR

1.安装docker-compose

yum install docker-compose

# yum install docker-compose
# https://github.com/vmware/harbor
1.下载harbor源码
2.# tar xf harbor-offline-installer-v1.5.2.tgz  -C /usr/local/
3. vi /usr/local/harbor/harbor.cfg
   hostname = myharbor.com  不能写服务器IP 必须写主机名
   后面无法解析地址 造成上传镜像失败
4.cd /usr/local/harbor
5. ./install.sh  自动执行安装脚本

harbor安装

5.http://192.168.30.139/harbor/sign-in
  项目 》 新建项目(仓库) 》
6.harbor上传下载镜像的时候需要进行用户认证的 harbor中创建的用户


[root@nginx-docker ~]# docker tag myweb:v2 192.168.30.139/dev/myweb:v2_1
[root@nginx-docker ~]# docker push 192.168.30.139/dev/myweb:v2_1
The push refers to a repository [192.168.30.139/dev/myweb]
Get https://192.168.30.139/v1/_ping: dial tcp 192.168.30.139:443: getsockopt: connection refused
[root@nginx-docker ~]# vi /etc/docker/daemon.json
[root@nginx-docker ~]# systemctl restart docker
[root@nginx-docker ~]# docker push 192.168.30.139/dev/myweb:v2_1
The push refers to a repository [192.168.30.139/dev/myweb]
86527283a11a: Preparing 
b87bb670f898: Preparing 
841051620742: Waiting 
717b092b8c86: Waiting 
denied: requested access to the resource is denied
[root@nginx-docker ~]# docker login 92.168.30.139
Username: yxh
Password: 
Error response from daemon: Get https://92.168.30.139/v1/users/: dial tcp 92.168.30.139:443: i/o timeout

使用docker login不能使用服务器IP地址,必须使用可以被解析的主机名
vi /etc/hosts
  192.168.30.139  myharbor.com

[root@nginx-docker ~]# docker login myharbor.com
  Username: yxh
  Password: 
  Login Succeeded

[root@nginx-docker ~]# docker tag myweb:v2 myharbor.com/dev/myweb:v2
[root@nginx-docker ~]# docker push myharbor.com/dev/myweb:v2
The push refers to a repository [myharbor.com/dev/myweb]
86527283a11a: Pushed 
6263c50a557c: Pushed 
c6ee3d0df60c: Pushed 
2eb31a989e11: Pushed 
v2: digest: sha256:41cfd4c47d2f24ca703ef32ff7de9ed166be65adf7c725ff2894cd0b0125ee2a size: 1774

一次性推送整个仓库
 1.先给多个镜像打上标签
  docker tag myweb:v3-1  myharbor.com/dev/myweb:v3-1
  docker tag myweb:v3-2  myharbor.com/dev/myweb:v3-2
  docker tag myweb:v3-3  myharbor.com/dev/myweb:v3-3
 2.上传整个仓库(把三个镜像上传到同一仓库(myweb)中)
  docker push myharbor.com/dev/myweb 

3.下载镜像
# docker pull myharbor.com/dev/myweb:v2
Trying to pull repository myharbor.com/dev/myweb ... 
v2: Pulling from myharbor.com/dev/myweb
Digest: sha256:41cfd4c47d2f24ca703ef32ff7de9ed166be65adf7c725ff2894cd0b0125ee2a
Status: Downloaded newer image for myharbor.com/dev/myweb:v2

docker-compose命令
  停止harbor  docker-compose stop
  启动harbor  docker-compose start